GetSystemInfo version 3.0.0.5:
------------------------------
HARDWARE Information:
---------------------
Processor:
		Intel(R) Pentium(R) 4 CPU 3.00GHz 3042 MHz

Processors number:
		1

BIOS:
		AMIINT - 10 Version 1.00 BIOS Date: 01/05/05

System Date:
		15/11/2007 (dd/mm/yyyy)

Total phisical memory:
		511,496 Mb

Total virtual memory:
		2047,896 Mb

Available phisical memory:
		511,496 Mb

Available virtual memory:
		1991,164 Mb

Hard drives:
		ST380011A

Logical disks structure:
		a:\ REMOVABLE Full size - 0 Mb, Free size - 0 Mb, File system - 
		c:\ FIXED SYSTEM Full size - 76308 Mb, Free size - 68324 Mb, File system - NTFS
		d:\ CDROM Full size - 76308 Mb, Free size - 68324 Mb, File system - 
		e:\ REMOVABLE Full size - 499 Mb, Free size - 352 Mb, File system - FAT

Video adapters:
		NVIDIA GeForce4 MX 440 with AGP8X
			DRIVER - system32\DRIVERS\nv4_mini.sys ("c:\windows\system32\drivers\nv4_mini.sys") File version = 6.14.10.7184, File size = 3454144, File modification date = 24/02/2005  15:32, File description = NVIDIA Compatible Windows 2000 Miniport Driver, Version 71.84 , Product Name = NVIDIA Compatible Windows 2000 Miniport Driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |1871401838|0xa28ab3b7e33467c65ee5858da5cb166d|

NetWork adapters:
		Realtek RTL8139 Family PCI Fast Ethernet NIC
			DRIVER - system32\DRIVERS\RTL8139.SYS ("c:\windows\system32\drivers\rtl8139.sys") File version = 5.398.613.2003 built by: WinDDK, File size = 20992, File modification date = 03/08/2004  22:31, File description = Realtek RTL8139 NDIS 5.0 Driver, Product Name = Realtek RTL8139 Family Fast Ethernet Adapter, Product version = 5.398.613.2003, Company name = Realtek Semiconductor Corporation (Copyright (C) 1994-2003 Realtek Semiconductor Corporation) |-2104033177|0xd507c1400284176573224903819ffda3|

Modems:
		Nokia 7610 USB

Multimedia:
		Realtek AC'97 Audio
			DRIVER - system32\drivers\ALCXWDM.SYS ("c:\windows\system32\drivers\alcxwdm.sys") File version = 5.10.5750 built by: WinDDK, File size = 2297664, File modification date = 17/11/2004  11:05, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5750, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2004) |1283149363|0x933933288df5ed26d1928215c97d05c7|
		   Microsoft
			DRIVER - system32\drivers\MSPCLOCK.sys ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
		    Microsoft
			DRIVER - system32\drivers\MSPQM.sys ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
		   Microsoft
			DRIVER - system32\drivers\MSKSSRV.sys ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
		  
			DRIVER - system32\drivers\sysaudio.sys ("c:\windows\system32\drivers\sysaudio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
		  DRM  
			DRIVER - system32\drivers\drmkaud.sys ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
		   
			DRIVER - system32\drivers\kmixer.sys ("c:\windows\system32\drivers\kmixer.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
		    
			DRIVER - system32\drivers\aec.sys ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
		   Microsoft Kernel GS
			DRIVER - system32\drivers\swmidi.sys ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
		 DLS  
			DRIVER - system32\drivers\DMusic.sys ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
		   Microsoft (WINMM WDM)
			DRIVER - system32\drivers\wdmaud.sys ("c:\windows\system32\drivers\wdmaud.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
		   
			DRIVER - system32\drivers\splitter.sys ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|

Printers:
		HP LaserJet 1018 - default printer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\IMFNT5.DLL ("c:\windows\system32\spool\drivers\w32x86\3\imfnt5.dll") File version = 0, 3, 3508, 0, File size = 36864, File modification date = 30/01/2006  16:00, File description = IMF Driver (User Mode) for Windows 2000 and XP, Product Name = Zenographics, Inc. SuperPrint, Product version = 6, 0, 3508, 0, Company name = Zenographics, Inc. (Copyright  1996-2004 Zenographics, Inc.) |713435339|0x60465259290085010af3c2d5341ad395|

Removable devices:
		  
			DRIVER - system32\DRIVERS\flpydisk.sys ("c:\windows\system32\drivers\flpydisk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 03/08/2004  18:59, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
		HL-DT-ST CD-ROM GCR-8522B
			DRIVER - system32\DRIVERS\cdrom.sys ("c:\windows\system32\drivers\cdrom.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 03/08/2004  18:59, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|

SOFTWARE Information:
---------------------
Operation system:
		Microsoft Windows XP Professional Edition, 5.1.2600 Service Pack 2

Environment variables:
		ALLUSERSPROFILE=C:\Documents and Settings\All Users
		APPDATA=C:\Documents and Settings\\Application Data
		CLIENTNAME=Console
		CommonProgramFiles=C:\Program Files\Common Files
		COMPUTERNAME=PREINSTA-43242A
		ComSpec=C:\WINDOWS\system32\cmd.exe
		FP_NO_HOST_CHECK=NO
		HOMEDRIVE=C:
		HOMEPATH=\Documents and Settings\
		LOGONSERVER=\\PREINSTA-43242A
		NUMBER_OF_PROCESSORS=1
		OS=Windows_NT
		Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem
		PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
		PROCESSOR_ARCHITECTURE=x86
		PROCESSOR_IDENTIFIER=x86 Family 15 Model 4 Stepping 1, GenuineIntel
		PROCESSOR_LEVEL=15
		PROCESSOR_REVISION=0401
		ProgramFiles=C:\Program Files
		SESSIONNAME=Console
		SystemDrive=C:
		SystemRoot=C:\WINDOWS
		TEMP=C:\DOCUME~1\9335~1\LOCALS~1\Temp
		TMP=C:\DOCUME~1\9335~1\LOCALS~1\Temp
		USERDOMAIN=PREINSTA-43242A
		USERNAME=
		USERPROFILE=C:\Documents and Settings\
		windir=C:\WINDOWS

