GetSystemInfo version 3.0.0.5:
------------------------------
HARDWARE Information:
---------------------
Processor:
		Intel(R) Pentium(R) 4 CPU 3.00GHz 3000 MHz

Processors number:
		2

BIOS:
		AWARD  - 42302e31 Phoenix - AwardBIOS v6.00PG Phoenix - AwardBIOS v6.00PG BIOS Date: 03/10/06

System Date:
		06/11/2007 (dd/mm/yyyy)

Total phisical memory:
		479,492 Mb

Total virtual memory:
		2047,896 Mb

Available phisical memory:
		479,492 Mb

Available virtual memory:
		1998,108 Mb

Hard drives:
		ST3120811AS

Logical disks structure:
		a:\ REMOVABLE Full size - 0 Mb, Free size - 0 Mb, File system - 
		c:\ FIXED SYSTEM Full size - 114463 Mb, Free size - 46194 Mb, File system - NTFS
		d:\ CDROM Full size - 114463 Mb, Free size - 46194 Mb, File system - 

Video adapters:
		SiS Mirage Graphics
			DRIVER - system32\DRIVERS\sisgrp.sys ("c:\windows\system32\drivers\sisgrp.sys") File version = 6.14.10.3674, File size = 247296, File modification date = 08/06/2005  09:18, File description = SiS Compatible Super VGA Driver, Product Name = SiS (R) Compatible Super VGA Miniport Driver for Windows XP, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2004) |-1057488109|0x5fb85cec1138482d6e7101f8c4953abb|

NetWork adapters:
		SiS 900-Based PCI Fast Ethernet Adapter
			DRIVER - system32\DRIVERS\sisnicxp.sys ("c:\windows\system32\drivers\sisnicxp.sys") File version = 2.0.1039.1180 built by: WinDDK, File size = 32768, File modification date = 05/11/2004  08:43, File description = SiS PCI Fast Ethernet Adapter Driver, Product Name = NDIS 5.1 NIC Driver, Product version = 2.0.1039.1180, Company name = SiS Corporation (SiS Corporation) |2020512262|0x47f39481bc8941e0d51601a85691448d|

Modems:
		Siemens Mobile Phone USB Modem
		PCI SoftV92 Data Fax Modem
		Samsung Mobile USB Modem II 1.0

Multimedia:
		Realtek AC'97 Audio
			DRIVER - system32\drivers\ALCXWDM.SYS ("c:\windows\system32\drivers\alcxwdm.sys") File version = 5.10.5870 built by: WinDDK, File size = 2324480, File modification date = 20/06/2005  14:08, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5870, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2005) |-636682545|0x35045a23957a71ba649740741e69408c|
		   Microsoft
			DRIVER - system32\drivers\MSPCLOCK.sys ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
		    Microsoft
			DRIVER - system32\drivers\MSPQM.sys ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
		   Microsoft
			DRIVER - system32\drivers\MSKSSRV.sys ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
		  
			DRIVER - system32\drivers\sysaudio.sys ("c:\windows\system32\drivers\sysaudio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
		  DRM  
			DRIVER - system32\drivers\drmkaud.sys ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
		   
			DRIVER - system32\drivers\kmixer.sys ("c:\windows\system32\drivers\kmixer.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
		    
			DRIVER - system32\drivers\aec.sys ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
		   Microsoft Kernel GS
			DRIVER - system32\drivers\swmidi.sys ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
		 DLS  
			DRIVER - system32\drivers\DMusic.sys ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
		   Microsoft (WINMM WDM)
			DRIVER - system32\drivers\wdmaud.sys ("c:\windows\system32\drivers\wdmaud.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
		   
			DRIVER - system32\drivers\splitter.sys ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|

Printers:
		EPSON Stylus CX4900 Series ( 1) - default printer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FMAIBVP.DLL ("c:\windows\system32\spool\drivers\w32x86\3\e_fmaibvp.dll") File version = 0. 3. 2. 5, File size = 60416, File modification date = 31/05/2006  05:00, File description = E_DMAI19, Product Name = EPSON Color Printing System, Product version = 2. 5, Company name = SEIKO EPSON Corporation (Copyright (C) SEIKO EPSON CORP. 2006) |-2043447072|0xf7471f9d42c8c95e99709fc3328b3599|
		Microsoft XPS Document Writer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\mxdwdrv.dll ("c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll") File version = 6.0.6000.16438 (winmain(wmbla).070123-1305), File size = 762880, File modification date = 22/03/2007  17:24, File description = Microsoft XPS Document Writer, Product Name = Microsoft Windows Operating System, Product version = 6.0.6000.16438, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1660152487|0x556b14e9f5e0b0fbf3e9fb5f6ea3297e|
		Microsoft Office Document Image Writer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\mdigraph.dll ("c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll") File version = 11.3.2175.0, File size = 765680, File modification date = 02/09/2007  14:53, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.2175.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |-507412570|0x60546e810b1386de9e60190803e31693|
		EPSON Stylus CX4900 Series
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FMAIBVP.DLL ("c:\windows\system32\spool\drivers\w32x86\3\e_fmaibvp.dll") File version = 0. 3. 2. 5, File size = 60416, File modification date = 31/05/2006  05:00, File description = E_DMAI19, Product Name = EPSON Color Printing System, Product version = 2. 5, Company name = SEIKO EPSON Corporation (Copyright (C) SEIKO EPSON CORP. 2006) |-2043447072|0xf7471f9d42c8c95e99709fc3328b3599|

Removable devices:
		  
			DRIVER - system32\DRIVERS\flpydisk.sys ("c:\windows\system32\drivers\flpydisk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  12:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
		HL-DT-ST DVD-RAM GSA-H20N
			DRIVER - system32\DRIVERS\cdrom.sys ("c:\windows\system32\drivers\cdrom.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  12:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|

SOFTWARE Information:
---------------------
Operation system:
		Microsoft Windows XP Professional Edition, 5.1.2600 Service Pack 2

Environment variables:
		=::=::\
		ALLUSERSPROFILE=C:\Documents and Settings\All Users
		APPDATA=C:\Documents and Settings\ࣥ ᠭ஢\Application Data
		CLASSPATH=.;C:\Program Files\QuickTime\QTSystem\QTJava.zip
		CLIENTNAME=Console
		CommonProgramFiles=C:\Program Files\Common Files
		COMPUTERNAME=Error
		ComSpec=C:\WINDOWS\system32\cmd.exe
		FP_NO_HOST_CHECK=NO
		HOMEDRIVE=C:
		HOMEPATH=\Documents and Settings\ࣥ ᠭ஢
		LOGONSERVER=\\Error
		NUMBER_OF_PROCESSORS=2
		OS=Windows_NT
		Path=c:\program files\sdb\programs\bin;c:\program files\sdb\programs\pgm;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\QuickTime\QTSystem\;;C:\www\openssl\bin;C:\www\Apache22\bin;C:\www\php5;C:\www\mysql5\bin;C:\www\perl\bin
		PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
		PROCESSOR_ARCHITECTURE=x86
		PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 9, GenuineIntel
		PROCESSOR_LEVEL=15
		PROCESSOR_REVISION=0409
		ProgramFiles=C:\Program Files
		QTJAVA=C:\Program Files\QuickTime\QTSystem\QTJava.zip
		SESSIONNAME=Console
		SystemDrive=C:
		SystemRoot=C:\WINDOWS
		TEMP=C:\DOCUME~1\EA6C~1\LOCALS~1\Temp
		TMP=C:\DOCUME~1\EA6C~1\LOCALS~1\Temp
		USERDOMAIN=Error
		USERNAME=ࣥ ᠭ஢
		USERPROFILE=C:\Documents and Settings\ࣥ ᠭ஢
		webdev=C:\www\openssl\bin;C:\www\Apache22\bin;C:\www\php5;C:\www\mysql5\bin;C:\www\perl\bin
		windir=C:\WINDOWS

Installed network protocols:
---------clients---------
		-
			DRIVER - %SystemRoot%\system32\svchost.exe -k LocalService ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		   Microsoft
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
--------protocol---------
		  (TCP/IP)
			DRIVER - system32\DRIVERS\tcpip.sys ("c:\windows\system32\drivers\tcpip.sys") File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
		  WINS (TCP/IP)
			DRIVER - system32\DRIVERS\netbt.sys ("c:\windows\system32\drivers\netbt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  12:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
		  -
		 -  Ethernet
			DRIVER - system32\DRIVERS\raspppoe.sys ("c:\windows\system32\drivers\raspppoe.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  12:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
		NDIS- /  
			DRIVER - system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  12:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
		NDIS- WAN  
			DRIVER - system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  12:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
		  TCP/IP ( SMB)
		   2
--------services---------
		  QoS
			DRIVER - system32\DRIVERS\psched.sys ("c:\windows\system32\drivers\psched.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  12:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
		Kaspersky Anti-Virus NDIS Filter
			DRIVER - system32\DRIVERS\klim5.sys ("c:\windows\system32\drivers\klim5.sys") File version = 6.1.22.0, File size = 24344, File modification date = 04/04/2007  11:58, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-852682605|0x967e2224217431b21f1d04fbb4c68a4b|
		  
			DRIVER - system32\DRIVERS\msgpc.sys ("c:\windows\system32\drivers\msgpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  12:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
		QoS RSVP
			DRIVER - %SystemRoot%\system32\rsvp.exe ("C:\WINDOWS\system32\rsvp.exe") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
		  
		   
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		 
			DRIVER - %SystemRoot%\System32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		    
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  
		 NetBIOS
			DRIVER - system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
		  
			DRIVER - %SystemRoot%\System32\alg.exe ("C:\WINDOWS\system32\alg.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
		       Microsoft
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
-----------by type----------
		NOD32 protected [MSAFD Tcpip [TCP/IP]]
		NOD32 protected [MSAFD Tcpip [UDP/IP]]
		NOD32 protected [MSAFD Tcpip [RAW/IP]]
		NOD32 protected [RSVP UDP Service Provider]
		NOD32 protected [RSVP TCP Service Provider]
		MSAFD Tcpip [TCP/IP]
		MSAFD Tcpip [UDP/IP]
		MSAFD Tcpip [RAW/IP]
		RSVP UDP Service Provider
		RSVP TCP Service Provider
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{68EDFC9F-96C6-4A8F-A759-1D350425D132}] SEQPACKET 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{68EDFC9F-96C6-4A8F-A759-1D350425D132}] DATAGRAM 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{3C6B2297-CE9A-47C5-9070-0850E3D446EA}] SEQPACKET 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{3C6B2297-CE9A-47C5-9070-0850E3D446EA}] DATAGRAM 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{10D72A7E-CB84-447E-8019-AFE160E51382}] SEQPACKET 2
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{10D72A7E-CB84-447E-8019-AFE160E51382}] DATAGRAM 2
		NOD32

Installed applications/hotfixes:
		AddWeb 6 Pro
			DEINSTALLATION: C:\WINDOWS\UNWISE.EXE C:\WINDOWS\INSTALL.LOG
		Adobe Photoshop CS2 9.0 ( .)
			DEINSTALLATION: msiexec /I {236BB7C4-4419-42FD-0419-1E257A25E34D}
		Microsoft Agent 1.5
			DEINSTALLATION: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\agtinst.inf, RemoveAgent
		AMX Mod X Installer 1.76d 1.76d (AMX Mod X Dev Team)
			DEINSTALLATION: C:\Documents and Settings\a \ \ \AMX Mod X\uninst.exe
		Apache Web Server
			DEINSTALLATION: C:\WINDOWS\IsUninst.exe -f"C:\Program Files\Apache Group\Apache\Uninst.isu"
		PCI SoftV92 Modem
			DEINSTALLATION: C:\Program Files\CONEXANT\CNXT_MODEM_PCI_VEN_14F1&DEV_2F30&SUBSYS_205514F1\HXFSetup.exe -U -IPSCRCTR5K.inf
		Counter-Strike 1.0 1.0 ()
			DEINSTALLATION: C:\Documents and Settings\a \ \  (2)\Counter-Strike\Uninst.exe
		CS v2.1 WarCraft3FT 2.1, installation data=20071020 (Virus)
			DEINSTALLATION: "C:\Documents and Settings\a \ \  (3)\cstrike\unins000.exe"
		Easy Config Builder v 1.0
			DEINSTALLATION: C:\Program Files\Easy Config Builder\Uninstall.exe
		EMS PostgreSQL Manager
			DEINSTALLATION: C:\PROGRA~1\EMS\POSTGR~1\UNWISE.EXE C:\PROGRA~1\EMS\POSTGR~1\INSTALL.LOG
		EPSON Printer Software
			DEINSTALLATION: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /R
		EPSON Scan
			DEINSTALLATION: C:\Program Files\epson\escndv\setup\setup.exe /r
		ESCX4900  
			DEINSTALLATION: C:\Program Files\EPSON\TPMANUAL\ESCX4900\USE_G (Russian)\DOCUNINS.EXE
		EVEREST Home Edition v1.51 (Lavalys Inc)
			DEINSTALLATION: "C:\Program Files\Lavalys\EVEREST Home Edition\unins000.exe"
		GoldWave v4.26
			DEINSTALLATION: C:\WINDOWS\sxstall2.exe "GoldWave v4.26" "C:\Program Files\GoldWave\unstall.log"
		Guitar Pro 5.1 (Arobas Music)
			DEINSTALLATION: "C:\Program Files\Guitar Pro 5\unins001.exe"
		HijackThis 2.0.2 2.0.2 (TrendMicro)
			DEINSTALLATION: "C:\Documents and Settings\ \ \\  \HijackThis.exe" /uninstall
		IconPackager
			DEINSTALLATION: C:\PROGRA~1\Stardock\OBJECT~1\ICONPA~1\iconpackager.exe /uninstallwise
		Microsoft Internationalized Domain Names Mitigation APIs, installation data=20071017 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
		Windows Internet Explorer 7 20061107.210142, installation data=20071017 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7\spuninst\spuninst.exe"
		EPSON Attach To Email (Russian) 1.01.0000, installation data=20070903 (SEIKO EPSON)
			DEINSTALLATION: C:\Program Files\Common Files\InstallShield\Driver\8\Intel 32\IDriver.exe /M{20C45B32-5AB6-46A4-94EF-58950CAF05E5} /l1033 ADDREMOVEDLG
		Mobile Phone Manager (Russian) 4.05.44.41.1.1, installation data=20070902 (BenQ Mobile GmbH & Co. OHG)
			DEINSTALLATION: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{938D9C57-3CF0-4DA8-B04E-EF99501859B5} /l1049 
		Kaspersky Internet Security 7.0 7.0.0.125 (" ")
			DEINSTALLATION: MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
		   Windows XP - KB873339 20041117.092459 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
		   Windows XP - KB885835 20041027.181713 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
		   Windows XP - KB885836 20041028.173203 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
		   Windows XP - KB886185 20041021.090540 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
		   Windows XP - KB887472 20041014.162858 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
		   Windows XP - KB888302 20041207.111426 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
		   Windows XP (KB890046) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
		   Windows XP - KB890859 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
		   Windows XP - KB891781 20050110.165439 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
		Windows Genuine Advantage Validation Tool (KB892130), installation data=20071009 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB893756) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
		Windows Installer 3.1 (KB893803) 3.1 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
		  Windows XP (KB894391) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
		   Windows XP (KB896358) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
		   Windows XP (KB896423) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
		   Windows XP (KB896428) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
		  Windows XP (KB898461) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
		   Windows XP (KB899587) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
		   Windows XP (KB899591) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
		  Windows XP (KB900485) 2, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
		   Windows XP (KB900725) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
		   Windows XP (KB901017) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
		   Windows XP (KB901214) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
		   Windows XP (KB902400) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
		   Windows XP (KB904706) 2, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
		  Windows XP (KB904942) 2, installation data=20071017 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe"
		   Windows XP (KB905414) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
		   Windows XP (KB905749) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
		   Windows XP (KB908519) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
		  Windows XP (KB908531) 2, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
		     - (Microsoft) (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallbasecsp$\spuninst\spuninst.exe"
		  Windows XP (KB910437) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
		  Windows XP (KB911280) 2, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
		   Windows XP (KB911562) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
		    Windows Media - (KB911564), installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
		   Windows XP (KB911927) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
		   Windows XP (KB913580) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
		   Windows XP (KB914388) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
		   Windows XP (KB914389) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
		  Windows XP (KB914440) 12, installation data=20071017 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe"
		Hotfix for Windows XP (KB915865) 10, installation data=20071017 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe"
		  Windows XP (KB916595) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
		   Windows XP (KB917344) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
		   Windows XP (KB917953) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
		   Windows XP (KB918118) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
		   Windows XP (KB918439) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
		   Windows XP (KB919007) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
		   Windows XP (KB920213) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
		  Windows XP (KB920342) 1, installation data=20071027 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920342$\spuninst\spuninst.exe"
		   Windows XP (KB920670) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
		   Windows XP (KB920683) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
		   Windows XP (KB920685) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
		  Windows XP (KB920872) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
		   Windows XP (KB921503) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
		  Windows XP (KB922582) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
		   Windows XP (KB922819) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
		   Windows XP (KB923191) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
		   Windows XP (KB923414) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
		   Windows XP - (KB923689), installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
		   Windows XP (KB923789) (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
		   Windows XP (KB923980) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
		   Windows XP (KB924270) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
		   Windows XP (KB924496) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
		   Windows XP (KB924667) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
		    Windows Media 6.4 - (KB925398), installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
		  Windows XP (KB925720) 1, installation data=20071102 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB925720$\spuninst\spuninst.exe"
		  Windows XP (KB925876) 1, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB925876$\spuninst\spuninst.exe"
		   Windows XP (KB925902) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
		Hotfix for Windows XP (KB926239) 2, installation data=20071016 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe"
		   Windows XP (KB926255) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
		   Windows XP (KB926436) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
		   Windows XP (KB927779) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
		   Windows XP (KB927802) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
		  Windows XP (KB927891) 3, installation data=20070903 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
		   Windows XP (KB928255) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
		Security Update  Microsoft .NET Framework 2.0 (928365) 2 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {8056AC9E-49C5-4375-9ADE-B2F862C9DF51} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}
		   Windows XP (KB928843) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
		   Windows XP (KB929123) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
		Hotfix for Windows Media Format 11 SDK (KB929399), installation data=20071016 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
		   Windows XP (KB930178) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
		  Windows XP (KB930916) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe"
		   Windows XP (KB931261) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
		   Windows XP (KB931784) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
		   Windows XP (KB932168) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
		  Windows XP (KB933360) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
		   Windows XP (KB933729) 1, installation data=20071010 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
		   Windows XP (KB935839) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe"
		   Windows XP (KB935840) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe"
		   Windows XP (KB936021) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
		  Windows XP (KB936357) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
		    Windows Media 11 - (KB936782), installation data=20071016 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
		    Windows Media 9 - (KB936782), installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"
		   Windows XP (KB937143) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB937143$\spuninst\spuninst.exe"
		   Windows XP (KB938127) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
		   Windows Internet Explorer 7 (KB938127) 1, installation data=20071018 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
		  Windows XP (KB938828) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
		   Windows XP (KB938829) 1, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
		   Windows XP (KB939653) 1, installation data=20071017 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
		   Windows Internet Explorer 7 (KB939653) 1, installation data=20071017 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB939653-IE7\spuninst\spuninst.exe"
		   Windows Media 11 - (KB939683), installation data=20071016 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
		   Windows XP (KB941202) 1, installation data=20071010 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
		K-Lite Codec Pack 2.54 Full 2.54
			DEINSTALLATION: "C:\Program Files\K-Lite Codec Pack\unins000.exe"
		L&H TTS3000 Russian
			DEINSTALLATION: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\LHTTSRUR.inf, Uninstall
		Microsoft .NET Framework 1.1 Hotfix (KB928366)
			DEINSTALLATION: "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
		Mail.Ru  1.8 (Mail.Ru)
			DEINSTALLATION: C:\Program Files\Mail.Ru\Sputnik\SputnikInstaller.exe  -uninstall
		Magic Gooddy
			DEINSTALLATION: C:\Program Files\Magic Gooddy\CMPSETUP\UNINSTAL.EXE MG_0001
		Microsoft .NET Framework 1.1
			DEINSTALLATION: msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
		Microsoft .NET Framework 2.0 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
		Microsoft .NET Framework 2.0 Language Pack - RUS (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - RUS\install.exe
		Microsoft .NET Framework 3.0 (Microsoft Corporation)
			DEINSTALLATION: c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0\setup.exe
		Microsoft .NET Framework 3.0 Russian Language Pack (Microsoft Corporation)
			DEINSTALLATION: c:\WINDOWS\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 Russian Language Pack\setup.exe
		Mail.Ru  4.10 ( 1952,   ) (Mail.Ru)
			DEINSTALLATION: C:\Program Files\Mail.Ru\Agent\magentsetup.exe -uninstalllm
		Microsoft Command & Control Engine
			DEINSTALLATION: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\mscnc.inf, Uninstall
		Microsoft Compression Client Pack 1.0 for Windows XP 1, installation data=20071016 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
		Microsoft Speech Lexicon
			DEINSTALLATION: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\mslex.inf, Uninstall
		Microsoft National Language Support Downlevel APIs, installation data=20071017 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
		Rambler-
			DEINSTALLATION: "C:\Program Files\Rambler Assistant\uninstall.exe"
		Reallite Professional Waypoint Pack
			DEINSTALLATION: C:\Documents and Settings\a \ \ \uninstall.exe
		Red Eye Remover 1.7
			DEINSTALLATION: "C:\Program Files\Red Eye Remover\unins000.exe"
		Restorator 2006 (bome.com)
			DEINSTALLATION: "C:\Program Files\Restorator 2006\UninsHs.exe" /u=Restorator2006
		MaxDB
			DEINSTALLATION: "c:\program files\sdb\programs\bin\SDBSETUP"
		save2pc 3.11, installation data=20071020 (FDRLab, Inc.)
			DEINSTALLATION: "C:\Program Files\FDRLab\save2pc\unins000.exe"
		Adobe Flash Player 9 ActiveX 9 (Adobe Systems)
			DEINSTALLATION: C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
		SiS VGA Utilities
			DEINSTALLATION: Rundll32 SiSInst.dll,Uninstall VGA,R,oem4.inf
		SiS 900 PCI Fast Ethernet Adapter Driver
			DEINSTALLATION: C:\WINDOWS\SiS\900\Uninst.exe
		Microsoft Speech API 3.0
			DEINSTALLATION: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\spchapi.inf, Uninstall
		StyleXP (remove only)
			DEINSTALLATION: "C:\Program Files\TGTSoft\StyleXP\StyleXP-uninstall.exe"
		Total Video Converter 3.10, installation data=20070902 (EffectMatrix Inc.)
			DEINSTALLATION: "C:\Program Files\Total Video Converter\unins000.exe"
		Lernout & Hauspie TruVoice for Microsoft Agent
			DEINSTALLATION: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\cgminst.inf, RemoveCgram
		TNR Vision 3 -  
			DEINSTALLATION: "C:\Program Files\TNR Vision 3\Uninstall.exe"
		Web-Developer Server Suite v1.95, installation data=20071031
			DEINSTALLATION: "C:\www\unins000.exe"
		Windows Genuine Advantage Validation Tool (KB892130) 1.7.0036.0 (Microsoft Corporation)
		Windows Imaging Component 3.0.0.0, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
		Windows Media Format 11 runtime
			DEINSTALLATION: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
		 Windows Media 11
			DEINSTALLATION: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
		 WinRAR
			DEINSTALLATION: C:\Program Files\WinRAR\uninstall.exe
		Windows Media Format 11 runtime, installation data=20071016 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
		Windows Media Player 11, installation data=20071016 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
		Microsoft Windows Media Video 9 VCM
			DEINSTALLATION: RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmv9vcm.inf, Uninstall
		Microsoft User-Mode Driver Framework Feature Pack 1.0, installation data=20071016 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
		XML Paper Specification Shared Components Pack 1.0, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: 
		XML Paper Specification Shared Components Language Pack 1.0, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallXPSEPSCLP$\spuninst\spuninst.exe"
		Opera 9.24 (Russian) 9.24, installation data=20071024 (Opera Software ASA)
			DEINSTALLATION: MsiExec.exe /X{0349A7BC-F52D-4255-B268-4581872DF126}
		SiSRaidPackage 3.00.000
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{08498FF9-6C9B-4FC2-8DE1-BD98C89CC220}\setup.exe" -l0x19 
		MSXML 6.0 Parser (KB933579) (English) 6.10.1200.0, installation data=20071102 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}
		WiDESYNC 2.0 2.0.0.0
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0700\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{11AEA686-CD61-4C11-B410-330119375147}\setup.exe" -l0x19 
		Counter-Strike 1.6 1.00.0000
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{13B792AA-C078-43A4-8A3A-8B12D629940D}\Setup.exe" -l0x19 
		Microsoft .NET Framework 3.0 (English) 3.0.04506.30, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /X{15095BF3-A3D7-4DDF-B193-3A496881E003}
		Samsung PC Studio II 2.0 Sample
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1C27BA8F-0E90-4316-9F71-C0B55362A294}\Setup.exe" -l0x19 
		Windows Workflow Foundation RU Language Pack (Russian) 3.0.4203.2, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{1C7ADED3-C371-40DF-A69D-FE0EA73DC394}
		EPSON Attach To Email (Russian) 1.01.0000, installation data=20070903 (SEIKO EPSON)
		Adobe Photoshop CS2 (Russian) 9.0, installation data=20071027 ( .)
		EPSON Scan Assistant 1.10.00
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2A88F1BF-7041-4E42-84B1-6B4ACB83AC64}\Setup.exe" -l0x19 -u
		Microsoft .NET Framework 1.1 Russian Language Pack (Russian) 1.1.4322, installation data=20071017 (Microsoft)
			DEINSTALLATION: MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
		Xara Webstyle 3.0
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{34458D15-0959-4276-AAEF-11A7C2F0A416}\setup.exe" 
		WebFldrs XP (Russian) 9.50.7523, installation data=20070902 (Microsoft Corporation)
		Windows Communication Foundation (Russian) 3.0.04506.30, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /X{491DD792-AD81-429C-9EB4-86DD3D22E333}
		SmartSync
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5B12573C-9C90-4790-BFEE-2BC43C2EB997}\Setup.exe" UNINSTALL
		EPSON Copy Utility 3 3.2.0.0
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{67EDD823-135A-4D59-87BD-950616D6E857}\SETUP.EXE" -l0x19 -UnInstall
		Microsoft .NET Framework 2.0 (Russian) 2.0.50727, installation data=20071017 (Microsoft Corporation)
		MSXML 4.0 SP2 Parser and SDK (English) 4.20.9818.0, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}
		Adobe Stock Photos 1.0 (English) 001.000.000, installation data=20071027 (Adobe Systems)
			DEINSTALLATION: MsiExec.exe /I{786C5747-1033-0000-B58E-000000000001}
		Windows Workflow Foundation (Russian) 3.0.4203.2, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{7D1B85BD-AA07-48B8-808D-67A4067FC6BD}
		Samsung PC Studio II 2.0 Image Editor 1.00.000
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8148F35A-B15C-465B-80C2-DC0E1234EC20}\setup.exe" -l0x19 
		Microsoft .NET Framework 3.0 Russian Language Pack (Russian) 3.0.04506.30, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /X{855B04CC-4F7A-4FBB-B7BA-D965D23F7AD5}
		MySQL Server 5.0 (English) 5.0.45, installation data=20071031 (MySQL AB)
			DEINSTALLATION: MsiExec.exe /I{8AA037A8-E104-493A-A962-8D58535A0198}
		Microsoft Office -    2003 (Russian) 11.0.7969.0, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
		Mobile Phone Manager (Russian) 4.05.44.41.1.1, installation data=20070902 (BenQ Mobile GmbH & Co. OHG)
		Microsoft Visual C++ 2005 Redistributable (Russian) 8.0.50727.42, installation data=20070902 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}
		Mobile Modem Assistant 1.00.000
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A6B7B910-69BE-4873-8CA8-B5C37BAFE9F4}\Setup.exe" -l0x9 
		Adobe Reader 7.0.5 - Russian (Russian) 7.0.5, installation data=20070926 (Adobe Systems Incorporated)
			DEINSTALLATION: MsiExec.exe /I{AC76BA86-7AD7-1049-7B44-A70500000002}
		PIF DESIGNER
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B90450DF-E781-46FD-B1F1-0C86DA40E443}\SETUP.EXE" -l0x19 anything
		Windows Presentation Foundation (Russian) 3.0.6920.0, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}
		EPSON Easy Photo Print 1.2.3.0
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{BC69DDB8-4840-4D9B-BB31-0D4DB2BA1312}\SETUP.EXE" -l0x19 UNINST
		MSXML 4.0 SP2 (KB936181) (English) 4.20.9848.0, installation data=20070903 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
		Kaspersky Internet Security 7.0 (Russian) 7.0.0.125, installation data=20071105 (" ")
			DEINSTALLATION: MsiExec.exe /I{C774410D-3EF9-4DE7-AC01-332613163ECF}
		Microsoft .NET Framework 1.1 (Russian) 1.1.4322, installation data=20071018 (Microsoft)
			DEINSTALLATION: MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
		Windows Communication Foundation Language Pack - RUS (Russian) 3.0.04506.30, installation data=20071031 (Microsoft Corporation)
		Samsung PC Studio II 2.0 PIMS & File Manager
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D4E01931-9B3F-49BD-B19B-511000A1E039}\Setup.exe" -l0x19 
		Windows Presentation Foundation Language Pack (RUS) (Russian) 3.0.6920.0, installation data=20071031 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /X{D83A3DFC-8528-4E31-93DC-0A41C477109C}
		SiSAGP driver 1.21
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DC226AC9-0314-496C-BE6A-B6A132628466}\setup.exe" -l0x19 
		EPSON File Manager 1.1.0.0
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E86BC406-944E-41F6-ADE6-2C136734C96B}\Setup.exe" -l0x19 UNINST
		Adobe Help Center 1.0 (English) 001.000.000, installation data=20071027 (Adobe Systems)
			DEINSTALLATION: MsiExec.exe /I{E9787678-1033-0000-8E67-000000000001}
		QuickTime (English) 7.1.3.100, installation data=20070902 (Apple Computer, Inc.)
			DEINSTALLATION: MsiExec.exe /I{F07B861C-72B9-40A4-8B1A-AAED4C06A7E8}
		Nero 7 Ultra Edition (English) 7.02.0936, installation data=20070902 (Nero AG)
			DEINSTALLATION: MsiExec.exe /I{F14B8ECC-BDA0-4987-9201-D7B7DBE11049}
		Microsoft .NET Framework 2.0 Language Pack - RUS (Russian) 1.1.50727.42, installation data=20071031 (Microsoft Corporation)
		Realtek AC'97 Audio (Russian) 5.12, installation data=20070902 (Realtek Semiconductor Corp.)
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" -l0x19  -removeonly
		  CS 1.6 CSDM v. 2.6, installation data=20071030 (Patriot~ua~)
			DEINSTALLATION: "C:\Documents and Settings\a \ \  (3)\cstrike\unins000.exe"
		  CS 1.6 v2.7, installation data=20071015 (c-s.net.ua)
			DEINSTALLATION: "C:\Documents and Settings\a \ \ \cstrike\unins000.exe"
		  CS 1.6 v1.0A (http://c-s.ho.com.ua)
			DEINSTALLATION: "C:\Documents and Settings\a \ \  (10)\cstrike\unins000.exe"
		   2007 (Keepsoft)
			DEINSTALLATION: C:\Program Files\Keepsoft\SLS2007\uninst.exe

Runned drivers:
	system32\drivers\aec.sys - stopped (demand) ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
	system32\DRIVERS\asyncmac.sys - stopped (demand) ("c:\windows\system32\drivers\asyncmac.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
	system32\DRIVERS\atmarpc.sys - stopped (demand) ("c:\windows\system32\drivers\atmarpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
	System32\drivers\dmboot.sys - stopped (disabled) ("c:\windows\system32\drivers\dmboot.sys") File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  12:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
	system32\drivers\DMusic.sys - stopped (demand) ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
	system32\drivers\drmkaud.sys - stopped (demand) ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
	system32\DRIVERS\Ip6Fw.sys - stopped (demand) ("c:\windows\system32\drivers\ip6fw.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  12:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
	system32\DRIVERS\ipfltdrv.sys - stopped (demand) ("c:\windows\system32\drivers\ipfltdrv.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
	system32\DRIVERS\ipinip.sys - stopped (demand) ("c:\windows\system32\drivers\ipinip.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
	system32\DRIVERS\irenum.sys - stopped (demand) ("c:\windows\system32\drivers\irenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
	system32\drivers\MSKSSRV.sys - stopped (demand) ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
	system32\drivers\MSPCLOCK.sys - stopped (demand) ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
	system32\drivers\MSPQM.sys - stopped (demand) ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
	system32\DRIVERS\nwlnkflt.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkflt.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
	system32\DRIVERS\nwlnkfwd.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkfwd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
	system32\DRIVERS\secdrv.sys - stopped (demand) ("c:\windows\system32\drivers\secdrv.sys") File version = (null), File size = 27440, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
	system32\DRIVERS\sisnic.sys - stopped (demand) ("c:\windows\system32\drivers\sisnic.sys") File version = 1.16.00.05 built by: WinDDK, File size = 32768, File modification date = 03/08/2004  22:31, File description = SiS PCI Fast Ethernet Adapter Driver, Product Name = NDIS 5.1 NIC Driver, Product version = 1.16.00.05, Company name = SiS Corporation (SiS Corporation) |-1103888563|0x3fbb6ef8b5a71a2fa11f5f461bb73219|
	system32\DRIVERS\siusbmod.sys - stopped (demand) ("c:\windows\system32\drivers\siusbmod.sys") File version = 1.05.95, File size = 27008, File modification date = 28/07/2005  11:20, File description = Siemens Mobile Phone USB Modem, Product Name = Siemens Mobile Phone USB Modem Driver, Product version = 1.05, Company name = Siemens AG  (Copyright  2004-2005 Siemens AG ) |2102294308|0xb1b3daa853d37a0368ed399995938755|
	system32\drivers\splitter.sys - stopped (demand) ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
	system32\DRIVERS\ssm_bus.sys - stopped (demand) ("c:\windows\system32\drivers\ssm_bus.sys") File version = V4.22, File size = 52416, File modification date = 10/11/2005  04:42, File description = Samsung Mobile USB Device II 1.0 Driver, Product Name = Samsung Mobile USB Device II 1.0, Product version = V4.22, Company name = MCCI (Copyright (c) MCCI 1997-2004) |1588325603|0x8724bc8f9750c2055467654027e9aaaa|
	system32\DRIVERS\ssm_mdfl.sys - stopped (demand) ("c:\windows\system32\drivers\ssm_mdfl.sys") File version = V4.22, File size = 6096, File modification date = 10/11/2005  04:42, File description = Samsung Mobile USB Modem II 1.0 Filter Driver, Product Name = Samsung Mobile USB Modem II 1.0 Filter Driver, Product version = V4.22, Company name = MCCI (Copyright (c) MCCI 1997-2004) |1441727960|0x0680dce79e0862806a6f3bb07a0550a4|
	system32\DRIVERS\ssm_mdm.sys - stopped (demand) ("c:\windows\system32\drivers\ssm_mdm.sys") File version = V4.22, File size = 84512, File modification date = 10/11/2005  04:42, File description = Samsung Mobile USB Modem II 1.0 Driver, Product Name = Samsung Mobile USB Modem II 1.0, Product version = V4.22, Company name = MCCI (Copyright (c) MCCI 1997-2004) |1013075726|0x175d32718db7975100deb5708fcec549|
	system32\drivers\swmidi.sys - stopped (demand) ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
	system32\DRIVERS\usbccgp.sys - stopped (demand) ("c:\windows\system32\drivers\usbccgp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  19:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
	system32\DRIVERS\usbprint.sys - stopped (demand) ("c:\windows\system32\drivers\usbprint.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  19:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
	system32\DRIVERS\usbscan.sys - stopped (demand) ("c:\windows\system32\drivers\usbscan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
	system32\DRIVERS\USBSTOR.SYS - stopped (demand) ("c:\windows\system32\drivers\usbstor.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  19:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
	System32\DRIVERS\vserial.sys - stopped (demand) ("c:\windows\system32\drivers\vserial.sys") File version = (null), File size = 47744, File modification date = 18/07/2005  10:34, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1091222917|0x3377daa1cb8cac46a538c236f5f3d58f|
	system32\DRIVERS\WudfPf.sys - stopped (demand) ("c:\windows\system32\drivers\wudfpf.sys") File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 28/09/2006  14:55, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
	system32\DRIVERS\wudfrd.sys - stopped (demand) ("c:\windows\system32\drivers\wudfrd.sys") File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 28/09/2006  15:00, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
	\WINDOWS\system32\ntkrnlpa.exe ("c:\windows\system32\ntkrnlpa.exe") File version = 5.1.2600.3093 (xpsp_sp2_gdr.070227-2254), File size = 2017792, File modification date = 28/02/2007  16:04, File description =    NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.3093, Company name =   (  .   .) |-214132929|0x8bcbf5dc5da07e6f713a94be8c4745c9|
	\WINDOWS\system32\hal.dll ("c:\windows\system32\hal.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 134400, File modification date = 18/08/2004  12:00, File description = Hardware Abstraction Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1915672511|0xdfce51fd96909d1b97d4a1a72d060d77|
	\WINDOWS\system32\KDCOM.DLL ("c:\windows\system32\kdcom.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7040, File modification date = 18/08/2004  12:00, File description = Kernel Debugger HW Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662002680|0x945fbb881ae927a44dfd96440f2f4f44|
	\WINDOWS\system32\BOOTVID.dll ("c:\windows\system32\bootvid.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12288, File modification date = 18/08/2004  12:00, File description = VGA Boot Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-890525799|0xcc306bf581446d5e443eae5b3bb900f0|
	ACPI.sys ("c:\windows\system32\drivers\acpi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  12:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
	\WINDOWS\system32\DRIVERS\WMILIB.SYS ("c:\windows\system32\drivers\wmilib.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4352, File modification date = 18/08/2004  12:00, File description = WMILIB WMI support library Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-328804909|0x2f31b7f954bed437f2c75026c65caf7b|
	pci.sys ("c:\windows\system32\drivers\pci.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 18/08/2004  12:00, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
	isapnp.sys ("c:\windows\system32\drivers\isapnp.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 18/08/2004  12:00, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
	pciide.sys ("c:\windows\system32\drivers\pciide.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 18/08/2004  12:00, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
	\WINDOWS\system32\DRIVERS\PCIIDEX.SYS ("c:\windows\system32\drivers\pciidex.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description = PCI IDE Bus Driver Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-898173944|0x520b91ab011456b940d9b05fc91108ff|
	MountMgr.sys ("c:\windows\system32\drivers\mountmgr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42240, File modification date = 18/08/2004  12:00, File description = Mount Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1645669973|0x65653f3b4477f3c63e68a9659f85ee2e|
	ftdisk.sys ("c:\windows\system32\drivers\ftdisk.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
	dmload.sys ("c:\windows\system32\drivers\dmload.sys") File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
	dmio.sys ("c:\windows\system32\drivers\dmio.sys") File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  12:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
	PartMgr.sys ("c:\windows\system32\drivers\partmgr.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 18688, File modification date = 18/08/2004  12:00, File description = Partition Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1387024081|0x3334430c29dc338092f79c38ef7b4cd0|
	siside.sys ("c:\windows\system32\drivers\siside.sys") File version = 2.04.00.00 built by: WinDDK, File size = 4096, File modification date = 25/03/2003  09:50, File description = SiS PCI Mini IDE Driver, Product Name = SiS PCI Mini IDE Driver, Product version = 2.04.00.00, Company name = Silicon Integrated Systems Corp. (Silicon Integrated Systems Corp.) |1482165947|0xb4485881bd8aed9b157a2e6cf43c2d51|
	VolSnap.sys ("c:\windows\system32\drivers\volsnap.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51968, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-266541180|0x30c744f65751e03465fb7e61315468a2|
	atapi.sys ("c:\windows\system32\drivers\atapi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 18/08/2004  12:00, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
	SiSRaid.sys ("c:\windows\system32\drivers\sisraid.sys") File version = 5.1.1039.1090, File size = 48128, File modification date = 06/05/2005  09:14, File description = SiS RAID Miniport Driver, Product Name = SiS 180/181 Controller, Product version = 5.1.1039.1090, Company name = Silicon Integrated Systems (Copyright (c) SiS Corp. 2000-2010) |139923846|0x826b83cdaafb6e164bbc1d77cb99e2ce|
	\WINDOWS\system32\DRIVERS\SCSIPORT.SYS ("c:\windows\system32\drivers\scsiport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96256, File modification date = 18/08/2004  12:00, File description = SCSI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-170042372|0xd7fd0ff761e28ac0ea35ad71e0cd67e9|
	disk.sys ("c:\windows\system32\drivers\disk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
	\WINDOWS\system32\DRIVERS\CLASSPNP.SYS ("c:\windows\system32\drivers\classpnp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 18/08/2004  12:00, File description = SCSI Class System Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1925477481|0xd86173b401470f06d9810f7962969ddf|
	fltMgr.sys ("c:\windows\system32\drivers\fltmgr.sys") File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
	sr.sys ("c:\windows\system32\drivers\sr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
	KSecDD.sys ("c:\windows\system32\drivers\ksecdd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 92032, File modification date = 18/08/2004  12:00, File description = Kernel Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1324865035|0xeb7ffe87fd367ea8fca0506f74a87fbb|
	Ntfs.sys ("c:\windows\system32\drivers\ntfs.sys") File version = 5.1.2600.3081 (xpsp_sp2_gdr.070209-0028), File size = 574464, File modification date = 09/02/2007  11:10, File description = NT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3081, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1214373707|0x19a811ef5f1ed5c926a028ce107ff1af|
	NDIS.sys ("c:\windows\system32\drivers\ndis.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 182912, File modification date = 18/08/2004  12:00, File description = NDIS 5.1 wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |489683314|0x558635d3af1c7546d26067d5d9b6959e|
	uagp35.sys ("c:\windows\system32\drivers\uagp35.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44672, File modification date = 03/08/2004  19:07, File description = MS AGPv3.5 Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-632017951|0x49c805d42d75eddc9b6a7130999c9054|
	sisperf.sys ("c:\windows\system32\drivers\sisperf.sys") File version = 2.02.03.00 built by: WinDDK, File size = 9472, File modification date = 20/08/2002  09:19, File description = SiS Filter Driver, Product Name = SiS Filer Driver, Product version = 2.02.03.00, Company name = Silicon Integrated Systems Corp. (Silicon Integrated Systems Corp.) |-1678790610|0x596d4a7052002d2bd344d8937da6f66d|
	sisidex.sys ("c:\windows\system32\drivers\sisidex.sys") File version = 5.1.2600.0 built by: WinDDK, File size = 49024, File modification date = 17/10/2002  07:14, File description = SISIDEX Driver, Product Name = Windows (R) 2000 DDK driver, Product version = 5.1.2600.0, Company name = Windows (R) 2000 DDK provider () |1116467240|0x6225224b8e846ac230f8d9b343635910|
	Mup.sys ("c:\windows\system32\drivers\mup.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 107904, File modification date = 18/08/2004  12:00, File description = Multiple UNC Provider driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853925969|0x82035e0f41c2dd05ae41d27fe6cf7de1|
	kl1.sys ("c:\windows\system32\drivers\kl1.sys") File version = 6.1.21.0, File size = 110360, File modification date = 28/04/2007  13:51, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1946196979|0x27fa2734cf49da74b2ac9c16dc38dd88|
	\WINDOWS\system32\drivers\TDI.SYS ("c:\windows\system32\drivers\tdi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18560, File modification date = 18/08/2004  12:00, File description = TDI Wrapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-750746922|0x6891b74ab9a016064e82a419388d0601|
	\SystemRoot\system32\DRIVERS\intelppm.sys ("C:\WINDOWS\system32\drivers\intelppm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
	\SystemRoot\system32\DRIVERS\sisgrp.sys ("C:\WINDOWS\system32\drivers\sisgrp.sys") File version = 6.14.10.3674, File size = 247296, File modification date = 08/06/2005  09:18, File description = SiS Compatible Super VGA Driver, Product Name = SiS (R) Compatible Super VGA Miniport Driver for Windows XP, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2004) |-1057488109|0x5fb85cec1138482d6e7101f8c4953abb|
	\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS ("C:\WINDOWS\system32\drivers\videoprt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 79744, File modification date = 18/08/2004  12:00, File description = Video Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1505993728|0xd5a9d123f5ed7c9965a481bd20cf66d8|
	\SystemRoot\system32\DRIVERS\imapi.sys ("C:\WINDOWS\system32\drivers\imapi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  12:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
	\SystemRoot\system32\DRIVERS\cdrom.sys ("C:\WINDOWS\system32\drivers\cdrom.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  12:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
	\SystemRoot\system32\DRIVERS\redbook.sys ("C:\WINDOWS\system32\drivers\redbook.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
	\SystemRoot\system32\DRIVERS\ks.sys ("C:\WINDOWS\system32\drivers\ks.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140928, File modification date = 03/08/2004  19:15, File description = Kernel CSA Library, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2104684906|0xb9540e258f952650de8dec68719a5c97|
	\SystemRoot\system32\drivers\ALCXWDM.SYS ("c:\windows\system32\drivers\alcxwdm.sys") File version = 5.10.5870 built by: WinDDK, File size = 2324480, File modification date = 20/06/2005  14:08, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5870, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2005) |-636682545|0x35045a23957a71ba649740741e69408c|
	\SystemRoot\system32\drivers\portcls.sys ("C:\WINDOWS\system32\drivers\portcls.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145792, File modification date = 03/08/2004  19:15, File description = Port Class (Class Driver for Port/Miniport Devices), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2134342417|0x5b0f00e43a7094c0b7e433cb42c79164|
	\SystemRoot\system32\drivers\drmk.sys ("C:\WINDOWS\system32\drivers\drmk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60288, File modification date = 03/08/2004  19:08, File description = Microsoft Kernel DRM Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1594474973|0xff86422268de771d571e123eb7092c6a|
	\SystemRoot\system32\DRIVERS\usbohci.sys ("C:\WINDOWS\system32\drivers\usbohci.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17024, File modification date = 18/08/2004  12:00, File description = OHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |774845502|0xbdfe799a8531bad8a5a985821fe78760|
	\SystemRoot\system32\DRIVERS\USBPORT.SYS ("C:\WINDOWS\system32\drivers\usbport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 142976, File modification date = 18/08/2004  12:00, File description = USB 1.1 & 2.0 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940235777|0x2034ca78f9c6e787b4b76d81ac888351|
	\SystemRoot\system32\DRIVERS\usbehci.sys ("C:\WINDOWS\system32\drivers\usbehci.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26624, File modification date = 18/08/2004  12:00, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050382340|0x15e993ba2f6946b2bfbbfcd30398621e|
	\SystemRoot\system32\DRIVERS\sisnicxp.sys ("C:\WINDOWS\system32\drivers\sisnicxp.sys") File version = 2.0.1039.1180 built by: WinDDK, File size = 32768, File modification date = 05/11/2004  08:43, File description = SiS PCI Fast Ethernet Adapter Driver, Product Name = NDIS 5.1 NIC Driver, Product version = 2.0.1039.1180, Company name = SiS Corporation (SiS Corporation) |2020512262|0x47f39481bc8941e0d51601a85691448d|
	\SystemRoot\system32\DRIVERS\HSFHWBS2.sys ("C:\WINDOWS\system32\drivers\hsfhwbs2.sys") File version = 7.60.00 built by: WinDDK, File size = 257408, File modification date = 08/11/2006  11:59, File description = HSF_HWB2 WDM driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |1647731248|0x3e0b68288e468190a5bf4c2ef5998a18|
	\SystemRoot\system32\DRIVERS\HSF_DPV.sys ("C:\WINDOWS\system32\drivers\hsf_dpv.sys") File version = 7.60.00 built by: WinDDK, File size = 989696, File modification date = 08/11/2006  12:00, File description = HSF_DP driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |876661028|0xbd2abf12938a2fccc340873412c2b2ab|
	\SystemRoot\system32\DRIVERS\HSF_CNXT.sys ("C:\WINDOWS\system32\drivers\hsf_cnxt.sys") File version = 7.60.00 built by: WinDDK, File size = 730112, File modification date = 08/11/2006  11:59, File description = HSF_CNXT driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |-228412583|0xea2ab3c94b1aee6aa22d543f1f0c62aa|
	\SystemRoot\System32\Drivers\Modem.SYS ("C:\WINDOWS\system32\drivers\modem.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1945262387|0xf7f41277704724fd7f3a20cb3efdf642|
	\SystemRoot\system32\DRIVERS\fdc.sys ("C:\WINDOWS\system32\drivers\fdc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  12:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
	\SystemRoot\system32\DRIVERS\serial.sys ("C:\WINDOWS\system32\drivers\serial.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
	\SystemRoot\system32\drivers\actser.sys ("C:\WINDOWS\system32\drivers\actser.sys") File version = 2.04, File size = 29440, File modification date = 16/12/2004  13:55, File description = Actser Serial Filter driver, Product Name = Actser Filter Driver, Product version = 2.04, Company name = Siemens AG (Copyright (c) Siemens AG 2004) |500789892|0x6463d1db354b13e6ced4d67f6e4910f4|
	\SystemRoot\system32\DRIVERS\serenum.sys ("C:\WINDOWS\system32\drivers\serenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
	\SystemRoot\system32\DRIVERS\parport.sys ("C:\WINDOWS\system32\drivers\parport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
	\SystemRoot\system32\DRIVERS\i8042prt.sys ("C:\WINDOWS\system32\drivers\i8042prt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  12:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
	\SystemRoot\system32\DRIVERS\mouclass.sys ("C:\WINDOWS\system32\drivers\mouclass.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
	\SystemRoot\system32\DRIVERS\kbdclass.sys ("C:\WINDOWS\system32\drivers\kbdclass.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
	\SystemRoot\system32\DRIVERS\klim5.sys ("C:\WINDOWS\system32\drivers\klim5.sys") File version = 6.1.22.0, File size = 24344, File modification date = 04/04/2007  11:58, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-852682605|0x967e2224217431b21f1d04fbb4c68a4b|
	\SystemRoot\system32\DRIVERS\audstub.sys ("C:\WINDOWS\system32\drivers\audstub.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
	\SystemRoot\system32\DRIVERS\rasl2tp.sys ("C:\WINDOWS\system32\drivers\rasl2tp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  12:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
	\SystemRoot\system32\DRIVERS\ndistapi.sys ("C:\WINDOWS\system32\drivers\ndistapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
	\SystemRoot\system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  12:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
	\SystemRoot\system32\DRIVERS\raspppoe.sys ("C:\WINDOWS\system32\drivers\raspppoe.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  12:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
	\SystemRoot\system32\DRIVERS\raspptp.sys ("C:\WINDOWS\system32\drivers\raspptp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  12:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
	\SystemRoot\system32\DRIVERS\psched.sys ("C:\WINDOWS\system32\drivers\psched.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  12:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
	\SystemRoot\system32\DRIVERS\msgpc.sys ("C:\WINDOWS\system32\drivers\msgpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  12:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
	\SystemRoot\system32\DRIVERS\ptilink.sys ("C:\WINDOWS\system32\drivers\ptilink.sys") File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
	\SystemRoot\system32\DRIVERS\raspti.sys ("C:\WINDOWS\system32\drivers\raspti.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
	\SystemRoot\system32\DRIVERS\rdpdr.sys ("C:\WINDOWS\system32\drivers\rdpdr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
	\SystemRoot\system32\DRIVERS\termdd.sys ("C:\WINDOWS\system32\drivers\termdd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
	\SystemRoot\system32\DRIVERS\swenum.sys ("C:\WINDOWS\system32\drivers\swenum.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 18/08/2004  12:00, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
	\SystemRoot\system32\DRIVERS\update.sys ("C:\WINDOWS\system32\drivers\update.sys") File version = 5.1.2600.3124 (xpsp_sp2_gdr.070423-0049), File size = 364160, File modification date = 23/04/2007  10:32, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675703786|0xced744117e91bdc0beb810f7d8608183|
	\SystemRoot\system32\DRIVERS\mssmbios.sys ("C:\WINDOWS\system32\drivers\mssmbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
	\SystemRoot\system32\DRIVERS\vsb.sys ("C:\WINDOWS\system32\drivers\vsb.sys") File version = (null), File size = 15264, File modification date = 18/07/2005  10:34, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1542784539|0x1c8a783e90c34d205596f1ab4a97e261|
	\SystemRoot\System32\Drivers\NDProxy.SYS ("C:\WINDOWS\system32\drivers\ndproxy.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 38016, File modification date = 18/08/2004  12:00, File description = NDIS Proxy, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |438037699|0x59fc3fb44d2669bc144fd87826bb571f|
	\SystemRoot\system32\DRIVERS\usbhub.sys ("C:\WINDOWS\system32\drivers\usbhub.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 18/08/2004  12:00, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
	\SystemRoot\system32\DRIVERS\USBD.SYS ("C:\WINDOWS\system32\drivers\usbd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4736, File modification date = 18/08/2004  12:00, File description = Universal Serial Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-371157248|0x596eb39b50d6ebd9b734dc4ae0544693|
	\SystemRoot\system32\DRIVERS\flpydisk.sys ("C:\WINDOWS\system32\drivers\flpydisk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  12:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
	\??\C:\WINDOWS\system32\Drivers\uzqwodiy.sys ("\\?\c:\windows\system32\drivers\uzqwodiy.sys") File version = 1, 3, 0, 0, File size = 11264, File modification date = 01/11/2007  16:41, File description = AVZ Monitoring Driver, Product Name = AVZ Monitoring Driver, Product version = 1, 3, 0, 0, Company name = Zaitsev Oleg, Copyright (C) 2004-2006 |-1495977015|0xc935844f289b4521be054bb9d06a1bcc|
	\SystemRoot\System32\Drivers\Fs_Rec.SYS ("C:\WINDOWS\system32\drivers\fs_rec.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7936, File modification date = 18/08/2004  12:00, File description = File System Recognizer Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |244257554|0x3e1e2bd4f39b0e2b7dc4f4d2bcc2779a|
	\SystemRoot\System32\Drivers\Null.SYS ("C:\WINDOWS\system32\drivers\null.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 2944, File modification date = 18/08/2004  12:00, File description = NULL Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-575384021|0x73c1e1f395918bc2c6dd67af7591a3ad|
	\SystemRoot\System32\Drivers\Beep.SYS ("C:\WINDOWS\system32\drivers\beep.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = BEEP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1769750770|0xda1f27d85e0d1525f6621372e7b685e9|
	\SystemRoot\System32\drivers\vga.sys ("C:\WINDOWS\system32\drivers\vga.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
	\SystemRoot\System32\Drivers\mnmdd.SYS ("C:\WINDOWS\system32\drivers\mnmdd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = Frame buffer simulator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1594636198|0x4ae068242760a1fb6e1a44bf4e16afa6|
	\SystemRoot\System32\DRIVERS\RDPCDD.sys ("C:\WINDOWS\system32\drivers\rdpcdd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
	\SystemRoot\System32\Drivers\Msfs.SYS ("C:\WINDOWS\system32\drivers\msfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19072, File modification date = 18/08/2004  12:00, File description = Mailslot driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1211014042|0x561b3a4333ca2dbdba28b5b956822519|
	\SystemRoot\System32\Drivers\Npfs.SYS ("C:\WINDOWS\system32\drivers\npfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30848, File modification date = 18/08/2004  12:00, File description = NPFS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1063322756|0x4f601bcb8f64ea3ac0994f98fed03f8e|
	\SystemRoot\system32\DRIVERS\rasacd.sys ("C:\WINDOWS\system32\drivers\rasacd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
	\SystemRoot\system32\DRIVERS\ipsec.sys ("C:\WINDOWS\system32\drivers\ipsec.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  12:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
	\SystemRoot\system32\DRIVERS\tcpip.sys ("C:\WINDOWS\system32\drivers\tcpip.sys") File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
	\SystemRoot\system32\DRIVERS\netbt.sys ("C:\WINDOWS\system32\drivers\netbt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  12:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
	\SystemRoot\system32\DRIVERS\ipnat.sys ("C:\WINDOWS\system32\drivers\ipnat.sys") File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
	\SystemRoot\System32\drivers\ws2ifsl.sys ("C:\WINDOWS\system32\drivers\ws2ifsl.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  12:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
	\SystemRoot\System32\drivers\afd.sys ("C:\WINDOWS\system32\drivers\afd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  12:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
	\SystemRoot\system32\DRIVERS\wanarp.sys ("C:\WINDOWS\system32\drivers\wanarp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
	\SystemRoot\system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
	\??\C:\Program Files\TGTSoft\StyleXP\StyleXPHelper.exe ("\\?\c:\program files\tgtsoft\stylexp\stylexphelper.exe") File version = 5.1.2600.1106 built by: WinDDK, File size = 10880, File modification date = 31/10/2005  21:44, File description = StyleXP, Product Name = Windows (R) 2000 DDK driver, Product version = 5.1.2600.1106, Company name = Windows (R) 2000 DDK provider ( Microsoft Corporation. All rights reserved.) |-2044385848|0x7e40b43922b2896f40a5930af7489c60|
	\SystemRoot\system32\DRIVERS\srvkp.sys ("C:\WINDOWS\system32\drivers\srvkp.sys") File version = 6.14.10.3674, File size = 11904, File modification date = 09/06/2005  02:14, File description = SiS VGA Driver Manager, Product Name = SiS (R) WindowsXP Display Manager, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 2003-2004) |408469485|0xfc272d93bba7bc3693492a510f462865|
	\SystemRoot\system32\DRIVERS\rdbss.sys ("C:\WINDOWS\system32\drivers\rdbss.sys") File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
	\SystemRoot\system32\DRIVERS\mrxsmb.sys ("C:\WINDOWS\system32\drivers\mrxsmb.sys") File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
	\??\C:\WINDOWS\system32\drivers\klif.sys ("\\?\c:\windows\system32\drivers\klif.sys") File version = 6.12.10.299, File size = 186640, File modification date = 27/06/2007  14:31, File description = spuper-ptor, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1973105805|0xc6a8ad1c9698e5b7b4dd8c19257456e8|
	\SystemRoot\System32\Drivers\Fips.SYS ("C:\WINDOWS\system32\drivers\fips.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 34944, File modification date = 18/08/2004  12:00, File description =  FIPS Crypto, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |739370389|0x6792034d951145dd18d1d508578e4676|
	\SystemRoot\System32\Drivers\Cdfs.SYS ("C:\WINDOWS\system32\drivers\cdfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63744, File modification date = 18/08/2004  12:00, File description = CD-ROM File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1135615718|0xcd7d5152df32b47f4e36f710b35aae02|
	\SystemRoot\System32\Drivers\dump_diskdump.sys
	\SystemRoot\System32\Drivers\dump_SiSRaid.sys
	\SystemRoot\System32\win32k.sys ("C:\WINDOWS\system32\win32k.sys") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 1843712, File modification date = 08/03/2007  15:36, File description =   Win32, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1115490585|0xaffd90d28e2995b1a8a989dedf3d264c|
	\SystemRoot\System32\drivers\Dxapi.sys ("C:\WINDOWS\system32\drivers\dxapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 10496, File modification date = 18/08/2004  12:00, File description = DirectX API Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |741880105|0xfe97d0343acfdebdd578fc67cc91fa87|
	\SystemRoot\System32\watchdog.sys ("C:\WINDOWS\system32\watchdog.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17664, File modification date = 18/08/2004  12:00, File description = Watchdog Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |369096975|0xc9bf2f12c4e6c12f8a85fba4b6bc6208|
	\SystemRoot\System32\drivers\dxg.sys ("C:\WINDOWS\system32\drivers\dxg.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71040, File modification date = 18/08/2004  12:00, File description = DirectX Graphics Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-389278401|0xd3dac8432110aad0b02a58b4459ab835|
	\SystemRoot\System32\drivers\dxgthk.sys ("C:\WINDOWS\system32\drivers\dxgthk.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 3328, File modification date = 18/08/2004  12:00, File description = DirectX Graphics Driver Thunk, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1288314594|0xa73f5d6705b1d820c19b18782e176efd|
	\SystemRoot\System32\SiSGRV.dll ("C:\WINDOWS\system32\sisgrv.dll") File version = 6.14.10.3674, File size = 884736, File modification date = 08/06/2005  09:14, File description = SiS Compatible Super VGA Driver, Product Name = SiS (R) Compatible Super VGA Dispaly Driver for Windows XP, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2004) |1084426186|0x230aa18687f43046eb5a01df8ab7d2cf|
	\SystemRoot\System32\ATMFD.DLL ("C:\WINDOWS\system32\atmfd.dll") File version = 5.1 Build 226, File size = 285696, File modification date = 18/08/2004  12:00, File description = Windows NT OpenType/Type 1 Font Driver, Product Name = Adobe Type Manager, Product version = 5.1 Build 226, Company name = Adobe Systems Incorporated (1983-1990, 1993-2004 Adobe Systems Inc.) |1792691026|0x05072e97ee13e5e3bf3872f4345f82f0|
	\SystemRoot\system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  12:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
	\SystemRoot\system32\DRIVERS\mrxdav.sys ("C:\WINDOWS\system32\drivers\mrxdav.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  12:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
	\SystemRoot\System32\Drivers\ParVdm.SYS ("C:\WINDOWS\system32\drivers\parvdm.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 6912, File modification date = 18/08/2004  12:00, File description =   VDM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2114794461|0xf6167f46184c50a9bc2feb87067d1b97|
	\SystemRoot\system32\DRIVERS\srv.sys ("C:\WINDOWS\system32\drivers\srv.sys") File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
	\SystemRoot\system32\DRIVERS\mdmxsdk.sys ("C:\WINDOWS\system32\drivers\mdmxsdk.sys") File version = 1.0.2.012, File size = 12672, File modification date = 19/06/2006  11:26, File description = Diagnostic Interface x86 Driver, Product Name = Diagnostic Interface x86 Driver, Product version = 1.0.2.012, Company name = Conexant (Copyright Conexant Systems, Inc. 2006) |-1077583592|0x0cea2d0d3fa284b85ed5b68365114f76|
	\SystemRoot\System32\drivers\SFC4.sys ("C:\WINDOWS\system32\drivers\sfc4.sys") File version = (null), File size = 41472, File modification date = 16/09/1998  06:07, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1937219762|0x94ee71facff06cc9d6025e5fccb2c3d7|
	\SystemRoot\system32\drivers\wdmaud.sys ("C:\WINDOWS\system32\drivers\wdmaud.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
	\SystemRoot\system32\drivers\sysaudio.sys ("C:\WINDOWS\system32\drivers\sysaudio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
	\SystemRoot\System32\Drivers\HTTP.sys ("C:\WINDOWS\system32\drivers\http.sys") File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
	\SystemRoot\system32\drivers\kmixer.sys ("C:\WINDOWS\system32\drivers\kmixer.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
	\SystemRoot\System32\Drivers\Fastfat.SYS ("C:\WINDOWS\system32\drivers\fastfat.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 18/08/2004  12:00, File description = Fast FAT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2107818381|0x3117f595e9615e04f05a54fc15a03b20|
	\WINDOWS\system32\ntdll.dll ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|

Runned processes/modules:

	PROCESS	System, PID = 4, USER = , Command Line = 

	PROCESS	smss, PID = 752, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = 
	  \SystemRoot\System32\smss.exe, MID = 48580000,  ("C:\WINDOWS\system32\smss.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 50688, File modification date = 18/08/2004  12:00, File description =    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (()  .   .) |-2018233285|0x6782caa22c9a071b3b4f7640952a8484|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|

	PROCESS	csrss, PID = 800, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
		  "c:\windows\system32\csrss.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6144, File modification date = 18/08/2004  12:00, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1024271834|0x7a2a670afc37eb03e36cf9f08132c765|
		  "c:\windows\system32\basesrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52736, File modification date = 18/08/2004  12:00, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |418240048|0x25f8893a3f0fd075c44471b663b307d9|
	  \??\C:\WINDOWS\system32\csrss.exe, MID = 4a680000,  ("\\?\c:\windows\system32\csrss.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6144, File modification date = 18/08/2004  12:00, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1024271834|0x7a2a670afc37eb03e36cf9f08132c765|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\CSRSRV.dll, MID = 75b10000,  ("c:\windows\system32\csrsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  12:00, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1852343270|0x46fde3a18bf348cb37c69f80e8f36925|
	  C:\WINDOWS\system32\basesrv.dll, MID = 75b20000,  ("c:\windows\system32\basesrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52736, File modification date = 18/08/2004  12:00, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |418240048|0x25f8893a3f0fd075c44471b663b307d9|
	  C:\WINDOWS\system32\winsrv.dll, MID = 75b30000,  ("c:\windows\system32\winsrv.dll") File version = 5.1.2600.3103 (xpsp_sp2_gdr.070316-1309), File size = 292864, File modification date = 17/03/2007  13:45, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.3103, Company name =   (  .   .) |1483574970|0xf2f0fecea9541555695839088d03d1f4|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\KERNEL32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\sxs.dll, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|

	PROCESS	winlogon, PID = 824, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = winlogon.exe
		  "c:\windows\system32\winlogon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 503808, File modification date = 18/08/2004  12:00, File description =     Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2129434895|0xba9df5930b2582c31c0c8e52c94dda48|
	  \??\C:\WINDOWS\system32\winlogon.exe, MID = 1000000,  ("\\?\c:\windows\system32\winlogon.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 503808, File modification date = 18/08/2004  12:00, File description =     Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2129434895|0xba9df5930b2582c31c0c8e52c94dda48|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\NDdeApi.dll, MID = 75910000,  ("c:\windows\system32\nddeapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description =      DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1135066814|0x594cb60688052925a47bb9bf2eb0581d|
	  C:\WINDOWS\system32\PROFMAP.dll, MID = 75900000,  ("c:\windows\system32\profmap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27648, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1817382660|0xe240a14197389c6ab541c45c33f7227c|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76ba0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 18/08/2004  12:00, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |129386638|0xdfb5008b38bd3a487469b689d9813c0f|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 18/08/2004  12:00, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\odbcint.dll, MID = 20000000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\SHSVCS.dll, MID = 776d0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
	  C:\WINDOWS\system32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  12:00, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\WINSCARD.DLL, MID = 723b0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 98816, File modification date = 18/08/2004  12:00, File description = API - (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |739881181|0x05e1bf6816d52354e88fd7cf451b4871|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\sxs.dll, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\cscdll.dll, MID = 765d0000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
	  C:\WINDOWS\system32\klogon.dll, MID = 11d0000,  ("c:\windows\system32\klogon.dll") File version = 7.0.0.125, File size = 206088, File modification date = 28/06/2007  09:51, File description = Logon Visualizer, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |522391355|0x535a597f39f7f6f4a4aa250447357da0|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\WlNotify.dll, MID = 75920000,  ("c:\windows\system32\wlnotify.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\wldap32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\cscui.dll, MID = 77a10000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1740000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|

	PROCESS	services, PID = 868, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\services.exe
		  "c:\windows\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
	  C:\WINDOWS\system32\services.exe, MID = 1000000,  ("c:\windows\system32\services.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\SCESRV.dll, MID = 77b60000,  ("c:\windows\system32\scesrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 320000, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1438568854|0xb72ce4d02710c8bdbb4672a4f93e7a14|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  C:\WINDOWS\system32\umpnpmgr.dll, MID = 7dba0000,  ("c:\windows\system32\umpnpmgr.dll") File version = 5.1.2600.2744 (xpsp_sp2_gdr.050822-1647), File size = 123904, File modification date = 23/08/2005  03:39, File description =     (Plug-and-Play), Product Name =   Microsoft Windows, Product version = 5.1.2600.2744, Company name =   (  .   .) |1108115175|0x4aaf4c1da44ddf92bb10486f8ce7d416|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\eventlog.dll, MID = 772f0000,  ("c:\windows\system32\eventlog.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1293876684|0x6cd35be0991df15a07bc60b894e6482b|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|

	PROCESS	lsass, PID = 880, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\lsass.exe
		  "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	  C:\WINDOWS\system32\lsass.exe, MID = 1000000,  ("c:\windows\system32\lsass.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\LSASRV.dll, MID = 75410000,  ("c:\windows\system32\lsasrv.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 723968, File modification date = 17/08/2006  12:29, File description =  DLL  LSA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2976, Company name =   (  .   .) |-2118863780|0x0cb6733d495100a33d8be1db73c7d644|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  12:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\SAMSRV.dll, MID = 74400000,  ("c:\windows\system32\samsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 427520, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1859521497|0x356779ca52f2b3c073335b9aad53ecff|
	  C:\WINDOWS\system32\cryptdll.dll, MID = 76770000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983794638|0xade2386e4cf3e9bb97ec1545ab999560|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\msprivs.dll, MID = 20000000,  ("c:\windows\system32\msprivs.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description = Microsoft Privilege Translations, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100154152|0x06d8bdd91fd844e1a4c3107d531063fd|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cd0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.2698 (xpsp_sp2_gdr.050614-1522), File size = 295936, File modification date = 15/06/2005  17:50, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-882011971|0xc998ef86b2203f36454aad8a3cac3efd|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\netlogon.dll, MID = 74470000,  ("c:\windows\system32\netlogon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 407040, File modification date = 18/08/2004  12:00, File description = Net Logon Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1815651328|0x4922b0c854a0b4a2cd2061bbfe29b251|
	  C:\WINDOWS\system32\w32time.dll, MID = 767a0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\schannel.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226), File size = 144896, File modification date = 25/04/2007  14:22, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112551157|0x0964bdcf0b80bede5a9ec6f8d53474b0|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\wdigest.dll, MID = 74340000,  ("c:\windows\system32\wdigest.dll") File version = 5.1.2600.2874 (xpsp_sp2_gdr.060323-1516), File size = 49152, File modification date = 24/03/2006  04:39, File description = Microsoft Digest Access, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2874, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1354660025|0xee24319a81aff4bdf5daf08baf87ed91|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\dnsq.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = DNSQ, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-808222867|0x2812cca795bf75ba201252c728f92787|
	  C:\WINDOWS\system32\setupapi.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\scecli.dll, MID = 743d0000,  ("c:\windows\system32\scecli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 183808, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1597674520|0x5d5a37c65a5e86ed3811a4128b3a84e4|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = c70000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\ipsecsvc.dll, MID = 743a0000,  ("c:\windows\system32\ipsecsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 183808, File modification date = 18/08/2004  12:00, File description = Windows IPSEC SPD Server DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1339158444|0x328339d5923c6b1fe79d4244a9a8c725|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  C:\WINDOWS\system32\oakley.DLL, MID = 75700000,  ("c:\windows\system32\oakley.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 267264, File modification date = 18/08/2004  12:00, File description =   Oakley, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1811355481|0xdf4547567f210f88f74f31de6e5a6997|
	  C:\WINDOWS\system32\WINIPSEC.DLL, MID = 74330000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  12:00, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565047191|0x9fb629f466ba79ab15e9238ecfe723cf|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\pstorsvc.dll, MID = 74360000,  ("c:\windows\system32\pstorsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1065846480|0x15859ade25a14154f0153ec5c3866272|
	  C:\WINDOWS\system32\psbase.dll, MID = 74380000,  ("c:\windows\system32\psbase.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1945025660|0x639ebd64394197c0f74a1a2ef66ed18e|
	  C:\WINDOWS\system32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.2133 (xpsp.040514-1639), File size = 137216, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2133, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2063081844|0xcacd2c63a79268d131ea37e85524cc44|

	PROCESS	svchost, PID = 1052, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost -k DcomLaunch
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  c:\windows\system32\rpcss.dll, MID = 76a60000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\windows\system32\termsrv.dll, MID = 766e0000,  ("c:\windows\system32\termsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
	  c:\windows\system32\ICAAPI.dll, MID = 74f30000,  ("c:\windows\system32\icaapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description = DLL Interface to TermDD Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |422815548|0xa7b6bc89a619b6b747d9f9f7dc215cfa|
	  c:\windows\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  c:\windows\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  c:\windows\system32\mstlsapi.dll, MID = 750d0000,  ("c:\windows\system32\mstlsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 115712, File modification date = 18/08/2004  12:00, File description = Microsoft Terminal Server Licensing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-7798303|0x01b9bd9a50558626fec221f5323dd5d2|
	  c:\windows\system32\ACTIVEDS.dll, MID = 77cb0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 194048, File modification date = 18/08/2004  12:00, File description =  DLL   AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2101867215|0xf37ae01afa020a00337639c5ca4c2d06|
	  c:\windows\system32\adsldpc.dll, MID = 76e00000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 18/08/2004  12:00, File description =  DLL  LDAP AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1861023778|0xc4e82ad1f55c18f7d0a9c1701ae0aacd|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  c:\windows\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76ba0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 18/08/2004  12:00, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |129386638|0xdfb5008b38bd3a487469b689d9813c0f|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|

	PROCESS	svchost, PID = 1140, USER = , Command Line = C:\WINDOWS\system32\svchost -k rpcss
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\rpcss.dll, MID = 76a60000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\dnsq.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = DNSQ, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-808222867|0x2812cca795bf75ba201252c728f92787|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|