Installed network protocols:
---------clients---------
		   Microsoft
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		-
			DRIVER - %SystemRoot%\system32\svchost.exe -k LocalService ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
--------protocol---------
		  -
		 -  Ethernet
			DRIVER - system32\DRIVERS\raspppoe.sys ("c:\windows\system32\drivers\raspppoe.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 03/08/2004  19:05, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
		  (TCP/IP)
			DRIVER - system32\DRIVERS\tcpip.sys ("c:\windows\system32\drivers\tcpip.sys") File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
		  WINS (TCP/IP)
			DRIVER - system32\DRIVERS\netbt.sys ("c:\windows\system32\drivers\netbt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 03/08/2004  19:14, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
		  TCP/IP ( SMB)
		NDIS- WAN  
			DRIVER - system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 03/08/2004  19:14, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
		NDIS- /  
			DRIVER - system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 17/08/2004  12:16, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
		   2
--------services---------
		 
			DRIVER - %SystemRoot%\System32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		 NetBIOS
			DRIVER - system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 03/08/2004  19:03, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
		   
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  QoS
			DRIVER - system32\DRIVERS\psched.sys ("c:\windows\system32\drivers\psched.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 03/08/2004  19:04, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
		    
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  
			DRIVER - %SystemRoot%\System32\alg.exe ("C:\WINDOWS\system32\alg.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 17/08/2004  12:04, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
		       Microsoft
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  
			DRIVER - system32\DRIVERS\msgpc.sys ("c:\windows\system32\drivers\msgpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 03/08/2004  19:04, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
		  
		  
		QoS RSVP
			DRIVER - %SystemRoot%\system32\rsvp.exe ("C:\WINDOWS\system32\rsvp.exe") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 20/10/2001  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
-----------by type----------
		MSAFD Tcpip [TCP/IP]
		MSAFD Tcpip [UDP/IP]
		MSAFD Tcpip [RAW/IP]
		RSVP UDP Service Provider
		RSVP TCP Service Provider
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{93823C2E-A80B-42D3-8852-6E0ABE0FD104}] SEQPACKET 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{93823C2E-A80B-42D3-8852-6E0ABE0FD104}] DATAGRAM 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{A49585A1-168A-486F-A84F-38F12A79D580}] SEQPACKET 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{A49585A1-168A-486F-A84F-38F12A79D580}] DATAGRAM 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{07AC53AA-3908-4C31-8805-26C5714F887F}] SEQPACKET 2
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{07AC53AA-3908-4C31-8805-26C5714F887F}] DATAGRAM 2