	PROCESS	svchost, PID = 1252, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\System32\svchost.exe -k netsvcs
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\System32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\System32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\windows\system32\shsvcs.dll, MID = 776d0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\System32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  c:\windows\system32\dhcpcsvc.dll, MID = 76d70000,  ("c:\windows\system32\dhcpcsvc.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
	  c:\windows\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\System32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  c:\windows\system32\wzcsvc.dll, MID = 77610000,  ("c:\windows\system32\wzcsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
	  c:\windows\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  12:00, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  c:\windows\system32\WMI.dll, MID = 76d20000,  ("c:\windows\system32\wmi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  12:00, File description = WMI DC and DP functionality, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491571787|0x2d1360943eaad724e794541eef38954c|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  c:\windows\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  c:\windows\system32\ESENT.dll, MID = 6f940000,  ("c:\windows\system32\esent.dll") File version = 5.1.2468.0 (Lab03_N(jliem).010306-1456), File size = 1085952, File modification date = 20/10/2005  22:30, File description =    , Product Name = Microsoft Windows Operating System, Product version = 5.1.2468.0, Company name = Microsoft Corporation ((C)   (Microsoft Corp.), 1981-2001.) |1128106826|0x8699a155bb7b1fb9a9b08af4a7fa5f52|
	  c:\windows\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\System32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\System32\rastls.dll, MID = 76bb0000,  ("c:\windows\system32\rastls.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 112640, File modification date = 18/08/2004  12:00, File description =    PPP EAP-TLS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |94570726|0xb020978349743f090e521b53d6a2a149|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 76650000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 514560, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-910066801|0x397f812c5f0ab9fa08f034c3d3b688c5|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 824832, File modification date = 20/08/2007  10:01, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-887842308|0x5e7499e1763346fa6660e326c3a563e2|
	  C:\WINDOWS\system32\Normaliz.dll, MID = fe0000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  04:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 267776, File modification date = 20/08/2007  10:01, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1679956523|0xf1f214987b94127c1ce6313388512f25|
	  C:\WINDOWS\System32\MPRAPI.dll, MID = 76d30000,  ("c:\windows\system32\mprapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 87040, File modification date = 18/08/2004  12:00, File description = Windows NT MP Router Administration DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-973786734|0x8cbd5fab0bc10357d0c982ffc5d89af0|
	  C:\WINDOWS\System32\ACTIVEDS.dll, MID = 77cb0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 194048, File modification date = 18/08/2004  12:00, File description =  DLL   AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2101867215|0xf37ae01afa020a00337639c5ca4c2d06|
	  C:\WINDOWS\System32\adsldpc.dll, MID = 76e00000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 18/08/2004  12:00, File description =  DLL  LDAP AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1861023778|0xc4e82ad1f55c18f7d0a9c1701ae0aacd|
	  C:\WINDOWS\System32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\System32\RASAPI32.dll, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\System32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 18/08/2004  12:00, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\System32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 18/08/2004  12:00, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\System32\SCHANNEL.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226), File size = 144896, File modification date = 25/04/2007  14:22, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112551157|0x0964bdcf0b80bede5a9ec6f8d53474b0|
	  C:\WINDOWS\System32\WinSCard.dll, MID = 723b0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 98816, File modification date = 18/08/2004  12:00, File description = API - (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |739881181|0x05e1bf6816d52354e88fd7cf451b4871|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\adialhk.dll, MID = 1150000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\adialhk.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-1826851188|0x33fcc52971c12b6edced3e7f1e717e7e|
	  C:\WINDOWS\System32\raschap.dll, MID = 76cd0000,  ("c:\windows\system32\raschap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69632, File modification date = 18/08/2004  12:00, File description = Remote Access PPP CHAP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1908848325|0x52489757d3090f02c290c90877f1492e|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  c:\windows\system32\schedsvc.dll, MID = 76860000,  ("c:\windows\system32\schedsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
	  c:\windows\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  12:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\System32\MSIDLE.DLL, MID = 74f10000,  ("c:\windows\system32\msidle.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = User Idle Monitor, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1560411407|0x2cb2667f7caf6afa2233a5568b2b4dd4|
	  c:\windows\system32\audiosrv.dll, MID = 70e40000,  ("c:\windows\system32\audiosrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  12:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
	  c:\windows\system32\wkssvc.dll, MID = 76e30000,  ("c:\windows\system32\wkssvc.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
	  c:\windows\system32\cryptsvc.dll, MID = 76d00000,  ("c:\windows\system32\cryptsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  12:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
	  c:\windows\system32\certcli.dll, MID = 76b50000,  ("c:\windows\system32\certcli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196096, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |321406248|0x9f00937676fca40de3a772e076ccb39d|
	  c:\windows\system32\dmserver.dll, MID = 74f50000,  ("c:\windows\system32\dmserver.dll") File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  12:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
	  c:\windows\system32\es.dll, MID = 77700000,  ("c:\windows\system32\es.dll") File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
	  c:\windows\system32\srvsvc.dll, MID = 75050000,  ("c:\windows\system32\srvsvc.dll") File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
	  c:\windows\system32\ersvc.dll, MID = 74f40000,  ("c:\windows\system32\ersvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
	  c:\windows\pchealth\helpctr\binaries\pchsvc.dll, MID = 74f00000,  ("c:\windows\pchealth\helpctr\binaries\pchsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
	  c:\windows\system32\netman.dll, MID = 77cf0000,  ("c:\windows\system32\netman.dll") File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
	  c:\windows\system32\netshell.dll, MID = 763d0000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
	  c:\windows\system32\credui.dll, MID = 76bf0000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 164352, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1301523741|0x144304f02cef124b4ffc57dad95f2bca|
	  c:\windows\system32\WZCSAPI.DLL, MID = 72ff0000,  ("c:\windows\system32\wzcsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51712, File modification date = 18/08/2004  12:00, File description = Wireless Zero Configuration service API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1737372417|0x4ee37cefcf6f11fbbcbb381620ba1b6f|
	  c:\windows\system32\sens.dll, MID = 722b0000,  ("c:\windows\system32\sens.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
	  c:\windows\system32\seclogon.dll, MID = 73ce0000,  ("c:\windows\system32\seclogon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
	  c:\windows\system32\srsvc.dll, MID = 75160000,  ("c:\windows\system32\srsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
	  c:\windows\system32\POWRPROF.dll, MID = 74a90000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1298904202|0x604f22705c12080012968d72d97c6d64|
	  c:\windows\system32\trkwks.dll, MID = 75030000,  ("c:\windows\system32\trkwks.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  12:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
	  c:\windows\system32\w32time.dll, MID = 767a0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
	  c:\windows\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  c:\windows\system32\wbem\wmisvc.dll, MID = 5a8f0000,  ("c:\windows\system32\wbem\wmisvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
	  C:\WINDOWS\system32\VSSAPI.DLL, MID = 753a0000,  ("c:\windows\system32\vssapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 430592, File modification date = 18/08/2004  12:00, File description = Microsoft Volume Shadow Copy Requestor/Writer Services API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1849286963|0xce576cee0842e1fca711d95653d2f9c1|
	  c:\windows\system32\wuauserv.dll, MID = 50000000,  ("c:\windows\system32\wuauserv.dll") File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
	  C:\WINDOWS\system32\wuaueng.dll, MID = 50040000,  ("c:\windows\system32\wuaueng.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 1712984, File modification date = 30/07/2007  15:19, File description = Windows Update Agent, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |567071557|0x3eec20e41f5f331b94002970ceaec92f|
	  C:\WINDOWS\System32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\System32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 18/08/2004  12:00, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  C:\WINDOWS\System32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\System32\mspatcha.dll, MID = 605c0000,  ("c:\windows\system32\mspatcha.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 18/08/2004  12:00, File description = Microsoft(R) Patch Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266572750|0x40e6f5398d37ef77ce9a45177cbfda03|
	  C:\WINDOWS\System32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  12:00, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\System32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\System32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\comsvcs.dll, MID = 760c0000,  ("c:\windows\system32\comsvcs.dll") File version = 2001.12.4414.308, File size = 1267200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-96309662|0xd76b93af3382a98ca12d748bd0890fde|
	  C:\WINDOWS\system32\colbact.DLL, MID = 750f0000,  ("c:\windows\system32\colbact.dll") File version = 2001.12.4414.308, File size = 60416, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1965206585|0x61976f72986b38e355a13bd1f39a6797|
	  C:\WINDOWS\system32\MTXCLU.DLL, MID = 750b0000,  ("c:\windows\system32\mtxclu.dll") File version = 2001.12.4414.311, File size = 66560, File modification date = 01/03/2006  19:44, File description = MS DTC amd MTS clustering support DLL, Product Name = COM Services, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-1199266982|0x66962ec14a48ab54b3ef2668b0d55c83|
	  C:\WINDOWS\System32\CLUSAPI.DLL, MID = 76d90000,  ("c:\windows\system32\clusapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57856, File modification date = 18/08/2004  12:00, File description = Cluster API Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1563754742|0x7a745ffc0fc5b9cd58b8078fb9c5017a|
	  C:\WINDOWS\System32\RESUTILS.DLL, MID = 75070000,  ("c:\windows\system32\resutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58880, File modification date = 18/08/2004  12:00, File description = Microsoft Cluster Resource Utility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190749271|0x0cd39488ace702f54263ec35176d15c8|
	  c:\windows\system32\browser.dll, MID = 77310000,  ("c:\windows\system32\browser.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  12:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
	  c:\windows\system32\ipnathlp.dll, MID = 669c0000,  ("c:\windows\system32\ipnathlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  12:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
	  c:\windows\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  c:\windows\system32\wscsvc.dll, MID = 4c100000,  ("c:\windows\system32\wscsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  12:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
	  c:\windows\system32\msi.dll, MID = 2050000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75250000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 214528, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1186626859|0x7fd8eca23963c13600d681de85996e3e|
	  C:\WINDOWS\System32\Wbem\wbemcore.dll, MID = 76290000,  ("c:\windows\system32\wbem\wbemcore.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 530944, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1022282652|0xafcd7e2202ffccf56b73f0fb9d1f92c0|
	  C:\WINDOWS\System32\Wbem\esscli.dll, MID = 752d0000,  ("c:\windows\system32\wbem\esscli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247808, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1415488570|0xf0b1f4f8d4e5d640d98dd4a7c6bbb510|
	  C:\WINDOWS\System32\Wbem\FastProx.dll, MID = 75660000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 472064, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-792155897|0x61bf3d7e1b81d9705b054c5ee0660355|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 74fe0000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 97792, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |206636464|0x82e0563f98ba1fab48a18dd5ebedf715|
	  C:\WINDOWS\system32\wbem\repdrvfs.dll, MID = 751c0000,  ("c:\windows\system32\wbem\repdrvfs.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |642863371|0xc9de8d23517f72eaa7065597b1a7720b|
	  C:\WINDOWS\system32\wbem\wmiprvsd.dll, MID = 599d0000,  ("c:\windows\system32\wbem\wmiprvsd.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 437248, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1721772680|0x498ce5fcdc44b9a9a800bc2e05630b87|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\wbem\wbemess.dll, MID = 75350000,  ("c:\windows\system32\wbem\wbemess.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 273920, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1110874053|0xa1129f477083a8c617d7b07d1fc7487e|
	  C:\WINDOWS\system32\wbem\ncprov.dll, MID = 5fc60000,  ("c:\windows\system32\wbem\ncprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 47104, File modification date = 18/08/2004  12:00, File description = Non-COM WMI Event Provision APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-742919636|0x6674ef0f555409de0bf269116a4ca9ff|
	  C:\WINDOWS\System32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\netcfgx.dll, MID = 755c0000,  ("c:\windows\system32\netcfgx.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 625152, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-788457764|0x1cfb312d5f28f5db4753c4770c8a5f20|
	  C:\WINDOWS\system32\upnp.dll, MID = 76dd0000,  ("c:\windows\system32\upnp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 132608, File modification date = 18/08/2004  12:00, File description = Universal Plug and Play API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1640714709|0x296fc471c4d403a263ff652a08ac4704|
	  C:\WINDOWS\system32\SSDPAPI.dll, MID = 74ec0000,  ("c:\windows\system32\ssdpapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34816, File modification date = 18/08/2004  12:00, File description = SSDP Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-853188418|0xea67cea66574d77e10fec372afdf26e8|
	  C:\WINDOWS\System32\rasmans.dll, MID = 7ded0000,  ("c:\windows\system32\rasmans.dll") File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
	  C:\WINDOWS\System32\WINIPSEC.DLL, MID = 74330000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  12:00, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565047191|0x9fb629f466ba79ab15e9238ecfe723cf|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74940000,  ("c:\windows\system32\msxml3.dll") File version = 8.90.1101.0, File size = 1104896, File modification date = 26/06/2007  06:10, File description = MSXML 3.0 SP9, Product Name = Microsoft(R) MSXML 3.0 SP9, Product version = 8.90.1101.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |-667680133|0x3cc14c529ff813f93155d7a3525df512|
	  c:\windows\system32\tapisrv.dll, MID = 733a0000,  ("c:\windows\system32\tapisrv.dll") File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
	  c:\windows\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\System32\rastapi.dll, MID = 75ad0000,  ("c:\windows\system32\rastapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58880, File modification date = 18/08/2004  12:00, File description = Remote Access TAPI Compliance Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1633354971|0xc4b9e76c79610e7c20c7b304a363938c|
	  C:\WINDOWS\System32\unimdm.tsp, MID = 57e80000,  ("c:\windows\system32\unimdm.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 207360, File modification date = 18/08/2004  12:00, File description =   Unimodem 5, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-745728709|0x1539d73534395ad9ff191e00102a2082|
	  C:\WINDOWS\System32\uniplat.dll, MID = 71fe0000,  ("c:\windows\system32\uniplat.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  12:00, File description = Unimodem AT Mini Driver Platform Driver for Windows NT, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-235878405|0xa42a7758474f74f5d85d08c30aaa3dcc|
	  C:\WINDOWS\System32\unimdmat.dll, MID = 5b560000,  ("c:\windows\system32\unimdmat.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77824, File modification date = 18/08/2004  12:00, File description = - AT   Unimodem, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1168199695|0xe1b18ed7538c86852e8c18c4beeb3aee|
	  C:\WINDOWS\system32\modemui.dll, MID = 61b70000,  ("c:\windows\system32\modemui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-712789983|0xafb5be8e05aaee88a0ce8bfc6eb1a033|
	  C:\WINDOWS\System32\kmddsp.tsp, MID = 57f00000,  ("c:\windows\system32\kmddsp.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =     TAPI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  Microsoft, 1995.   .) |2115167994|0xdf0ee1993de417a03ff6f1c5783edf0a|
	  C:\WINDOWS\System32\ndptsp.tsp, MID = 57ee0000,  ("c:\windows\system32\ndptsp.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description =   TAPI NDIS-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  , 1997.   .) |-1100799794|0x259d273a8f512311603f7ab638911fb1|
	  C:\WINDOWS\System32\ipconf.tsp, MID = 57f10000,  ("c:\windows\system32\ipconf.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description =     TAPI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1551456071|0xa97b00712f9c301bbec96fd54dccaffc|
	  C:\WINDOWS\System32\h323.tsp, MID = 57f30000,  ("c:\windows\system32\h323.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 265728, File modification date = 18/08/2004  12:00, File description =    H.323 (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1406568753|0xc04d501f2edbf300a5a87561e34ce770|
	  C:\WINDOWS\System32\hidphone.tsp, MID = 57f20000,  ("c:\windows\system32\hidphone.tsp") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29696, File modification date = 18/08/2004  12:00, File description =   HID- (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |715353668|0xb273ff2f94285565132d24af8a577a23|
	  C:\WINDOWS\System32\HID.DLL, MID = 68e60000,  ("c:\windows\system32\hid.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = Hid User Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529169033|0xe23e7431ad6f44d2b0e39a4dacc7a704|
	  C:\WINDOWS\System32\rasppp.dll, MID = 72220000,  ("c:\windows\system32\rasppp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 206336, File modification date = 18/08/2004  12:00, File description = Remote Access PPP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1891367443|0x4df701d1c961e464263ef9f6fe7b0679|
	  C:\WINDOWS\System32\ntlsapi.dll, MID = 72470000,  ("c:\windows\system32\ntlsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8192, File modification date = 18/08/2004  12:00, File description = Microsoft License Server Interface DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |272764293|0xbedfafaaa5a3dc8cc57ac2dfc4ff96b3|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cd0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.2698 (xpsp_sp2_gdr.050614-1522), File size = 295936, File modification date = 15/06/2005  17:50, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-882011971|0xc998ef86b2203f36454aad8a3cac3efd|
	  C:\WINDOWS\System32\cryptdll.dll, MID = 76770000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983794638|0xade2386e4cf3e9bb97ec1545ab999560|
	  C:\WINDOWS\system32\urlmon.dll, MID = 433f0000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 1152000, File modification date = 20/08/2007  10:01, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2067097980|0x44d60c21eadfe567c739a91605821583|
	  C:\WINDOWS\System32\RASDLG.dll, MID = 768b0000,  ("c:\windows\system32\rasdlg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 667136, File modification date = 18/08/2004  12:00, File description = API     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1681926931|0x6bc4ea8eb46e1a28bf49ab7c0bc1758e|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\wups2.dll, MID = 50e60000,  ("c:\windows\system32\wups2.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 43352, File modification date = 30/07/2007  15:19, File description = Windows Update client proxy stub 2, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |760780347|0xceb1bd87fbcb5984bdf7dc0991a060b5|
	  C:\WINDOWS\system32\wuapi.dll, MID = 506a0000,  ("c:\windows\system32\wuapi.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 549720, File modification date = 30/07/2007  15:19, File description = Windows Update Client API, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1590345386|0xedced3393985ed2d86641747edca53ae|
	  C:\WINDOWS\system32\wups.dll, MID = 50640000,  ("c:\windows\system32\wups.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 33624, File modification date = 30/07/2007  15:18, File description = Windows Update client proxy stub, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |412830850|0xa236f41b92b3ceac754943fef30c884e|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll, MID = 1b40000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\dnsq.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = DNSQ, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-808222867|0x2812cca795bf75ba201252c728f92787|
	  C:\WINDOWS\system32\advpack.dll, MID = 435c0000,  ("c:\windows\system32\advpack.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 124928, File modification date = 20/08/2007  10:01, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |729255054|0xd25f01e8511c5953c69e9c8e9d47bab7|
	  C:\WINDOWS\System32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.2133 (xpsp.040514-1639), File size = 137216, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2133, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2063081844|0xcacd2c63a79268d131ea37e85524cc44|
	  C:\WINDOWS\System32\xactsrv.dll, MID = 72060000,  ("c:\windows\system32\xactsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  12:00, File description = Downlevel API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |469879646|0x04ec16232fd5150b23b2a54a93d60e6b|
	  C:\WINDOWS\system32\wbem\wbemcons.dll, MID = 73cf0000,  ("c:\windows\system32\wbem\wbemcons.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description = WMI Standard Event Consumers, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-632448235|0x90cfbeab0c25c855f48b86b3323636b2|

	PROCESS	StyleXPService, PID = 1280, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = "C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe"
		  "c:\program files\tgtsoft\stylexp\stylexpservice.exe" File version = 0, 20, 0, 3000, File size = 372736, File modification date = 24/05/2006  18:31, File description = StyleXPService Module, Product Name = StyleXPService Module, Product version = 0, 20, 0, 3000, Company name =  (Copyright 2001) |1733231951|0x564286a42af81fb2b61eed32fcde020c|
	  C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe, MID = 400000,  ("c:\program files\tgtsoft\stylexp\stylexpservice.exe") File version = 0, 20, 0, 3000, File size = 372736, File modification date = 24/05/2006  18:31, File description = StyleXPService Module, Product Name = StyleXPService Module, Product version = 0, 20, 0, 3000, Company name =  (Copyright 2001) |1733231951|0x564286a42af81fb2b61eed32fcde020c|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\shell32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\UXTHEME.DLL, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|

	PROCESS	svchost, PID = 1324, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k NetworkService
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\dnsrslvr.dll, MID = 76750000,  ("c:\windows\system32\dnsrslvr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  12:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
	  c:\windows\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|

	PROCESS	svchost, PID = 1472, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k LocalService
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\windows\system32\lmhsvc.dll, MID = 74c00000,  ("c:\windows\system32\lmhsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  12:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\webclnt.dll, MID = 5abc0000,  ("c:\windows\system32\webclnt.dll") File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 824832, File modification date = 20/08/2007  10:01, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-887842308|0x5e7499e1763346fa6660e326c3a563e2|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 730000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  04:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 267776, File modification date = 20/08/2007  10:01, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1679956523|0xf1f214987b94127c1ce6313388512f25|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  c:\windows\system32\regsvc.dll, MID = 76ad0000,  ("c:\windows\system32\regsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1569613025|0x461fd36d40dece5f63c0acf7b66899d2|
	  c:\windows\system32\ssdpsrv.dll, MID = 76620000,  ("c:\windows\system32\ssdpsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|

	PROCESS	spoolsv, PID = 1664, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\spoolsv.exe
		  "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
	  C:\WINDOWS\system32\spoolsv.exe, MID = 1000000,  ("c:\windows\system32\spoolsv.exe") File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\SPOOLSS.DLL, MID = 742a0000,  ("c:\windows\system32\spoolss.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  12:00, File description = Spooler SubSystem DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-616758463|0x58f1353020b1bf30b6890bb3251471e7|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\dnsq.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = DNSQ, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-808222867|0x2812cca795bf75ba201252c728f92787|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\localspl.dll, MID = 75b80000,  ("c:\windows\system32\localspl.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 342528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1133760147|0x419b4ea8a0fba2939e16d2c82de2293c|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\winspool.drv, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\cnbjmon.dll, MID = 74260000,  ("c:\windows\system32\cnbjmon.dll") File version = 5.1.2600.2082 (xpsp(skatari).040213-0952), File size = 48128, File modification date = 18/08/2004  12:00, File description =     Canon Bubble-Jet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2082, Company name =   (  .   .) |-1278402524|0xc267f467a22ad261de0c443bec5e68a7|
	  C:\WINDOWS\system32\E_FLBBVP.DLL, MID = 970000,  ("c:\windows\system32\e_flbbvp.dll") File version = 1, 5, 0, 0, File size = 73216, File modification date = 05/04/2006  01:05, File description = EPSON Bi-directional Monitor, Product Name = EPSON Bi-directional Printer, Product version = 1, 0, 0, 0, Company name = SEIKO EPSON CORPORATION (Copyright (C) SEIKO EPSON CORPORATION 2005-2006. All rights reserved.) |-89519806|0x9f2e639ac1eef3e8b6fdea75b644d165|
	  C:\WINDOWS\system32\mdimon.dll, MID = 990000,  ("c:\windows\system32\mdimon.dll") File version = 11.3.2175.0, File size = 24816, File modification date = 02/09/2007  14:44, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.2175.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |-871786285|0x15a9294b81d0ff0e4ac75276c13fd04b|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\pjlmon.dll, MID = 74240000,  ("c:\windows\system32\pjlmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = PJL Language monitor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1959717125|0x01b371b2f51a318513776b6c4b6ae50f|
	  C:\WINDOWS\system32\tcpmon.dll, MID = 723e0000,  ("c:\windows\system32\tcpmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 46080, File modification date = 18/08/2004  12:00, File description =    TCP/IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1757915598|0x73893592069e625c63ba33f755ec4ed7|
	  C:\WINDOWS\system32\usbmon.dll, MID = 723d0000,  ("c:\windows\system32\usbmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = Standard Dynamic Printing Port Monitor DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-833273859|0x44ed1b16547ac163585e84e0630da3e2|
	  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll, MID = d50000,  ("c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll") File version = 11.3.2175.0, File size = 25840, File modification date = 02/09/2007  14:44, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.2175.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |1419308401|0x063457262374b224226710d8db74c37c|
	  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll, MID = d60000,  ("c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll") File version = 6.0.5824.16384 (winmain(wmbla).060911-0725), File size = 27648, File modification date = 14/10/2006  12:43, File description = Print Filter Pipeline Proxy, Product Name = Microsoft Windows Operating System, Product version = 6.0.5824.16384, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1482627052|0xd5c9dc605e1acb57bf37be3e9890b936|
	  C:\WINDOWS\System32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\win32spl.dll, MID = 75be0000,  ("c:\windows\system32\win32spl.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  12:00, File description = 32-  API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1876362858|0x49d07a8ca1728f2058fb640d58783886|
	  C:\WINDOWS\system32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  12:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\inetpp.dll, MID = 742c0000,  ("c:\windows\system32\inetpp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  12:00, File description =  DLL Internet Print Provider, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2047356304|0xd9e0a0f626a878000b14ec5d7ad6e55e|

	PROCESS	MDM, PID = 1828, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
		  "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 02/09/2007  14:53, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
	  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE, MID = 400000,  ("c:\program files\common files\microsoft shared\vs7debug\mdm.exe") File version = 7.00.9466, File size = 322120, File modification date = 02/09/2007  14:53, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\psapi.dll, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|

	PROCESS	svchost, PID = 1964, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost.exe -k imgsvc
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\wiaservc.dll, MID = 75a70000,  ("c:\windows\system32\wiaservc.dll") File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
	  c:\windows\system32\CFGMGR32.dll, MID = 74aa0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1794689465|0x7a3971658d42fe35804f88e6e5637bd9|
	  C:\WINDOWS\system32\setupapi.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  c:\windows\system32\mscms.dll, MID = 73af0000,  ("c:\windows\system32\mscms.dll") File version = 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518), File size = 74240, File modification date = 29/06/2005  01:50, File description = Microsoft Color Matching System DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2709, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1545814642|0x7ff0bafe9e9c74f35a468004817ffa77|
	  c:\windows\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  c:\windows\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 18/08/2004  12:00, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\WINDOWS\system32\sti.dll, MID = 73b60000,  ("c:\windows\system32\sti.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68608, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |95021245|0x6ac41be386e49994131effad9ff7c14d|

	PROCESS	serv, PID = 156, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = "c:\program files\sdb\programs\pgm\serv.exe"
		  "c:\program files\sdb\programs\pgm\serv.exe" File version = 7.6.0, File size = 466944, File modification date = 16/04/2007  19:46, File description = MaxDB - Communication server, Product Name = MaxDB, Product version = 7.6, Company name = SAP AG (Copyright  2000-2007 by SAP AG) |-2043519465|0xaec3894f1a04f83bb4ca1f547f9b5863|
	  c:\program files\sdb\programs\pgm\serv.exe, MID = 400000,  ("c:\program files\sdb\programs\pgm\serv.exe") File version = 7.6.0, File size = 466944, File modification date = 16/04/2007  19:46, File description = MaxDB - Communication server, Product Name = MaxDB, Product version = 7.6, Company name = SAP AG (Copyright  2000-2007 by SAP AG) |-2043519465|0xaec3894f1a04f83bb4ca1f547f9b5863|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\System32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\dnsq.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = DNSQ, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-808222867|0x2812cca795bf75ba201252c728f92787|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|

	PROCESS	explorer, PID = 1348, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = C:\WINDOWS\Explorer.EXE
		  "c:\windows\explorer.exe" File version = 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234), File size = 1033728, File modification date = 13/06/2007  13:23, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.3156, Company name =   (  .   .) |-1482101721|0x3630dbb63bad434e3b1f39c2b61fc62f|
	  C:\WINDOWS\Explorer.EXE, MID = 1000000,  ("c:\windows\explorer.exe") File version = 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234), File size = 1033728, File modification date = 13/06/2007  13:23, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.3156, Company name =   (  .   .) |-1482101721|0x3630dbb63bad434e3b1f39c2b61fc62f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\BROWSEUI.dll, MID = 75f50000,  ("c:\windows\system32\browseui.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\SHDOCVW.dll, MID = 7e1e0000,  ("c:\windows\system32\shdocvw.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 76650000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 514560, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-910066801|0x397f812c5f0ab9fa08f034c3d3b688c5|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 824832, File modification date = 20/08/2007  10:01, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-887842308|0x5e7499e1763346fa6660e326c3a563e2|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 400000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  04:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 267776, File modification date = 20/08/2007  10:01, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1679956523|0xf1f214987b94127c1ce6313388512f25|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\System32\cscui.dll, MID = 77a10000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
	  C:\WINDOWS\System32\CSCDLL.dll, MID = 765d0000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
	  C:\WINDOWS\system32\themeui.dll, MID = 5bf40000,  ("c:\windows\system32\themeui.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 386560, File modification date = 18/08/2004  12:00, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1148789537|0xe034619ae8128d70b09d51c5a9655ea2|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76350000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4608, File modification date = 18/08/2004  12:00, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1779676053|0x0a46c776dd81f03ba9fa94efc3fc7afd|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 18/08/2004  12:00, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll, MID = f50000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\scrchpg.dll") File version = 7.0.0.125, File size = 161032, File modification date = 28/06/2007  09:51, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |810146489|0xe1a195577a9447a7a0b06ea3c056c286|
	  C:\WINDOWS\system32\msutb.dll, MID = 60130000,  ("c:\windows\system32\msutb.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 195072, File modification date = 18/08/2004  12:00, File description =  (DLL)  MSUTB, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |776068176|0x054933ea809c980e31ad858bfdcaf622|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 18/08/2004  12:00, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\urlmon.dll, MID = 433f0000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 1152000, File modification date = 20/08/2007  10:01, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2067097980|0x44d60c21eadfe567c739a91605821583|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76960000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), File size = 19968, File modification date = 01/09/2005  02:28, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2751, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1425770188|0x3e46da8ae679b87d309ebbd3e12283d0|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76970000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\Program Files\Stardock\Object Desktop\IconPackager\shellext.dll, MID = 1300000,  ("c:\program files\stardock\object desktop\iconpackager\shellext.dll") File version = 3.10.00, File size = 249856, File modification date = 05/09/2007  12:06, File description = IconPackager Shell Extension, Product Name = IconPackager for ObjectDesktop, Product version = 3.10.00, Company name = Stardock.net, Inc (Brian Harper,  1997-2005 Stardock.net, Inc) |-1075554146|0x04846cbd7264ac900981e9e7ff8b6afb|
	  C:\WINDOWS\system32\MFC42u.DLL, MID = 5f800000,  ("c:\windows\system32\mfc42u.dll") File version = 6.02.8071.0, File size = 981760, File modification date = 14/10/2006  08:13, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft (R) Visual C++, Product version = 6.02.400, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1993-1998) |-1881911761|0xe748d0b8f4060f4f7a7abb705e289890|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\MFC42LOC.DLL, MID = 61ec0000,  ("c:\windows\system32\mfc42loc.dll") File version = 6.00.8665.0, File size = 57344, File modification date = 18/08/2004  12:00, File description =   MFC, Product Name = Microsoft Visual C++, Product version = 6.0.400, Company name =  Microsoft (  Microsoft, 1993-1998) |2079313362|0x9cfc5a99601ebf7e61ed0a35a180ff41|
	  C:\WINDOWS\system32\ieframe.dll, MID = 435f0000,  ("c:\windows\system32\ieframe.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\msi.dll, MID = 1380000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\webcheck.dll, MID = 43540000,  ("c:\windows\system32\webcheck.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
	  C:\WINDOWS\system32\stobject.dll, MID = 75d70000,  ("c:\windows\system32\stobject.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 122368, File modification date = 18/08/2004  12:00, File description =    Systray, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |21103765|0xbf777cb6f3c4a86d811505582769010b|
	  C:\WINDOWS\system32\BatMeter.dll, MID = 74ab0000,  ("c:\windows\system32\batmeter.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 28672, File modification date = 18/08/2004  12:00, File description = Battery Meter Helper DLL, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |531317817|0xaebe4b82f63974384aea2520cb34b23b|
	  C:\WINDOWS\system32\POWRPROF.dll, MID = 74a90000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1298904202|0x604f22705c12080012968d72d97c6d64|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WPDShServiceObj.dll, MID = 164a0000,  ("c:\windows\system32\wpdshserviceobj.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 133632, File modification date = 18/10/2006  17:47, File description = Windows Portable Device Shell Service Object, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1538728806|0x045e228f71c31901084b64be59093499|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 18/08/2004  12:00, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\mydocs.dll, MID = 723f0000,  ("c:\windows\system32\mydocs.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  12:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\WINDOWS\system32\PortableDeviceTypes.dll, MID = 109c0000,  ("c:\windows\system32\portabledevicetypes.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 166912, File modification date = 18/10/2006  17:47, File description = Windows Portable Device (Parameter) Types Component, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |186518969|0x22358578cb321f3325496a3723029409|
	  C:\WINDOWS\system32\PortableDeviceApi.dll, MID = 10930000,  ("c:\windows\system32\portabledeviceapi.dll") File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 284160, File modification date = 18/10/2006  17:47, File description = Windows Portable Device API Components, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-387235283|0x9d45b2201d0ecf9f42136c7b99deb8b2|
	  C:\WINDOWS\system32\NETSHELL.dll, MID = 763d0000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  12:00, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\credui.dll, MID = 76bf0000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 164352, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1301523741|0x144304f02cef124b4ffc57dad95f2bca|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f30000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1603469464|0x84e62f048e179a53623739b31691f608|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71bf0000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  12:00, File description = Microsoft LAN Manager, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-164401074|0x7e27508a7492a748ebface597d51b8ac|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cb0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80896, File modification date = 18/08/2004  12:00, File description =   GUI  NT LM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1722132880|0x61b52d7c6c0e902cb8b63c9ab545f0bf|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c70000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 245760, File modification date = 18/08/2004  12:00, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-871070814|0x9568897cd0f9caf45c3aa541bd490782|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f40000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description =   Web DAV, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1728990969|0xa3777781ed5a0f7a5f81bd0049b331f3|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  12:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\browselc.dll, MID = 1e70000,  ("c:\windows\system32\browselc.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 66560, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-855201112|0x599c0ccb1f4843b2f17450a078d05ded|
	  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, MID = 1360000,  ("c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll") File version = 7.0.5.2005092300, File size = 63136, File modification date = 24/09/2005  02:12, File description = Adobe Acrobat IE Helper Version 7.0 for ActiveX, Product Name = AcroIEHelper Library, Product version = 7, 0, 0, 0, Company name = Adobe Systems Incorporated (Copyright 1984-2005 Adobe Systems Incorporated and its licensors. All rights reserved.) |-17737831|0xb61d5d651ecc6055c29bf826ca7b1141|
	  C:\WINDOWS\system32\MSVCR71.dll, MID = 7c340000,  ("c:\windows\system32\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 21/02/2003  01:42, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll, MID = 3680000,  ("c:\program files\mail.ru\sputnik\mailrusputnik.dll") File version = 1, 8, 0, 17, File size = 366080, File modification date = 15/10/2007  15:25, File description = MailRuSputnik Module, Product Name = MailRuSputnik Module, Product version = 1, 8, 0, 17, Company name = @Mail.Ru (Copyright  2005 - 2007) |1595289613|0x55d00f934516b45c22f1934ffe4cf95b|
	  C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll, MID = 2ed0000,  ("c:\program files\tgtsoft\stylexp\tgt_bho.dll") File version = (null), File size = 65536, File modification date = 09/05/2006  23:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-100189131|0x107cc933ccb8fc9ad8f2160657b9d6d6|
	  c:\windows\srchasst\srchui.dll, MID = 5c580000,  ("c:\windows\srchasst\srchui.dll") File version = 1.00, File size = 725566, File modification date = 18/08/2004  12:00, File description = Search Assistant UI, Product Name = Microsoft Search Companion, Product version = 1.00, Company name =   ((C)  ) |-551688266|0x4eeea9237662c54f76976506e9e9190c|
	  C:\WINDOWS\system32\OLEACC.dll, MID = 74c40000,  ("c:\windows\system32\oleacc.dll") File version = 4.2.5406.0 (xpclient.010817-1148), File size = 163328, File modification date = 18/08/2004  12:00, File description = Active Accessibility Core Component, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1133819602|0x38217599cf49d4f8ebd3cec5894ed0c9|
	  c:\windows\srchasst\srchctls.dll, MID = 5c650000,  ("c:\windows\srchasst\srchctls.dll") File version = 1.00, File size = 58434, File modification date = 18/08/2004  12:00, File description = Search Assistant Controls, Product Name = Microsoft Search Companion, Product version = 1.00, Company name =   ((C)  ) |-949750853|0xd1a4b225c6f50ecfcc3e59c59200e82c|
	  C:\WINDOWS\msagent\agentdp2.dll, MID = 71290000,  ("c:\windows\msagent\agentdp2.dll") File version = 2.00.0.3424, File size = 42496, File modification date = 12/10/2006  14:05, File description = Microsoft Character Animation Data Provider, Product Name = Microsoft Character Animation Data Provider, Product version = 2.00.0.3424, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1997-98) |240566673|0xdc9c3d6c7645cec90b8df623fe7f0673|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74940000,  ("c:\windows\system32\msxml3.dll") File version = 8.90.1101.0, File size = 1104896, File modification date = 26/06/2007  06:10, File description = MSXML 3.0 SP9, Product Name = Microsoft(R) MSXML 3.0 SP9, Product version = 8.90.1101.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |-667680133|0x3cc14c529ff813f93155d7a3525df512|
	  C:\WINDOWS\system32\jscript.dll, MID = 63380000,  ("c:\windows\system32\jscript.dll") File version = 5.7.0.5730, File size = 491520, File modification date = 17/10/2006  08:00, File description = Microsoft (R) JScript, Product Name = Microsoft (R) JScript, Product version = 5.7.0.5730, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved) |-433185843|0x194d61a029411cc83011181d6e818600|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\klscav.dll, MID = 35b0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\klscav.dll") File version = 7.0.0.125, File size = 34056, File modification date = 28/06/2007  09:51, File description = Script Checker AV Plugin, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-338107759|0x5eab075da506344c59eb9fc795e26e2a|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll, MID = 78130000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll") File version = 8.00.50727.42, File size = 626688, File modification date = 22/09/2005  19:48, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1145731021|0x16d7ddf3b659f7cf1cb9f4dcff4219f0|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prremote.dll, MID = 66600000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\prremote.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = PR_REMOTE, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |305277143|0xe839429a75ecf00b5bce8c738eb3d2c0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCP80.dll, MID = 7c420000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll") File version = 8.00.50727.42, File size = 548864, File modification date = 22/09/2005  19:48, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1565337742|0x2bc650257fb0867abd54fd460ec2bafc|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prloader.dll, MID = 43c0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\prloader.dll") File version = 7.0.0.125, File size = 283912, File modification date = 28/06/2007  09:51, File description = Prague Loader, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-2033162255|0xd1823b6a0673d46189d8a1c0f22e10fb|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prkernel.ppl, MID = 64a00000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\prkernel.ppl") File version = 7.0.0.125, File size = 147456, File modification date = 28/06/2007  09:46, File description = Prague kernel, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1088500507|0xda48ff384bb1d1771eb9259596fc54df|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl, MID = 4580000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl") File version = 7.0.0.125, File size = 442368, File modification date = 28/06/2007  09:46, File description = Structure Serializer, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1029783882|0xf3838def59b8d47e9d90435f457823c6|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl, MID = 45f0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl") File version = 7.0.0.125, File size = 23040, File modification date = 28/06/2007  09:46, File description = Proxy Stubs, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |365730530|0xdc4b4ad3c268c439efdfc1766d0baaa7|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl, MID = 67f00000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl") File version = 7.0.0.125, File size = 9728, File modification date = 28/06/2007  09:46, File description = Temporary IO, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-798055477|0xc5ab3e738071258b066859c7ce2a218e|
	  C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll, MID = 66c0000,  ("c:\program files\common files\ahead\lib\nerodigitalext.dll") File version = 2, 0, 0, 8, File size = 1802240, File modification date = 15/11/2005  08:07, File description = Nero Digital Shell Extension, Product Name = Nero Digital Tools, Product version = 2, 0, 0, 8, Company name = Nero AG (Copyright (c) 1995-2005 Nero AG and its licensors.) |1517787684|0x2891b62b2a8181d827add753dccdce7f|
	  C:\Program Files\Common Files\Ahead\Lib\MFC71.DLL, MID = 7c140000,  ("c:\program files\common files\ahead\lib\mfc71.dll") File version = 7.10.3077.0, File size = 1060864, File modification date = 19/03/2003  03:20, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |751878168|0xf35a584e947a5b401feb0fe01db4a0d7|
	  C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll, MID = 7c3a0000,  ("c:\program files\common files\ahead\lib\msvcp71.dll") File version = 7.10.3077.0, File size = 499712, File modification date = 19/03/2003  03:14, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1513820628|0x561fa2abb31dfa8fab762145f81667c2|
	  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll, MID = 6990000,  ("c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll") File version = 7.0.0.0, File size = 110592, File modification date = 24/10/2005  06:43, File description = PDF Shell Extension, Product Name = Adobe PDF Shell Extension, Product version = 7.0.0.0, Company name = Adobe Systems, Inc. (Copyright 2000-2004 Adobe Systems, Inc.) |-229526356|0x3cc6645eb13af3bc924af0c38dcc768b|
	  C:\WINDOWS\system32\DUSER.dll, MID = 6c730000,  ("c:\windows\system32\duser.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 304128, File modification date = 18/08/2004  12:00, File description = Windows DirectUser Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663281275|0x8804a551680a2811621fff1235625393|
	  C:\Program Files\Microsoft Office\OFFICE11\msohev.dll, MID = 325c0000,  ("c:\program files\microsoft office\office11\msohev.dll") File version = 11.0.5510, File size = 67128, File modification date = 02/09/2007  14:55, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
	  C:\WINDOWS\system32\shmedia.dll, MID = 5cfd0000,  ("c:\windows\system32\shmedia.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
	  C:\WINDOWS\system32\MSVFW32.dll, MID = 75a40000,  ("c:\windows\system32\msvfw32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 121856, File modification date = 18/08/2004  12:00, File description =  Microsoft Video  Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1596338865|0xb0557e6ac0e900dbe4ffc01ae1cc3bb1|
	  C:\WINDOWS\system32\AVIFIL32.dll, MID = 73b10000,  ("c:\windows\system32\avifil32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 85504, File modification date = 18/08/2004  12:00, File description =    AVI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |604747446|0x21281e794e6e24d00d1d55e7db56d43c|
	  C:\WINDOWS\system32\wmvcore.dll, MID = 15110000,  ("c:\windows\system32\wmvcore.dll") File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 2450944, File modification date = 18/10/2006  17:47, File description = Windows Media Playback/Authoring DLL, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1810953075|0x711ce861c22e64ab180ba9887ef8dda9|
	  C:\WINDOWS\system32\WMASF.DLL, MID = 11c70000,  ("c:\windows\system32\wmasf.dll") File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 222208, File modification date = 18/10/2006  17:47, File description = Windows Media ASF DLL, Product Name = Microsoft Windows Operating System, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |906950629|0x808058051c6848fa80622903c12ac950|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 18/08/2004  12:00, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\odbcint.dll, MID = 71a0000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\sti.dll, MID = 73b60000,  ("c:\windows\system32\sti.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68608, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |95021245|0x6ac41be386e49994131effad9ff7c14d|
	  C:\WINDOWS\system32\CFGMGR32.dll, MID = 74aa0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1794689465|0x7a3971658d42fe35804f88e6e5637bd9|
	  C:\WINDOWS\system32\dfshim.dll, MID = 60510000,  ("c:\windows\system32\dfshim.dll") File version = 2.0.50727.42 (RTM.050727-4200), File size = 83456, File modification date = 23/09/2005  03:28, File description = Application Deployment Support Library, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1760645834|0xb3511383c8be3a8c5b88a78971fc1141|
	  C:\WINDOWS\system32\mscoree.dll, MID = 79000000,  ("c:\windows\system32\mscoree.dll") File version = 2.0.50727.832 (QFE.050727-8300), File size = 271360, File modification date = 12/04/2007  23:21, File description = Microsoft .NET Runtime Execution Engine, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.832, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-2096544773|0xe3853c85797bc49167524275b9f88fc3|
	  C:\WINDOWS\system32\zipfldr.dll, MID = 73340000,  ("c:\windows\system32\zipfldr.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  12:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
	  C:\WINDOWS\system32\DSOUND.dll, MID = 73ed0000,  ("c:\windows\system32\dsound.dll") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 367616, File modification date = 18/08/2004  12:00, File description = DirectSound, Product Name =   Microsoft(R) Windows(R), Product version = 5.3.2600.2180, Company name =   (  .   .) |-1604342746|0x8b4c47df3f10153e8f20dd1c0cf3341b|
	  C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Shfusion.dll, MID = 641f0000,  ("c:\windows\microsoft.net\framework\v2.0.50727\shfusion.dll") File version = 2.0.50727.42 (RTM.050727-4200), File size = 107520, File modification date = 23/09/2005  03:28, File description = Microsoft COM Runtime Fusion Assembly Viewer, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1644274028|0x5b746df7ff55229630fe2815b348149c|
	  C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Fusion.dll, MID = 60610000,  ("c:\windows\microsoft.net\framework\v2.0.50727\fusion.dll") File version = 2.0.50727.42 (RTM.050727-4200), File size = 9216, File modification date = 23/09/2005  03:28, File description = Assembly manager, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1927622711|0xad23bb6b329c7d5ee8a43b89e2fd4fd2|
	  C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\culture.dll, MID = 60340000,  ("c:\windows\microsoft.net\framework\v2.0.50727\culture.dll") File version = 2.0.50727.42 (RTM.050727-4200), File size = 17920, File modification date = 23/09/2005  03:28, File description = Microsoft Globalization Support, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1671094741|0xad060608376e3195b4545928f43653d8|
	  C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\ru\ShFusRes.dll, MID = 64220000,  ("c:\windows\microsoft.net\framework\v2.0.50727\ru\shfusres.dll") File version = 2.0.50727.42 (RTM.050727-4200), File size = 86016, File modification date = 20/12/2005  15:13, File description = Microsoft COM Runtime Fusion Assembly Viewer Resources, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name =   (  .   .) |1984673259|0x89110258d84c51507fa97e757def988d|
	  C:\WINDOWS\system32\mstask.dll, MID = 757d0000,  ("c:\windows\system32\mstask.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
	  C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll, MID = 2450000,  ("c:\program files\nero\nero 7\nero backitup\nbshell.dll") File version = 2, 6, 6, 0, File size = 73728, File modification date = 09/10/2006  18:11, File description = Nero BackItUp, Product Name = Nero BackItUp, Product version = 2, 6, 6, 0, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-789208467|0xc96ecbfa2e7adaab6952f32799781ae1|
	  C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL, MID = 8000000,  ("c:\program files\nero\nero 7\nero backitup\mfc71u.dll") File version = 7.10.3077.0, File size = 1047552, File modification date = 18/03/2003  17:12, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1239389280|0x7b93c623333f121dc9e689ccb1b7a733|
	  C:\Program Files\WinRAR\rarext.dll, MID = 2480000,  ("c:\program files\winrar\rarext.dll") File version = (null), File size = 128512, File modification date = 10/03/2007  23:07, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1633626630|0x690add5aba755cbe2ea8dc1e73c380ac|
	  C:\Documents and Settings\ \Application Data\Mra\Update\menu.dll, MID = 24b0000,  ("c:\documents") File version = (null), File size = 23132, File modification date = 30/10/2007  13:06, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |592919248|0xf60452069409549e8f4257679e8161d2|
 ("c:\documents and settings\ \application data\mra\update\menu.dll") File version = (null), File size = 58872, File modification date = 15/10/2007  15:32, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1940667000|0xfe39e5487ac19660a22fdd2068b4bf88|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ShellEx.dll, MID = 2710000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\shellex.dll") File version = 7.0.0.125, File size = 39688, File modification date = 28/06/2007  09:51, File description = Windows Shell Extension, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-1191478763|0x2e1840060c5447c0135aa2ee4eb78ba6|
	  C:\Program Files\EPSON\Creativity Suite\Easy Photo Print\EPPShell.dll, MID = 3090000,  ("c:\program files\epson\creativity suite\easy photo print\eppshell.dll") File version = 1, 0, 0, 0, File size = 69632, File modification date = 14/06/2005  13:34, File description = , Product Name = EPPShell, Product version = 1.00, Company name = SEIKO EPSON CORPORATION (Copyright (C) SEIKO EPSON CORPORATION 2005, All rights reserved.) |-1388488284|0x4231cda22c192bd7810dc9842199641c|
	  C:\WINDOWS\system32\MFC42.DLL, MID = 73d90000,  ("c:\windows\system32\mfc42.dll") File version = 6.02.4131.0, File size = 1028096, File modification date = 18/08/2004  12:00, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft (R) Visual C++, Product version = 6.02.400, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1993-1998) |618104331|0x808a87c6c2a412dfbfed3b84301a6d26|
	  C:\WINDOWS\system32\syncui.dll, MID = 74610000,  ("c:\windows\system32\syncui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 190464, File modification date = 18/08/2004  12:00, File description =  Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |224525855|0xb5aa35d0c14683a66b283f91441c5163|
	  C:\WINDOWS\system32\RestoratorContextMenu.dll, MID = 30b0000,  ("c:\windows\system32\restoratorcontextmenu.dll") File version = 3.0.0.11, File size = 127488, File modification date = 24/10/2007  10:35, File description = Restorator context menu extension, Product Name = Restorator, Product version = 3.5.0.0, Company name = bome.com ((c) 2003-2005 by bome.com/Florian Bomers) |-95762384|0xd399f1124a73445433af878bf3cb3397|
	  C:\WINDOWS\system32\msadp32.acm, MID = 72cb0000,  ("c:\windows\system32\msadp32.acm") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 18/08/2004  12:00, File description =   ADPCM  MSACM Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1995141393|0x0bae796a3b96f0e48e11e413d5747b4c|