Installed applications/hotfixes:
		HijackThis 2.0.0 2.0.0 (TrendMicro)
			DEINSTALLATION: "E:\HijackThis.exe" /uninstall
		HP Image Zone 4.0 4.0 (HP)
			DEINSTALLATION: C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
		Nokia Connectivity Cable Driver (Russian) 1.00.136.1, installation data=20060704 (Nokia)
			DEINSTALLATION: C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{3ECED7D1-E469-4BC6-8A93-5CB0FFE5EBF5} /l1049 
		  6.0 6.0.1.411 ( )
			DEINSTALLATION: MsiExec.exe /I{75193929-9A52-4CA4-98DE-8C7296940920}
		Kaspersky Online Scanner 5.0 (Kaspersky Lab)
			DEINSTALLATION: C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavuninstall.exe
		   Windows XP - KB873339 20041117.092459 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe
		   Windows XP - KB885835 20041027.181713 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe
		   Windows XP - KB885836 20041028.173203 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe
		   Windows XP - KB886185 20041021.090540 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe
		   Windows XP - KB887472 20041014.162858 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe
		   Windows XP - KB888302 20041207.111426 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe
		   Windows XP (KB890046) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe"
		   Windows XP - KB890859 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe"
		   Windows XP - KB891781 20050110.165439 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe
		   Windows XP (KB893756) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe"
		Windows Installer 3.1 (KB893803) 3.1 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
		  Windows XP (KB894391) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe"
		   Windows XP (KB896358) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe"
		   Windows XP (KB896423) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe"
		   Windows XP (KB896424) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe"
		   Windows XP (KB896428) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe"
		  Windows XP (KB898461) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe"
		   Windows XP (KB899587) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe"
		   Windows XP (KB899589) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe"
		   Windows XP (KB899591) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe"
		  Windows XP (KB900485) 2, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe"
		   Windows XP (KB900725) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe"
		   Windows XP (KB901017) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe"
		   Windows XP (KB901214) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe"
		   Windows XP (KB902400) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe"
		   Windows XP (KB904706) 2, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe"
		   Windows XP (KB905414) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe"
		   Windows XP (KB905749) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe"
		   Windows XP (KB908519) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe"
		  Windows XP (KB908531) 2, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe"
		  Windows XP (KB910437) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe"
		  Windows XP (KB911280) 2, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe"
		   Windows XP (KB911562) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe"
		    Windows Media - (KB911564), installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe"
		   Windows XP (KB911567) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe"
		   Windows XP (KB911927) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe"
		   Windows XP (KB912919) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe"
		   Windows XP (KB913580) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe"
		   Windows XP (KB914388) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe"
		   Windows XP (KB914389) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe"
		  Windows XP (KB916595) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe"
		   Windows XP (KB917344) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe"
		   Windows XP (KB917422) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe"
		    Windows Media 9 - (KB917734), installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB917734_WMP9$\spuninst\spuninst.exe"
		   Windows XP (KB917953) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe"
		   Windows XP (KB918118) 1, installation data=20070220 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe"
		   Windows XP (KB918439) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe"
		   Windows XP (KB918899) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe"
		   Windows XP (KB919007) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe"
		   Windows XP (KB920213) 1, installation data=20061118 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe"
		   Windows XP (KB920214) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe"
		   Windows XP (KB920670) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe"
		   Windows XP (KB920683) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe"
		   Windows XP (KB920685) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe"
		  Windows XP (KB920872) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe"
		   Windows XP (KB921398) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe"
		   Windows XP (KB921503) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB921503$\spuninst\spuninst.exe"
		   Windows XP (KB921883) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe"
		  Windows XP (KB922582) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe"
		   Windows XP (KB922616) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe"
		   Windows XP (KB922760) 1, installation data=20061118 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe"
		   Windows XP (KB922819) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe"
		   Windows XP (KB923191) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe"
		   Windows XP (KB923414) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe"
		   Windows XP - (KB923689), installation data=20061219 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe"
		   Windows XP (KB923694) 1, installation data=20061219 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe"
		   Windows XP (KB923789) (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
		   Windows XP (KB923980) 1, installation data=20061120 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe"
		   Windows XP (KB924191) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe"
		   Windows XP (KB924270) 1, installation data=20061120 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe"
		   Windows XP (KB924496) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe"
		   Windows XP (KB924667) 1, installation data=20070220 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe"
		    Windows Media 6.4 - (KB925398), installation data=20061219 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe"
		   Windows XP (KB925454) 1, installation data=20061219 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe"
		   Windows XP (KB925486) 1, installation data=20061031 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe"
		   Windows XP (KB925902) 1, installation data=20070404 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe"
		   Windows XP (KB926255) 1, installation data=20061219 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe"
		   Windows XP (KB926436) 1, installation data=20070220 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe"
		   Windows XP (KB927779) 1, installation data=20070220 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe"
		   Windows XP (KB927802) 1, installation data=20070220 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe"
		  Windows XP (KB927891) 3, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe"
		   Windows XP (KB928090) 1, installation data=20070220 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB928090$\spuninst\spuninst.exe"
		   Windows XP (KB928255) 1, installation data=20070220 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe"
		   Windows XP (KB928843) 1, installation data=20070220 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe"
		   Windows XP (KB929123) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe"
		  Windows XP (KB929338) 1, installation data=20070320 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe"
		   Windows XP (KB929969) 1, installation data=20070113 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB929969$\spuninst\spuninst.exe"
		   Windows XP (KB930178) 1, installation data=20070504 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe"
		   Windows XP (KB931261) 1, installation data=20070504 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe"
		   Windows XP (KB931784) 1, installation data=20070504 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe"
		  Windows XP (KB931836) 1, installation data=20070220 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe"
		   Windows XP (KB932168) 1, installation data=20070504 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe"
		  Windows XP (KB933360) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB933360$\spuninst\spuninst.exe"
		   Windows XP (KB933566) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB933566$\spuninst\spuninst.exe"
		   Windows XP (KB933729) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB933729$\spuninst\spuninst.exe"
		   Windows XP (KB936021) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB936021$\spuninst\spuninst.exe"
		  Windows XP (KB936357) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB936357$\spuninst\spuninst.exe"
		    Windows Media 9 - (KB936782), installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB936782_WMP9$\spuninst\spuninst.exe"
		   Windows XP (KB938127) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB938127$\spuninst\spuninst.exe"
		  Windows XP (KB938828) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB938828$\spuninst\spuninst.exe"
		   Windows XP (KB938829) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB938829$\spuninst\spuninst.exe"
		   Windows XP (KB939653) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB939653$\spuninst\spuninst.exe"
		   Windows XP (KB941202) 1, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB941202$\spuninst\spuninst.exe"
		   Windows XP (KB943460) 1, installation data=20071114 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtUninstallKB943460$\spuninst\spuninst.exe"
		NVIDIA Drivers
			DEINSTALLATION: C:\WINDOWS\system32\nvudisp.exe UninstallGUI
		Adobe Flash Player 9 ActiveX 9 (Adobe Systems)
			DEINSTALLATION: C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe -uninstallUnlock
		CreativeProjectsTemplates (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		SkinsHP1 (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		HP Diagnostic Assistant (English) 1.0.0.0, installation data=20051018 (Hewlett-Packard)
		Microsoft .NET Framework 1.1 Russian Language Pack (Russian) 1.1.4322, installation data=20051018 (Microsoft)
			DEINSTALLATION: MsiExec.exe /X{2BB372D9-52B4-410A-BC1A-FEAB63181EEF}
		WebFldrs XP (Russian) 9.50.7523, installation data=20050920 (Microsoft Corporation)
		QuickProjects (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		Copy (English) 43.0.123.000, installation data=20051018 (Hewlett-Packard)
		HPSystemDiagnostics (Russian) 1.5.0.0, installation data=20051018 (Your Company Name)
		Nokia Connectivity Cable Driver (Russian) 1.00.136.1, installation data=20060704 (Nokia)
		Unload (English) 4.0.0, installation data=20051018 (Hewlett-Packard)
		HP Software Update (Russian) 2.0.39.20040212, installation data=20051018 (Hewlett-Packard)
			DEINSTALLATION: MsiExec.exe /X{457791C5-D702-4143-A7B2-2744BE9573F2}
		Scan (English) 4.0.0.0, installation data=20051018 (Hewlett-Packard)
		PhotoGallery (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		Director (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		  6.0 (Russian) 6.0.1.411, installation data=20071103 ( )
		HP Scanjet 3770 4.0 (HP)
			DEINSTALLATION: C:\Program Files\HP\Digital Imaging\{7CFD1028-F6C9-4b3c-BD20-51D56E7C7C8D}\setup\hpzscr01.exe -datfile hpgscr01.dat
		CreativeProjects (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		QFolder (English) 1.00.0000, installation data=20051018 (Hewlett-Packard)
		Microsoft Office -    2003 (Russian) 11.0.5614.0, installation data=20050920 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{90110419-6000-11D3-8CFE-0150048383C9}
		WebReg (English) 43.0.122.000, installation data=20051018 (Hewlett-Packard)
		DocProc (English) 4.0.0.0, installation data=20051018 (Hewlett-Packard)
		CueTour (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		Destinations (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		InstantShare (English) 4.0.0.40, installation data=20051018 (Hewlett-Packard)
		MSXML 4.0 SP2 (KB936181) (English) 4.20.9848.0, installation data=20071023 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}
		PrintScreen (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		hpg3770 (Russian) 4.0.0.0, installation data=20051018 ( )
		Microsoft .NET Framework 1.1 (English) 1.1.4322, installation data=20051018 (Microsoft)
			DEINSTALLATION: MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
		Overland (Russian) 2.1.4, installation data=20051018 (Hewlett-Packard)
		TrayApp (English) 43.0.120.000, installation data=20051018 (Hewlett-Packard)
		Realtek AC'97 Audio
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FB08F381-6533-4108-B7DD-039E11FBC27E}\setup.exe" REMOVE