	PROCESS	alg, PID = 1608, USER = , Command Line = C:\WINDOWS\System32\alg.exe
		  "c:\windows\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
	  C:\WINDOWS\System32\alg.exe, MID = 1000000,  ("c:\windows\system32\alg.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\System32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\System32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\System32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\System32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\System32\MSWSOCK.DLL, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|

	PROCESS	Sraid, PID = 2312, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe" 
		  "c:\program files\silicon integrated systems\sisraidpackage\sraid.exe" File version = 1, 0, 7, 0, File size = 905216, File modification date = 18/05/2005  10:44, File description = Sraid Application, Product Name = Sraid Application, Product version = 1, 0, 7, 0, Company name = SiS (Copyright (C) 2003 - 2005) |-272556884|0xcb19a7bc554ebfeaede50ecd073214ba|
	  C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe, MID = 400000,  ("c:\program files\silicon integrated systems\sisraidpackage\sraid.exe") File version = 1, 0, 7, 0, File size = 905216, File modification date = 18/05/2005  10:44, File description = Sraid Application, Product Name = Sraid Application, Product version = 1, 0, 7, 0, Company name = SiS (Copyright (C) 2003 - 2005) |-272556884|0xcb19a7bc554ebfeaede50ecd073214ba|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|

	PROCESS	SOUNDMAN, PID = 2360, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\SOUNDMAN.EXE" 
		  "c:\windows\soundman.exe" File version = 5.1.0.40, File size = 77824, File modification date = 20/06/2005  13:42, File description = Realtek Sound Manager, Product Name = Realtek Sound Manager, Product version = 5.1.0.40, Company name = Realtek Semiconductor Corp. (Copyright (c) 2001-2004 Realtek Semiconductor Corp.) |-1626937743|0xfbef9f9c97b6b93e2041e65d3cd81c9c|
	  C:\WINDOWS\SOUNDMAN.EXE, MID = 400000,  ("c:\windows\soundman.exe") File version = 5.1.0.40, File size = 77824, File modification date = 20/06/2005  13:42, File description = Realtek Sound Manager, Product Name = Realtek Sound Manager, Product version = 5.1.0.40, Company name = Realtek Semiconductor Corp. (Copyright (c) 2001-2004 Realtek Semiconductor Corp.) |-1626937743|0xfbef9f9c97b6b93e2041e65d3cd81c9c|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\HID.DLL, MID = 68e60000,  ("c:\windows\system32\hid.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = Hid User Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529169033|0xe23e7431ad6f44d2b0e39a4dacc7a704|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|

	PROCESS	magent, PID = 2376, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Mail.Ru\Agent\MAgent.exe" -LM
		  "c:\program files\mail.ru\agent\magent.exe" File version = 4, 10, 1952, 0, File size = 4855288, File modification date = 15/10/2007  15:32, File description = Mail.Ru , Product Name = Mail.Ru , Product version = 4, 10, 1952, 0, Company name = Mail.Ru (Copyright  2001-2007) |-822933055|0x02128fd92746fdcdc6dc965342d2d9fe|
	  C:\Program Files\Mail.Ru\Agent\MAgent.exe, MID = 400000,  ("c:\program files\mail.ru\agent\magent.exe") File version = 4, 10, 1952, 0, File size = 4855288, File modification date = 15/10/2007  15:32, File description = Mail.Ru , Product Name = Mail.Ru , Product version = 4, 10, 1952, 0, Company name = Mail.Ru (Copyright  2001-2007) |-822933055|0x02128fd92746fdcdc6dc965342d2d9fe|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 824832, File modification date = 20/08/2007  10:01, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-887842308|0x5e7499e1763346fa6660e326c3a563e2|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 330000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  04:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 267776, File modification date = 20/08/2007  10:01, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1679956523|0xf1f214987b94127c1ce6313388512f25|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\ieframe.dll, MID = 435f0000,  ("c:\windows\system32\ieframe.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\scrchpg.dll") File version = 7.0.0.125, File size = 161032, File modification date = 28/06/2007  09:51, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |810146489|0xe1a195577a9447a7a0b06ea3c056c286|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 5320000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx, MID = 30000000,  ("c:\windows\system32\macromed\flash\flash9d.ocx") File version = 9,0,47,0, File size = 2267368, File modification date = 11/06/2007  09:04, File description = Adobe Flash Player 9.0  r46, Product Name = Shockwave Flash, Product version = 9,0,47,0, Company name = Adobe Systems, Inc. (Adobe Flash Player. Copyright  1996-2007 Adobe Systems Incorporated. All Rights Reserved. Protected by U.S. Patent 6,879,327; Patents Pending in the United States and other countries. Adobe and Flash are either trademarks or registered trademarks in the United States and/or other countries.) |-1988053268|0xb01e2a41389fba42b7b5a026ea88c9b7|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\urlmon.dll, MID = 433f0000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 1152000, File modification date = 20/08/2007  10:01, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2067097980|0x44d60c21eadfe567c739a91605821583|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\WINDOWS\system32\RICHED32.DLL, MID = 732a0000,  ("c:\windows\system32\riched32.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 3584, File modification date = 18/08/2004  12:00, File description = Wrapper Dll for Richedit 1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1414770204|0x13355c232f1a57cbaaf5e158469e0618|
	  C:\WINDOWS\system32\RICHED20.dll, MID = 74df0000,  ("c:\windows\system32\riched20.dll") File version = 5.30.23.1228, File size = 433152, File modification date = 27/11/2006  14:55, File description = Rich Text Edit Control, v3.0, Product Name = Microsoft RichEdit Control, version 3.0, Product version = 3.0, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1997-1999.) |-1558908887|0x73c2a810a1deefb58a12c873df6ff811|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\mscms.dll, MID = 73af0000,  ("c:\windows\system32\mscms.dll") File version = 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518), File size = 74240, File modification date = 29/06/2005  01:50, File description = Microsoft Color Matching System DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2709, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1545814642|0x7ff0bafe9e9c74f35a468004817ffa77|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\icm32.dll, MID = 58be0000,  ("c:\windows\system32\icm32.dll") File version = 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518), File size = 254976, File modification date = 29/06/2005  01:50, File description =    (CMM) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2709, Company name =   ( Heidelberger Druckmaschinen AG, 1995-1997) |-1242344492|0xb9dee33c9aaa95da7268f117dcefb33f|
	  C:\WINDOWS\system32\asycfilt.dll, MID = 70e80000,  ("c:\windows\system32\asycfilt.dll") File version = 5.1.2600.2180, File size = 65024, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |1723874525|0x1c2ca3dd1f8309d4266ae94022f6867b|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\Documents and Settings\ \Application Data\Mra\Update\games.dll, MID = 7ca0000,  ("c:\documents") File version = (null), File size = 23132, File modification date = 30/10/2007  13:06, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |592919248|0xf60452069409549e8f4257679e8161d2|
 ("c:\documents and settings\ \application data\mra\update\games.dll") File version = (null), File size = 525816, File modification date = 06/11/2007  10:10, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |311303203|0x0bee740e6943619c7ca6607b60803e1b|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll, MID = 7e50000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\dnsq.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = DNSQ, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-808222867|0x2812cca795bf75ba201252c728f92787|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|

	PROCESS	ctfmon, PID = 2452, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\system32\ctfmon.exe" 
		  "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
	  C:\WINDOWS\system32\ctfmon.exe, MID = 400000,  ("c:\windows\system32\ctfmon.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\MSUTB.dll, MID = 60130000,  ("c:\windows\system32\msutb.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 195072, File modification date = 18/08/2004  12:00, File description =  (DLL)  MSUTB, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |776068176|0x054933ea809c980e31ad858bfdcaf622|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|

	PROCESS	NMBgMonitor, PID = 2460, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" 
		  "c:\program files\common files\ahead\lib\nmbgmonitor.exe" File version = 1, 5, 0, 18, File size = 139264, File modification date = 09/10/2006  07:28, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-2018646309|0x7824452741212af839ea61a9e9f1ea0b|
	  C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe, MID = 400000,  ("c:\program files\common files\ahead\lib\nmbgmonitor.exe") File version = 1, 5, 0, 18, File size = 139264, File modification date = 09/10/2006  07:28, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-2018646309|0x7824452741212af839ea61a9e9f1ea0b|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll, MID = 7c3a0000,  ("c:\program files\common files\ahead\lib\msvcp71.dll") File version = 7.10.3077.0, File size = 499712, File modification date = 19/03/2003  03:14, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1513820628|0x561fa2abb31dfa8fab762145f81667c2|
	  C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll, MID = 7c340000,  ("c:\program files\common files\ahead\lib\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 21/02/2003  11:42, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\Program Files\Common Files\Ahead\Lib\AdvrCntr2.dll, MID = 10000000,  ("c:\program files\common files\ahead\lib\advrcntr2.dll") File version = 5,10,1, 8600, File size = 2949120, File modification date = 10/10/2006  09:25, File description = AdvrCntr Module, Product Name = AdvrCntr Module, Product version = 5,10,1, 8600, Company name = Nero AG (Copyright 2006 Nero AG and its licensors) |1310506887|0x4d3891e338393d35b8d082db655e7043|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 824832, File modification date = 20/08/2007  10:01, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-887842308|0x5e7499e1763346fa6660e326c3a563e2|
	  C:\WINDOWS\system32\Normaliz.dll, MID = d20000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  04:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 267776, File modification date = 20/08/2007  10:01, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1679956523|0xf1f214987b94127c1ce6313388512f25|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\Faultrep.dll, MID = 699d0000,  ("c:\windows\system32\faultrep.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80384, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1769298304|0xcada7f99f641b1b72d27dd3bc27aa9dd|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvrPS.dll, MID = ff0000,  ("c:\program files\common files\ahead\lib\nmindexstoresvrps.dll") File version = 1, 5, 0, 18, File size = 15360, File modification date = 09/10/2006  07:32, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |696764903|0x0b6b642bc9e93c8e03d330adb2a359b9|
	  C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll, MID = 1290000,  ("c:\program files\common files\ahead\lib\nmdataservices.dll") File version = 1, 5, 0, 18, File size = 1294336, File modification date = 09/10/2006  07:13, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-547231256|0x26d7f50a7d8e4ef98d4502510f724c88|
	  C:\WINDOWS\system32\IPROP.dll, MID = 66920000,  ("c:\windows\system32\iprop.dll") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3584, File modification date = 18/08/2004  12:00, File description = OLE PropertySet Implementation, Product Name = OLE PropertySet Implementation, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |65008835|0xd3ea5825db1c12b7d3f13de44e80560c|

	PROCESS	sistray, PID = 2512, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\system32\sistray.exe" 
		  "c:\windows\system32\sistray.exe" File version = 0.0.0.3670, File size = 266240, File modification date = 08/04/2005  10:17, File description = SiS Compatible Super VGA Tray Application, Product Name = SiS (R) Compatible Super VGA SiSTray application, Product version = 0.0.0.3670, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2005) |1222378816|0xdca1fe63d4f9e35006548b16738dc12f|
	  C:\WINDOWS\system32\sistray.exe, MID = 400000,  ("c:\windows\system32\sistray.exe") File version = 0.0.0.3670, File size = 266240, File modification date = 08/04/2005  10:17, File description = SiS Compatible Super VGA Tray Application, Product Name = SiS (R) Compatible Super VGA SiSTray application, Product version = 0.0.0.3670, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2005) |1222378816|0xdca1fe63d4f9e35006548b16738dc12f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\SiSApCom.dll, MID = 10000000,  ("c:\windows\system32\sisapcom.dll") File version = 0.0.0.3670, File size = 176128, File modification date = 08/04/2005  06:15, File description = SiSApCom DLL, Product Name = SiSApCom Dynamic Link Library, Product version = 0.0.0.3670, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2004) |-747184438|0x6ced24fe9621f28ead93108487bcef0b|
	  C:\WINDOWS\system32\DDRAW.dll, MID = 73720000,  ("c:\windows\system32\ddraw.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 266240, File modification date = 18/08/2004  12:00, File description = Microsoft DirectDraw, Product Name =   Microsoft Windows, Product version = 5.03.2600.2180, Company name =   (  .   .) |-1992087609|0x0f143a8d803bae20cd9b120b8084bc1c|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\DCIMAN32.dll, MID = 73b80000,  ("c:\windows\system32\dciman32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8704, File modification date = 18/08/2004  12:00, File description = DCI Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630976475|0x9036824c541b5e7904cce895dac84def|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SiSBase.dll, MID = 320000,  ("c:\windows\system32\sisbase.dll") File version = 6.14.10.3674, File size = 49152, File modification date = 09/06/2005  03:59, File description = SiS Compatible Super VGA SiSBase Dynamic Link Library, Product Name = SiS (R) Compatible Super VGA SiSBase Dynamic Link Library, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2004) |-1397588773|0x8b5a33464c5c562c9739f239fecc297e|
	  C:\WINDOWS\system32\MFC42.DLL, MID = 73d90000,  ("c:\windows\system32\mfc42.dll") File version = 6.02.4131.0, File size = 1028096, File modification date = 18/08/2004  12:00, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft (R) Visual C++, Product version = 6.02.400, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1993-1998) |618104331|0x808a87c6c2a412dfbfed3b84301a6d26|
	  C:\WINDOWS\system32\MSVCIRT.dll, MID = 330000,  ("c:\windows\system32\msvcirt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 54784, File modification date = 18/08/2004  12:00, File description = Windows NT IOStreams DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1674208829|0x64556d5c9d0ffe44be109951fdbc322a|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\MFC42LOC.DLL, MID = 61ec0000,  ("c:\windows\system32\mfc42loc.dll") File version = 6.00.8665.0, File size = 57344, File modification date = 18/08/2004  12:00, File description =   MFC, Product Name = Microsoft Visual C++, Product version = 6.0.400, Company name =  Microsoft (  Microsoft, 1993-1998) |2079313362|0x9cfc5a99601ebf7e61ed0a35a180ff41|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|

	PROCESS	NMIndexStoreSvr, PID = 2612, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe" -Embedding
		  "c:\program files\common files\ahead\lib\nmindexstoresvr.exe" File version = 1, 5, 0, 18, File size = 884736, File modification date = 09/10/2006  07:22, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |308491901|0xa21e313f65231675c5cee7a687c67e26|
	  C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvr.exe, MID = 400000,  ("c:\program files\common files\ahead\lib\nmindexstoresvr.exe") File version = 1, 5, 0, 18, File size = 884736, File modification date = 09/10/2006  07:22, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |308491901|0xa21e313f65231675c5cee7a687c67e26|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\SHFOLDER.dll, MID = 76760000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-172052297|0x61c31ca3b2492c93724af65ec799e77c|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\POWRPROF.dll, MID = 74a90000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1298904202|0x604f22705c12080012968d72d97c6d64|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\Program Files\Common Files\Ahead\Lib\NMSQLDB.dll, MID = 10000000,  ("c:\program files\common files\ahead\lib\nmsqldb.dll") File version = 1, 5, 0, 18, File size = 286720, File modification date = 09/10/2006  07:10, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-966948057|0xfa749a41e9584ae8e3c9e3b8bdfd0f28|
	  C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll, MID = 7c3a0000,  ("c:\program files\common files\ahead\lib\msvcp71.dll") File version = 7.10.3077.0, File size = 499712, File modification date = 19/03/2003  03:14, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1513820628|0x561fa2abb31dfa8fab762145f81667c2|
	  C:\Program Files\Common Files\Ahead\Lib\MSVCR71.dll, MID = 7c340000,  ("c:\program files\common files\ahead\lib\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 21/02/2003  11:42, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = ac0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\Program Files\Common Files\Ahead\Lib\NMLogCxx.dll, MID = b10000,  ("c:\program files\common files\ahead\lib\nmlogcxx.dll") File version = 1, 5, 0, 18, File size = 65536, File modification date = 09/10/2006  07:07, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-2016667031|0x0f659ab9b0fd81c0735648dd92fb3196|
	  C:\Program Files\Common Files\Ahead\Lib\log4cxx.dll, MID = b20000,  ("c:\program files\common files\ahead\lib\log4cxx.dll") File version = 1, 0, 0, 0, File size = 737280, File modification date = 04/09/2005  11:29, File description = Log4cxx is C++ port of Log4j, Product Name = Nero Home, Product version = 1, 0, 0, 0, Company name = Nero AG (Copyright (c) 1995-2005 Nero AG and its licensors) |1451641698|0xba2f8e8ab6c96649d19f1e35df7347a5|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\odbcint.dll, MID = 20000000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = dd0000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\Program Files\Common Files\Ahead\Lib\NMCoFoundation.dll, MID = 17a0000,  ("c:\program files\common files\ahead\lib\nmcofoundation.dll") File version = 1, 5, 0, 18, File size = 499712, File modification date = 09/10/2006  07:07, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |156286245|0x8b3c9995d97fb56549b90c3f599d4d83|
	  C:\Program Files\Common Files\Ahead\Lib\NMPluginBase.dll, MID = 1920000,  ("c:\program files\common files\ahead\lib\nmpluginbase.dll") File version = 1, 5, 0, 18, File size = 102400, File modification date = 09/10/2006  07:08, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-1939279165|0x331de752a0259b57d3648587b6c3ef15|
	  C:\Program Files\Common Files\Ahead\Lib\NMFullTextExtraction.dll, MID = 1940000,  ("c:\program files\common files\ahead\lib\nmfulltextextraction.dll") File version = 1, 5, 0, 18, File size = 155648, File modification date = 09/10/2006  07:08, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |1787559549|0xddb4ef42c8030aaadc1d59d6718a0a7b|
	  C:\WINDOWS\system32\urlmon.dll, MID = 433f0000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 1152000, File modification date = 20/08/2007  10:01, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2067097980|0x44d60c21eadfe567c739a91605821583|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 267776, File modification date = 20/08/2007  10:01, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1679956523|0xf1f214987b94127c1ce6313388512f25|
	  C:\WINDOWS\system32\query.dll, MID = 7d9a0000,  ("c:\windows\system32\query.dll") File version = 5.1.2600.2935 (xpsp_sp2_gdr.060621-0031), File size = 1438208, File modification date = 22/06/2006  05:19, File description =  (DLL)  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2935, Company name =   (  .    .) |1819444174|0x417ef8d97dc2f1fbb7b5fdc54a692848|
	  C:\Program Files\Common Files\Ahead\Lib\NMSearchPluginSimilarImages.dll, MID = 19d0000,  ("c:\program files\common files\ahead\lib\nmsearchpluginsimilarimages.dll") File version = 1, 5, 0, 18, File size = 172032, File modification date = 09/10/2006  07:17, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-1515159266|0x560ed45b9c209fc0cdbe288218615faf|
	  C:\Program Files\Common Files\Ahead\Lib\NeroIPP.dll, MID = 1a00000,  ("c:\program files\common files\ahead\lib\neroipp.dll") File version = 4,5,11,0, File size = 3371008, File modification date = 05/10/2006  13:29, File description = Nero IPP Proxy, Product Name = Nero Suite, Product version = 1, 0, 3, 0, Company name = Nero AG (Copyright (c) 2005 Nero AG and its licensors) |-419858899|0x7629c00f5e4442257c639d478b0d0aae|
	  C:\Program Files\Common Files\Ahead\Lib\NMIndexStoreSvrPS.dll, MID = 1e40000,  ("c:\program files\common files\ahead\lib\nmindexstoresvrps.dll") File version = 1, 5, 0, 18, File size = 15360, File modification date = 09/10/2006  07:32, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |696764903|0x0b6b642bc9e93c8e03d330adb2a359b9|
	  C:\Program Files\Common Files\Ahead\Lib\NMDataServices.dll, MID = 1e50000,  ("c:\program files\common files\ahead\lib\nmdataservices.dll") File version = 1, 5, 0, 18, File size = 1294336, File modification date = 09/10/2006  07:13, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-547231256|0x26d7f50a7d8e4ef98d4502510f724c88|
	  C:\WINDOWS\system32\IPROP.dll, MID = 66920000,  ("c:\windows\system32\iprop.dll") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3584, File modification date = 18/08/2004  12:00, File description = OLE PropertySet Implementation, Product Name = OLE PropertySet Implementation, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |65008835|0xd3ea5825db1c12b7d3f13de44e80560c|

	PROCESS	iexplore, PID = 4040, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" "http://swa.mail.ru/cgi-bin/auth?Login=mechta_87.07@mail.ru&agent=1194345164H1551313334&page=%68%74%74%70%3A%2F%2F%77%69%6E%2E%6D%61%69%6C%2E%72%75%2F%63%67%69%2D%62%69%6E%2F%73%74%61%72%74&ver=1952"
		  "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	  C:\Program Files\Internet Explorer\IEXPLORE.EXE, MID = 400000,  ("c:\program files\internet explorer\iexplore.exe") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\urlmon.dll, MID = 433f0000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 1152000, File modification date = 20/08/2007  10:01, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2067097980|0x44d60c21eadfe567c739a91605821583|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 267776, File modification date = 20/08/2007  10:01, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1679956523|0xf1f214987b94127c1ce6313388512f25|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\adialhk.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-1826851188|0x33fcc52971c12b6edced3e7f1e717e7e|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 950000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\IEFRAME.dll, MID = 435f0000,  ("c:\windows\system32\ieframe.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll, MID = 9d0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\scrchpg.dll") File version = 7.0.0.125, File size = 161032, File modification date = 28/06/2007  09:51, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |810146489|0xe1a195577a9447a7a0b06ea3c056c286|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\IEUI.dll, MID = 5dff0000,  ("c:\windows\system32\ieui.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 180736, File modification date = 07/11/2006  17:03, File description = Internet Explorer UI Engine, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1597583758|0x28f5b835472a62b13ad54663c645191d|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76350000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4608, File modification date = 18/08/2004  12:00, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1779676053|0x0a46c776dd81f03ba9fa94efc3fc7afd|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll, MID = 4ebe0000,  ("c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll") File version = 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158), File size = 1712128, File modification date = 18/08/2004  12:00, File description = Microsoft GDI+, Product Name = Microsoft Windows Operating System, Product version = 5.1.3102.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |133300943|0x27d0bf463198c8e6efbdb6bcefce2d74|
	  C:\WINDOWS\system32\xmllite.dll, MID = 47060000,  ("c:\windows\system32\xmllite.dll") File version = 1.00.1018.0, File size = 121856, File modification date = 14/07/2006  15:51, File description = Microsoft XmlLite Library, Product Name = Microsoft XML Core Services, Product version = 1.00.1018.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 2005) |-748065926|0x215422272bbadd7dda57d0372062d293|
	  C:\WINDOWS\system32\apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\msimtf.dll, MID = 746b0000,  ("c:\windows\system32\msimtf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 159232, File modification date = 18/08/2004  12:00, File description = Active IMM Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |620728644|0xd942ba5f14c7b0089d1967941e6a697b|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\Program Files\Microsoft Office\OFFICE11\msohev.dll, MID = 325c0000,  ("c:\program files\microsoft office\office11\msohev.dll") File version = 11.0.5510, File size = 67128, File modification date = 02/09/2007  14:55, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
	  C:\Program Files\Internet Explorer\ieproxy.dll, MID = 61930000,  ("c:\program files\internet explorer\ieproxy.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 287744, File modification date = 07/11/2006  17:03, File description = IE ActiveX Interface Marshaling Library, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |506737445|0xca9b8fb2015266f22368b006bcc69990|
	  C:\WINDOWS\system32\msi.dll, MID = 1980000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 824832, File modification date = 20/08/2007  10:01, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-887842308|0x5e7499e1763346fa6660e326c3a563e2|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 14f0000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  04:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 18/08/2004  12:00, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\ws2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, MID = 1500000,  ("c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll") File version = 7.0.5.2005092300, File size = 63136, File modification date = 24/09/2005  02:12, File description = Adobe Acrobat IE Helper Version 7.0 for ActiveX, Product Name = AcroIEHelper Library, Product version = 7, 0, 0, 0, Company name = Adobe Systems Incorporated (Copyright 1984-2005 Adobe Systems Incorporated and its licensors. All rights reserved.) |-17737831|0xb61d5d651ecc6055c29bf826ca7b1141|
	  C:\WINDOWS\system32\MSVCR71.dll, MID = 7c340000,  ("c:\windows\system32\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 21/02/2003  01:42, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll, MID = 2410000,  ("c:\program files\mail.ru\sputnik\mailrusputnik.dll") File version = 1, 8, 0, 17, File size = 366080, File modification date = 15/10/2007  15:25, File description = MailRuSputnik Module, Product Name = MailRuSputnik Module, Product version = 1, 8, 0, 17, Company name = @Mail.Ru (Copyright  2005 - 2007) |1595289613|0x55d00f934516b45c22f1934ffe4cf95b|
	  C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll, MID = 1ce0000,  ("c:\program files\tgtsoft\stylexp\tgt_bho.dll") File version = (null), File size = 65536, File modification date = 09/05/2006  23:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-100189131|0x107cc933ccb8fc9ad8f2160657b9d6d6|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\MSRATING.dll, MID = 43240000,  ("c:\windows\system32\msrating.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 193024, File modification date = 20/08/2007  10:01, File description = Internet Ratings and Local User Management DLL, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1887635928|0xd446135b3c653b8f047ca69fe3f66f83|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\system32\RASAPI32.dll, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 18/08/2004  12:00, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 18/08/2004  12:00, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  12:00, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\sensapi.dll, MID = 72290000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-330752720|0x28b3398819e998adfe09d8d26e230258|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 18/08/2004  12:00, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll, MID = 2a60000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\dnsq.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = DNSQ, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-808222867|0x2812cca795bf75ba201252c728f92787|
	  C:\WINDOWS\system32\mshtml.dll, MID = 43cd0000,  ("c:\windows\system32\mshtml.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 3584512, File modification date = 20/08/2007  11:31, File description = Microsoft (R) HTML Viewer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1144545514|0xe239f09ab7533e0bd2c3c1b05e36edbe|
	  C:\WINDOWS\system32\msls31.dll, MID = 2c60000,  ("c:\windows\system32\msls31.dll") File version = 3.10.349.0, File size = 156160, File modification date = 07/11/2006  17:03, File description = Microsoft Line Services library file, Product Name = Microsoft Line Services, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1996-1999) |-245357016|0x2d15e1c7cd0bc1a9b7f9660e39a0ce3e|
	  C:\WINDOWS\system32\ieapfltr.dll, MID = 43c60000,  ("c:\windows\system32\ieapfltr.dll") File version = 7.0.6000.16461, File size = 383488, File modification date = 20/08/2007  10:01, File description = Microsoft Phishing Filter, Product Name = Windows Internet Explorer, Product version = 7.0.6000.16461, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546037744|0x5c44db0684d0865811e35f7a68ed12dd|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\jscript.dll, MID = 63380000,  ("c:\windows\system32\jscript.dll") File version = 5.7.0.5730, File size = 491520, File modification date = 17/10/2006  08:00, File description = Microsoft (R) JScript, Product Name = Microsoft (R) JScript, Product version = 5.7.0.5730, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved) |-433185843|0x194d61a029411cc83011181d6e818600|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\klscav.dll, MID = 3660000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\klscav.dll") File version = 7.0.0.125, File size = 34056, File modification date = 28/06/2007  09:51, File description = Script Checker AV Plugin, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-338107759|0x5eab075da506344c59eb9fc795e26e2a|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll, MID = 78130000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll") File version = 8.00.50727.42, File size = 626688, File modification date = 22/09/2005  19:48, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1145731021|0x16d7ddf3b659f7cf1cb9f4dcff4219f0|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prremote.dll, MID = 66600000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\prremote.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = PR_REMOTE, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |305277143|0xe839429a75ecf00b5bce8c738eb3d2c0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCP80.dll, MID = 7c420000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll") File version = 8.00.50727.42, File size = 548864, File modification date = 22/09/2005  19:48, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1565337742|0x2bc650257fb0867abd54fd460ec2bafc|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prloader.dll, MID = 36a0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\prloader.dll") File version = 7.0.0.125, File size = 283912, File modification date = 28/06/2007  09:51, File description = Prague Loader, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-2033162255|0xd1823b6a0673d46189d8a1c0f22e10fb|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prkernel.ppl, MID = 64a00000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\prkernel.ppl") File version = 7.0.0.125, File size = 147456, File modification date = 28/06/2007  09:46, File description = Prague kernel, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1088500507|0xda48ff384bb1d1771eb9259596fc54df|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl, MID = 3920000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl") File version = 7.0.0.125, File size = 442368, File modification date = 28/06/2007  09:46, File description = Structure Serializer, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1029783882|0xf3838def59b8d47e9d90435f457823c6|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl, MID = 3990000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl") File version = 7.0.0.125, File size = 23040, File modification date = 28/06/2007  09:46, File description = Proxy Stubs, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |365730530|0xdc4b4ad3c268c439efdfc1766d0baaa7|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl, MID = 67f00000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl") File version = 7.0.0.125, File size = 9728, File modification date = 28/06/2007  09:46, File description = Temporary IO, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-798055477|0xc5ab3e738071258b066859c7ce2a218e|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\WINDOWS\system32\schannel.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226), File size = 144896, File modification date = 25/04/2007  14:22, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112551157|0x0964bdcf0b80bede5a9ec6f8d53474b0|
	  C:\WINDOWS\system32\ddrawex.dll, MID = 6d9c0000,  ("c:\windows\system32\ddrawex.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27136, File modification date = 18/08/2004  12:00, File description = Direct Draw Ex, Product Name = Microsoft Windows Operating System, Product version = 5.03.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-541135331|0x0fae8c70918c7450307c285655ad8f19|
	  C:\WINDOWS\system32\DDRAW.dll, MID = 73720000,  ("c:\windows\system32\ddraw.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 266240, File modification date = 18/08/2004  12:00, File description = Microsoft DirectDraw, Product Name =   Microsoft Windows, Product version = 5.03.2600.2180, Company name =   (  .   .) |-1992087609|0x0f143a8d803bae20cd9b120b8084bc1c|
	  C:\WINDOWS\system32\DCIMAN32.dll, MID = 73b80000,  ("c:\windows\system32\dciman32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8704, File modification date = 18/08/2004  12:00, File description = DCI Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630976475|0x9036824c541b5e7904cce895dac84def|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\nfio.ppl, MID = 7c10000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\nfio.ppl") File version = 7.0.0.125, File size = 86016, File modification date = 28/06/2007  09:46, File description = NFIO, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |952860792|0x5094b278016b25aa705dd2d29b3ed968|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\fsdrvplg.ppl, MID = 63a00000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\fsdrvplg.ppl") File version = 7.0.0.125, File size = 18944, File modification date = 28/06/2007  09:48, File description = Plugin for FSDrv, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-1019257744|0x480d0aaf933aec7aad144b4f8b47d330|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\basegui.ppl, MID = 7c50000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\basegui.ppl") File version = 7.0.0.125, File size = 729088, File modification date = 28/06/2007  09:46, File description = Kaspersky Anti-Virus GUI Windows part, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-247718959|0x1bfd2fb862c46f7127d313bd9f60c74c|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\thpimpl.ppl, MID = 68000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\thpimpl.ppl") File version = 7.0.0.125, File size = 19968, File modification date = 28/06/2007  09:46, File description = Thread Pool, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1758561579|0xc5c80e4baeb4383cc3324ec8a2787cea|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\FSSync.dll, MID = 7d30000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\fssync.dll") File version = 7.0.5.125, File size = 37640, File modification date = 28/06/2007  09:51, File description = FSSYNC.DLL, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-886215415|0x27d174f6b106e541246b27c534baff7c|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\winreg.ppl, MID = 69500000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\winreg.ppl") File version = 7.0.0.125, File size = 25088, File modification date = 28/06/2007  09:46, File description = WINREG, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-828528859|0x7e99499f58c9a80211bc8f9673b6493c|
	  C:\WINDOWS\system32\USP10.dll, MID = 75540000,  ("c:\windows\system32\usp10.dll") File version = 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 406528, File modification date = 18/08/2004  12:00, File description = Uniscribe Unicode script processor, Product Name = Microsoft(R) Uniscribe Unicode script processor, Product version = 1.0420.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1714559367|0xf723f8b36e97e27a4794b4ed105de1dd|
	  C:\WINDOWS\system32\ImgUtil.dll, MID = 1b000000,  ("c:\windows\system32\imgutil.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 36352, File modification date = 17/10/2006  07:57, File description = IE plugin image decoder support DLL, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |561105050|0xc2d6a721edf79456b0e74faff6713026|
	  C:\WINDOWS\system32\pngfilt.dll, MID = 1b060000,  ("c:\windows\system32\pngfilt.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 44544, File modification date = 17/10/2006  07:58, File description = IE PNG plugin image decoder, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2121191923|0xeba6e877b64fdf40f65256f29a103a69|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74940000,  ("c:\windows\system32\msxml3.dll") File version = 8.90.1101.0, File size = 1104896, File modification date = 26/06/2007  06:10, File description = MSXML 3.0 SP9, Product Name = Microsoft(R) MSXML 3.0 SP9, Product version = 8.90.1101.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |-667680133|0x3cc14c529ff813f93155d7a3525df512|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.2133 (xpsp.040514-1639), File size = 137216, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2133, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2063081844|0xcacd2c63a79268d131ea37e85524cc44|
	  C:\WINDOWS\system32\oleacc.dll, MID = 74c40000,  ("c:\windows\system32\oleacc.dll") File version = 4.2.5406.0 (xpclient.010817-1148), File size = 163328, File modification date = 18/08/2004  12:00, File description = Active Accessibility Core Component, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1133819602|0x38217599cf49d4f8ebd3cec5894ed0c9|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  12:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\msfeeds.dll, MID = 431a0000,  ("c:\windows\system32\msfeeds.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 459264, File modification date = 20/08/2007  10:01, File description = Microsoft Feeds Manager, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1965010587|0x0bd8d2129724fe2b958583f4aaf73d7c|
	  C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll, MID = 65d0000,  ("c:\program files\common files\ahead\lib\nerodigitalext.dll") File version = 2, 0, 0, 8, File size = 1802240, File modification date = 15/11/2005  08:07, File description = Nero Digital Shell Extension, Product Name = Nero Digital Tools, Product version = 2, 0, 0, 8, Company name = Nero AG (Copyright (c) 1995-2005 Nero AG and its licensors.) |1517787684|0x2891b62b2a8181d827add753dccdce7f|
	  C:\Program Files\Common Files\Ahead\Lib\MFC71.DLL, MID = 7c140000,  ("c:\program files\common files\ahead\lib\mfc71.dll") File version = 7.10.3077.0, File size = 1060864, File modification date = 19/03/2003  03:20, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |751878168|0xf35a584e947a5b401feb0fe01db4a0d7|
	  C:\Program Files\Common Files\Ahead\Lib\MSVCP71.dll, MID = 7c3a0000,  ("c:\program files\common files\ahead\lib\msvcp71.dll") File version = 7.10.3077.0, File size = 499712, File modification date = 19/03/2003  03:14, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1513820628|0x561fa2abb31dfa8fab762145f81667c2|
	  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll, MID = 1410000,  ("c:\program files\adobe\acrobat 7.0\activex\pdfshell.dll") File version = 7.0.0.0, File size = 110592, File modification date = 24/10/2005  06:43, File description = PDF Shell Extension, Product Name = Adobe PDF Shell Extension, Product version = 7.0.0.0, Company name = Adobe Systems, Inc. (Copyright 2000-2004 Adobe Systems, Inc.) |-229526356|0x3cc6645eb13af3bc924af0c38dcc768b|
	  C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx, MID = 30000000,  ("c:\windows\system32\macromed\flash\flash9d.ocx") File version = 9,0,47,0, File size = 2267368, File modification date = 11/06/2007  09:04, File description = Adobe Flash Player 9.0  r46, Product Name = Shockwave Flash, Product version = 9,0,47,0, Company name = Adobe Systems, Inc. (Adobe Flash Player. Copyright  1996-2007 Adobe Systems Incorporated. All Rights Reserved. Protected by U.S. Patent 6,879,327; Patents Pending in the United States and other countries. Adobe and Flash are either trademarks or registered trademarks in the United States and/or other countries.) |-1988053268|0xb01e2a41389fba42b7b5a026ea88c9b7|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\mshtmled.dll, MID = 43290000,  ("c:\windows\system32\mshtmled.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 477696, File modification date = 20/08/2007  10:01, File description = Microsoft HTML Editing Component, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1791005390|0x4a7bfb191cdbd4bb7a7dd225c9bafcca|
	  C:\WINDOWS\system32\wuweb.dll, MID = 50bc0000,  ("c:\windows\system32\wuweb.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 203096, File modification date = 30/07/2007  15:19, File description = Windows Update Web Control, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-492961453|0x5c9a003e7c6ba03f04dc2d9c82a7e6e0|
	  C:\WINDOWS\system32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\system32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  12:00, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\wuapi.dll, MID = 506a0000,  ("c:\windows\system32\wuapi.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 549720, File modification date = 30/07/2007  15:19, File description = Windows Update Client API, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1590345386|0xedced3393985ed2d86641747edca53ae|
	  C:\WINDOWS\system32\wups.dll, MID = 50640000,  ("c:\windows\system32\wups.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 33624, File modification date = 30/07/2007  15:18, File description = Windows Update client proxy stub, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |412830850|0xa236f41b92b3ceac754943fef30c884e|
	  C:\WINDOWS\system32\iepeers.dll, MID = 58760000,  ("c:\windows\system32\iepeers.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 191488, File modification date = 07/11/2006  17:03, File description = Internet Explorer Peer Objects, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-171767952|0x14afcc6a059da5ad83139c4c52ccb2fe|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\Dxtrans.dll, MID = 427c0000,  ("c:\windows\system32\dxtrans.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 214528, File modification date = 20/08/2007  10:01, File description = DirectX Media -- DirectX Transform Core, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1236944426|0xde1063664093960510dbaad816ebde27|
	  C:\WINDOWS\system32\Dxtmsft.dll, MID = 35cb0000,  ("c:\windows\system32\dxtmsft.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 346624, File modification date = 17/10/2006  07:58, File description = DirectX Media -- Image DirectX Transforms, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1981180745|0x8f4aaabeb926a294559c8a884a88a04e|
	  C:\WINDOWS\system32\legitcheckcontrol.dll, MID = b3e0000,  ("c:\windows\system32\legitcheckcontrol.dll") File version = 1.7.0036.0, File size = 1485696, File modification date = 24/04/2007  07:32, File description = Windows Genuine Advantage Validation, Product Name = Windows Genuine Advantage, Product version = 1.7.0036.0, Company name = Microsoft Corporation ( 1995-2007 Microsoft Corporation) |1663588459|0xf41fa54cd85af8aacf8c7e084f6742f4|
	  C:\WINDOWS\system32\wbem\wbemprox.dll, MID = 74eb0000,  ("c:\windows\system32\wbem\wbemprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1932469142|0xd74ff28418cb97e37ea39db7d32f96df|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75250000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 214528, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1186626859|0x7fd8eca23963c13600d681de85996e3e|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74e90000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1042801053|0xe08385fba3ad1c8017f9a391ff846659|
	  C:\WINDOWS\system32\wbem\fastprox.dll, MID = 75660000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 472064, File modification date = 18/08/2004  12:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-792155897|0x61bf3d7e1b81d9705b054c5ee0660355|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  12:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\cryptnet.dll, MID = 75f10000,  ("c:\windows\system32\cryptnet.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63488, File modification date = 18/08/2004  12:00, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1707137241|0x48e2c7182fe73f9236c2c3e0d144ac7a|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 18/08/2004  12:00, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  c:\WINDOWS\system32\msxml6.dll, MID = 58800000,  ("c:\windows\system32\msxml6.dll") File version = 6.10.1200.0, File size = 1320800, File modification date = 15/05/2007  12:43, File description = MSXML 6.0 SP1, Product Name = Microsoft(R) MSXML 6.0 SP1, Product version = 6.10.1200.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |-1227271677|0x81fda769beb11fe8396e97fa703b4d7d|