Runned drivers:
	system32\drivers\aec.sys - stopped (demand) ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
	system32\DRIVERS\asyncmac.sys - stopped (demand) ("c:\windows\system32\drivers\asyncmac.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 03/08/2004  19:05, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
	system32\DRIVERS\atmarpc.sys - stopped (demand) ("c:\windows\system32\drivers\atmarpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 03/08/2004  18:58, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
	System32\drivers\dmboot.sys - stopped (disabled) ("c:\windows\system32\drivers\dmboot.sys") File version = 2600.2180.503.0, File size = 799872, File modification date = 17/08/2004  11:55, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
	system32\drivers\DMusic.sys - stopped (demand) ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
	system32\drivers\drmkaud.sys - stopped (demand) ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
	\??\D:\INSTALL\GMSIPCI.SYS - stopped (demand)
	system32\DRIVERS\hidusb.sys - stopped (demand) ("c:\windows\system32\drivers\hidusb.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  18:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
	\??\C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids00026.sys - stopped (demand)
	\??\C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids00180.sys - stopped (demand)
	\??\C:\Documents and Settings\All Users\Application Data\Kaspersky Anti-Virus Personal\5.0\bases\ids0018a.sys - stopped (demand)
	system32\DRIVERS\imapi.sys - stopped (system) ("c:\windows\system32\drivers\imapi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 03/08/2004  19:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
	system32\DRIVERS\Ip6Fw.sys - stopped (demand) ("c:\windows\system32\drivers\ip6fw.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 03/08/2004  19:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
	system32\DRIVERS\ipfltdrv.sys - stopped (demand) ("c:\windows\system32\drivers\ipfltdrv.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 20/10/2001  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
	system32\DRIVERS\ipinip.sys - stopped (demand) ("c:\windows\system32\drivers\ipinip.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 03/08/2004  19:04, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
	system32\DRIVERS\ipnat.sys - stopped (demand) ("c:\windows\system32\drivers\ipnat.sys") File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
	system32\DRIVERS\irenum.sys - stopped (demand) ("c:\windows\system32\drivers\irenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 03/08/2004  19:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
	system32\DRIVERS\kbdhid.sys - stopped (system) ("c:\windows\system32\drivers\kbdhid.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 17/08/2004  11:54, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |745085733|0xd0c2e1e0b67a4b0ba4f1c5240c892cb4|
	system32\DRIVERS\mouhid.sys - stopped (demand) ("c:\windows\system32\drivers\mouhid.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 19/10/2001  16:33, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1481140716|0xdcf669a6b5682768d3fcf2906453ea97|
	system32\drivers\MSKSSRV.sys - stopped (demand) ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
	system32\drivers\MSPCLOCK.sys - stopped (demand) ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
	system32\drivers\MSPQM.sys - stopped (demand) ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
	system32\drivers\nmwcdc.sys - stopped (demand) ("c:\windows\system32\drivers\nmwcdc.sys") File version = 5.02.13.06, File size = 6262, File modification date = 26/08/2004  09:42, File description = Nokia USB Phone Generic Client, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004. Nokia. All rights reserved.) |-112314610|0x8205bc8eb8c4d9f175ea3b02d4a57e61|
	system32\drivers\nmwcdcm.sys - stopped (demand) ("c:\windows\system32\drivers\nmwcdcm.sys") File version = 5.02.13.06, File size = 9447, File modification date = 26/08/2004  09:42, File description = Nokia USB Phone Modem Client, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002, 2003, 2004. Nokia. All rights reserved.) |1336067166|0xebc320f929e8fec0e6ca454b666f215f|
	system32\drivers\nmwcd.sys - stopped (demand) ("c:\windows\system32\drivers\nmwcd.sys") File version = 5.02.13.06, File size = 125813, File modification date = 26/08/2004  09:42, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004. Nokia. All rights reserved.) |992380679|0xa632fa1473edc303f080a2dd09afdcbf|
	system32\DRIVERS\nwlnkflt.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkflt.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 20/10/2001  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
	system32\DRIVERS\nwlnkfwd.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkfwd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 20/10/2001  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
	system32\DRIVERS\secdrv.sys - stopped (demand) ("c:\windows\system32\drivers\secdrv.sys") File version = (null), File size = 27440, File modification date = 17/07/2004  07:36, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
	system32\drivers\splitter.sys - stopped (demand) ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
	system32\drivers\swmidi.sys - stopped (demand) ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
	system32\DRIVERS\usbscan.sys - stopped (demand) ("c:\windows\system32\drivers\usbscan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
	\WINDOWS\system32\ntoskrnl.exe ("c:\windows\system32\ntoskrnl.exe") File version = 5.1.2600.3093 (xpsp_sp2_gdr.070227-2254), File size = 2182144, File modification date = 28/02/2007  16:04, File description =    NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.3093, Company name =   (  .   .) |1591428080|0x235f1af98379d4bd586efc4e5c8a2bec|
	\WINDOWS\system32\hal.dll ("c:\windows\system32\hal.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 131968, File modification date = 03/08/2004  18:59, File description = Hardware Abstraction Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1651667779|0xf9a0f579fc18036ffdd9e26e0d268ccd|
	\WINDOWS\system32\KDCOM.DLL ("c:\windows\system32\kdcom.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7040, File modification date = 20/10/2001  12:00, File description = Kernel Debugger HW Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662002680|0x945fbb881ae927a44dfd96440f2f4f44|
	\WINDOWS\system32\BOOTVID.dll ("c:\windows\system32\bootvid.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12288, File modification date = 20/10/2001  12:00, File description = VGA Boot Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-890525799|0xcc306bf581446d5e443eae5b3bb900f0|
	ACPI.sys ("c:\windows\system32\drivers\acpi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 17/08/2004  11:46, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
	\WINDOWS\system32\DRIVERS\WMILIB.SYS ("c:\windows\system32\drivers\wmilib.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4352, File modification date = 20/10/2001  12:00, File description = WMILIB WMI support library Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-328804909|0x2f31b7f954bed437f2c75026c65caf7b|
	pci.sys ("c:\windows\system32\drivers\pci.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 17/08/2004  11:46, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
	isapnp.sys ("c:\windows\system32\drivers\isapnp.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 19/10/2001  16:22, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