	PROCESS	wuauclt, PID = 3416, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = "C:\WINDOWS\system32\wuauclt.exe" /RunStoreAsComServer Local\[4e4]SUSDS1d271c00c3b5c14dbf6005f87d3c9390
		  "c:\windows\system32\wuauclt.exe" File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 53080, File modification date = 30/07/2007  15:19, File description = Windows Update Automatic Updates, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2078586079|0xf3e9065eb617a7e3a832a7976bfa021b|
	  C:\WINDOWS\system32\wuauclt.exe, MID = 400000,  ("c:\windows\system32\wuauclt.exe") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 53080, File modification date = 30/07/2007  15:19, File description = Windows Update Automatic Updates, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2078586079|0xf3e9065eb617a7e3a832a7976bfa021b|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  12:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  12:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\wuaueng.dll, MID = 50040000,  ("c:\windows\system32\wuaueng.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 1712984, File modification date = 30/07/2007  15:19, File description = Windows Update Agent, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |567071557|0x3eec20e41f5f331b94002970ceaec92f|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\ESENT.dll, MID = 6f940000,  ("c:\windows\system32\esent.dll") File version = 5.1.2468.0 (Lab03_N(jliem).010306-1456), File size = 1085952, File modification date = 20/10/2005  22:30, File description =    , Product Name = Microsoft Windows Operating System, Product version = 5.1.2468.0, Company name = Microsoft Corporation ((C)   (Microsoft Corp.), 1981-2001.) |1128106826|0x8699a155bb7b1fb9a9b08af4a7fa5f52|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\IPHLPAPI.DLL, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 18/08/2004  12:00, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\system32\mspatcha.dll, MID = 605c0000,  ("c:\windows\system32\mspatcha.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 18/08/2004  12:00, File description = Microsoft(R) Patch Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266572750|0x40e6f5398d37ef77ce9a45177cbfda03|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\wups2.dll, MID = 50e60000,  ("c:\windows\system32\wups2.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 43352, File modification date = 30/07/2007  15:19, File description = Windows Update client proxy stub 2, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |760780347|0xceb1bd87fbcb5984bdf7dc0991a060b5|

	PROCESS	iexplore, PID = 2804, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" "http://swa.mail.ru/cgi-bin/auth?Login=macho_men_milo@mail.ru&agent=1194345764D1924616333&page=%68%74%74%70%3A%2F%2F%77%69%6E%2E%6D%61%69%6C%2E%72%75%2F%63%67%69%2D%62%69%6E%2F%73%74%61%72%74&ver=1952"
		  "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	  C:\Program Files\Internet Explorer\IEXPLORE.EXE, MID = 400000,  ("c:\program files\internet explorer\iexplore.exe") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\urlmon.dll, MID = 433f0000,  ("c:\windows\system32\urlmon.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 1152000, File modification date = 20/08/2007  10:01, File description = OLE32 Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2067097980|0x44d60c21eadfe567c739a91605821583|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\iertutil.dll, MID = 43090000,  ("c:\windows\system32\iertutil.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 267776, File modification date = 20/08/2007  10:01, File description = Run time utility for Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1679956523|0xf1f214987b94127c1ce6313388512f25|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\adialhk.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-1826851188|0x33fcc52971c12b6edced3e7f1e717e7e|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 950000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\IEFRAME.dll, MID = 435f0000,  ("c:\windows\system32\ieframe.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll, MID = cd0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\scrchpg.dll") File version = 7.0.0.125, File size = 161032, File modification date = 28/06/2007  09:51, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |810146489|0xe1a195577a9447a7a0b06ea3c056c286|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  12:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\IEUI.dll, MID = 5dff0000,  ("c:\windows\system32\ieui.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 180736, File modification date = 07/11/2006  17:03, File description = Internet Explorer UI Engine, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1597583758|0x28f5b835472a62b13ad54663c645191d|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76350000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4608, File modification date = 18/08/2004  12:00, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1779676053|0x0a46c776dd81f03ba9fa94efc3fc7afd|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll, MID = 4ebe0000,  ("c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll") File version = 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158), File size = 1712128, File modification date = 18/08/2004  12:00, File description = Microsoft GDI+, Product Name = Microsoft Windows Operating System, Product version = 5.1.3102.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |133300943|0x27d0bf463198c8e6efbdb6bcefce2d74|
	  C:\WINDOWS\system32\xmllite.dll, MID = 47060000,  ("c:\windows\system32\xmllite.dll") File version = 1.00.1018.0, File size = 121856, File modification date = 14/07/2006  15:51, File description = Microsoft XmlLite Library, Product Name = Microsoft XML Core Services, Product version = 1.00.1018.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 2005) |-748065926|0x215422272bbadd7dda57d0372062d293|
	  C:\WINDOWS\system32\apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\msimtf.dll, MID = 746b0000,  ("c:\windows\system32\msimtf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 159232, File modification date = 18/08/2004  12:00, File description = Active IMM Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |620728644|0xd942ba5f14c7b0089d1967941e6a697b|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\Program Files\Microsoft Office\OFFICE11\msohev.dll, MID = 325c0000,  ("c:\program files\microsoft office\office11\msohev.dll") File version = 11.0.5510, File size = 67128, File modification date = 02/09/2007  14:55, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
	  C:\Program Files\Internet Explorer\ieproxy.dll, MID = 61930000,  ("c:\program files\internet explorer\ieproxy.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 287744, File modification date = 07/11/2006  17:03, File description = IE ActiveX Interface Marshaling Library, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |506737445|0xca9b8fb2015266f22368b006bcc69990|
	  C:\WINDOWS\system32\msi.dll, MID = 1970000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\WININET.dll, MID = 43310000,  ("c:\windows\system32\wininet.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 824832, File modification date = 20/08/2007  10:01, File description = Internet Extensions for Win32, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-887842308|0x5e7499e1763346fa6660e326c3a563e2|
	  C:\WINDOWS\system32\Normaliz.dll, MID = 1500000,  ("c:\windows\system32\normaliz.dll") File version = 6.0.5441.0 (winmain(wmbla).060628-1735), File size = 23552, File modification date = 29/06/2006  04:05, File description = Unicode Normalization DLL, Product Name = Microsoft Windows Operating System, Product version = 6.0.5441.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2140978042|0x10753a3adc3e39a3b10cc3f08e98e6b4|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 18/08/2004  12:00, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\ws2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll, MID = 22c0000,  ("c:\program files\adobe\acrobat 7.0\activex\acroiehelper.dll") File version = 7.0.5.2005092300, File size = 63136, File modification date = 24/09/2005  02:12, File description = Adobe Acrobat IE Helper Version 7.0 for ActiveX, Product Name = AcroIEHelper Library, Product version = 7, 0, 0, 0, Company name = Adobe Systems Incorporated (Copyright 1984-2005 Adobe Systems Incorporated and its licensors. All rights reserved.) |-17737831|0xb61d5d651ecc6055c29bf826ca7b1141|
	  C:\WINDOWS\system32\MSVCR71.dll, MID = 7c340000,  ("c:\windows\system32\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 21/02/2003  01:42, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\Program Files\Mail.Ru\Sputnik\MailRuSputnik.dll, MID = 2320000,  ("c:\program files\mail.ru\sputnik\mailrusputnik.dll") File version = 1, 8, 0, 17, File size = 366080, File modification date = 15/10/2007  15:25, File description = MailRuSputnik Module, Product Name = MailRuSputnik Module, Product version = 1, 8, 0, 17, Company name = @Mail.Ru (Copyright  2005 - 2007) |1595289613|0x55d00f934516b45c22f1934ffe4cf95b|
	  C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll, MID = 2380000,  ("c:\program files\tgtsoft\stylexp\tgt_bho.dll") File version = (null), File size = 65536, File modification date = 09/05/2006  23:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-100189131|0x107cc933ccb8fc9ad8f2160657b9d6d6|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\MSRATING.dll, MID = 43240000,  ("c:\windows\system32\msrating.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 193024, File modification date = 20/08/2007  10:01, File description = Internet Ratings and Local User Management DLL, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1887635928|0xd446135b3c653b8f047ca69fe3f66f83|
	  C:\WINDOWS\system32\imon.dll, MID = 20b00000,  ("c:\windows\system32\imon.dll") File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  12:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\system32\RASAPI32.dll, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 18/08/2004  12:00, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 18/08/2004  12:00, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  12:00, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\sensapi.dll, MID = 72290000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-330752720|0x28b3398819e998adfe09d8d26e230258|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 18/08/2004  12:00, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll, MID = 2ae0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\dnsq.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = DNSQ, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-808222867|0x2812cca795bf75ba201252c728f92787|
	  C:\WINDOWS\system32\mshtml.dll, MID = 43cd0000,  ("c:\windows\system32\mshtml.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 3584512, File modification date = 20/08/2007  11:31, File description = Microsoft (R) HTML Viewer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1144545514|0xe239f09ab7533e0bd2c3c1b05e36edbe|
	  C:\WINDOWS\system32\msls31.dll, MID = 2c40000,  ("c:\windows\system32\msls31.dll") File version = 3.10.349.0, File size = 156160, File modification date = 07/11/2006  17:03, File description = Microsoft Line Services library file, Product Name = Microsoft Line Services, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1996-1999) |-245357016|0x2d15e1c7cd0bc1a9b7f9660e39a0ce3e|
	  C:\WINDOWS\system32\ieapfltr.dll, MID = 43c60000,  ("c:\windows\system32\ieapfltr.dll") File version = 7.0.6000.16461, File size = 383488, File modification date = 20/08/2007  10:01, File description = Microsoft Phishing Filter, Product Name = Windows Internet Explorer, Product version = 7.0.6000.16461, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |546037744|0x5c44db0684d0865811e35f7a68ed12dd|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  12:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  12:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\jscript.dll, MID = 63380000,  ("c:\windows\system32\jscript.dll") File version = 5.7.0.5730, File size = 491520, File modification date = 17/10/2006  08:00, File description = Microsoft (R) JScript, Product Name = Microsoft (R) JScript, Product version = 5.7.0.5730, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-2006, All Rights Reserved) |-433185843|0x194d61a029411cc83011181d6e818600|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\klscav.dll, MID = 3660000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\klscav.dll") File version = 7.0.0.125, File size = 34056, File modification date = 28/06/2007  09:51, File description = Script Checker AV Plugin, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-338107759|0x5eab075da506344c59eb9fc795e26e2a|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCR80.dll, MID = 78130000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcr80.dll") File version = 8.00.50727.42, File size = 626688, File modification date = 22/09/2005  19:48, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1145731021|0x16d7ddf3b659f7cf1cb9f4dcff4219f0|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prremote.dll, MID = 66600000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\prremote.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = PR_REMOTE, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |305277143|0xe839429a75ecf00b5bce8c738eb3d2c0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\MSVCP80.dll, MID = 7c420000,  ("c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\msvcp80.dll") File version = 8.00.50727.42, File size = 548864, File modification date = 22/09/2005  19:48, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio 2005, Product version = 8.00.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1565337742|0x2bc650257fb0867abd54fd460ec2bafc|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prloader.dll, MID = 36a0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\prloader.dll") File version = 7.0.0.125, File size = 283912, File modification date = 28/06/2007  09:51, File description = Prague Loader, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-2033162255|0xd1823b6a0673d46189d8a1c0f22e10fb|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\prkernel.ppl, MID = 64a00000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\prkernel.ppl") File version = 7.0.0.125, File size = 147456, File modification date = 28/06/2007  09:46, File description = Prague kernel, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1088500507|0xda48ff384bb1d1771eb9259596fc54df|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl, MID = 3920000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\params.ppl") File version = 7.0.0.125, File size = 442368, File modification date = 28/06/2007  09:46, File description = Structure Serializer, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1029783882|0xf3838def59b8d47e9d90435f457823c6|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl, MID = 3990000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\pxstub.ppl") File version = 7.0.0.125, File size = 23040, File modification date = 28/06/2007  09:46, File description = Proxy Stubs, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |365730530|0xdc4b4ad3c268c439efdfc1766d0baaa7|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl, MID = 67f00000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\tempfile.ppl") File version = 7.0.0.125, File size = 9728, File modification date = 28/06/2007  09:46, File description = Temporary IO, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-798055477|0xc5ab3e738071258b066859c7ce2a218e|
	  C:\WINDOWS\system32\Macromed\Flash\Flash9d.ocx, MID = 30000000,  ("c:\windows\system32\macromed\flash\flash9d.ocx") File version = 9,0,47,0, File size = 2267368, File modification date = 11/06/2007  09:04, File description = Adobe Flash Player 9.0  r46, Product Name = Shockwave Flash, Product version = 9,0,47,0, Company name = Adobe Systems, Inc. (Adobe Flash Player. Copyright  1996-2007 Adobe Systems Incorporated. All Rights Reserved. Protected by U.S. Patent 6,879,327; Patents Pending in the United States and other countries. Adobe and Flash are either trademarks or registered trademarks in the United States and/or other countries.) |-1988053268|0xb01e2a41389fba42b7b5a026ea88c9b7|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\WINDOWS\system32\schannel.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226), File size = 144896, File modification date = 25/04/2007  14:22, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112551157|0x0964bdcf0b80bede5a9ec6f8d53474b0|
	  C:\WINDOWS\system32\ddrawex.dll, MID = 6d9c0000,  ("c:\windows\system32\ddrawex.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27136, File modification date = 18/08/2004  12:00, File description = Direct Draw Ex, Product Name = Microsoft Windows Operating System, Product version = 5.03.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-541135331|0x0fae8c70918c7450307c285655ad8f19|
	  C:\WINDOWS\system32\DDRAW.dll, MID = 73720000,  ("c:\windows\system32\ddraw.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 266240, File modification date = 18/08/2004  12:00, File description = Microsoft DirectDraw, Product Name =   Microsoft Windows, Product version = 5.03.2600.2180, Company name =   (  .   .) |-1992087609|0x0f143a8d803bae20cd9b120b8084bc1c|
	  C:\WINDOWS\system32\DCIMAN32.dll, MID = 73b80000,  ("c:\windows\system32\dciman32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8704, File modification date = 18/08/2004  12:00, File description = DCI Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630976475|0x9036824c541b5e7904cce895dac84def|
	  C:\WINDOWS\system32\mshtmled.dll, MID = 43290000,  ("c:\windows\system32\mshtmled.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 477696, File modification date = 20/08/2007  10:01, File description = Microsoft HTML Editing Component, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1791005390|0x4a7bfb191cdbd4bb7a7dd225c9bafcca|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\nfio.ppl, MID = 7da0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\nfio.ppl") File version = 7.0.0.125, File size = 86016, File modification date = 28/06/2007  09:46, File description = NFIO, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |952860792|0x5094b278016b25aa705dd2d29b3ed968|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\fsdrvplg.ppl, MID = 63a00000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\fsdrvplg.ppl") File version = 7.0.0.125, File size = 18944, File modification date = 28/06/2007  09:48, File description = Plugin for FSDrv, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-1019257744|0x480d0aaf933aec7aad144b4f8b47d330|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\basegui.ppl, MID = 7dd0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\basegui.ppl") File version = 7.0.0.125, File size = 729088, File modification date = 28/06/2007  09:46, File description = Kaspersky Anti-Virus GUI Windows part, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-247718959|0x1bfd2fb862c46f7127d313bd9f60c74c|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\thpimpl.ppl, MID = 68000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\thpimpl.ppl") File version = 7.0.0.125, File size = 19968, File modification date = 28/06/2007  09:46, File description = Thread Pool, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1758561579|0xc5c80e4baeb4383cc3324ec8a2787cea|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\FSSync.dll, MID = 7eb0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\fssync.dll") File version = 7.0.5.125, File size = 37640, File modification date = 28/06/2007  09:51, File description = FSSYNC.DLL, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-886215415|0x27d174f6b106e541246b27c534baff7c|
	  c:\program files\kaspersky lab\kaspersky internet security 7.0\winreg.ppl, MID = 69500000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\winreg.ppl") File version = 7.0.0.125, File size = 25088, File modification date = 28/06/2007  09:46, File description = WINREG, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-828528859|0x7e99499f58c9a80211bc8f9673b6493c|
	  C:\WINDOWS\system32\USP10.dll, MID = 75540000,  ("c:\windows\system32\usp10.dll") File version = 1.0420.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 406528, File modification date = 18/08/2004  12:00, File description = Uniscribe Unicode script processor, Product Name = Microsoft(R) Uniscribe Unicode script processor, Product version = 1.0420.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1714559367|0xf723f8b36e97e27a4794b4ed105de1dd|
	  C:\WINDOWS\system32\ImgUtil.dll, MID = 1b000000,  ("c:\windows\system32\imgutil.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 36352, File modification date = 17/10/2006  07:57, File description = IE plugin image decoder support DLL, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |561105050|0xc2d6a721edf79456b0e74faff6713026|
	  C:\WINDOWS\system32\pngfilt.dll, MID = 1b060000,  ("c:\windows\system32\pngfilt.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 44544, File modification date = 17/10/2006  07:58, File description = IE PNG plugin image decoder, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2121191923|0xeba6e877b64fdf40f65256f29a103a69|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74940000,  ("c:\windows\system32\msxml3.dll") File version = 8.90.1101.0, File size = 1104896, File modification date = 26/06/2007  06:10, File description = MSXML 3.0 SP9, Product Name = Microsoft(R) MSXML 3.0 SP9, Product version = 8.90.1101.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |-667680133|0x3cc14c529ff813f93155d7a3525df512|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.2133 (xpsp.040514-1639), File size = 137216, File modification date = 18/08/2004  12:00, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2133, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2063081844|0xcacd2c63a79268d131ea37e85524cc44|
	  C:\WINDOWS\system32\Dxtrans.dll, MID = 427c0000,  ("c:\windows\system32\dxtrans.dll") File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 214528, File modification date = 20/08/2007  10:01, File description = DirectX Media -- DirectX Transform Core, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1236944426|0xde1063664093960510dbaad816ebde27|
	  C:\WINDOWS\system32\Dxtmsft.dll, MID = 35cb0000,  ("c:\windows\system32\dxtmsft.dll") File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 346624, File modification date = 17/10/2006  07:58, File description = DirectX Media -- Image DirectX Transforms, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1981180745|0x8f4aaabeb926a294559c8a884a88a04e|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76970000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76960000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), File size = 19968, File modification date = 01/09/2005  02:28, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2751, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1425770188|0x3e46da8ae679b87d309ebbd3e12283d0|

	PROCESS	GetSystemInfo, PID = 2564, USER = Error\  (Group - Error\, , Error\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Documents and Settings\ \ \GetSystemInfo.exe" 
		  "c:\documents and settings\ \ \getsysteminfo.exe" File version = 3, 0, 0, 5, File size = 331857, File modification date = 06/11/2007  10:44, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  C:\Documents and Settings\ \ \GetSystemInfo.exe, MID = 400000,  ("c:\documents and settings\ \ \getsysteminfo.exe") File version = 3, 0, 0, 5, File size = 331857, File modification date = 06/11/2007  10:44, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  12:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  12:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  12:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  12:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 474112, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-330331368|0x189508ab03326419b77bbcb4f312c5c7|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  12:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  12:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  12:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\Msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  12:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 18/08/2004  12:00, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  12:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  12:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  12:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\miscr3.dll, MID = 10000000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\miscr3.dll") File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus Ring 3 Hooker Helper, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-857500109|0x65dcd932b54ffacb748b3dfc715cfdc2|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  12:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76970000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  12:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  12:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 18/08/2004  12:00, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  12:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  12:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\scrchpg.dll, MID = bf0000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\scrchpg.dll") File version = 7.0.0.125, File size = 161032, File modification date = 28/06/2007  09:51, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |810146489|0xe1a195577a9447a7a0b06ea3c056c286|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f30000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1603469464|0x84e62f048e179a53623739b31691f608|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71bf0000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  12:00, File description = Microsoft LAN Manager, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-164401074|0x7e27508a7492a748ebface597d51b8ac|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cb0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80896, File modification date = 18/08/2004  12:00, File description =   GUI  NT LM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1722132880|0x61b52d7c6c0e902cb8b63c9ab545f0bf|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c70000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 245760, File modification date = 18/08/2004  12:00, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-871070814|0x9568897cd0f9caf45c3aa541bd490782|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  12:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f40000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description =   Web DAV, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1728990969|0xa3777781ed5a0f7a5f81bd0049b331f3|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76960000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), File size = 19968, File modification date = 01/09/2005  02:28, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2751, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1425770188|0x3e46da8ae679b87d309ebbd3e12283d0|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 18/08/2004  12:00, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  12:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\odbcint.dll, MID = 20000000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\dnsq.dll, MID = c40000,  ("c:\program files\kaspersky lab\kaspersky internet security 7.0\dnsq.dll") File version = 7.0.0.125, File size = 95496, File modification date = 28/06/2007  09:51, File description = DNSQ, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-808222867|0x2812cca795bf75ba201252c728f92787|
	  C:\WINDOWS\system32\perfproc.dll, MID = 5ec70000,  ("c:\windows\system32\perfproc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35328, File modification date = 18/08/2004  12:00, File description =      Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2042794600|0x025455ca4a1027345d9ae0a527669874|
	  C:\WINDOWS\system32\psapi.dll, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|

Opened TCP/UDP ports:

	TCP, LOCAL (host/address/port):aleks/0.0.0.0/135(epmap), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1140, Command Line = c:\windows\system32\svchost -k rpcss   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	TCP, LOCAL (host/address/port):aleks/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):aleks/0.0.0.0/1110, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/0.0.0.0/7210(sql6), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 156, Command Line = "c:\program files\sdb\programs\pgm\serv.exe"   "c:\program files\sdb\programs\pgm\serv.exe" File version = 7.6.0, File size = 466944, File modification date = 16/04/2007  19:46, File description = MaxDB - Communication server, Product Name = MaxDB, Product version = 7.6, Company name = SAP AG (Copyright  2000-2007 by SAP AG) |-2043519465|0xaec3894f1a04f83bb4ca1f547f9b5863|
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1025, REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 1608, Command Line = c:\windows\system32\alg.exe   "c:\windows\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2147, State:ESTABLISHED, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2219, State:FIN_WAIT2, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2237, State:FIN_WAIT2, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2241, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2243, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2246, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2250, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2252, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2254, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2256, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2257, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2264, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2266, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2268, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2274, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2276, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2278, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2280, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2286, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2288, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2290, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2292, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2294, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2300, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2308, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2322, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2324, State:FIN_WAIT2, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2328, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/1110, REMOTE (host/address/port):aleks/127.0.0.1/2332, State:ESTABLISHED, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2147, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:ESTABLISHED, PID = 2376, Command Line = "c:\program files\mail.ru\agent\magent.exe" -lm   "c:\program files\mail.ru\agent\magent.exe" File version = 4, 10, 1952, 0, File size = 4855288, File modification date = 15/10/2007  15:32, File description = Mail.Ru , Product Name = Mail.Ru , Product version = 4, 10, 1952, 0, Company name = Mail.Ru (Copyright  2001-2007) |-822933055|0x02128fd92746fdcdc6dc965342d2d9fe|
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2219, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:CLOSE_WAIT, PID = 4040, Command Line = "c:\program files\internet explorer\iexplore.exe" "http://swa.mail.ru/cgi-bin/auth?login=mechta_87.07@mail.ru&agent=1194345164h1551313334&page=%68%74%74%70%3a%2f%2f%77%69%6e%2e%6d%61%69%6c%2e%72%75%2f%63%67%69%2d%62%69%6e%2f%73%74%61%72%74&ver=1952"   "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2237, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:CLOSE_WAIT, PID = 4040, Command Line = "c:\program files\internet explorer\iexplore.exe" "http://swa.mail.ru/cgi-bin/auth?login=mechta_87.07@mail.ru&agent=1194345164h1551313334&page=%68%74%74%70%3a%2f%2f%77%69%6e%2e%6d%61%69%6c%2e%72%75%2f%63%67%69%2d%62%69%6e%2f%73%74%61%72%74&ver=1952"   "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2248, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2260, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2262, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2270, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2272, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2282, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2284, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2296, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2298, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2302, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2304, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2306, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2324, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:CLOSE_WAIT, PID = 2804, Command Line = "c:\program files\internet explorer\iexplore.exe" "http://swa.mail.ru/cgi-bin/auth?login=macho_men_milo@mail.ru&agent=1194345764d1924616333&page=%68%74%74%70%3a%2f%2f%77%69%6e%2e%6d%61%69%6c%2e%72%75%2f%63%67%69%2d%62%69%6e%2f%73%74%61%72%74&ver=1952"   "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2330, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2332, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:ESTABLISHED, PID = 2804, Command Line = "c:\program files\internet explorer\iexplore.exe" "http://swa.mail.ru/cgi-bin/auth?login=macho_men_milo@mail.ru&agent=1194345764d1924616333&page=%68%74%74%70%3a%2f%2f%77%69%6e%2e%6d%61%69%6c%2e%72%75%2f%63%67%69%2d%62%69%6e%2f%73%74%61%72%74&ver=1952"   "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	TCP, LOCAL (host/address/port):aleks/127.0.0.1/2336, REMOTE (host/address/port):aleks/127.0.0.1/1110, State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/139(netbios-ssn), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2148, REMOTE (host/address/port):mrim30.mail.ru/194.186.55.35/2041, State:ESTABLISHED, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2253, REMOTE (host/address/port):*/194.67.45.129/80(http), State:FIN_WAIT2, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2255, REMOTE (host/address/port):counter.rambler.ru/81.19.66.19/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2261, REMOTE (host/address/port):*/217.212.240.172/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2279, REMOTE (host/address/port):bs.yandex.ru/213.180.214.31/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2289, REMOTE (host/address/port):*/194.67.45.129/80(http), State:FIN_WAIT2, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2297, REMOTE (host/address/port):*/194.67.45.129/80(http), State:FIN_WAIT2, PID = 1780, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2309, REMOTE (host/address/port):*/91.192.149.17/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2311, REMOTE (host/address/port):*/87.242.74.77/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2315, REMOTE (host/address/port):*/87.242.74.77/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2329, REMOTE (host/address/port):host37.rax.ru/88.212.196.77/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/2333, REMOTE (host/address/port):*/213.206.94.83/21(ftp), State:ESTABLISHED, PID = 1780, Command Line = (null) 
	UDP, LOCAL (host/address/port):aleks/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):aleks/0.0.0.0/500, REMOTE (host/address/port):*/*/*, State:*, PID = 880, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	UDP, LOCAL (host/address/port):aleks/0.0.0.0/1026, REMOTE (host/address/port):*/*/*, State:*, PID = 1324, Command Line = c:\windows\system32\svchost.exe -k networkservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):aleks/0.0.0.0/1249, REMOTE (host/address/port):*/*/*, State:*, PID = 1324, Command Line = c:\windows\system32\svchost.exe -k networkservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):aleks/0.0.0.0/4500, REMOTE (host/address/port):*/*/*, State:*, PID = 880, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	UDP, LOCAL (host/address/port):aleks/127.0.0.1/123, REMOTE (host/address/port):*/*/*, State:*, PID = 1252, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):aleks/127.0.0.1/1864, REMOTE (host/address/port):*/*/*, State:*, PID = 4040, Command Line = "c:\program files\internet explorer\iexplore.exe" "http://swa.mail.ru/cgi-bin/auth?login=mechta_87.07@mail.ru&agent=1194345164h1551313334&page=%68%74%74%70%3a%2f%2f%77%69%6e%2e%6d%61%69%6c%2e%72%75%2f%63%67%69%2d%62%69%6e%2f%73%74%61%72%74&ver=1952"   "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	UDP, LOCAL (host/address/port):aleks/127.0.0.1/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1472, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):aleks/127.0.0.1/2245, REMOTE (host/address/port):*/*/*, State:*, PID = 2804, Command Line = "c:\program files\internet explorer\iexplore.exe" "http://swa.mail.ru/cgi-bin/auth?login=macho_men_milo@mail.ru&agent=1194345764d1924616333&page=%68%74%74%70%3a%2f%2f%77%69%6e%2e%6d%61%69%6c%2e%72%75%2f%63%67%69%2d%62%69%6e%2f%73%74%61%72%74&ver=1952"   "c:\program files\internet explorer\iexplore.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 625152, File modification date = 17/08/2007  10:25, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1293736357|0x3ac2bc667da0af2c968e96e1630f5ab5|
	UDP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/123, REMOTE (host/address/port):*/*/*, State:*, PID = 1252, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/137(netbios-ns), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/138, REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):aleks.pulnet/192.168.54.231/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1472, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|

System default language:
		Russian

Default interface language of user:
		Russian

Keyboard layout languages:
		Russian
		English

Installed code pages:
		10000 = 10000 (MAC - )
		10006 = 10006 (MAC -  1)
		10007 = 10007 (MAC - )
		10010 = 10010 (MAC - )
		10017 = 10017 (MAC - )
		10029 = 10029 (MAC -  2)
		10079 = 10079 (MAC - )
		10081 = 10081 (MAC - )
		10082 = 10082 (MAC - )
		1026 = 1026 (IBM EBCDIC -  (-5))
		1250 = 1250  (ANSI - -)
		1251 = 1251  (ANSI - )
		1252 = 1252  (ANSI -  1)
		1253 = 1251  (ANSI - )
		1254 = 1254  (ANSI - )
		1255 = 1255  (ANSI - )
		1256 = 1256  (ANSI - )
		1257 = 1257  (ANSI - )
		1258 = 1258  (ANSI/OEM - )
		1361 = Korean (Johab)
		20127 = 20127 (-ASCII)
		20261 = 20261 (T.61)
		20866 = 20866 ( - 8)
		21866 = 21866 ( - 8-U)
		28591 = 28591 (ISO 8859-1  1)
		28592 = 28592 (ISO 8859-2 )
		28594 = 28594 (ISO 8859-4 )
		28595 = 28595 (ISO 8859-5 )
		28597 = 28597 (ISO 8859-7 )
		28599 = 28599 (ISO 8859-9  5)
		28605 = 28605 (ISO 8859-15  9)
		37 = 37    (IBM EBCDIC -   )
		437 = 437   (OEM - )
		500 = 500   (IBM EBCDIC - )
		737 = 737   (OEM -  437G)
		775 = 775   (OEM - )
		850 = 850   (OEM -   1)
		852 = 852   (OEM -  2)
		855 = 855   (OEM -  )
		857 = 857   (OEM - )
		860 = 860   (OEM - )
		861 = 861   (OEM - )
		863 = 863   (OEM - -)
		865 = 865   (OEM - )
		866 = 866   (OEM - )
		869 = 869   (OEM -  )
		874 = 874   (ANSI/OEM - )
		875 = 875   (IBM EBCDIC -  )
		932 = 932   (ANSI/OEM -  Shift-JIS)
		936 = 936   (ANSI/OEM -   GBK)
		949 = 949   (ANSI/OEM - )
		950 = 950   (ANSI/OEM -   Big5)
		28603 = 
		65000 = 65000 (UTF-7)
		65001 = 65001 (UTF-8)

StartUp link objects:
---------------------
SYSTEM REGISTRY
  *\Software\Microsoft\Windows NT\CurrentVersion\AEDebug
    Debugger=drwtsn32 -p %ld -e %ld -g <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AEDebug>
      "c:\windows\system32\drwtsn32.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 46080, File modification date = 18/08/2004  12:00, File description =  DrWatson, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |540897299|0x6a32ea2baff29f3624d841da20f67e28|
  *\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell=Explorer.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\explorer.exe" File version = 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234), File size = 1033728, File modification date = 13/06/2007  13:23, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.3156, Company name =   (  .   .) |-1482101721|0x3630dbb63bad434e3b1f39c2b61fc62f|
    UserInit=C:\WINDOWS\system32\userinit.exe, <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\system32\userinit.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description =  Userinit    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1110865795|0xb5f1a73edab83fa2db9662e10e027587|
  *\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\*
    DllName=crypt32.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain>
      "c:\windows\system32\crypt32.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  12:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
    DllName=cryptnet.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet>
      "c:\windows\system32\cryptnet.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63488, File modification date = 18/08/2004  12:00, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1707137241|0x48e2c7182fe73f9236c2c3e0d144ac7a|
    DllName=cscdll.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll>
      "c:\windows\system32\cscdll.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
    DllName=C:\WINDOWS\system32\klogon.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon>
      "c:\windows\system32\klogon.dll" File version = 7.0.0.125, File size = 206088, File modification date = 28/06/2007  09:51, File description = Logon Visualizer, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |522391355|0x535a597f39f7f6f4a4aa250447357da0|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=sclgntfy.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy>
      "c:\windows\system32\sclgntfy.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 22016, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1015048368|0x017f95e7e577b928827add784b2ca052|
    DllName=WlNotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  12:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
  *\Software\Microsoft\Windows*\CurrentVersion\Run*
    SiSRaid=C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\silicon integrated systems\sisraidpackage\sraid.exe" File version = 1, 0, 7, 0, File size = 905216, File modification date = 18/05/2005  10:44, File description = Sraid Application, Product Name = Sraid Application, Product version = 1, 0, 7, 0, Company name = SiS (Copyright (C) 2003 - 2005) |-272556884|0xcb19a7bc554ebfeaede50ecd073214ba|
    SiSPower=Rundll32.exe SiSPower.dll,ModeAgent <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\sispower.dll" File version = 6.14.10.3674, File size = 49152, File modification date = 09/06/2005  04:01, File description = Dynamic link library for setting Power Scheme, Product Name = SiS Power Scheme Library, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2004) |281527490|0x126700d4c66d1a24af65492224f02eec|
    SoundMan=SOUNDMAN.EXE <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\soundman.exe" File version = 5.1.0.40, File size = 77824, File modification date = 20/06/2005  13:42, File description = Realtek Sound Manager, Product Name = Realtek Sound Manager, Product version = 5.1.0.40, Company name = Realtek Semiconductor Corp. (Copyright (c) 2001-2004 Realtek Semiconductor Corp.) |-1626937743|0xfbef9f9c97b6b93e2041e65d3cd81c9c|
    APS=C:\Documents and Settings\ \ \\  \aps\aps.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\documents" File version = (null), File size = 23132, File modification date = 30/10/2007  13:06, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |592919248|0xf60452069409549e8f4257679e8161d2|
      "c:\documents and settings\ \ \\  \aps\aps.exe" File version = (null), File size = 435712, File modification date = 12/10/2004  08:28, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1537342097|0x6d0b8bdfe80404653deb21e2a536d0ac|
    MAgent=C:\Program Files\Mail.Ru\Agent\MAgent.exe -LM <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\mail.ru\agent\magent.exe" File version = 4, 10, 1952, 0, File size = 4855288, File modification date = 15/10/2007  15:32, File description = Mail.Ru , Product Name = Mail.Ru , Product version = 4, 10, 1952, 0, Company name = Mail.Ru (Copyright  2001-2007) |-822933055|0x02128fd92746fdcdc6dc965342d2d9fe|
    AVP="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\kaspersky lab\kaspersky internet security 7.0\avp.exe" File version = 7.0.0.125, File size = 218376, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-888887410|0x38ba040617859c0610ddc6fef9016703|
    NeroFilterCheck=C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run->
      "c:\program files\common files\ahead\lib\nerocheck.exe" File version = 1, 0, 0, 5, File size = 155648, File modification date = 12/01/2006  12:40, File description = NeroCheck, Product Name = Nero AG NeroCheck, Product version = 1, 0, 0, 5, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |1781420573|0xc93ab037a8c792d5f8a1a9fc88a7c7c5|
    QuickTime Task="C:\Program Files\QuickTime\qttask.exe" -atboottime <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run->
      "c:\program files\quicktime\qttask.exe" File version = 7.1.3, File size = 282624, File modification date = 01/09/2006  11:57, File description = QuickTime Task, Product Name = QuickTime, Product version = QuickTime 7.1.3, Company name = Apple Computer, Inc. (Copyright Apple Computer, Inc. 1989-2006) |-169027005|0xcaf03357de72f8f19fa099581a685c1a|
    SmartSync - ScheduleSync=C:\PROGRA~1\MOBILE~1\SMARTS~1\SCHEDU~1.EXE <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run->
      "c:\program files\mobile phone manager\smartsync\schedulesync.exe" File version = 7, 0, 4591, 1, File size = 45056, File modification date = 21/10/2005  12:20, File description = ScheduleSync MFC Application, Product Name = ScheduleSync Application, Product version = 7, 0, 4591, 1, Company name = Siemens (Copyright (C) 2003) |388589067|0x33a5efecdbd91cadc212bd78517f7461|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe <HKEY_USERS\S-1-5-21-484763869-796845957-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}="C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe" <HKEY_USERS\S-1-5-21-484763869-796845957-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\common files\ahead\lib\nmbgmonitor.exe" File version = 1, 5, 0, 18, File size = 139264, File modification date = 09/10/2006  07:28, File description = Nero Home, Product Name = Nero Home, Product version = 1, 5, 0, 18, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-2018646309|0x7824452741212af839ea61a9e9f1ea0b|
    MSMSGS="C:\Program Files\Messenger\msmsgs.exe" /background <HKEY_USERS\S-1-5-21-484763869-796845957-682003330-1004\Software\Microsoft\Windows\CurrentVersion\Run->
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  12:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
  HKLM\System\ControlSet???\Services\*\Parameters
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet001\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet001\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 171008, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1853871312|0x7a2cf119a6d8c946cc0426e0f6eee733|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet001\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  12:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet001\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 18/08/2004  12:00, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet001\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  12:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet001\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  12:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet001\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet001\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  12:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet001\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  12:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet001\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet001\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet001\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet001\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 18/08/2004  12:00, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet001\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet001\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet001\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  12:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet001\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  12:00, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet001\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet001\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet001\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet001\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 18/08/2004  12:00, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet001\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet001\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 18/08/2004  12:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet001\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1569613025|0x461fd36d40dece5f63c0acf7b66899d2|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet001\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet001\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet001\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet001\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  12:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet001\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet001\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet001\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet001\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet001\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet001\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  12:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet001\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.3077 (xpsp_sp2_gdr.070204-2255), File size = 185344, File modification date = 05/02/2007  20:19, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.3077, Company name =   (  .   .) |2077781456|0x6e50df8c61419868ca7395aeb30ec401|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet001\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet001\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet001\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet001\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 18/10/2006  17:47, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet001\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet001\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  12:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet001\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet001\Services\WudfSvc\Parameters>
      "C:\WINDOWS\system32\wudfsvc.dll" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 55808, File modification date = 28/09/2006  14:56, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1720601917|0x05231c04253c5bc30b26cbaae680ed89|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet001\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet001\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet002\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet002\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 171008, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1853871312|0x7a2cf119a6d8c946cc0426e0f6eee733|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet002\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  12:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet002\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 18/08/2004  12:00, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet002\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  12:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet002\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  12:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet002\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet002\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet002\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  12:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet002\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  12:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet002\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet002\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet002\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet002\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 18/08/2004  12:00, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet002\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet002\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet002\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  12:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet002\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  12:00, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet002\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet002\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet002\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet002\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 18/08/2004  12:00, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet002\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet002\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 18/08/2004  12:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet002\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1569613025|0x461fd36d40dece5f63c0acf7b66899d2|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet002\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet002\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet002\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet002\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet002\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  12:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet002\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet002\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet002\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet002\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet002\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet002\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  12:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet002\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.3077 (xpsp_sp2_gdr.070204-2255), File size = 185344, File modification date = 05/02/2007  20:19, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.3077, Company name =   (  .   .) |2077781456|0x6e50df8c61419868ca7395aeb30ec401|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet002\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet002\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet002\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet002\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 18/10/2006  17:47, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet002\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet002\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  12:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet002\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet002\Services\WudfSvc\Parameters>
      "C:\WINDOWS\system32\wudfsvc.dll" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 55808, File modification date = 28/09/2006  14:56, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1720601917|0x05231c04253c5bc30b26cbaae680ed89|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet002\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet002\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet003\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet003\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 171008, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1853871312|0x7a2cf119a6d8c946cc0426e0f6eee733|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet003\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  12:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet003\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 18/08/2004  12:00, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet003\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  12:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet003\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  12:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet003\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet003\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet003\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  12:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet003\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  12:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet003\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  12:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet003\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet003\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet003\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet003\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 18/08/2004  12:00, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet003\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet003\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet003\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  12:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet003\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  12:00, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet003\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet003\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet003\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet003\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 18/08/2004  12:00, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet003\Services\RasMan\Parameters>
      "c:\windows\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet003\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 18/08/2004  12:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet003\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1569613025|0x461fd36d40dece5f63c0acf7b66899d2|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet003\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet003\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet003\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet003\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  12:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet003\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  12:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet003\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet003\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet003\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  12:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet003\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet003\Services\TapiSrv\Parameters>
      "c:\windows\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet003\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet003\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet003\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  12:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet003\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.3077 (xpsp_sp2_gdr.070204-2255), File size = 185344, File modification date = 05/02/2007  20:19, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.3077, Company name =   (  .   .) |2077781456|0x6e50df8c61419868ca7395aeb30ec401|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet003\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet003\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet003\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  12:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet003\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 11.0.5721.5145, File size = 27136, File modification date = 18/10/2006  17:47, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 11.0.5721.5145, Company name = Microsoft Corporation ((C) Microsoft Corporation. All rights reserved.) |1778564234|0xc51b4a5c05a5475708e3c81c7765b71d|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet003\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  12:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet003\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  12:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet003\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  12:00, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
    ServiceDll=%SystemRoot%\System32\WUDFSvc.dll <HKLM\System\ControlSet003\Services\WudfSvc\Parameters>
      "C:\WINDOWS\system32\wudfsvc.dll" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 55808, File modification date = 28/09/2006  14:56, File description = Windows Driver Foundation - User-mode Driver Framework Service, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1720601917|0x05231c04253c5bc30b26cbaae680ed89|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet003\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet003\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  12:00, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
  HKLM\System\ControlSet???\Services\*
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet001\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  12:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\drivers\actser.sys <HKLM\System\ControlSet001\Services\actser>
      "c:\windows\system32\drivers\actser.sys" File version = 2.04, File size = 29440, File modification date = 16/12/2004  13:55, File description = Actser Serial Filter driver, Product Name = Actser Filter Driver, Product version = 2.04, Company name = Siemens AG (Copyright (c) Siemens AG 2004) |500789892|0x6463d1db354b13e6ced4d67f6e4910f4|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet001\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet001\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  12:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=system32\drivers\ALCXWDM.SYS <HKLM\System\ControlSet001\Services\ALCXWDM>
      "c:\windows\system32\drivers\alcxwdm.sys" File version = 5.10.5870 built by: WinDDK, File size = 2324480, File modification date = 20/06/2005  14:08, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5870, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2005) |-636682545|0x35045a23957a71ba649740741e69408c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet001\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe <HKLM\System\ControlSet001\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe" File version = 2.0.50727.832 (QFE.050727-8300), File size = 33632, File modification date = 12/04/2007  23:20, File description = Microsoft ASP.NET State Server, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.832, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |671116056|0xe1633440859f9a1b3ceaf73ba85225ca|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet001\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet001\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 18/08/2004  12:00, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet001\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet001\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet001\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  12:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet001\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  12:00, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet001\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet001\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.832 (QFE.050727-8300), File size = 68952, File modification date = 12/04/2007  23:21, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.832, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |788955269|0x3d560af01bdc50b4a1e1bfb5cdc06d63|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} <HKLM\System\ControlSet001\Services\COMSysApp>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  12:00, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1673880939|0xbca2a62fadd6458b0ce978f5b74d8dfa|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet001\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet001\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet001\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 18/08/2004  12:00, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet001\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  12:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet001\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  12:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet001\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet001\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet001\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet001\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet001\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  12:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet001\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  12:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet001\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet001\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet001\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  12:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\HSFHWBS2.sys <HKLM\System\ControlSet001\Services\HSFHWBS2>
      "c:\windows\system32\drivers\hsfhwbs2.sys" File version = 7.60.00 built by: WinDDK, File size = 257408, File modification date = 08/11/2006  11:59, File description = HSF_HWB2 WDM driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |1647731248|0x3e0b68288e468190a5bf4c2ef5998a18|
    ImagePath=system32\DRIVERS\HSF_DPV.sys <HKLM\System\ControlSet001\Services\HSF_DPV>
      "C:\WINDOWS\system32\drivers\hsf_dpv.sys" File version = 7.60.00 built by: WinDDK, File size = 989696, File modification date = 08/11/2006  12:00, File description = HSF_DP driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |876661028|0xbd2abf12938a2fccc340873412c2b2ab|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet001\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet001\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet001\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  12:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet001\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  12:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet001\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet001\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet001\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  12:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet001\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet001\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet001\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet001\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  12:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet001\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet001\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 18/08/2004  12:00, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet001\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\drivers\kl1.sys <HKLM\System\ControlSet001\Services\kl1>
      "c:\windows\system32\drivers\kl1.sys" File version = 6.1.21.0, File size = 110360, File modification date = 28/04/2007  13:51, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1946196979|0x27fa2734cf49da74b2ac9c16dc38dd88|
    ImagePath=\??\C:\WINDOWS\system32\drivers\klif.sys <HKLM\System\ControlSet001\Services\KLIF>
      "\\?\c:\windows\system32\drivers\klif.sys" File version = 6.12.10.299, File size = 186640, File modification date = 27/06/2007  14:31, File description = spuper-ptor, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1973105805|0xc6a8ad1c9698e5b7b4dd8c19257456e8|
    ImagePath=system32\DRIVERS\klim5.sys <HKLM\System\ControlSet001\Services\klim5>
      "c:\windows\system32\drivers\klim5.sys" File version = 6.1.22.0, File size = 24344, File modification date = 04/04/2007  11:58, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-852682605|0x967e2224217431b21f1d04fbb4c68a4b|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet001\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet001\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 02/09/2007  14:53, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=system32\DRIVERS\mdmxsdk.sys <HKLM\System\ControlSet001\Services\mdmxsdk>
      "C:\WINDOWS\system32\drivers\mdmxsdk.sys" File version = 1.0.2.012, File size = 12672, File modification date = 19/06/2006  11:26, File description = Diagnostic Interface x86 Driver, Product Name = Diagnostic Interface x86 Driver, Product version = 1.0.2.012, Company name = Conexant (Copyright Conexant Systems, Inc. 2006) |-1077583592|0x0cea2d0d3fa284b85ed5b68365114f76|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet001\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 18/08/2004  12:00, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet001\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet001\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  12:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet001\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet001\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 18/08/2004  12:00, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=C:\WINDOWS\system32\msiexec.exe /V <HKLM\System\ControlSet001\Services\MSIServer>
      "c:\windows\system32\msiexec.exe" File version = 3.1.4000.1823, File size = 78848, File modification date = 04/05/2005  10:45, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.1823, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1201451646|0xf5f0146580e7023adb963879840777f8|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet001\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet001\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet001\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet001\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath=C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe <HKLM\System\ControlSet001\Services\NBService>
      "c:\program files\nero\nero 7\nero backitup\nbservice.exe" File version = 2, 6, 6, 0, File size = 724992, File modification date = 09/10/2006  18:11, File description = Nero BackItUp, Product Name = Nero BackItUp, Product version = 2, 6, 6, 0, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-646132621|0x2637f26312ecceeb6f110e95f1ece243|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet001\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet001\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  12:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet001\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  12:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet001\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet001\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  12:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet001\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet001\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet001\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 02/09/2007  14:53, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet001\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet001\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 18/08/2004  12:00, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet001\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 18/08/2004  12:00, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet001\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  12:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet001\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  12:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet001\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet001\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet001\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  12:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet001\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  12:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet001\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet001\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet001\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet001\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet001\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 18/08/2004  12:00, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet001\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet001\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  12:00, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet001\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet001\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet001\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  12:00, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet001\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet001\Services\serenum>
      "C:\WINDOWS\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet001\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\sisgrp.sys <HKLM\System\ControlSet001\Services\SiS315>
      "c:\windows\system32\drivers\sisgrp.sys" File version = 6.14.10.3674, File size = 247296, File modification date = 08/06/2005  09:18, File description = SiS Compatible Super VGA Driver, Product Name = SiS (R) Compatible Super VGA Miniport Driver for Windows XP, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2004) |-1057488109|0x5fb85cec1138482d6e7101f8c4953abb|
    ImagePath=system32\DRIVERS\siside.sys <HKLM\System\ControlSet001\Services\SiSide>
      "c:\windows\system32\drivers\siside.sys" File version = 2.04.00.00 built by: WinDDK, File size = 4096, File modification date = 25/03/2003  09:50, File description = SiS PCI Mini IDE Driver, Product Name = SiS PCI Mini IDE Driver, Product version = 2.04.00.00, Company name = Silicon Integrated Systems Corp. (Silicon Integrated Systems Corp.) |1482165947|0xb4485881bd8aed9b157a2e6cf43c2d51|
    ImagePath=system32\drivers\sisidex.sys <HKLM\System\ControlSet001\Services\sisidex>
      "c:\windows\system32\drivers\sisidex.sys" File version = 5.1.2600.0 built by: WinDDK, File size = 49024, File modification date = 17/10/2002  07:14, File description = SISIDEX Driver, Product Name = Windows (R) 2000 DDK driver, Product version = 5.1.2600.0, Company name = Windows (R) 2000 DDK provider () |1116467240|0x6225224b8e846ac230f8d9b343635910|
    ImagePath=system32\DRIVERS\srvkp.sys <HKLM\System\ControlSet001\Services\SiSkp>
      "c:\windows\system32\drivers\srvkp.sys" File version = 6.14.10.3674, File size = 11904, File modification date = 09/06/2005  02:14, File description = SiS VGA Driver Manager, Product Name = SiS (R) WindowsXP Display Manager, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 2003-2004) |408469485|0xfc272d93bba7bc3693492a510f462865|
    ImagePath=system32\DRIVERS\sisnic.sys <HKLM\System\ControlSet001\Services\SISNIC>
      "c:\windows\system32\drivers\sisnic.sys" File version = 1.16.00.05 built by: WinDDK, File size = 32768, File modification date = 03/08/2004  22:31, File description = SiS PCI Fast Ethernet Adapter Driver, Product Name = NDIS 5.1 NIC Driver, Product version = 1.16.00.05, Company name = SiS Corporation (SiS Corporation) |-1103888563|0x3fbb6ef8b5a71a2fa11f5f461bb73219|
    ImagePath=system32\DRIVERS\sisnicxp.sys <HKLM\System\ControlSet001\Services\SISNICXP>
      "c:\windows\system32\drivers\sisnicxp.sys" File version = 2.0.1039.1180 built by: WinDDK, File size = 32768, File modification date = 05/11/2004  08:43, File description = SiS PCI Fast Ethernet Adapter Driver, Product Name = NDIS 5.1 NIC Driver, Product version = 2.0.1039.1180, Company name = SiS Corporation (SiS Corporation) |2020512262|0x47f39481bc8941e0d51601a85691448d|
    ImagePath=system32\drivers\sisperf.sys <HKLM\System\ControlSet001\Services\sisperf>
      "c:\windows\system32\drivers\sisperf.sys" File version = 2.02.03.00 built by: WinDDK, File size = 9472, File modification date = 20/08/2002  09:19, File description = SiS Filter Driver, Product Name = SiS Filer Driver, Product version = 2.02.03.00, Company name = Silicon Integrated Systems Corp. (Silicon Integrated Systems Corp.) |-1678790610|0x596d4a7052002d2bd344d8937da6f66d|
    ImagePath=system32\DRIVERS\SiSRaid.sys <HKLM\System\ControlSet001\Services\SiSRaid>
      "c:\windows\system32\drivers\sisraid.sys" File version = 5.1.1039.1090, File size = 48128, File modification date = 06/05/2005  09:14, File description = SiS RAID Miniport Driver, Product Name = SiS 180/181 Controller, Product version = 5.1.1039.1090, Company name = Silicon Integrated Systems (Copyright (c) SiS Corp. 2000-2010) |139923846|0x826b83cdaafb6e164bbc1d77cb99e2ce|
    ImagePath=system32\DRIVERS\siusbmod.sys <HKLM\System\ControlSet001\Services\siusbmod>
      "c:\windows\system32\drivers\siusbmod.sys" File version = 1.05.95, File size = 27008, File modification date = 28/07/2005  11:20, File description = Siemens Mobile Phone USB Modem, Product Name = Siemens Mobile Phone USB Modem Driver, Product version = 1.05, Company name = Siemens AG  (Copyright  2004-2005 Siemens AG ) |2102294308|0xb1b3daa853d37a0368ed399995938755|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet001\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet001\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet001\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet001\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet001\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=\??\C:\Program Files\TGTSoft\StyleXP\StyleXPHelper.exe <HKLM\System\ControlSet001\Services\StyleXPHelper>
      "\\?\c:\program files\tgtsoft\stylexp\stylexphelper.exe" File version = 5.1.2600.1106 built by: WinDDK, File size = 10880, File modification date = 31/10/2005  21:44, File description = StyleXP, Product Name = Windows (R) 2000 DDK driver, Product version = 5.1.2600.1106, Company name = Windows (R) 2000 DDK provider ( Microsoft Corporation. All rights reserved.) |-2044385848|0x7e40b43922b2896f40a5930af7489c60|
    ImagePath="C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe" <HKLM\System\ControlSet001\Services\StyleXPService>
      "c:\program files\tgtsoft\stylexp\stylexpservice.exe" File version = 0, 20, 0, 3000, File size = 372736, File modification date = 24/05/2006  18:31, File description = StyleXPService Module, Product Name = StyleXPService Module, Product version = 0, 20, 0, 3000, Company name =  (Copyright 2001) |1733231951|0x564286a42af81fb2b61eed32fcde020c|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet001\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 18/08/2004  12:00, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet001\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{D5C716F4-4DB1-4753-9C07-62FF223ABC4D} <HKLM\System\ControlSet001\Services\SwPrv>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  12:00, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1673880939|0xbca2a62fadd6458b0ce978f5b74d8dfa|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet001\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet001\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet001\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet001\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet001\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet001\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73216, File modification date = 18/08/2004  12:00, File description = Telnet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-720434843|0x0a450918707a5e63c68a0041d8881bb4|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\uagp35.sys <HKLM\System\ControlSet001\Services\uagp35>
      "c:\windows\system32\drivers\uagp35.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44672, File modification date = 03/08/2004  19:07, File description = MS AGPv3.5 Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-632017951|0x49c805d42d75eddc9b6a7130999c9054|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet001\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.3124 (xpsp_sp2_gdr.070423-0049), File size = 364160, File modification date = 23/04/2007  10:32, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675703786|0xced744117e91bdc0beb810f7d8608183|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet001\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet001\Services\usbccgp>
      "c:\windows\system32\drivers\usbccgp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  19:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet001\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26624, File modification date = 18/08/2004  12:00, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050382340|0x15e993ba2f6946b2bfbbfcd30398621e|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet001\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 18/08/2004  12:00, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
    ImagePath=system32\DRIVERS\usbohci.sys <HKLM\System\ControlSet001\Services\usbohci>
      "C:\WINDOWS\system32\drivers\usbohci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17024, File modification date = 18/08/2004  12:00, File description = OHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |774845502|0xbdfe799a8531bad8a5a985821fe78760|
    ImagePath=system32\DRIVERS\usbprint.sys <HKLM\System\ControlSet001\Services\usbprint>
      "c:\windows\system32\drivers\usbprint.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  19:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet001\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet001\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  19:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\uzqwodiy.sys <HKLM\System\ControlSet001\Services\uzqwodiy>
      "\\?\c:\windows\system32\drivers\uzqwodiy.sys" File version = 1, 3, 0, 0, File size = 11264, File modification date = 01/11/2007  16:41, File description = AVZ Monitoring Driver, Product Name = AVZ Monitoring Driver, Product version = 1, 3, 0, 0, Company name = Zaitsev Oleg, Copyright (C) 2004-2006 |-1495977015|0xc935844f289b4521be054bb9d06a1bcc|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet001\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=system32\DRIVERS\vsb.sys <HKLM\System\ControlSet001\Services\vsbus>
      "c:\windows\system32\drivers\vsb.sys" File version = (null), File size = 15264, File modification date = 18/07/2005  10:34, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1542784539|0x1c8a783e90c34d205596f1ab4a97e261|
    ImagePath=System32\DRIVERS\vserial.sys <HKLM\System\ControlSet001\Services\vserial>
      "c:\windows\system32\drivers\vserial.sys" File version = (null), File size = 47744, File modification date = 18/07/2005  10:34, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1091222917|0x3377daa1cb8cac46a538c236f5f3d58f|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet001\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 18/08/2004  12:00, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet001\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet001\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\HSF_CNXT.sys <HKLM\System\ControlSet001\Services\winachsf>
      "c:\windows\system32\drivers\hsf_cnxt.sys" File version = 7.60.00 built by: WinDDK, File size = 730112, File modification date = 08/11/2006  11:59, File description = HSF_CNXT driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |-228412583|0xea2ab3c94b1aee6aa22d543f1f0c62aa|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet001\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 18/08/2004  12:00, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet001\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 914944, File modification date = 02/11/2006  19:06, File description =      Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1210282667|0x30e4f162eb4a91026ae330f2146e6b9f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet001\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 28/09/2006  14:55, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet001\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 28/09/2006  15:00, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet001\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet002\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  12:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\drivers\actser.sys <HKLM\System\ControlSet002\Services\actser>
      "c:\windows\system32\drivers\actser.sys" File version = 2.04, File size = 29440, File modification date = 16/12/2004  13:55, File description = Actser Serial Filter driver, Product Name = Actser Filter Driver, Product version = 2.04, Company name = Siemens AG (Copyright (c) Siemens AG 2004) |500789892|0x6463d1db354b13e6ced4d67f6e4910f4|
    ImagePath="C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe" <HKLM\System\ControlSet002\Services\Adobe LM Service>
      "c:\program files\common files\adobe systems shared\service\adobelmsvc.exe" File version = 2.67.010, File size = 72704, File modification date = 27/10/2007  14:30, File description = System Level Service Utility, Product Name = Adobe LM Service, Product version = (null), Company name = Adobe Systems |-1432730730|0x8b46d5a1d3ef08232c04d0eafb871fb2|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet002\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet002\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  12:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=system32\drivers\ALCXWDM.SYS <HKLM\System\ControlSet002\Services\ALCXWDM>
      "c:\windows\system32\drivers\alcxwdm.sys" File version = 5.10.5870 built by: WinDDK, File size = 2324480, File modification date = 20/06/2005  14:08, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5870, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2005) |-636682545|0x35045a23957a71ba649740741e69408c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet002\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath="C:\www\Apache22\bin\httpd.exe" -k runservice <HKLM\System\ControlSet002\Services\Apache2.2>
      "c:\www\apache22\bin\httpd.exe" File version = 2.2.4, File size = 20535, File modification date = 20/03/2007  10:02, File description = Apache HTTP Server, Product Name = Apache HTTP Server, Product version = 2.2.4, Company name = Apache Software Foundation (Copyright 2006 The Apache Software Foundation.) |-1420073568|0x86ee16ffaf5d3ebaef7acbaf8cae8b74|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe <HKLM\System\ControlSet002\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe" File version = 2.0.50727.832 (QFE.050727-8300), File size = 33632, File modification date = 12/04/2007  23:20, File description = Microsoft ASP.NET State Server, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.832, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |671116056|0xe1633440859f9a1b3ceaf73ba85225ca|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet002\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet002\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 18/08/2004  12:00, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet002\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet002\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r <HKLM\System\ControlSet002\Services\AVP>
      "c:\program files\kaspersky lab\kaspersky internet security 7.0\avp.exe" File version = 7.0.0.125, File size = 218376, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-888887410|0x38ba040617859c0610ddc6fef9016703|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet002\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  12:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet002\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  12:00, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet002\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet002\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.832 (QFE.050727-8300), File size = 68952, File modification date = 12/04/2007  23:21, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.832, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |788955269|0x3d560af01bdc50b4a1e1bfb5cdc06d63|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet002\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet002\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet002\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 18/08/2004  12:00, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet002\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  12:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet002\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  12:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet002\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet002\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet002\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet002\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet002\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  12:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet002\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  12:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet002\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
    ImagePath=c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe <HKLM\System\ControlSet002\Services\FontCache3.0.0.0>
      "c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe" File version = 3.0.6920.0 (vista_rtm_wcp.061020-1904), File size = 36864, File modification date = 20/10/2006  18:21, File description = Windows Presentation Foundation Font Cache Service, Product Name = Microsoft Windows Operating System, Product version = 3.0.6920.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1385659973|0xfacecf3f75baf3775a879d1168402270|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet002\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet002\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  12:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\HSFHWBS2.sys <HKLM\System\ControlSet002\Services\HSFHWBS2>
      "c:\windows\system32\drivers\hsfhwbs2.sys" File version = 7.60.00 built by: WinDDK, File size = 257408, File modification date = 08/11/2006  11:59, File description = HSF_HWB2 WDM driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |1647731248|0x3e0b68288e468190a5bf4c2ef5998a18|
    ImagePath=system32\DRIVERS\HSF_DPV.sys <HKLM\System\ControlSet002\Services\HSF_DPV>
      "C:\WINDOWS\system32\drivers\hsf_dpv.sys" File version = 7.60.00 built by: WinDDK, File size = 989696, File modification date = 08/11/2006  12:00, File description = HSF_DP driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |876661028|0xbd2abf12938a2fccc340873412c2b2ab|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet002\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet002\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet002\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  12:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath="C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" <HKLM\System\ControlSet002\Services\idsvc>
      "c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe" File version = 3.0.4506.30 (WAPRTM.004506-0030), File size = 741376, File modification date = 30/10/2006  00:33, File description = Windows CardSpace, Product Name = Microsoft .NET Framework, Product version = 3.0.4506.30, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-263124428|0xea7267505149b3a10df32506a4e4e412|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet002\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  12:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet002\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet002\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet002\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  12:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet002\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet002\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet002\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet002\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  12:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet002\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet002\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 18/08/2004  12:00, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet002\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\drivers\kl1.sys <HKLM\System\ControlSet002\Services\kl1>
      "c:\windows\system32\drivers\kl1.sys" File version = 6.1.21.0, File size = 110360, File modification date = 28/04/2007  13:51, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1946196979|0x27fa2734cf49da74b2ac9c16dc38dd88|
    ImagePath=\??\C:\WINDOWS\system32\drivers\klif.sys <HKLM\System\ControlSet002\Services\klif>
      "\\?\c:\windows\system32\drivers\klif.sys" File version = 6.12.10.299, File size = 186640, File modification date = 27/06/2007  14:31, File description = spuper-ptor, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1973105805|0xc6a8ad1c9698e5b7b4dd8c19257456e8|
    ImagePath=system32\DRIVERS\klim5.sys <HKLM\System\ControlSet002\Services\klim5>
      "c:\windows\system32\drivers\klim5.sys" File version = 6.1.22.0, File size = 24344, File modification date = 04/04/2007  11:58, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-852682605|0x967e2224217431b21f1d04fbb4c68a4b|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet002\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet002\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 02/09/2007  14:53, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=system32\DRIVERS\mdmxsdk.sys <HKLM\System\ControlSet002\Services\mdmxsdk>
      "C:\WINDOWS\system32\drivers\mdmxsdk.sys" File version = 1.0.2.012, File size = 12672, File modification date = 19/06/2006  11:26, File description = Diagnostic Interface x86 Driver, Product Name = Diagnostic Interface x86 Driver, Product version = 1.0.2.012, Company name = Conexant (Copyright Conexant Systems, Inc. 2006) |-1077583592|0x0cea2d0d3fa284b85ed5b68365114f76|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet002\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 18/08/2004  12:00, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet002\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet002\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  12:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet002\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet002\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 18/08/2004  12:00, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet002\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet002\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet002\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet002\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath="C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt" --defaults-file="C:\Program Files\MySQL\MySQL Server 5.0\my.ini" MySQL <HKLM\System\ControlSet002\Services\MySQL>
      "c:\program files\mysql\mysql server 5.0\bin\mysqld-nt.exe" File version = (null), File size = 5730304, File modification date = 06/07/2007  10:14, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |927415901|0x0bb913f9f02677bd4ae96d4967cacfee|
      "c:\program files\mysql\mysql server 5.0\my.ini" File version = (null), File size = 9292, File modification date = 30/10/2007  22:57, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |825837712|0xaedf68a8adfda7f6e568e59f52f85fcf|
      "C:\www\mysql5\bin\mysql.exe" File version = (null), File size = 1634304, File modification date = 05/03/2007  18:58, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1488252964|0x81d7a54499c60260893256072dacdede|
    ImagePath=C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe <HKLM\System\ControlSet002\Services\NBService>
      "c:\program files\nero\nero 7\nero backitup\nbservice.exe" File version = 2, 6, 6, 0, File size = 724992, File modification date = 09/10/2006  18:11, File description = Nero BackItUp, Product Name = Nero BackItUp, Product version = 2, 6, 6, 0, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-646132621|0x2637f26312ecceeb6f110e95f1ece243|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet002\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet002\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  12:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet002\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  12:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet002\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet002\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  12:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" <HKLM\System\ControlSet002\Services\NetTcpPortSharing>