	pciide.sys ("c:\windows\system32\drivers\pciide.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 19/10/2001  16:32, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
	\WINDOWS\system32\DRIVERS\PCIIDEX.SYS ("c:\windows\system32\drivers\pciidex.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 03/08/2004  18:59, File description = PCI IDE Bus Driver Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-898173944|0x520b91ab011456b940d9b05fc91108ff|
	intelide.sys ("c:\windows\system32\drivers\intelide.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  15:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
	MountMgr.sys ("c:\windows\system32\drivers\mountmgr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42240, File modification date = 03/08/2004  18:58, File description = Mount Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1645669973|0x65653f3b4477f3c63e68a9659f85ee2e|
	ftdisk.sys ("c:\windows\system32\drivers\ftdisk.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 20/10/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
	dmload.sys ("c:\windows\system32\drivers\dmload.sys") File version = 2600.0.503.0, File size = 5888, File modification date = 20/10/2001  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
	dmio.sys ("c:\windows\system32\drivers\dmio.sys") File version = 2600.2180.503.0, File size = 153600, File modification date = 17/08/2004  11:55, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
	PartMgr.sys ("c:\windows\system32\drivers\partmgr.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 18688, File modification date = 20/10/2001  12:00, File description = Partition Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1387024081|0x3334430c29dc338092f79c38ef7b4cd0|
	VolSnap.sys ("c:\windows\system32\drivers\volsnap.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51968, File modification date = 17/08/2004  11:53, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-266541180|0x30c744f65751e03465fb7e61315468a2|
	atapi.sys ("c:\windows\system32\drivers\atapi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 03/08/2004  18:59, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
	disk.sys ("c:\windows\system32\drivers\disk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 03/08/2004  18:59, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
	\WINDOWS\system32\DRIVERS\CLASSPNP.SYS ("c:\windows\system32\drivers\classpnp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 03/08/2004  19:14, File description = SCSI Class System Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1925477481|0xd86173b401470f06d9810f7962969ddf|
	fltMgr.sys ("c:\windows\system32\drivers\fltmgr.sys") File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
	sr.sys ("c:\windows\system32\drivers\sr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 17/08/2004  11:58, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
	KSecDD.sys ("c:\windows\system32\drivers\ksecdd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 92032, File modification date = 03/08/2004  18:59, File description = Kernel Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1324865035|0xeb7ffe87fd367ea8fca0506f74a87fbb|
	Ntfs.sys ("c:\windows\system32\drivers\ntfs.sys") File version = 5.1.2600.3081 (xpsp_sp2_gdr.070209-0028), File size = 574464, File modification date = 09/02/2007  11:10, File description = NT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3081, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1214373707|0x19a811ef5f1ed5c926a028ce107ff1af|
	NDIS.sys ("c:\windows\system32\drivers\ndis.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 182912, File modification date = 03/08/2004  19:14, File description = NDIS 5.1 wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |489683314|0x558635d3af1c7546d26067d5d9b6959e|
	Mup.sys ("c:\windows\system32\drivers\mup.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 107904, File modification date = 03/08/2004  19:15, File description = Multiple UNC Provider driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853925969|0x82035e0f41c2dd05ae41d27fe6cf7de1|
	kl1.sys ("c:\windows\system32\drivers\kl1.sys") File version = 6.1.5.0, File size = 104448, File modification date = 28/09/2006  09:36, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |1896547209|0xbc02a8e0dd5dc266e5cc3636dd454403|
	\WINDOWS\system32\drivers\TDI.SYS ("c:\windows\system32\drivers\tdi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18560, File modification date = 03/08/2004  19:07, File description = TDI Wrapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-750746922|0x6891b74ab9a016064e82a419388d0601|
	agp440.sys ("c:\windows\system32\drivers\agp440.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42368, File modification date = 03/08/2004  19:07, File description = 440 NT AGP Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-942423365|0x2c428fa0c3e3a01ed93c9b2a27d8d4bb|
	\SystemRoot\system32\DRIVERS\intelppm.sys ("C:\WINDOWS\system32\drivers\intelppm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 17/08/2004  11:53, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
	\SystemRoot\system32\DRIVERS\nv4_mini.sys ("C:\WINDOWS\system32\drivers\nv4_mini.sys") File version = 6.14.10.7184, File size = 3454144, File modification date = 24/02/2005  15:32, File description = NVIDIA Compatible Windows 2000 Miniport Driver, Version 71.84 , Product Name = NVIDIA Compatible Windows 2000 Miniport Driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |1871401838|0xa28ab3b7e33467c65ee5858da5cb166d|
	\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS ("C:\WINDOWS\system32\drivers\videoprt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 79744, File modification date = 03/08/2004  19:07, File description = Video Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1505993728|0xd5a9d123f5ed7c9965a481bd20cf66d8|
	\SystemRoot\system32\DRIVERS\usbuhci.sys ("C:\WINDOWS\system32\drivers\usbuhci.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 03/08/2004  19:08, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-104529926|0xf8fd1400092e23c8f2f31406ef06167b|
	\SystemRoot\system32\DRIVERS\USBPORT.SYS ("C:\WINDOWS\system32\drivers\usbport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 142976, File modification date = 03/08/2004  19:08, File description = USB 1.1 & 2.0 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940235777|0x2034ca78f9c6e787b4b76d81ac888351|
	\SystemRoot\system32\DRIVERS\usbehci.sys ("C:\WINDOWS\system32\drivers\usbehci.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26624, File modification date = 03/08/2004  19:08, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050382340|0x15e993ba2f6946b2bfbbfcd30398621e|
	\SystemRoot\system32\DRIVERS\RTL8139.SYS ("c:\windows\system32\drivers\rtl8139.sys") File version = 5.398.613.2003 built by: WinDDK, File size = 20992, File modification date = 03/08/2004  22:31, File description = Realtek RTL8139 NDIS 5.0 Driver, Product Name = Realtek RTL8139 Family Fast Ethernet Adapter, Product version = 5.398.613.2003, Company name = Realtek Semiconductor Corporation (Copyright (C) 1994-2003 Realtek Semiconductor Corporation) |-2104033177|0xd507c1400284176573224903819ffda3|
	\SystemRoot\system32\DRIVERS\i8042prt.sys ("C:\WINDOWS\system32\drivers\i8042prt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 17/08/2004  11:51, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
	\SystemRoot\system32\DRIVERS\mouclass.sys ("C:\WINDOWS\system32\drivers\mouclass.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 17/08/2004  12:16, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
	\SystemRoot\system32\DRIVERS\kbdclass.sys ("C:\WINDOWS\system32\drivers\kbdclass.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 17/08/2004  11:54, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
	\SystemRoot\system32\DRIVERS\fdc.sys ("C:\WINDOWS\system32\drivers\fdc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 03/08/2004  18:59, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
	\SystemRoot\system32\DRIVERS\serial.sys ("C:\WINDOWS\system32\drivers\serial.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 17/08/2004  11:51, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
	\SystemRoot\system32\DRIVERS\serenum.sys ("C:\WINDOWS\system32\drivers\serenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 03/08/2004  18:59, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
	\SystemRoot\system32\DRIVERS\parport.sys ("C:\WINDOWS\system32\drivers\parport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 17/08/2004  12:16, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
	\SystemRoot\system32\DRIVERS\cdrom.sys ("C:\WINDOWS\system32\drivers\cdrom.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 03/08/2004  18:59, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
	\SystemRoot\system32\DRIVERS\redbook.sys ("C:\WINDOWS\system32\drivers\redbook.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
	\SystemRoot\system32\DRIVERS\ks.sys ("C:\WINDOWS\system32\drivers\ks.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140928, File modification date = 03/08/2004  19:15, File description = Kernel CSA Library, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2104684906|0xb9540e258f952650de8dec68719a5c97|
	\SystemRoot\system32\drivers\ALCXWDM.SYS ("c:\windows\system32\drivers\alcxwdm.sys") File version = 5.10.5750 built by: WinDDK, File size = 2297664, File modification date = 17/11/2004  11:05, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5750, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2004) |1283149363|0x933933288df5ed26d1928215c97d05c7|
	\SystemRoot\system32\drivers\portcls.sys ("C:\WINDOWS\system32\drivers\portcls.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145792, File modification date = 03/08/2004  19:15, File description = Port Class (Class Driver for Port/Miniport Devices), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2134342417|0x5b0f00e43a7094c0b7e433cb42c79164|
	\SystemRoot\system32\drivers\drmk.sys ("C:\WINDOWS\system32\drivers\drmk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60288, File modification date = 03/08/2004  19:08, File description = Microsoft Kernel DRM Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1594474973|0xff86422268de771d571e123eb7092c6a|
	\SystemRoot\system32\DRIVERS\audstub.sys ("C:\WINDOWS\system32\drivers\audstub.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
	\SystemRoot\system32\DRIVERS\rasl2tp.sys ("C:\WINDOWS\system32\drivers\rasl2tp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 03/08/2004  19:14, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
	\SystemRoot\system32\DRIVERS\ndistapi.sys ("C:\WINDOWS\system32\drivers\ndistapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 20/10/2001  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
	\SystemRoot\system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 03/08/2004  19:14, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
	\SystemRoot\system32\DRIVERS\raspppoe.sys ("C:\WINDOWS\system32\drivers\raspppoe.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 03/08/2004  19:05, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
	\SystemRoot\system32\DRIVERS\raspptp.sys ("C:\WINDOWS\system32\drivers\raspptp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 03/08/2004  19:14, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
	\SystemRoot\system32\DRIVERS\psched.sys ("C:\WINDOWS\system32\drivers\psched.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 03/08/2004  19:04, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
	\SystemRoot\system32\DRIVERS\msgpc.sys ("C:\WINDOWS\system32\drivers\msgpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 03/08/2004  19:04, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
	\SystemRoot\system32\DRIVERS\ptilink.sys ("C:\WINDOWS\system32\drivers\ptilink.sys") File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 20/10/2001  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
	\SystemRoot\system32\DRIVERS\raspti.sys ("C:\WINDOWS\system32\drivers\raspti.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 20/10/2001  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
	\SystemRoot\system32\DRIVERS\rdpdr.sys ("C:\WINDOWS\system32\drivers\rdpdr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
	\SystemRoot\system32\DRIVERS\termdd.sys ("C:\WINDOWS\system32\drivers\termdd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
	\SystemRoot\system32\DRIVERS\swenum.sys ("C:\WINDOWS\system32\drivers\swenum.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 17/08/2004  12:16, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
	\SystemRoot\system32\DRIVERS\update.sys ("C:\WINDOWS\system32\drivers\update.sys") File version = 5.1.2600.3124 (xpsp_sp2_gdr.070423-0049), File size = 364160, File modification date = 23/04/2007  10:32, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675703786|0xced744117e91bdc0beb810f7d8608183|
	\SystemRoot\system32\DRIVERS\mssmbios.sys ("C:\WINDOWS\system32\drivers\mssmbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 17/08/2004  12:16, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
	\SystemRoot\System32\Drivers\NDProxy.SYS ("C:\WINDOWS\system32\drivers\ndproxy.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 38016, File modification date = 20/10/2001  12:00, File description = NDIS Proxy, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |438037699|0x59fc3fb44d2669bc144fd87826bb571f|
	\SystemRoot\system32\DRIVERS\usbhub.sys ("C:\WINDOWS\system32\drivers\usbhub.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 03/08/2004  19:08, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
	\SystemRoot\system32\DRIVERS\USBD.SYS ("C:\WINDOWS\system32\drivers\usbd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4736, File modification date = 20/10/2001  12:00, File description = Universal Serial Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-371157248|0x596eb39b50d6ebd9b734dc4ae0544693|
	\SystemRoot\system32\DRIVERS\flpydisk.sys ("C:\WINDOWS\system32\drivers\flpydisk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 03/08/2004  18:59, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
	\SystemRoot\System32\Drivers\Fs_Rec.SYS ("C:\WINDOWS\system32\drivers\fs_rec.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7936, File modification date = 20/10/2001  12:00, File description = File System Recognizer Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |244257554|0x3e1e2bd4f39b0e2b7dc4f4d2bcc2779a|
	\SystemRoot\System32\Drivers\Null.SYS ("C:\WINDOWS\system32\drivers\null.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 2944, File modification date = 20/10/2001  12:00, File description = NULL Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-575384021|0x73c1e1f395918bc2c6dd67af7591a3ad|
	\SystemRoot\System32\Drivers\Beep.SYS ("C:\WINDOWS\system32\drivers\beep.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 20/10/2001  12:00, File description = BEEP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1769750770|0xda1f27d85e0d1525f6621372e7b685e9|
	\SystemRoot\system32\DRIVERS\HIDPARSE.SYS ("C:\WINDOWS\system32\drivers\hidparse.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24960, File modification date = 03/08/2004  19:08, File description = Hid Parsing Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-575922150|0x5fff41cd5108e9051d255c37825af697|
	\SystemRoot\System32\drivers\vga.sys ("C:\WINDOWS\system32\drivers\vga.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 03/08/2004  19:07, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