      "c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe" File version = 3.0.4506.30 (WAPRTM.004506-0030), File size = 122880, File modification date = 30/10/2006  00:34, File description = SMSvcHost.exe, Product Name = Microsoft .NET Framework, Product version = 3.0.4506.30, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1192415707|0x8070bb07fe06de8b9acb29b07016a273|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet002\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet002\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet002\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 02/09/2007  14:53, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet002\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet002\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 18/08/2004  12:00, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet002\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 18/08/2004  12:00, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet002\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  12:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet002\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  12:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet002\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet002\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet002\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  12:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet002\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  12:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet002\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet002\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet002\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet002\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet002\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 18/08/2004  12:00, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet002\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet002\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  12:00, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet002\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet002\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=C:\Program Files\sdb\MAXDB1\pgm\kernel.exe <HKLM\System\ControlSet002\Services\SAP DBTech-.M760037>
      "c:\program files\sdb\maxdb1\pgm\kernel.exe" File version = 7.6.0, File size = 6971392, File modification date = 16/04/2007  20:55, File description = MaxDB - Kernel, Product Name = MaxDB, Product version = 7.6, Company name = SAP AG (Copyright  2000-2007 by SAP AG) |1671903374|0xacd0140eb6820a8c6dfc6f4811c1c90c|
    ImagePath=c:\program files\sdb\programs\web\pgm\wahttp.exe <HKLM\System\ControlSet002\Services\SAPDBWWW>
      "c:\program files\sdb\programs\web\pgm\wahttp.exe" File version = (null), File size = 303104, File modification date = 16/04/2007  21:22, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-237470187|0x3ce1d28fca1a6263404675b855263368|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet002\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  12:00, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet002\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet002\Services\serenum>
      "C:\WINDOWS\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet002\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath=System32\drivers\SFC4.sys <HKLM\System\ControlSet002\Services\SFC4>
      "c:\windows\system32\drivers\sfc4.sys" File version = (null), File size = 41472, File modification date = 16/09/1998  06:07, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1937219762|0x94ee71facff06cc9d6025e5fccb2c3d7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\sisgrp.sys <HKLM\System\ControlSet002\Services\SiS315>
      "c:\windows\system32\drivers\sisgrp.sys" File version = 6.14.10.3674, File size = 247296, File modification date = 08/06/2005  09:18, File description = SiS Compatible Super VGA Driver, Product Name = SiS (R) Compatible Super VGA Miniport Driver for Windows XP, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2004) |-1057488109|0x5fb85cec1138482d6e7101f8c4953abb|
    ImagePath=system32\DRIVERS\siside.sys <HKLM\System\ControlSet002\Services\SiSide>
      "c:\windows\system32\drivers\siside.sys" File version = 2.04.00.00 built by: WinDDK, File size = 4096, File modification date = 25/03/2003  09:50, File description = SiS PCI Mini IDE Driver, Product Name = SiS PCI Mini IDE Driver, Product version = 2.04.00.00, Company name = Silicon Integrated Systems Corp. (Silicon Integrated Systems Corp.) |1482165947|0xb4485881bd8aed9b157a2e6cf43c2d51|
    ImagePath=system32\drivers\sisidex.sys <HKLM\System\ControlSet002\Services\sisidex>
      "c:\windows\system32\drivers\sisidex.sys" File version = 5.1.2600.0 built by: WinDDK, File size = 49024, File modification date = 17/10/2002  07:14, File description = SISIDEX Driver, Product Name = Windows (R) 2000 DDK driver, Product version = 5.1.2600.0, Company name = Windows (R) 2000 DDK provider () |1116467240|0x6225224b8e846ac230f8d9b343635910|
    ImagePath=system32\DRIVERS\srvkp.sys <HKLM\System\ControlSet002\Services\SiSkp>
      "c:\windows\system32\drivers\srvkp.sys" File version = 6.14.10.3674, File size = 11904, File modification date = 09/06/2005  02:14, File description = SiS VGA Driver Manager, Product Name = SiS (R) WindowsXP Display Manager, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 2003-2004) |408469485|0xfc272d93bba7bc3693492a510f462865|
    ImagePath=system32\DRIVERS\sisnic.sys <HKLM\System\ControlSet002\Services\SISNIC>
      "c:\windows\system32\drivers\sisnic.sys" File version = 1.16.00.05 built by: WinDDK, File size = 32768, File modification date = 03/08/2004  22:31, File description = SiS PCI Fast Ethernet Adapter Driver, Product Name = NDIS 5.1 NIC Driver, Product version = 1.16.00.05, Company name = SiS Corporation (SiS Corporation) |-1103888563|0x3fbb6ef8b5a71a2fa11f5f461bb73219|
    ImagePath=system32\DRIVERS\sisnicxp.sys <HKLM\System\ControlSet002\Services\SISNICXP>
      "c:\windows\system32\drivers\sisnicxp.sys" File version = 2.0.1039.1180 built by: WinDDK, File size = 32768, File modification date = 05/11/2004  08:43, File description = SiS PCI Fast Ethernet Adapter Driver, Product Name = NDIS 5.1 NIC Driver, Product version = 2.0.1039.1180, Company name = SiS Corporation (SiS Corporation) |2020512262|0x47f39481bc8941e0d51601a85691448d|
    ImagePath=system32\drivers\sisperf.sys <HKLM\System\ControlSet002\Services\sisperf>
      "c:\windows\system32\drivers\sisperf.sys" File version = 2.02.03.00 built by: WinDDK, File size = 9472, File modification date = 20/08/2002  09:19, File description = SiS Filter Driver, Product Name = SiS Filer Driver, Product version = 2.02.03.00, Company name = Silicon Integrated Systems Corp. (Silicon Integrated Systems Corp.) |-1678790610|0x596d4a7052002d2bd344d8937da6f66d|
    ImagePath=system32\DRIVERS\SiSRaid.sys <HKLM\System\ControlSet002\Services\SiSRaid>
      "c:\windows\system32\drivers\sisraid.sys" File version = 5.1.1039.1090, File size = 48128, File modification date = 06/05/2005  09:14, File description = SiS RAID Miniport Driver, Product Name = SiS 180/181 Controller, Product version = 5.1.1039.1090, Company name = Silicon Integrated Systems (Copyright (c) SiS Corp. 2000-2010) |139923846|0x826b83cdaafb6e164bbc1d77cb99e2ce|
    ImagePath=system32\DRIVERS\siusbmod.sys <HKLM\System\ControlSet002\Services\siusbmod>
      "c:\windows\system32\drivers\siusbmod.sys" File version = 1.05.95, File size = 27008, File modification date = 28/07/2005  11:20, File description = Siemens Mobile Phone USB Modem, Product Name = Siemens Mobile Phone USB Modem Driver, Product version = 1.05, Company name = Siemens AG  (Copyright  2004-2005 Siemens AG ) |2102294308|0xb1b3daa853d37a0368ed399995938755|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet002\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet002\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet002\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet002\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\ssm_bus.sys <HKLM\System\ControlSet002\Services\ssm_bus>
      "c:\windows\system32\drivers\ssm_bus.sys" File version = V4.22, File size = 52416, File modification date = 10/11/2005  04:42, File description = Samsung Mobile USB Device II 1.0 Driver, Product Name = Samsung Mobile USB Device II 1.0, Product version = V4.22, Company name = MCCI (Copyright (c) MCCI 1997-2004) |1588325603|0x8724bc8f9750c2055467654027e9aaaa|
    ImagePath=system32\DRIVERS\ssm_mdfl.sys <HKLM\System\ControlSet002\Services\ssm_mdfl>
      "c:\windows\system32\drivers\ssm_mdfl.sys" File version = V4.22, File size = 6096, File modification date = 10/11/2005  04:42, File description = Samsung Mobile USB Modem II 1.0 Filter Driver, Product Name = Samsung Mobile USB Modem II 1.0 Filter Driver, Product version = V4.22, Company name = MCCI (Copyright (c) MCCI 1997-2004) |1441727960|0x0680dce79e0862806a6f3bb07a0550a4|
    ImagePath=system32\DRIVERS\ssm_mdm.sys <HKLM\System\ControlSet002\Services\ssm_mdm>
      "c:\windows\system32\drivers\ssm_mdm.sys" File version = V4.22, File size = 84512, File modification date = 10/11/2005  04:42, File description = Samsung Mobile USB Modem II 1.0 Driver, Product Name = Samsung Mobile USB Modem II 1.0, Product version = V4.22, Company name = MCCI (Copyright (c) MCCI 1997-2004) |1013075726|0x175d32718db7975100deb5708fcec549|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet002\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=\??\C:\Program Files\TGTSoft\StyleXP\StyleXPHelper.exe <HKLM\System\ControlSet002\Services\StyleXPHelper>
      "\\?\c:\program files\tgtsoft\stylexp\stylexphelper.exe" File version = 5.1.2600.1106 built by: WinDDK, File size = 10880, File modification date = 31/10/2005  21:44, File description = StyleXP, Product Name = Windows (R) 2000 DDK driver, Product version = 5.1.2600.1106, Company name = Windows (R) 2000 DDK provider ( Microsoft Corporation. All rights reserved.) |-2044385848|0x7e40b43922b2896f40a5930af7489c60|
    ImagePath="C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe" <HKLM\System\ControlSet002\Services\StyleXPService>
      "c:\program files\tgtsoft\stylexp\stylexpservice.exe" File version = 0, 20, 0, 3000, File size = 372736, File modification date = 24/05/2006  18:31, File description = StyleXPService Module, Product Name = StyleXPService Module, Product version = 0, 20, 0, 3000, Company name =  (Copyright 2001) |1733231951|0x564286a42af81fb2b61eed32fcde020c|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet002\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 18/08/2004  12:00, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet002\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet002\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet002\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet002\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet002\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet002\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet002\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73216, File modification date = 18/08/2004  12:00, File description = Telnet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-720434843|0x0a450918707a5e63c68a0041d8881bb4|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\uagp35.sys <HKLM\System\ControlSet002\Services\uagp35>
      "c:\windows\system32\drivers\uagp35.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44672, File modification date = 03/08/2004  19:07, File description = MS AGPv3.5 Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-632017951|0x49c805d42d75eddc9b6a7130999c9054|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet002\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.3124 (xpsp_sp2_gdr.070423-0049), File size = 364160, File modification date = 23/04/2007  10:32, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675703786|0xced744117e91bdc0beb810f7d8608183|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet002\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet002\Services\usbccgp>
      "c:\windows\system32\drivers\usbccgp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  19:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet002\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26624, File modification date = 18/08/2004  12:00, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050382340|0x15e993ba2f6946b2bfbbfcd30398621e|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet002\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 18/08/2004  12:00, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
    ImagePath=system32\DRIVERS\usbohci.sys <HKLM\System\ControlSet002\Services\usbohci>
      "C:\WINDOWS\system32\drivers\usbohci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17024, File modification date = 18/08/2004  12:00, File description = OHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |774845502|0xbdfe799a8531bad8a5a985821fe78760|
    ImagePath=system32\DRIVERS\usbprint.sys <HKLM\System\ControlSet002\Services\usbprint>
      "c:\windows\system32\drivers\usbprint.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  19:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet002\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet002\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  19:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\uzqwodiy.sys <HKLM\System\ControlSet002\Services\uzqwodiy>
      "\\?\c:\windows\system32\drivers\uzqwodiy.sys" File version = 1, 3, 0, 0, File size = 11264, File modification date = 01/11/2007  16:41, File description = AVZ Monitoring Driver, Product Name = AVZ Monitoring Driver, Product version = 1, 3, 0, 0, Company name = Zaitsev Oleg, Copyright (C) 2004-2006 |-1495977015|0xc935844f289b4521be054bb9d06a1bcc|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet002\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=system32\DRIVERS\vsb.sys <HKLM\System\ControlSet002\Services\vsbus>
      "c:\windows\system32\drivers\vsb.sys" File version = (null), File size = 15264, File modification date = 18/07/2005  10:34, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1542784539|0x1c8a783e90c34d205596f1ab4a97e261|
    ImagePath=System32\DRIVERS\vserial.sys <HKLM\System\ControlSet002\Services\vserial>
      "c:\windows\system32\drivers\vserial.sys" File version = (null), File size = 47744, File modification date = 18/07/2005  10:34, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1091222917|0x3377daa1cb8cac46a538c236f5f3d58f|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet002\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 18/08/2004  12:00, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet002\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet002\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\HSF_CNXT.sys <HKLM\System\ControlSet002\Services\winachsf>
      "c:\windows\system32\drivers\hsf_cnxt.sys" File version = 7.60.00 built by: WinDDK, File size = 730112, File modification date = 08/11/2006  11:59, File description = HSF_CNXT driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |-228412583|0xea2ab3c94b1aee6aa22d543f1f0c62aa|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet002\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 18/08/2004  12:00, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet002\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 914944, File modification date = 02/11/2006  19:06, File description =      Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1210282667|0x30e4f162eb4a91026ae330f2146e6b9f|
    ImagePath=\SystemRoot\System32\drivers\ws2ifsl.sys <HKLM\System\ControlSet002\Services\WS2IFSL>
      "C:\WINDOWS\system32\drivers\ws2ifsl.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  12:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet002\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 28/09/2006  14:55, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet002\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 28/09/2006  15:00, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet002\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=c:\program files\sdb\programs\pgm\serv.exe <HKLM\System\ControlSet002\Services\XServer>
      "c:\program files\sdb\programs\pgm\serv.exe" File version = 7.6.0, File size = 466944, File modification date = 16/04/2007  19:46, File description = MaxDB - Communication server, Product Name = MaxDB, Product version = 7.6, Company name = SAP AG (Copyright  2000-2007 by SAP AG) |-2043519465|0xaec3894f1a04f83bb4ca1f547f9b5863|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet003\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  12:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\drivers\actser.sys <HKLM\System\ControlSet003\Services\actser>
      "c:\windows\system32\drivers\actser.sys" File version = 2.04, File size = 29440, File modification date = 16/12/2004  13:55, File description = Actser Serial Filter driver, Product Name = Actser Filter Driver, Product version = 2.04, Company name = Siemens AG (Copyright (c) Siemens AG 2004) |500789892|0x6463d1db354b13e6ced4d67f6e4910f4|
    ImagePath="C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe" <HKLM\System\ControlSet003\Services\Adobe LM Service>
      "c:\program files\common files\adobe systems shared\service\adobelmsvc.exe" File version = 2.67.010, File size = 72704, File modification date = 27/10/2007  14:30, File description = System Level Service Utility, Product Name = Adobe LM Service, Product version = (null), Company name = Adobe Systems |-1432730730|0x8b46d5a1d3ef08232c04d0eafb871fb2|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet003\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet003\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  12:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=system32\drivers\ALCXWDM.SYS <HKLM\System\ControlSet003\Services\ALCXWDM>
      "c:\windows\system32\drivers\alcxwdm.sys" File version = 5.10.5870 built by: WinDDK, File size = 2324480, File modification date = 20/06/2005  14:08, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5870, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2005) |-636682545|0x35045a23957a71ba649740741e69408c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet003\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  12:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath="C:\www\Apache22\bin\httpd.exe" -k runservice <HKLM\System\ControlSet003\Services\Apache2.2>
      "c:\www\apache22\bin\httpd.exe" File version = 2.2.4, File size = 20535, File modification date = 20/03/2007  10:02, File description = Apache HTTP Server, Product Name = Apache HTTP Server, Product version = 2.2.4, Company name = Apache Software Foundation (Copyright 2006 The Apache Software Foundation.) |-1420073568|0x86ee16ffaf5d3ebaef7acbaf8cae8b74|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe <HKLM\System\ControlSet003\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe" File version = 2.0.50727.832 (QFE.050727-8300), File size = 33632, File modification date = 12/04/2007  23:20, File description = Microsoft ASP.NET State Server, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.832, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |671116056|0xe1633440859f9a1b3ceaf73ba85225ca|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet003\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet003\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 18/08/2004  12:00, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet003\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  12:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet003\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" -r <HKLM\System\ControlSet003\Services\AVP>
      "c:\program files\kaspersky lab\kaspersky internet security 7.0\avp.exe" File version = 7.0.0.125, File size = 218376, File modification date = 28/06/2007  09:51, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-888887410|0x38ba040617859c0610ddc6fef9016703|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet003\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  12:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet003\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  12:00, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet003\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet003\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.832 (QFE.050727-8300), File size = 68952, File modification date = 12/04/2007  23:21, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.832, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |788955269|0x3d560af01bdc50b4a1e1bfb5cdc06d63|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet003\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet003\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  12:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet003\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 18/08/2004  12:00, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet003\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  12:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet003\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  12:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet003\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet003\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet003\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet003\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet003\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet003\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  12:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet003\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  12:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet003\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
    ImagePath=c:\WINDOWS\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe <HKLM\System\ControlSet003\Services\FontCache3.0.0.0>
      "c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe" File version = 3.0.6920.0 (vista_rtm_wcp.061020-1904), File size = 36864, File modification date = 20/10/2006  18:21, File description = Windows Presentation Foundation Font Cache Service, Product Name = Microsoft Windows Operating System, Product version = 3.0.6920.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1385659973|0xfacecf3f75baf3775a879d1168402270|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet003\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet003\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  12:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\HSFHWBS2.sys <HKLM\System\ControlSet003\Services\HSFHWBS2>
      "c:\windows\system32\drivers\hsfhwbs2.sys" File version = 7.60.00 built by: WinDDK, File size = 257408, File modification date = 08/11/2006  11:59, File description = HSF_HWB2 WDM driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |1647731248|0x3e0b68288e468190a5bf4c2ef5998a18|
    ImagePath=system32\DRIVERS\HSF_DPV.sys <HKLM\System\ControlSet003\Services\HSF_DPV>
      "C:\WINDOWS\system32\drivers\hsf_dpv.sys" File version = 7.60.00 built by: WinDDK, File size = 989696, File modification date = 08/11/2006  12:00, File description = HSF_DP driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |876661028|0xbd2abf12938a2fccc340873412c2b2ab|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet003\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet003\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet003\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  12:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath="C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" <HKLM\System\ControlSet003\Services\idsvc>
      "c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe" File version = 3.0.4506.30 (WAPRTM.004506-0030), File size = 741376, File modification date = 30/10/2006  00:33, File description = Windows CardSpace, Product Name = Microsoft .NET Framework, Product version = 3.0.4506.30, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-263124428|0xea7267505149b3a10df32506a4e4e412|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet003\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  12:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet003\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 18/08/2004  12:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet003\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet003\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  12:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet003\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet003\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet003\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet003\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  12:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet003\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet003\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 18/08/2004  12:00, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet003\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\drivers\kl1.sys <HKLM\System\ControlSet003\Services\kl1>
      "c:\windows\system32\drivers\kl1.sys" File version = 6.1.21.0, File size = 110360, File modification date = 28/04/2007  13:51, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1946196979|0x27fa2734cf49da74b2ac9c16dc38dd88|
    ImagePath=\??\C:\WINDOWS\system32\drivers\klif.sys <HKLM\System\ControlSet003\Services\klif>
      "\\?\c:\windows\system32\drivers\klif.sys" File version = 6.12.10.299, File size = 186640, File modification date = 27/06/2007  14:31, File description = spuper-ptor, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1973105805|0xc6a8ad1c9698e5b7b4dd8c19257456e8|
    ImagePath=system32\DRIVERS\klim5.sys <HKLM\System\ControlSet003\Services\klim5>
      "c:\windows\system32\drivers\klim5.sys" File version = 6.1.22.0, File size = 24344, File modification date = 04/04/2007  11:58, File description = Kaspersky Lab Intermediate Network Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-852682605|0x967e2224217431b21f1d04fbb4c68a4b|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet003\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet003\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 02/09/2007  14:53, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=system32\DRIVERS\mdmxsdk.sys <HKLM\System\ControlSet003\Services\mdmxsdk>
      "C:\WINDOWS\system32\drivers\mdmxsdk.sys" File version = 1.0.2.012, File size = 12672, File modification date = 19/06/2006  11:26, File description = Diagnostic Interface x86 Driver, Product Name = Diagnostic Interface x86 Driver, Product version = 1.0.2.012, Company name = Conexant (Copyright Conexant Systems, Inc. 2006) |-1077583592|0x0cea2d0d3fa284b85ed5b68365114f76|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet003\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 18/08/2004  12:00, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet003\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet003\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  12:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet003\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet003\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 18/08/2004  12:00, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet003\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet003\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet003\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet003\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath="C:\Program Files\MySQL\MySQL Server 5.0\bin\mysqld-nt" --defaults-file="C:\Program Files\MySQL\MySQL Server 5.0\my.ini" MySQL <HKLM\System\ControlSet003\Services\MySQL>
      "c:\program files\mysql\mysql server 5.0\bin\mysqld-nt.exe" File version = (null), File size = 5730304, File modification date = 06/07/2007  10:14, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |927415901|0x0bb913f9f02677bd4ae96d4967cacfee|
      "c:\program files\mysql\mysql server 5.0\my.ini" File version = (null), File size = 9292, File modification date = 30/10/2007  22:57, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |825837712|0xaedf68a8adfda7f6e568e59f52f85fcf|
      "C:\www\mysql5\bin\mysql.exe" File version = (null), File size = 1634304, File modification date = 05/03/2007  18:58, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1488252964|0x81d7a54499c60260893256072dacdede|
    ImagePath=C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe <HKLM\System\ControlSet003\Services\NBService>
      "c:\program files\nero\nero 7\nero backitup\nbservice.exe" File version = 2, 6, 6, 0, File size = 724992, File modification date = 09/10/2006  18:11, File description = Nero BackItUp, Product Name = Nero BackItUp, Product version = 2, 6, 6, 0, Company name = Nero AG (Copyright (c) 1995-2006 Nero AG and its licensors) |-646132621|0x2637f26312ecceeb6f110e95f1ece243|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet003\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet003\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  12:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet003\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  12:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet003\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet003\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  12:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet003\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet003\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  12:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" <HKLM\System\ControlSet003\Services\NetTcpPortSharing>
      "c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe" File version = 3.0.4506.30 (WAPRTM.004506-0030), File size = 122880, File modification date = 30/10/2006  00:34, File description = SMSvcHost.exe, Product Name = Microsoft .NET Framework, Product version = 3.0.4506.30, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1192415707|0x8070bb07fe06de8b9acb29b07016a273|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet003\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet003\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet003\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 02/09/2007  14:53, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet003\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet003\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 18/08/2004  12:00, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet003\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 18/08/2004  12:00, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet003\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet003\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  12:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet003\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  12:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet003\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet003\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet003\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  12:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet003\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  12:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet003\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet003\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet003\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet003\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet003\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 18/08/2004  12:00, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet003\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet003\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  12:00, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet003\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet003\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  12:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=C:\Program Files\sdb\MAXDB1\pgm\kernel.exe <HKLM\System\ControlSet003\Services\SAP DBTech-.M760037>
      "c:\program files\sdb\maxdb1\pgm\kernel.exe" File version = 7.6.0, File size = 6971392, File modification date = 16/04/2007  20:55, File description = MaxDB - Kernel, Product Name = MaxDB, Product version = 7.6, Company name = SAP AG (Copyright  2000-2007 by SAP AG) |1671903374|0xacd0140eb6820a8c6dfc6f4811c1c90c|
    ImagePath=c:\program files\sdb\programs\web\pgm\wahttp.exe <HKLM\System\ControlSet003\Services\SAPDBWWW>
      "c:\program files\sdb\programs\web\pgm\wahttp.exe" File version = (null), File size = 303104, File modification date = 16/04/2007  21:22, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-237470187|0x3ce1d28fca1a6263404675b855263368|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet003\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  12:00, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet003\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet003\Services\serenum>
      "C:\WINDOWS\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  12:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet003\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath=System32\drivers\SFC4.sys <HKLM\System\ControlSet003\Services\SFC4>
      "c:\windows\system32\drivers\sfc4.sys" File version = (null), File size = 41472, File modification date = 16/09/1998  06:07, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1937219762|0x94ee71facff06cc9d6025e5fccb2c3d7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\sisgrp.sys <HKLM\System\ControlSet003\Services\SiS315>
      "c:\windows\system32\drivers\sisgrp.sys" File version = 6.14.10.3674, File size = 247296, File modification date = 08/06/2005  09:18, File description = SiS Compatible Super VGA Driver, Product Name = SiS (R) Compatible Super VGA Miniport Driver for Windows XP, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2004) |-1057488109|0x5fb85cec1138482d6e7101f8c4953abb|
    ImagePath=system32\DRIVERS\siside.sys <HKLM\System\ControlSet003\Services\SiSide>
      "c:\windows\system32\drivers\siside.sys" File version = 2.04.00.00 built by: WinDDK, File size = 4096, File modification date = 25/03/2003  09:50, File description = SiS PCI Mini IDE Driver, Product Name = SiS PCI Mini IDE Driver, Product version = 2.04.00.00, Company name = Silicon Integrated Systems Corp. (Silicon Integrated Systems Corp.) |1482165947|0xb4485881bd8aed9b157a2e6cf43c2d51|
    ImagePath=system32\drivers\sisidex.sys <HKLM\System\ControlSet003\Services\sisidex>
      "c:\windows\system32\drivers\sisidex.sys" File version = 5.1.2600.0 built by: WinDDK, File size = 49024, File modification date = 17/10/2002  07:14, File description = SISIDEX Driver, Product Name = Windows (R) 2000 DDK driver, Product version = 5.1.2600.0, Company name = Windows (R) 2000 DDK provider () |1116467240|0x6225224b8e846ac230f8d9b343635910|
    ImagePath=system32\DRIVERS\srvkp.sys <HKLM\System\ControlSet003\Services\SiSkp>
      "c:\windows\system32\drivers\srvkp.sys" File version = 6.14.10.3674, File size = 11904, File modification date = 09/06/2005  02:14, File description = SiS VGA Driver Manager, Product Name = SiS (R) WindowsXP Display Manager, Product version = 6.14.10.3674, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 2003-2004) |408469485|0xfc272d93bba7bc3693492a510f462865|
    ImagePath=system32\DRIVERS\sisnic.sys <HKLM\System\ControlSet003\Services\SISNIC>
      "c:\windows\system32\drivers\sisnic.sys" File version = 1.16.00.05 built by: WinDDK, File size = 32768, File modification date = 03/08/2004  22:31, File description = SiS PCI Fast Ethernet Adapter Driver, Product Name = NDIS 5.1 NIC Driver, Product version = 1.16.00.05, Company name = SiS Corporation (SiS Corporation) |-1103888563|0x3fbb6ef8b5a71a2fa11f5f461bb73219|
    ImagePath=system32\DRIVERS\sisnicxp.sys <HKLM\System\ControlSet003\Services\SISNICXP>
      "c:\windows\system32\drivers\sisnicxp.sys" File version = 2.0.1039.1180 built by: WinDDK, File size = 32768, File modification date = 05/11/2004  08:43, File description = SiS PCI Fast Ethernet Adapter Driver, Product Name = NDIS 5.1 NIC Driver, Product version = 2.0.1039.1180, Company name = SiS Corporation (SiS Corporation) |2020512262|0x47f39481bc8941e0d51601a85691448d|
    ImagePath=system32\drivers\sisperf.sys <HKLM\System\ControlSet003\Services\sisperf>
      "c:\windows\system32\drivers\sisperf.sys" File version = 2.02.03.00 built by: WinDDK, File size = 9472, File modification date = 20/08/2002  09:19, File description = SiS Filter Driver, Product Name = SiS Filer Driver, Product version = 2.02.03.00, Company name = Silicon Integrated Systems Corp. (Silicon Integrated Systems Corp.) |-1678790610|0x596d4a7052002d2bd344d8937da6f66d|
    ImagePath=system32\DRIVERS\SiSRaid.sys <HKLM\System\ControlSet003\Services\SiSRaid>
      "c:\windows\system32\drivers\sisraid.sys" File version = 5.1.1039.1090, File size = 48128, File modification date = 06/05/2005  09:14, File description = SiS RAID Miniport Driver, Product Name = SiS 180/181 Controller, Product version = 5.1.1039.1090, Company name = Silicon Integrated Systems (Copyright (c) SiS Corp. 2000-2010) |139923846|0x826b83cdaafb6e164bbc1d77cb99e2ce|
    ImagePath=system32\DRIVERS\siusbmod.sys <HKLM\System\ControlSet003\Services\siusbmod>
      "c:\windows\system32\drivers\siusbmod.sys" File version = 1.05.95, File size = 27008, File modification date = 28/07/2005  11:20, File description = Siemens Mobile Phone USB Modem, Product Name = Siemens Mobile Phone USB Modem Driver, Product version = 1.05, Company name = Siemens AG  (Copyright  2004-2005 Siemens AG ) |2102294308|0xb1b3daa853d37a0368ed399995938755|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet003\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet003\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet003\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet003\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\ssm_bus.sys <HKLM\System\ControlSet003\Services\ssm_bus>
      "c:\windows\system32\drivers\ssm_bus.sys" File version = V4.22, File size = 52416, File modification date = 10/11/2005  04:42, File description = Samsung Mobile USB Device II 1.0 Driver, Product Name = Samsung Mobile USB Device II 1.0, Product version = V4.22, Company name = MCCI (Copyright (c) MCCI 1997-2004) |1588325603|0x8724bc8f9750c2055467654027e9aaaa|
    ImagePath=system32\DRIVERS\ssm_mdfl.sys <HKLM\System\ControlSet003\Services\ssm_mdfl>
      "c:\windows\system32\drivers\ssm_mdfl.sys" File version = V4.22, File size = 6096, File modification date = 10/11/2005  04:42, File description = Samsung Mobile USB Modem II 1.0 Filter Driver, Product Name = Samsung Mobile USB Modem II 1.0 Filter Driver, Product version = V4.22, Company name = MCCI (Copyright (c) MCCI 1997-2004) |1441727960|0x0680dce79e0862806a6f3bb07a0550a4|
    ImagePath=system32\DRIVERS\ssm_mdm.sys <HKLM\System\ControlSet003\Services\ssm_mdm>
      "c:\windows\system32\drivers\ssm_mdm.sys" File version = V4.22, File size = 84512, File modification date = 10/11/2005  04:42, File description = Samsung Mobile USB Modem II 1.0 Driver, Product Name = Samsung Mobile USB Modem II 1.0, Product version = V4.22, Company name = MCCI (Copyright (c) MCCI 1997-2004) |1013075726|0x175d32718db7975100deb5708fcec549|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet003\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=\??\C:\Program Files\TGTSoft\StyleXP\StyleXPHelper.exe <HKLM\System\ControlSet003\Services\StyleXPHelper>
      "\\?\c:\program files\tgtsoft\stylexp\stylexphelper.exe" File version = 5.1.2600.1106 built by: WinDDK, File size = 10880, File modification date = 31/10/2005  21:44, File description = StyleXP, Product Name = Windows (R) 2000 DDK driver, Product version = 5.1.2600.1106, Company name = Windows (R) 2000 DDK provider ( Microsoft Corporation. All rights reserved.) |-2044385848|0x7e40b43922b2896f40a5930af7489c60|
    ImagePath="C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe" <HKLM\System\ControlSet003\Services\StyleXPService>
      "c:\program files\tgtsoft\stylexp\stylexpservice.exe" File version = 0, 20, 0, 3000, File size = 372736, File modification date = 24/05/2006  18:31, File description = StyleXPService Module, Product Name = StyleXPService Module, Product version = 0, 20, 0, 3000, Company name =  (Copyright 2001) |1733231951|0x564286a42af81fb2b61eed32fcde020c|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet003\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 18/08/2004  12:00, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet003\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet003\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet003\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet003\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet003\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet003\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet003\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73216, File modification date = 18/08/2004  12:00, File description = Telnet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-720434843|0x0a450918707a5e63c68a0041d8881bb4|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\uagp35.sys <HKLM\System\ControlSet003\Services\uagp35>
      "c:\windows\system32\drivers\uagp35.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44672, File modification date = 03/08/2004  19:07, File description = MS AGPv3.5 Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-632017951|0x49c805d42d75eddc9b6a7130999c9054|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet003\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.3124 (xpsp_sp2_gdr.070423-0049), File size = 364160, File modification date = 23/04/2007  10:32, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675703786|0xced744117e91bdc0beb810f7d8608183|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet003\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  12:00, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet003\Services\usbccgp>
      "c:\windows\system32\drivers\usbccgp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  19:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet003\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26624, File modification date = 18/08/2004  12:00, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050382340|0x15e993ba2f6946b2bfbbfcd30398621e|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet003\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 18/08/2004  12:00, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
    ImagePath=system32\DRIVERS\usbohci.sys <HKLM\System\ControlSet003\Services\usbohci>
      "C:\WINDOWS\system32\drivers\usbohci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17024, File modification date = 18/08/2004  12:00, File description = OHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |774845502|0xbdfe799a8531bad8a5a985821fe78760|
    ImagePath=system32\DRIVERS\usbprint.sys <HKLM\System\ControlSet003\Services\usbprint>
      "c:\windows\system32\drivers\usbprint.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  19:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet003\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet003\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  19:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\uzqwodiy.sys <HKLM\System\ControlSet003\Services\uzqwodiy>
      "\\?\c:\windows\system32\drivers\uzqwodiy.sys" File version = 1, 3, 0, 0, File size = 11264, File modification date = 01/11/2007  16:41, File description = AVZ Monitoring Driver, Product Name = AVZ Monitoring Driver, Product version = 1, 3, 0, 0, Company name = Zaitsev Oleg, Copyright (C) 2004-2006 |-1495977015|0xc935844f289b4521be054bb9d06a1bcc|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet003\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  12:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=system32\DRIVERS\vsb.sys <HKLM\System\ControlSet003\Services\vsbus>
      "c:\windows\system32\drivers\vsb.sys" File version = (null), File size = 15264, File modification date = 18/07/2005  10:34, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1542784539|0x1c8a783e90c34d205596f1ab4a97e261|
    ImagePath=System32\DRIVERS\vserial.sys <HKLM\System\ControlSet003\Services\vserial>
      "c:\windows\system32\drivers\vserial.sys" File version = (null), File size = 47744, File modification date = 18/07/2005  10:34, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1091222917|0x3377daa1cb8cac46a538c236f5f3d58f|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet003\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 18/08/2004  12:00, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet003\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  12:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet003\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\HSF_CNXT.sys <HKLM\System\ControlSet003\Services\winachsf>
      "c:\windows\system32\drivers\hsf_cnxt.sys" File version = 7.60.00 built by: WinDDK, File size = 730112, File modification date = 08/11/2006  11:59, File description = HSF_CNXT driver, Product Name = SoftK56 Modem Driver, Product version = 7.60.00, Company name = Conexant Systems, Inc. (Copyright Conexant Systems, Inc. 2006) |-228412583|0xea2ab3c94b1aee6aa22d543f1f0c62aa|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet003\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 18/08/2004  12:00, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath="C:\Program Files\Windows Media Player\WMPNetwk.exe" <HKLM\System\ControlSet003\Services\WMPNetworkSvc>
      "c:\program files\windows media player\wmpnetwk.exe" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 914944, File modification date = 02/11/2006  19:06, File description =      Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1210282667|0x30e4f162eb4a91026ae330f2146e6b9f|
    ImagePath=\SystemRoot\System32\drivers\ws2ifsl.sys <HKLM\System\ControlSet003\Services\WS2IFSL>
      "C:\WINDOWS\system32\drivers\ws2ifsl.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  12:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\WudfPf.sys <HKLM\System\ControlSet003\Services\WudfPf>
      "c:\windows\system32\drivers\wudfpf.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 77568, File modification date = 28/09/2006  14:55, File description = Windows Driver Foundation - User-mode Driver Framework Platform Driver, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1155706075|0xf15feafffbb3644ccc80c5da584e6311|
    ImagePath=system32\DRIVERS\wudfrd.sys <HKLM\System\ControlSet003\Services\WudfRd>
      "c:\windows\system32\drivers\wudfrd.sys" File version = 6.0.5716.32 (winmain(wmbla).060928-1756), File size = 82944, File modification date = 28/09/2006  15:00, File description = Windows Driver Foundation - User-mode Driver Framework Reflector, Product Name = Microsoft Windows Operating System, Product version = 6.0.5716.32, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1087850528|0x28b524262bce6de1f7ef9f510ba3985b|
    ImagePath=%SystemRoot%\system32\svchost.exe -k WudfServiceGroup <HKLM\System\ControlSet003\Services\WudfSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  12:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=c:\program files\sdb\programs\pgm\serv.exe <HKLM\System\ControlSet003\Services\XServer>
      "c:\program files\sdb\programs\pgm\serv.exe" File version = 7.6.0, File size = 466944, File modification date = 16/04/2007  19:46, File description = MaxDB - Communication server, Product Name = MaxDB, Product version = 7.6, Company name = SAP AG (Copyright  2000-2007 by SAP AG) |-2043519465|0xaec3894f1a04f83bb4ca1f547f9b5863|
  HKLM\system\controlset???\control\Session Manager
    BootExecute=autocheck autochk * <HKLM\system\ControlSet001\control\Session Manager>
      "c:\windows\system32\autochk.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 588800, File modification date = 18/08/2004  12:00, File description = Auto Check Utility, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1621887782|0xaf9d1526cb0fbc34e00dcbf47a88c7eb|
  HKLM\Software\Microsoft\Active Setup\Installed Components\*
    StubPath=C:\WINDOWS\system32\ieudinit.exe <HKLM\Software\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}>
      "c:\windows\system32\ieudinit.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 13824, File modification date = 17/08/2007  10:20, File description = IE Per User Active Setup Uninstall Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |954586914|0x3a24df0d79172bf39776287b5ece2296|
    StubPath=C:\WINDOWS\inf\unregmp2.exe /ShowWMP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}>
      "c:\windows\inf\unregmp2.exe" File version = 11.0.5721.5235 (WMP_11.070626-2109), File size = 318464, File modification date = 27/06/2007  12:08, File description =    Windows Media (Microsoft), Product Name =   Microsoft Windows, Product version = 11.0.5721.5235, Company name = Microsoft Corporation ((C)  .   .) |-728830124|0x850a1c08e0d9891ea258f9140ba2aff0|
    StubPath=C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig <HKLM\Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}>
      "c:\windows\system32\ie4uinit.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 63488, File modification date = 17/08/2007  10:25, File description = IE Per-User Initialization Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |26808007|0xe157e183318cdaaf30f90da427a17b27|
    StubPath=RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\iedkcs32.dll" File version = 17.00.6000.16544 (vista_gdr.070814-1500), File size = 384512, File modification date = 20/08/2007  10:01, File description = IEAK branding, Product Name = Windows Internet Explorer, Product version = 17.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1005637830|0x6eeafc5b92477bb91d03ad9b9557f655|
    StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE <HKLM\Software\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}>
      "C:\WINDOWS\system32\shmgrate.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  12:00, File description = Windows NT User Data Migration Tool, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522851836|0xbccd6ca557fd89e4833a89e5a9ec90b6|
    StubPath=%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}>
      "C:\WINDOWS\system32\regsvr32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description =  , (C) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1798016058|0x3c5d6ffd2378543406a9fee2178e35b5|
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 386560, File modification date = 18/08/2004  12:00, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1148789537|0xe034619ae8128d70b09d51c5a9655ea2|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 73728, File modification date = 18/08/2004  12:00, File description =     Outlook Express, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-937516386|0x6f3379c7f5f83ef0bd0a1d41ce67e8b5|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |231921953|0xc9392a06ff9768b4795ae93f37f86efe|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 124928, File modification date = 20/08/2007  10:01, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |729255054|0xd25f01e8511c5953c69e9c8e9d47bab7|
      "c:\windows\inf\msnetmtg.inf" File version = (null), File size = 92618, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-42523716|0x79170533b362ee6e5725c97683c865ff|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser <HKLM\Software\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 124928, File modification date = 20/08/2007  10:01, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |729255054|0xd25f01e8511c5953c69e9c8e9d47bab7|
      "c:\windows\inf\msmsgs.inf" File version = (null), File size = 96432, File modification date = 18/08/2004  12:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-292250166|0xb7768a8d50c246048f9b5b1d17e6b665|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub <HKLM\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 124928, File modification date = 20/08/2007  10:01, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |729255054|0xd25f01e8511c5953c69e9c8e9d47bab7|
      "c:\windows\inf\wmp11.inf" File version = (null), File size = 2456, File modification date = 02/11/2006  20:17, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1418256405|0xa992ff38e8167c8a2ff50137f41d586d|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 73728, File modification date = 18/08/2004  12:00, File description =     Outlook Express, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-937516386|0x6f3379c7f5f83ef0bd0a1d41ce67e8b5|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |231921953|0xc9392a06ff9768b4795ae93f37f86efe|
    StubPath=regsvr32.exe /s /n /i:U shell32.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}>
      "c:\windows\system32\regsvr32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  12:00, File description =  , (C) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1798016058|0x3c5d6ffd2378543406a9fee2178e35b5|
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
    StubPath=C:\WINDOWS\system32\ie4uinit.exe -BaseSettings <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}>
      "c:\windows\system32\ie4uinit.exe" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 63488, File modification date = 17/08/2007  10:25, File description = IE Per-User Initialization Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |26808007|0xe157e183318cdaaf30f90da427a17b27|
    StubPath=C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install <HKLM\Software\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\mscories.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 74240, File modification date = 23/09/2005  03:28, File description = Microsoft .NET IE SECURITY REGISTRATION, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1383650402|0x46e55aea48bad9297df685c722619bd6|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT
    comm.drv=comm.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\comm.drv" File version = 3.10, File size = 10544, File modification date = 18/08/2004  12:00, File description = Windows COMM Driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2048850131|0x01b656374912d7ccf7465a3893f18982|
    display.drv=vga.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\vga.drv" File version = 3.10, File size = 2176, File modification date = 18/08/2004  12:00, File description = WOW Display Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1154556118|0x9c86bbb80450af95b6a4ea8ebda93d76|
    drivers=mmsystem.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mmsystem.dll" File version = 3.10, File size = 69120, File modification date = 18/08/2004  12:00, File description =  API  , Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |937249001|0xf708fce5338bfaf52cb28b0dffa00190|
    keyboard.drv=keyboard.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\keyboard.drv" File version = 3.10, File size = 2000, File modification date = 18/08/2004  12:00, File description = WOW Keyboard Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |297157625|0xed4bf709aad8b665075de06a0945b030|
    mouse.drv=mouse.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mouse.drv" File version = 3.10, File size = 2032, File modification date = 18/08/2004  12:00, File description = WOW MOUSE Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-124025146|0x7d29780ac88bb7292cdcff71ba67433d|
    network.drv=wfwnet.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\wfwnet.drv" File version = 3.10, File size = 13600, File modification date = 18/08/2004  12:00, File description = Windows for Workgroups network driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |819115660|0x5302ada9b0793c84151fc463dd65d7bf|
    shell=progman.exe <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\progman.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 109568, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1241159835|0x8923105d90451a754c9365ae9392dff3|
    sound.drv=sound.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\sound.drv" File version = 3.10, File size = 1744, File modification date = 18/08/2004  12:00, File description = WOW SOUND Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2008615310|0x028a1f74926dc3df2d9629edc9aebafb|
    system.drv=system.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\system.drv" File version = 3.10, File size = 3360, File modification date = 18/08/2004  12:00, File description = Windows System Driver core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-635574434|0x4a00d59ae6d75bdfc2c8e5182c4b1376|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers
    timer=timer.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers>
      "c:\windows\system\timer.drv" File version = 3.10, File size = 4064, File modification date = 18/08/2004  12:00, File description =    PC- , Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |-1391970634|0x13b3e8097afc3c12814770621f3487fc|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
    midimapper=midimap.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\midimap.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  12:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
    msacm.imaadpcm=imaadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\imaadp32.acm" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16384, File modification date = 18/08/2004  12:00, File description =   IMA ADPCM  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1638053536|0xb45c691988afab9c9bd93ba187ca2474|
    msacm.msadpcm=msadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msadp32.acm" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 18/08/2004  12:00, File description =   ADPCM  MSACM Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1995141393|0x0bae796a3b96f0e48e11e413d5747b4c|
    msacm.msg711=msg711.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg711.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9216, File modification date = 18/08/2004  12:00, File description =  Microsoft CCITT G.711 (A-Law / u-Law)  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1854403983|0xe065a3c00733efcf1c69d415a87a5068|
    msacm.msgsm610=msgsm32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msgsm32.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19968, File modification date = 18/08/2004  12:00, File description =    GSM 6.10  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1918754933|0xaa2760236496ff786daef9f14014d66d|
    msacm.trspch=tssoft32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tssoft32.acm" File version = 1.01, File size = 8192, File modification date = 18/08/2004  12:00, File description =    DSP Group TrueSpeech  MSACM V3.50, Product Name = DSP GROUP Windows NT TrueSpeech CODEC, Product version = 1.01, Company name = DSP GROUP, INC. ( DSP Group, Inc. 1993-1996) |-594300875|0xa0f3e55689268941af7e1c19c4d4b2f3|
    vidc.cvid=iccvid.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iccvid.dll" File version = 1.10.0.11, File size = 80384, File modification date = 18/08/2004  12:00, File description = Cinepak Codec, Product Name = Cinepak for Windows 32, Product version = 1.10.0.0, Company name = Radius Inc. (Copyright  1992-1995 Radius Inc., All Rights Reserved) |-1194508810|0x16e6c32c0d05cf16e6b0b73beb2bb970|
    vidc.I420=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.2180, File size = 294912, File modification date = 18/08/2004  12:00, File description =  Microsoft H.263 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-874728242|0xcf91400a97fff1fe16df098da85efff2|
    vidc.iv31=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 18/08/2004  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-236959363|0xb8fe8e877e14a78fb326309d4da91a0a|
    vidc.iv32=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 18/08/2004  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-236959363|0xb8fe8e877e14a78fb326309d4da91a0a|
    vidc.iv41=ir41_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir41_32.ax" File version = 4.51.16.03, File size = 848384, File modification date = 18/08/2004  12:00, File description = Intel Indeo Video 4.5, Product Name = Intel Indeo Video 4.5, Product version = 4.51.16.03, Company name = Intel Corporation (Copyright Intel Corporation 1994-1998) |-1887696561|0xb3af437917f7cc0b1ff4b52d7079cd17|
    vidc.iyuv=iyuv_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iyuv_32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 47616, File modification date = 18/08/2004  12:00, File description = Intel Indeo(R) Video YUV Codec, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  Intel, 1992-1997) |557179088|0xac314e854bb60b75e45d7a541705ed26|
    vidc.mrle=msrle32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msrle32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  12:00, File description =   Microsoft RLE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1062918381|0x83949714f70084e2dc25184215ed2d40|
    vidc.msvc=msvidc32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msvidc32.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 25600, File modification date = 18/08/2004  12:00, File description =   Microsoft Video 1, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1998454945|0xc3d62768e82a887f0b8bc3c45fb89acb|
    vidc.uyvy=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    vidc.yuy2=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    vidc.yvu9=tsbyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tsbyuv.dll" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 8192, File modification date = 18/08/2004  12:00, File description = Toshiba Video Codec, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation (Copyright (C) Toshiba Corp. 1997) |-1265855821|0x1622231279c17eab9c4d37e3d2aa5fea|
    vidc.yvyu=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  12:00, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    wavemapper=msacm32.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msacm32.drv" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
    msacm.msg723=msg723.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg723.acm" File version = 4.4.3400, File size = 118784, File modification date = 18/08/2004  12:00, File description = Microsoft G.723.1 CODEC  MSACM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-559110528|0x93091b2a7a3cf80b53046601717d1a2b|
    vidc.M263=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.2180, File size = 294912, File modification date = 18/08/2004  12:00, File description =  Microsoft H.263 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-874728242|0xcf91400a97fff1fe16df098da85efff2|
    vidc.M261=msh261.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh261.drv" File version = 5.1.2600.2180, File size = 188416, File modification date = 18/08/2004  12:00, File description =  Microsoft H.261 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-1117483247|0x01b48472269ebe39f1c52c4696d5ffbb|
    msacm.msaudio1=msaud32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msaud32.acm" File version = 8.00.00.4487, File size = 294912, File modification date = 18/08/2004  12:00, File description = Windows Media Audio, Product Name = Windows Media Audio, Product version = 8.00.00.4487, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1999-2001) |323994253|0xed90974278c0376327838d47adc4173f|
    msacm.sl_anet=sl_anet.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\sl_anet.acm" File version = 3.02, File size = 86016, File modification date = 18/08/2004  12:00, File description = Audio codec for MS ACM, Product Name = ACELP.net Audio Codec, Product version = 3.02, Company name = Sipro Lab Telecom Inc. (Copyright  Sipro Lab Telecom Inc. 1998-99) |271167773|0x39724c2030902f3211103e10399b5701|
    msacm.iac2=C:\WINDOWS\system32\iac25_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iac25_32.ax" File version = 2.05.53, File size = 199680, File modification date = 18/08/2004  12:00, File description = Indeo audio software, Product Name = Indeo audio software, Product version = 2.05.53, Company name = Intel Corporation (Copyright  Intel Corp. 1997) |-940912838|0x415fa906fbc834b06b3aec74bd2e75af|
    vidc.iv50=ir50_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir50_32.dll" File version = R.5.10.15.2.55, File size = 755200, File modification date = 18/08/2004  12:00, File description = Intel Indeo video 5.10, Product Name = Intel Indeo video 5.10, Product version = R.5.10.15.2.55, Company name = Intel Corporation (Copyright  1994-1998 Intel Corp.) |1329995150|0x7fdaa916871c74eda01463132902526b|
    msacm.l3acm=C:\WINDOWS\system32\l3codeca.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\l3codeca.acm" File version = 1, 9, 0, 0305, File size = 290816, File modification date = 03/04/2002  10:37, File description = MPEG Layer-3 Audio Codec for MSACM, Product Name = MPEG Layer-3 Audio Codec for MSACM, Product version = 1, 0, 0, 0, Company name = Fraunhofer Institut Integrierte Schaltungen IIS (Copyright  1996-1999 Fraunhofer Institut Integrierte Schaltungen IIS) |868474091|0x4b4fd61ebb404842eb5823a50a3a58a9|
    wave=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    midi=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    mixer=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    vidc.DIVX=divx.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\divx.dll" File version = 5.2.1.1328, File size = 2024448, File modification date = 14/10/2004  04:33, File description = DivX Codec for Windows, Product Name = DivX Codec for Windows, Product version = 5.2.1.1328, Company name = DivXNetworks, Inc. (Copyright (C) DivXNetworks 2001-2004) |-355593190|0xc456920355ff7622d79a083bc472fba8|
    vidc.XVID=xvidvfw.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\xvidvfw.dll" File version = (null), File size = 155648, File modification date = 20/12/2004  07:08, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1835511268|0x378cebe09bcc2ce8dd3736794099c402|
    vidc.3iv2=3ivxVfWCodec.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\3ivxvfwcodec.dll" File version = 4, 5, 1, 30, File size = 286720, File modification date = 27/01/2004  09:53, File description = 3ivx D4 4.5.1 Pro Video for Windows Codec, Product Name = 3ivx D4 4.5.1 Pro, Product version = 4, 5, 1, 30, Company name = 3ivx.com (Copyright (C) 3ivx.com, 1999-2004. All rights reserved.) |1994568048|0x541d4dede0112c2b1ae5e8c789b8ee56|
    VIDC.WMV3=wmv9vcm.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wmv9vcm.dll" File version = 9.0.1.0369, File size = 1415680, File modification date = 22/06/2003  22:44, File description = Windows Media Video 9 VCM, Product Name = Windows Media Video 9 VCM, Product version = 9.0.1.0369, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1356942539|0x8c8981584b4db033bfead7acc34c27af|
    VIDC.VP60=vp6vfw.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\vp6vfw.dll" File version = 6,4,2,0, File size = 438272, File modification date = 10/12/2004  06:03, File description = VP6 VIDEO FOR WINDOWS CODEC , Product Name = On2_VP6, Product version = 6,4,2,0, Company name = On2.com (Copyright  2000-3 ON2 Technologies ) |785933979|0xfac0d5b16efa7376ca81047490187d0d|
    VIDC.VP61=vp6vfw.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\vp6vfw.dll" File version = 6,4,2,0, File size = 438272, File modification date = 10/12/2004  06:03, File description = VP6 VIDEO FOR WINDOWS CODEC , Product Name = On2_VP6, Product version = 6,4,2,0, Company name = On2.com (Copyright  2000-3 ON2 Technologies ) |785933979|0xfac0d5b16efa7376ca81047490187d0d|
    VIDC.VP62=vp6vfw.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\vp6vfw.dll" File version = 6,4,2,0, File size = 438272, File modification date = 10/12/2004  06:03, File description = VP6 VIDEO FOR WINDOWS CODEC , Product Name = On2_VP6, Product version = 6,4,2,0, Company name = On2.com (Copyright  2000-3 ON2 Technologies ) |785933979|0xfac0d5b16efa7376ca81047490187d0d|
    VIDC.VP70=vp7vfw.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\vp7vfw.dll" File version = 7,0,8,0, File size = 626688, File modification date = 26/07/2005  10:58, File description = VP70 VIDEO FOR WINDOWS CODEC , Product Name = On2_VP70, Product version = 7,0,8,0, Company name = On2.com (Copyright  2000-3 ON2 Technologies ) |-592842624|0xcb4cc3d4ea7c94a35f1d81c3d750bc8d|
    VIDC.VP31=vp31vfw.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\vp31vfw.dll" File version = 3, 2, 6, 1 DT, File size = 446464, File modification date = 28/11/2002  21:06, File description = On2_VP3 Version 3.2.6.1 Decoder Tune, Product Name = On2_VP3, Product version = 3, 2, 6, 1 DT, Company name = On2.com (Copyright  2000 On2.com) |-2027622616|0xb4afbaee31d9a52fc3033014bd03cd03|
    vidc.MPG4=Mpg4c32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\mpg4c32.dll" File version = 4.1.00.3927, File size = 413760, File modification date = 19/08/2002  21:41, File description = Microsoft MPEG-4 Video Codec, Product Name = Microsoft MPEG-4 Video Codec, Product version = 4.1.00.3927, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-1999) |-110860919|0x016be824802f3869a7da2f2b6329b563|
    vidc.MP42=Mpg4c32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\mpg4c32.dll" File version = 4.1.00.3927, File size = 413760, File modification date = 19/08/2002  21:41, File description = Microsoft MPEG-4 Video Codec, Product Name = Microsoft MPEG-4 Video Codec, Product version = 4.1.00.3927, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-1999) |-110860919|0x016be824802f3869a7da2f2b6329b563|
    vidc.MP43=Mpg4c32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\mpg4c32.dll" File version = 4.1.00.3927, File size = 413760, File modification date = 19/08/2002  21:41, File description = Microsoft MPEG-4 Video Codec, Product Name = Microsoft MPEG-4 Video Codec, Product version = 4.1.00.3927, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1996-1999) |-110860919|0x016be824802f3869a7da2f2b6329b563|
    msacm.ac3acm=ac3acm.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ac3acm.acm" File version = 0, 90, 0, 0, File size = 53248, File modification date = 14/09/2005  22:04, File description = AC-3 ACM Decompressor, Product Name = AC-3 ACM Decompressor, Product version = 0, 90, 0, 0, Company name = fccHandler (Copyright  2005 by fccHandler) |1100648647|0x2c1758dffe92fe8d79fe96197f8282ca|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows
    AppInit_DLLs=C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows>
      "c:\program files\kaspersky lab\kaspersky internet security 7.0\adialhk.dll" File version = 7.0.0.125, File size = 91400, File modification date = 28/06/2007  09:51, File description = kldialhk, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |-1826851188|0x33fcc52971c12b6edced3e7f1e717e7e|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
    PostBootReminder={7849596a-48ea-486e-8937-a2a3009f31a9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
    CDBurn={fbeb8a05-beee-4442-804e-409d6c4515e9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
    WebCheck={E6FB5E20-DE35-11CF-9C87-00AA005127ED} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    SysTray={35CEC8A3-2BE6-11D2-8773-92E220524153} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\stobject.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 122368, File modification date = 18/08/2004  12:00, File description =    Systray, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |21103765|0xbf777cb6f3c4a86d811505582769010b|
    WPDShServiceObj={AAA288BA-9A4C-45B0-95D7-94D524869DB5} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\wpdshserviceobj.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 133632, File modification date = 18/10/2006  17:47, File description = Windows Portable Device Shell Service Object, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1538728806|0x045e228f71c31901084b64be59093499|
  *\Control Panel\Desktop
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\.DEFAULT\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  12:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-19\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  12:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-20\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  12:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\S-1-5-18\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  12:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
    {AEB6717E-7E19-11d0-97EE-00C04FD91972}
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
  HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
    {00022613-0000-0000-C000-000000000046}
      "c:\windows\system32\mmsys.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 620032, File modification date = 18/08/2004  12:00, File description =   -  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1029054611|0x234237964c059728b21a334ff0d55fbd|
    {176d6597-26d3-11d1-b350-080036a75b03}
      "c:\windows\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {1F2E5C40-9550-11CE-99D2-00AA006E086C}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1280505977|0x128f435bbafba67a3f37a0ee087a0184|
    {3EA48300-8CF6-101B-84FB-666CCB9BCD32}
      "c:\windows\system32\docprop.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 46080, File modification date = 18/08/2004  12:00, File description =   OLE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-797951335|0x992fb236cfe085aeb93d6e8372c9eee9|
    {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
    {41E300E0-78B6-11ce-849B-444553540000}
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 386560, File modification date = 18/08/2004  12:00, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1148789537|0xe034619ae8128d70b09d51c5a9655ea2|
    {42071712-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskadp.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |-879404280|0x1ef3747e65cf364f870b891a5bf139aa|
    {42071713-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskmon.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |1757095939|0x6070a9b3048a175a6b75e6e243186b2c|
    {4E40F770-369C-11d0-8922-00A024AB2DBB}
      "c:\windows\system32\dssec.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51712, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |326965962|0x44a2a3005d504834935896e96016e66d|
    {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
      "c:\windows\system32\slayerxp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  12:00, File description =     "", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-54810607|0xf1b3e5fd6e8a09ec3ba37089cc861caf|
    {56117100-C0CD-101B-81E2-00AA004AE837}
      "c:\windows\system32\shscrap.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27648, File modification date = 18/08/2004  12:00, File description =  -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-26443466|0xcc6aef6ae92cc25ebe9e11a0100cabdf|
    {59099400-57FF-11CE-BD94-0020AF85B590}
      "c:\windows\system32\diskcopy.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 1501696, File modification date = 18/08/2004  12:00, File description = Windows DiskCopy, Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |-1768062996|0xa525c37757a1da8ae5acb10feec1ac28|
    {59be4990-f85c-11ce-aff7-00aa003ca9f6}
      "c:\windows\system32\ntlanui2.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 14848, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1755583219|0xf6fa816cbe46749b8d5c875aa0a0226a|
    {5DB2625A-54DF-11D0-B6C4-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {675F097E-4C4D-11D0-B6C1-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {77597368-7b15-11d0-a0c2-080036af3f03}
      "c:\windows\system32\printui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 565248, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-486691064|0x44fa764e4bea139f5b1b2ac5686b6b65|
    {7988B573-EC89-11cf-9C00-00AA00A14F56}
      "c:\windows\system32\dskquoui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 146432, File modification date = 18/08/2004  12:00, File description =  DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-1193260270|0xf48c6edf98e56bdee91f4d523f24d5c3|
    {85BBD920-42A0-1069-A2E4-08002B30309D}
      "c:\windows\system32\syncui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 190464, File modification date = 18/08/2004  12:00, File description =  Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |224525855|0xb5aa35d0c14683a66b283f91441c5163|
    {88895560-9AA2-1069-930E-00AA0030EBC8}
      "c:\windows\system32\hticons.dll" File version = 5.1.2600.0, File size = 44544, File modification date = 18/08/2004  12:00, File description = HyperTerminal Applet Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Hilgraeve, Inc. (Copyright  Hilgraeve, Inc. 2001) |-554862870|0x2fb8d5af59fadc2eaea0ee56cc8fded7|
    {BD84B380-8CA2-1069-AB1D-08000948F534}
      "c:\windows\system32\fontext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382976, File modification date = 18/08/2004  12:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1630719410|0xc53427e90013d85c6b2559e79f2748b1|
    {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {F37C5810-4D3F-11d0-B4BF-00AA00BBB723}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1280505977|0x128f435bbafba67a3f37a0ee087a0184|
    {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  12:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
    {f92e8c40-3d33-11d2-b1aa-080036a75b03}
      "c:\windows\system32\deskperf.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 18432, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-1306393081|0xd805d2a6f2fcf780a3c2c21e9b1907d1|
    {7444C717-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 54272, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-1829071292|0x7ccca7c0f5636d3a65cde91ac9fd8e9a|
    {7444C719-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 54272, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-1829071292|0x7ccca7c0f5636d3a65cde91ac9fd8e9a|
    {7007ACC7-3202-11D1-AAD2-00805FC1270E}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
    {992CFFA0-F557-101A-88EC-00DD010CCC48}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
    {E211B736-43FD-11D1-9EFB-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {905667aa-acd6-11d2-8080-00805f6596d2}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {3F953603-1008-4f6e-A73A-04AAC7A992F1}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {83bbcbf3-b28a-4919-a5aa-73027445d672}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  12:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {F0152790-D56E-4445-850E-4F3117DB740C}
      "c:\windows\system32\remotepg.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60928, File modification date = 18/08/2004  12:00, File description = CPL-  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1054669753|0x3900fdcd2de579aeca9fd731b6faa716|
    {60254CA5-953B-11CF-8C96-00AA00B8708C}
      "c:\windows\system32\wshext.dll" File version = 5.6.0.8820, File size = 65536, File modification date = 18/08/2004  12:00, File description = Microsoft (r) Shell Extension for Windows Script Host, Product Name = Microsoft (r) Windows Script Host, Product version = 5.6.0.8820, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 2002) |-237520076|0x1c905d00411c5df8f9db4bb2a295da5c|
    {2206CDB2-19C1-11D1-89E0-00C04FD7A829}
      "c:\program files\common files\system\ole db\oledb32.dll" File version = 2.81.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 487424, File modification date = 18/08/2004  12:00, File description = Microsoft Data Access - OLE DB Core Services, Product Name = Microsoft Data Access Components, Product version = 2.81.1117.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1082205812|0x6bcbbfe858ecf0ede5aa6abc95ce3ba7|
    {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {D6277990-4C6A-11CF-8D87-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {5F327514-6C5E-4d60-8F16-D07FA08A78ED}
      "c:\windows\system32\wuaucpl.cpl" File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 216408, File modification date = 30/07/2007  15:19, File description = Automatic Updates Control Panel, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1072536858|0xd7fa9a9750403cc68dc209cde7c50d7a|
    {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {D20EA4E1-3957-11d2-A40B-0C5020524152}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {D20EA4E1-3957-11d2-A40B-0C5020524153}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {596AB062-B4D2-4215-9F74-E9109B0A8153}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  12:00, File description = :  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name = Microsoft Corporation (  .   .) |-1079143813|0xc43dece53297216c81f1926fa7714192|
    {9DB7A13C-F208-4981-8353-73CC61AE2783}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  12:00, File description = :  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name = Microsoft Corporation (  .   .) |-1079143813|0xc43dece53297216c81f1926fa7714192|
    {875CB1A1-0F29-45de-A1AE-CFB4950D0B78}
      "c:\windows\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {40C3D757-D6E4-4b49-BB41-0E5BBEA28817}
      "c:\windows\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {E4B29F9D-D390-480b-92FD-7DDB47101D71}
      "c:\windows\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {87D62D94-71B3-4b9a-9489-5FE6850DC73E}
      "c:\windows\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {A6FD9E45-6E44-43f9-8644-08598F5A74D9}
      "c:\windows\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {c5a40261-cd64-4ccf-84cb-c394da41d590}
      "c:\windows\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  12:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {5E6AB780-7743-11CF-A12B-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {22BF0C20-6DA7-11D0-B373-00A0C9034938}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {91EA3F8B-C99B-11d0-9815-00C04FD91972}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {6413BA2C-B461-11d1-A18A-080036B11A03}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {F61FFEC1-754F-11d0-80CA-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {7BA4C742-9E81-11CF-99D3-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {30D02401-6A81-11d0-8274-00C04FD5AE38}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {169A0691-8DF9-11d1-A1C4-00C04FD75D13}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {07798131-AF23-11d1-9111-00A0C98BA67D}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {AF4F6510-F982-11d0-8595-00AA004CD6D8}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {01E04581-4EEE-11d0-BFE9-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {A08C11D2-A228-11d0-825B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {00BB2763-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {7376D660-C583-11d0-A3A5-00C04FD706EC}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {6756A641-DE71-11d0-831B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {7e653215-fa25-46bd-a339-34a2790f3cb7}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {acf35015-526e-4230-9596-becbe19f0ac9}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {00BB2764-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {03C036F1-A186-11D0-824A-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {00BB2765-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {ECD4FC4E-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {3CCF8A41-5C85-11d0-9796-00AA00B90ADF}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {ECD4FC4C-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {ECD4FC4D-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {DD313E04-FEFF-11d1-8ECD-0000F87A470C}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {EFA24E61-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {0A89A860-D7B1-11CE-8350-444553540000}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {E7E4BC40-E76A-11CE-A9BB-00AA004AE837}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {A5E46E3A-8849-11D1-9D8C-00C04FC99D61}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {FBF23B40-E3F0-101B-8488-00AA003E56F8}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {3C374A40-BAE4-11CF-BF7D-00AA006946EE}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {FF393560-C2A7-11CF-BFF4-444553540000}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {7BD29E00-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {7BD29E01-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {67EA19A0-CCEF-11d0-8024-00C04FD75D13}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {131A6951-7F78-11D0-A979-00C04FD705A2}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {9461b922-3c5a-11d2-bf8b-00c04fb93661}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {3DC7A020-0ACD-11CF-A9BB-00AA004AE837}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {871C5380-42A0-1069-A2EA-08002B30309D}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {EFA24E64-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 55296, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-1729376145|0xbab3e9b7d02cbed589d26ae06dc78384|
    {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 55296, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-1729376145|0xbab3e9b7d02cbed589d26ae06dc78384|
    {88C6C381-2E85-11D0-94DE-444553540000}
      "c:\windows\system32\occache.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 102400, File modification date = 20/08/2007  10:01, File description = Object Control Viewer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |948350280|0x4a6c6d1a25337de76270b1fee79e7439|
    {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {F5175861-2688-11d0-9C5E-00AA00A45957}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {08165EA0-E946-11CF-9C87-00AA005127ED}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {7D559C10-9FE9-11d0-93F7-00AA0059CE02}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {E6CC6978-6B6E-11D0-BECA-00C04FD940BE}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {D8BD2030-6FC9-11D0-864F-00AA006809D9}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}
      "c:\windows\system32\webcheck.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 232960, File modification date = 20/08/2007  10:01, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |23076685|0x1b46dd4419cc7e66faf6830a7749a4fa|
    {352EC2B7-8B9A-11D1-B8AE-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {0B124F8F-91F0-11D1-B8B5-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {CFCCC7A0-A282-11D1-9082-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {e84fda7c-1d6a-45f6-b725-cb260c236066}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {00E7B358-F65B-4dcf-83DF-CD026B94BFD4}
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  12:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {3F30C968-480A-4C6C-862D-EFC0897BB84B}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {EAB841A0-9550-11cf-8C16-00805F1408F3}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {eb9b1153-3b57-4e68-959a-a3266bc3d7fe}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {CC6EEFFB-43F6-46c5-9619-51D571967F7D}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {add36aa8-751a-4579-a266-d66f5202ccbb}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {6b33163c-76a5-4b6c-bf21-45de9cd503a1}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {58f1f272-9240-4f51-b6d4-fd63d1618591}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  12:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  12:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {BD472F60-27FA-11cf-B8B4-444553540000}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  12:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {888DCA60-FC0A-11CF-8F0F-00C04FD7D062}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  12:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {692F0339-CBAA-47e6-B5B5-3B84DB604E87}
      "c:\windows\system32\extmgr.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 132608, File modification date = 20/08/2007  10:01, File description = Extensions Manager, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2098656423|0x11160dcbb7abc0f984c1605df9620085|
    {63da6ec0-2e98-11cf-8d82-444553540000}
      "c:\windows\system32\msieftp.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 249344, File modification date = 18/08/2004  12:00, File description =   FTP Microsoft Internet Explorer FTP, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1626139983|0xe989f6f58a3b0677ac0107c2eee449c4|
    {883373C3-BF89-11D1-BE35-080036B11A03}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {A9CF0EAE-901A-4739-A481-E35B73E47F6D}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {8EE97210-FD1F-4B19-91DA-67914005F020}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {0EEA25CC-4362-4A12-850B-86EE61B0D3EB}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {6A205B57-2567-4A2C-B881-F787FAB579A3}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  12:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {8A23E65E-31C2-11d0-891C-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {9E51E0D0-6E0F-11d2-9601-00C04FA31A86}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {163FDC20-2ABC-11d0-88F0-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {F020E586-5264-11d1-A532-0000F8757D7E}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {0D45D530-764B-11d0-A1CA-00AA00C16E65}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113152, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1530730649|0x03f505f2bac60f808b0525b847b21bea|
    {62AE1F9A-126A-11D0-A14B-0800361B1103}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113152, File modification date = 18/08/2004  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1530730649|0x03f505f2bac60f808b0525b847b21bea|
    {ECF03A33-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  12:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {ECF03A32-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  12:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {4a7ded0a-ad25-11d0-98a8-0800361b1103}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  12:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {750fdf0e-2a26-11d1-a3ea-080036587f03}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {10CFC467-4392-11d2-8DB4-00C04FA31A66}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {143A62C8-C33B-11D1-84FE-00C04FA34A14}
      "c:\windows\msagent\agentpsh.dll" File version = 2.00.0.3422, File size = 24064, File modification date = 18/08/2004  12:00, File description = Microsoft Agent Property Sheet Handler, Product Name = Microsoft Agent Property Sheet Handler, Product version = 2.00.0.3422, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1997-98) |-1739972169|0x77bd91b6b34a661789c57f873cfacebe|
    {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}
      "c:\windows\system32\dfsshlex.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 28672, File modification date = 18/08/2004  12:00, File description =      DFS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1748421650|0xe2651ee9dd124f91a8ba547d4a09f33a|
    {60fd46de-f830-4894-a628-6fa81bc0190d}
      "C:\WINDOWS\system32\photowiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172032, File modification date = 18/08/2004  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-988848672|0x8a2e3ff220444dce8005bd42c896ff99|
    {7A80E4A8-8005-11D2-BCF8-00C04F72C717}
      "C:\WINDOWS\system32\mmcshext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 50688, File modification date = 18/08/2004  12:00, File description = MMC Shell Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1016997120|0x3f74336f9999d7a303ce8a31fa33118a|
    {0CD7A5C0-9F37-11CE-AE65-08002B2E1262}
      "c:\windows\system32\cabview.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 84992, File modification date = 18/08/2004  12:00, File description =    CAB-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1306264757|0xbfe9fba0aea4f8f67e4d3c3fee5eece2|
    {32714800-2E5F-11d0-8B85-00AA0044F941}
      "c:\program files\outlook express\wabfind.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  12:00, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |837743628|0x1a694b3159d8a4bba2f1cfb8222c5302|
    {8DD448E6-C188-4aed-AF92-44956194EB1F}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 02/11/2006  19:06, File description =    Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1631569815|0x5fa06ecd1c62625d6e5f3d3a09486d5c|
    {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 02/11/2006  19:06, File description =    Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1631569815|0x5fa06ecd1c62625d6e5f3d3a09486d5c|
    {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}
      "c:\windows\system32\wmpshell.dll" File version = 11.0.5721.5145 (WMP_11.061018-2006), File size = 99840, File modification date = 02/11/2006  19:06, File description =    Windows Media, Product Name =   Microsoft Windows, Product version = 11.0.5721.5145, Company name = Microsoft Corporation (   (Microsoft Corp.).   .) |1631569815|0x5fa06ecd1c62625d6e5f3d3a09486d5c|
    {21569614-B795-46b1-85F4-E737A8DC09AD}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}
      "c:\program files\winrar\rarext.dll" File version = (null), File size = 128512, File modification date = 10/03/2007  23:07, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1633626630|0x690add5aba755cbe2ea8dc1e73c380ac|
    {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
      "c:\program files\common files\microsoft shared\web folders\msonsext.dll" File version = 11.0.5510.0, File size = 1292872, File modification date = 02/09/2007  14:54, File description = Microsoft Web Folders, Product Name = SharePoint Portal Server, Product version = 11.0.5510.0, Company name = Microsoft Corporation (Copyright (c) 2001-2003 Microsoft Corporation.  All rights reserved.) |1833844665|0xbdbf48d13c5343cced93e675effdb72c|
    {00020D75-0000-0000-C000-000000000046}
      "c:\program files\microsoft office\office11\mlshext.dll" File version = 11.0.6550, File size = 30440, File modification date = 19/05/2005  01:45, File description = Microsoft Shell Extension Library, Product Name = Microsoft Office Outlook, Product version = 11.0.6550, Company name = Microsoft Corporation (   (Microsoft Corporation), 1995-2003.    .) |-1772967482|0x0d720c6734c27872c76e3aadc9770aca|
    {0006F045-0000-0000-C000-000000000046}
      "c:\program files\microsoft office\office11\olkfstub.dll" File version = 11.0.5510, File size = 232536, File modification date = 02/09/2007  14:55, File description = Outlook Shell Hook for Start/Find, Product Name = Microsoft Office Outlook, Product version = 11.0.5510, Company name = Microsoft Corporation (   (Microsoft Corporation), 1995-2003.   .) |1011963029|0xe44bfc3cb76734ace6022a5973a2c6d6|
    {42042206-2D85-11D3-8CFF-005004838597}
      "c:\program files\microsoft office\office11\msohev.dll" File version = 11.0.5510, File size = 67128, File modification date = 02/09/2007  14:55, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
    {B327765E-D724-4347-8B16-78AE18552FC3}
      "c:\program files\common files\ahead\lib\nerodigitalext.dll" File version = 2, 0, 0, 8, File size = 1802240, File modification date = 15/11/2005  08:07, File description = Nero Digital Shell Extension, Product Name = Nero Digital Tools, Product version = 2, 0, 0, 8, Company name = Nero AG (Copyright (c) 1995-2005 Nero AG and its licensors.) |1517787684|0x2891b62b2a8181d827add753dccdce7f|
    {7F1CF152-04F8-453A-B34C-E609530A9DC8}
      "c:\program files\common files\ahead\lib\nerodigitalext.dll" File version = 2, 0, 0, 8, File size = 1802240, File modification date = 15/11/2005  08:07, File description = Nero Digital Shell Extension, Product Name = Nero Digital Tools, Product version = 2, 0, 0, 8, Company name = Nero AG (Copyright (c) 1995-2005 Nero AG and its licensors.) |1517787684|0x2891b62b2a8181d827add753dccdce7f|
    {EE75AC21-B24F-11d3-BA80-00C0CA16AA37}
      "c:\program files\mobile phone manager\bin\phoneexplorer.dll" File version = 4.05.44.410, File size = 1417216, File modification date = 03/11/2005  10:37, File description = PhoneExplorer Module, Product Name = PhoneExplorer Module, Product version = 4.05.44.41.0, Company name =  (Copyright  2000-2005BenQ Mobile GmbH & Co. OHG) |1624624588|0x35ab771fed1571b661d8c9d4e9c9af68|
    {EE75AC22-B24F-11d3-BA80-00C0CA16AA37}
      "c:\program files\mobile phone manager\bin\phoneexplorer.dll" File version = 4.05.44.410, File size = 1417216, File modification date = 03/11/2005  10:37, File description = PhoneExplorer Module, Product Name = PhoneExplorer Module, Product version = 4.05.44.41.0, Company name =  (Copyright  2000-2005BenQ Mobile GmbH & Co. OHG) |1624624588|0x35ab771fed1571b661d8c9d4e9c9af68|
    {EE75AC23-B24F-11d3-BA80-00C0CA16AA37}
      "c:\program files\mobile phone manager\bin\phoneexplorer.dll" File version = 4.05.44.410, File size = 1417216, File modification date = 03/11/2005  10:37, File description = PhoneExplorer Module, Product Name = PhoneExplorer Module, Product version = 4.05.44.41.0, Company name =  (Copyright  2000-2005BenQ Mobile GmbH & Co. OHG) |1624624588|0x35ab771fed1571b661d8c9d4e9c9af68|
    {611AD258-4138-4348-A534-9856FA6BA398}
      "c:\program files\stardock\object desktop\iconpackager\shellext.dll" File version = 3.10.00, File size = 249856, File modification date = 05/09/2007  12:06, File description = IconPackager Shell Extension, Product Name = IconPackager for ObjectDesktop, Product version = 3.10.00, Company name = Stardock.net, Inc (Brian Harper,  1997-2005 Stardock.net, Inc) |-1075554146|0x04846cbd7264ac900981e9e7ff8b6afb|
    {640167b4-59b0-47a6-b335-a6b3c0695aea}
      "C:\WINDOWS\system32\audiodev.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 276992, File modification date = 18/10/2006  17:47, File description = Portable Media Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation. All rights reserved.) |-656474916|0x4c48f1b30a82583caee0da02dd7259ee|
    {35786D3C-B075-49b9-88DD-029876E11C01}
      "C:\WINDOWS\system32\wpdshext.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 2603008, File modification date = 18/10/2006  17:47, File description = Portable Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675457515|0x81d2a27c916c7830743e4afa454099f7|
    {D6791A63-E7E2-4fee-BF52-5DED8E86E9B8}
      "C:\WINDOWS\system32\wpdshext.dll" File version = 5.2.5721.5145 (WMP_11.061018-2006), File size = 2603008, File modification date = 18/10/2006  17:47, File description = Portable Devices Shell Extension, Product Name = Microsoft Windows Operating System, Product version = 5.2.5721.5145, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675457515|0x81d2a27c916c7830743e4afa454099f7|
    {1D2680C9-0E2A-469d-B787-065558BC7D43}
      "c:\windows\system32\mscoree.dll" File version = 2.0.50727.832 (QFE.050727-8300), File size = 271360, File modification date = 12/04/2007  23:21, File description = Microsoft .NET Runtime Execution Engine, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.832, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-2096544773|0xe3853c85797bc49167524275b9f88fc3|
    {e82a2d71-5b2f-43a0-97b8-81be15854de8}
      "c:\windows\system32\dfshim.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 83456, File modification date = 23/09/2005  03:28, File description = Application Deployment Support Library, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1760645834|0xb3511383c8be3a8c5b88a78971fc1141|
    {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}
      "c:\windows\system32\dfshim.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 83456, File modification date = 23/09/2005  03:28, File description = Application Deployment Support Library, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1760645834|0xb3511383c8be3a8c5b88a78971fc1141|
    {07C45BB1-4A8C-4642-A1F5-237E7215FF66}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {1C1EDB47-CE22-4bbb-B608-77B48F83C823}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {205D7A97-F16D-4691-86EF-F3075DCCA57D}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {3028902F-6374-48b2-8DC6-9725E775B926}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {43886CD5-6529-41c4-A707-7B3C92C05E68}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {44C76ECD-F7FA-411c-9929-1B77BA77F524}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {4B78D326-D922-44f9-AF2A-07805C2A3560}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {6038EF75-ABFC-4e59-AB6F-12D397F6568D}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {6B4ECC4F-16D1-4474-94AB-5A763F2A54AE}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {6CF48EF8-44CD-45d2-8832-A16EA016311B}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {73CFD649-CD48-4fd8-A272-2070EA56526B}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {98FF6D4B-6387-4b0a-8FBD-C5C4BB17B4F8}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {9A096BB5-9DC3-4D1C-8526-C3CBF991EA4E}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {9D958C62-3954-4b44-8FAB-C4670C1DB4C2}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {B31C5FAE-961F-415b-BAF0-E697A5178B94}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {BC476F4C-D9D7-4100-8D4E-E043F6DEC409}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {BFAD62EE-9D54-4b2a-BF3B-76F90697BD2A}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {E6EE9AAC-F76B-4947-8260-A9F136138E11}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {F2CF5485-4E02-4f68-819C-B92DE9277049}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {F83DAC1C-9BB9-4f2b-B619-09819DA81B0E}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {FAC3CBF6-8697-43d0-BAB9-DCD1FCE19D75}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {FDE7673D-2E19-4145-8376-BBD58C4BC7BA}
      "c:\windows\system32\ieframe.dll" File version = 7.00.6000.16544 (vista_gdr.070814-1500), File size = 6058496, File modification date = 20/08/2007  10:01, File description = Internet Explorer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16544, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-342909659|0xe170655eb4e85b482f9f2c5bf659dbc4|
    {45670FA8-ED97-4F44-BC93-305082590BFB}
      "C:\WINDOWS\system32\xpsshhdr.dll" File version = 6.0.6000.16438 (winmain(wmbla).070123-1305), File size = 583504, File modification date = 23/03/2007  03:07, File description = Package Document Shell Extension Handler, Product Name = Microsoft Windows Operating System, Product version = 6.0.6000.16438, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-452790228|0x25c1b17a3fd3e551e52c059acd4b4a69|
    {44121072-A222-48f2-A58A-6D9AD51EBBE9}
      "C:\WINDOWS\system32\xpsshhdr.dll" File version = 6.0.6000.16438 (winmain(wmbla).070123-1305), File size = 583504, File modification date = 23/03/2007  03:07, File description = Package Document Shell Extension Handler, Product Name = Microsoft Windows Operating System, Product version = 6.0.6000.16438, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-452790228|0x25c1b17a3fd3e551e52c059acd4b4a69|
    {85E0B171-04FA-11D1-B7DA-00A0C90348D6}
      "c:\program files\kaspersky lab\kaspersky internet security 7.0\scieplgn.dll" File version = 7.0.0.125, File size = 222472, File modification date = 28/06/2007  09:51, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1855505460|0xa89f8fce1ffedafd910b26783db1cc5a|
  HKLM\Software\Microsoft\Internet Explorer\Toolbar
    {09900DE8-1DCA-443F-9243-26FF581438AF}
      "c:\program files\mail.ru\sputnik\mailrusputnik.dll" File version = 1, 8, 0, 17, File size = 366080, File modification date = 15/10/2007  15:25, File description = MailRuSputnik Module, Product Name = MailRuSputnik Module, Product version = 1, 8, 0, 17, Company name = @Mail.Ru (Copyright  2005 - 2007) |1595289613|0x55d00f934516b45c22f1934ffe4cf95b|
    {468CD8A9-7C25-45FA-969E-3D925C689DC4}
      "c:\program files\rambler assistant\ramblertoolbaru2970.dll" File version = 2, 9, 7, 0, File size = 630784, File modification date = 12/09/2006  07:42, File description = Rambler Assistant Module, Product Name = Rambler Assistant, Product version = 2, 9, 7, 0, Company name = Rambler.ru (Copyright 2006) |-1421337585|0x08c86f2d74954995ba43dbc2b9a4448d|
  *\Software\Microsoft\Internet Explorer\MenuExt\*
    DEFAULT=res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 <HKEY_USERS\S-1-5-21-484763869-796845957-682003330-1004\Software\Microsoft\Internet Explorer\MenuExt\&  Microsoft Excel>
      "c:\program files\microsoft office\office11\excel.exe" File version = 11.0.6560, File size = 10095808, File modification date = 26/05/2005  21:06, File description = Microsoft Office Excel, Product Name = Microsoft Office 2003, Product version = 11.0.6560, Company name = Microsoft Corporation (Copyright  1985-2003 Microsoft Corporation.  All rights reserved.) |1687475212|0xa2557e5e3d8474b5fa2abafe8e025e4e|
    DEFAULT=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm <HKEY_USERS\S-1-5-21-484763869-796845957-682003330-1004\Software\Microsoft\Internet Explorer\MenuExt\  ->
      "c:\program files\kaspersky lab\kaspersky internet security 7.0\ie_banner_deny.htm" File version = (null), File size = 1317, File modification date = 28/06/2007  09:40, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-781693994|0x6548e1ecbe26b1908365fc77daf5d76b|
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\*
    Debugger=ntsd -d <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path>
      "c:\windows\system32\ntsd.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 31744, File modification date = 18/08/2004  12:00, File description = Symbolic Debugger for Windows 2000, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1899670254|0x5abd005f6749e724f88acc5d96efb921|
  *\SOFTWARE\Microsoft\Internet Explorer\Extensions\*
    HotIcon=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll,101 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky internet security 7.0\scieplgn.dll" File version = 7.0.0.125, File size = 222472, File modification date = 28/06/2007  09:51, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1855505460|0xa89f8fce1ffedafd910b26783db1cc5a|
    Icon=C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll,102 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky internet security 7.0\scieplgn.dll" File version = 7.0.0.125, File size = 222472, File modification date = 28/06/2007  09:51, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1855505460|0xa89f8fce1ffedafd910b26783db1cc5a|
    CLSID={E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    BandCLSID={85E0B171-04FA-11D1-B7DA-00A0C90348D6} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky internet security 7.0\scieplgn.dll" File version = 7.0.0.125, File size = 222472, File modification date = 28/06/2007  09:51, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 7.0.0.125, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2007.) |1855505460|0xa89f8fce1ffedafd910b26783db1cc5a|
    clsid={1FBA04EE-3024-11D2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{7558B7E5-7B26-4201-BEDB-00D5FF534523}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    Exec=C:\Program Files\Mail.Ru\Agent\magent.exe <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{7558B7E5-7B26-4201-BEDB-00D5FF534523}>
      "c:\program files\mail.ru\agent\magent.exe" File version = 4, 10, 1952, 0, File size = 4855288, File modification date = 15/10/2007  15:32, File description = Mail.Ru , Product Name = Mail.Ru , Product version = 4, 10, 1952, 0, Company name = Mail.Ru (Copyright  2001-2007) |-822933055|0x02128fd92746fdcdc6dc965342d2d9fe|
    HotIcon=C:\Program Files\Mail.Ru\Agent\magent.exe,2003 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{7558B7E5-7B26-4201-BEDB-00D5FF534523}>
      "c:\program files\mail.ru\agent\magent.exe" File version = 4, 10, 1952, 0, File size = 4855288, File modification date = 15/10/2007  15:32, File description = Mail.Ru , Product Name = Mail.Ru , Product version = 4, 10, 1952, 0, Company name = Mail.Ru (Copyright  2001-2007) |-822933055|0x02128fd92746fdcdc6dc965342d2d9fe|
    BandCLSID={FF059E31-CC5A-4E2E-BF3B-96E929D65503} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refiebar.dll" File version = 11.0.5510, File size = 40512, File modification date = 02/09/2007  14:49, File description = Allows you to use the Research Library and its collection of information services from Microsoft Internet Explorer, Product Name = Research Library Explorer Bar, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |-1898593064|0x0fa0bdaa2ff4ed7e5a2fa2ec1b536712|
    Icon=C:\PROGRA~1\MICROS~3\OFFICE11\REFBAR.ICO <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refbar.ico" File version = (null), File size = 5974, File modification date = 02/09/2007  14:49, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |70333190|0x6f9f10679b6f5928d1dbd0bbaebee0c6|
    HotIcon=C:\PROGRA~1\MICROS~3\OFFICE11\REFBARH.ICO <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refbarh.ico" File version = (null), File size = 5974, File modification date = 02/09/2007  14:49, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |70333190|0x6f9f10679b6f5928d1dbd0bbaebee0c6|
    CLSID={E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    CLSID={1FBA04EE-3024-11d2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    Exec=%windir%\Network Diagnostic\xpnetdiag.exe <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{e2e2dd38-d088-4134-82b7-f2ba38496583}>
      "C:\WINDOWS\network diagnostic\xpnetdiag.exe" File version = 5.1.2600.3012 (xpsp.061010-0355), File size = 557568, File modification date = 10/10/2006  12:44, File description = Network Diagnostic for Windows XP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3012, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-237636484|0xcebed017c4965fc4407ccd986ae0a528|
    CLSID={1FBA04EE-3024-11D2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1498112, File modification date = 22/08/2007  12:57, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1100211884|0xb4d2ae4f0c340a2f8fdc06cfab52aa5c|
    Exec=C:\Program Files\Messenger\msmsgs.exe <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
    HotIcon=C:\Program Files\Messenger\msmsgs.exe,302 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
    Icon=C:\Program Files\Messenger\msmsgs.exe,301 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
  HKLM\SOFTWARE\Microsoft\Code Store Database\Distribution Units\*\Contains\Files
    C:\WINDOWS\system32\unicows.dll
      "c:\windows\system32\unicows.dll" File version = 1.0.4018.0, File size = 245408, File modification date = 21/04/2003  11:09, File description = Microsoft Layer for Unicode on Win9x Systems (MSLU), Product Name = Microsoft (R) Windows (R) 95, Windows (R) 98, and Windows (R) Millennium Operating Systems, Product version = 1.0.4018.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1774266432|0xe1102cedf0c818984c2aca2a666d4c5f|
    C:\WINDOWS\Downloaded Program Files\ImageUploader4.ocx
      "c:\windows\downloaded program files\imageuploader4.ocx" File version = 4, 0, 63, 0, File size = 2537272, File modification date = 02/11/2006  15:05, File description = Image Uploader Control Library, Product Name = Image Uploader, Product version = 4, 0, 63, 0, Company name = Aurigma, Inc. (Copyright  2006 Aurigma, Inc.) |1254741966|0xe0f0be948a67afcea5c631ad9af7447f|
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_qfe.070821-1250), File size = 1022976, File modification date = 22/08/2007  12:57, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |286400881|0x6eacd3843f742112a9f87196684f4402|
TASK MANAGER
   "c:\documents" File version = (null), File size = 23132, File modification date = 30/10/2007  13:06, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |592919248|0xf60452069409549e8f4257679e8161d2|
   "c:\windows\system32\msfeedssync.exe" File version = 7.00.5730.11 (winmain(wmbla).061017-1135), File size = 12288, File modification date = 17/10/2006  07:58, File description = Microsoft Feeds Synchronization, Product Name = Windows Internet Explorer, Product version = 7.00.5730.11, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1716513336|0x330e0015b751fafb53b6f73d30a4bbf1|
LSP
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\* <value = PackedCatalogItem>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\imon.dll" File version = 2, 70, 39 , File size = 298104, File modification date = 03/11/2007  13:48, File description = NOD32 IMON - Internet scanning support, Product Name = NOD32 Antivirus System, Product version = 2, 70, 39 , Company name = Eset  (Copyright (c) 1992-2005 Eset ) |702131284|0x17038d8ff48563a02be04086f725e757|
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\* <value = LibraryPath>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  12:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  12:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
HOSTS
  C:\WINDOWS\System32\drivers\etc\hosts
      127.0.0.1   localhost
STARTUP MENU
  C:\Documents and Settings\All Users\ \\
      "C:\Documents and Settings\All Users\ \\\desktop.ini" File version = (null), File size = 84, File modification date = 02/09/2007  12:30, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
      "C:\Documents and Settings\All Users\ \\\Utility Tray.lnk" File version = (null), File size = 1513, File modification date = 02/09/2007  12:46, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1693777935|0x707d8721683fc579e19b9de81bf084e8|
        "c:\windows\system32\sistray.exe" File version = 0.0.0.3670, File size = 266240, File modification date = 08/04/2005  10:17, File description = SiS Compatible Super VGA Tray Application, Product Name = SiS (R) Compatible Super VGA SiSTray application, Product version = 0.0.0.3670, Company name = Silicon Integrated Systems Corporation (Copyright (C) Silicon Integrated Systems Corp. 1998-2005) |1222378816|0xdca1fe63d4f9e35006548b16738dc12f|
  C:\Documents and Settings\ \ \\
      "C:\Documents and Settings\ \ \\\desktop.ini" File version = (null), File size = 84, File modification date = 02/09/2007  12:30, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