	\SystemRoot\System32\Drivers\mnmdd.SYS ("C:\WINDOWS\system32\drivers\mnmdd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 20/10/2001  12:00, File description = Frame buffer simulator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1594636198|0x4ae068242760a1fb6e1a44bf4e16afa6|
	\SystemRoot\System32\DRIVERS\RDPCDD.sys ("C:\WINDOWS\system32\drivers\rdpcdd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 20/10/2001  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
	\SystemRoot\System32\Drivers\Msfs.SYS ("C:\WINDOWS\system32\drivers\msfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19072, File modification date = 03/08/2004  19:00, File description = Mailslot driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1211014042|0x561b3a4333ca2dbdba28b5b956822519|
	\SystemRoot\System32\Drivers\Npfs.SYS ("C:\WINDOWS\system32\drivers\npfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30848, File modification date = 03/08/2004  19:00, File description = NPFS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1063322756|0x4f601bcb8f64ea3ac0994f98fed03f8e|
	\SystemRoot\system32\DRIVERS\rasacd.sys ("C:\WINDOWS\system32\drivers\rasacd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 20/10/2001  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
	\SystemRoot\system32\DRIVERS\ipsec.sys ("C:\WINDOWS\system32\drivers\ipsec.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 03/08/2004  19:14, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
	\SystemRoot\system32\DRIVERS\tcpip.sys ("C:\WINDOWS\system32\drivers\tcpip.sys") File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
	\SystemRoot\system32\DRIVERS\netbt.sys ("C:\WINDOWS\system32\drivers\netbt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 03/08/2004  19:14, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
	\SystemRoot\System32\drivers\afd.sys ("C:\WINDOWS\system32\drivers\afd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 03/08/2004  19:14, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
	\SystemRoot\system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 03/08/2004  19:03, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
	\SystemRoot\system32\DRIVERS\rdbss.sys ("C:\WINDOWS\system32\drivers\rdbss.sys") File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
	\SystemRoot\system32\DRIVERS\mrxsmb.sys ("C:\WINDOWS\system32\drivers\mrxsmb.sys") File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
	\??\C:\WINDOWS\system32\drivers\klif.sys ("\\?\c:\windows\system32\drivers\klif.sys") File version = 6.12.10.247, File size = 174864, File modification date = 03/11/2007  07:50, File description = spuper-ptor, Product Name = Kaspersky Anti-Virus, Product version = 6.0.2.1, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |259452601|0xf0653e5e164123cad51edda22418c2a3|
	\SystemRoot\System32\Drivers\Fips.SYS ("C:\WINDOWS\system32\drivers\fips.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 34944, File modification date = 20/10/2001  12:00, File description =  FIPS Crypto, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |739370389|0x6792034d951145dd18d1d508578e4676|
	\SystemRoot\system32\DRIVERS\wanarp.sys ("C:\WINDOWS\system32\drivers\wanarp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 03/08/2004  19:04, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
	\SystemRoot\System32\Drivers\Cdfs.SYS ("C:\WINDOWS\system32\drivers\cdfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63744, File modification date = 03/08/2004  19:14, File description = CD-ROM File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1135615718|0xcd7d5152df32b47f4e36f710b35aae02|
	\SystemRoot\system32\DRIVERS\USBSTOR.SYS ("C:\WINDOWS\system32\drivers\usbstor.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  19:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
	\SystemRoot\System32\Drivers\dump_atapi.sys
	\SystemRoot\System32\Drivers\dump_WMILIB.SYS
	\SystemRoot\System32\win32k.sys ("C:\WINDOWS\system32\win32k.sys") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 1843712, File modification date = 08/03/2007  15:36, File description =   Win32, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1115490585|0xaffd90d28e2995b1a8a989dedf3d264c|
	\SystemRoot\System32\drivers\Dxapi.sys ("C:\WINDOWS\system32\drivers\dxapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 10496, File modification date = 20/10/2001  12:00, File description = DirectX API Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |741880105|0xfe97d0343acfdebdd578fc67cc91fa87|
	\SystemRoot\System32\watchdog.sys ("C:\WINDOWS\system32\watchdog.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17664, File modification date = 03/08/2004  19:07, File description = Watchdog Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |369096975|0xc9bf2f12c4e6c12f8a85fba4b6bc6208|
	\SystemRoot\System32\drivers\dxg.sys ("C:\WINDOWS\system32\drivers\dxg.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71040, File modification date = 03/08/2004  19:00, File description = DirectX Graphics Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-389278401|0xd3dac8432110aad0b02a58b4459ab835|
	\SystemRoot\System32\drivers\dxgthk.sys ("C:\WINDOWS\system32\drivers\dxgthk.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 3328, File modification date = 20/10/2001  12:00, File description = DirectX Graphics Driver Thunk, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1288314594|0xa73f5d6705b1d820c19b18782e176efd|
	\SystemRoot\System32\nv4_disp.dll ("C:\WINDOWS\system32\nv4_disp.dll") File version = 6.14.10.7184, File size = 3973888, File modification date = 24/02/2005  15:32, File description = NVIDIA Compatible Windows 2000 Display driver, Version 71.84 , Product Name = NVIDIA Compatible Windows 2000 Display driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-1311977811|0xe4f2eaaa31f65f09b9ff35d1a5d832b8|
	\SystemRoot\system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 17/08/2004  12:16, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
	\SystemRoot\System32\Drivers\Fastfat.SYS ("C:\WINDOWS\system32\drivers\fastfat.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 03/08/2004  19:14, File description = Fast FAT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2107818381|0x3117f595e9615e04f05a54fc15a03b20|
	\SystemRoot\system32\drivers\wdmaud.sys ("C:\WINDOWS\system32\drivers\wdmaud.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
	\SystemRoot\system32\drivers\sysaudio.sys ("C:\WINDOWS\system32\drivers\sysaudio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
	\SystemRoot\system32\DRIVERS\mrxdav.sys ("C:\WINDOWS\system32\drivers\mrxdav.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 03/08/2004  19:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
	\SystemRoot\System32\Drivers\ParVdm.SYS ("C:\WINDOWS\system32\drivers\parvdm.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 6912, File modification date = 20/10/2001  12:00, File description =   VDM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2114794461|0xf6167f46184c50a9bc2feb87067d1b97|
	\SystemRoot\system32\DRIVERS\srv.sys ("C:\WINDOWS\system32\drivers\srv.sys") File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
	\SystemRoot\System32\Drivers\HTTP.sys ("C:\WINDOWS\system32\drivers\http.sys") File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
	\SystemRoot\system32\drivers\kmixer.sys ("C:\WINDOWS\system32\drivers\kmixer.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
	\WINDOWS\system32\ntdll.dll ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|

Runned processes/modules:

	PROCESS	System, PID = 4, USER = , Command Line = 

	PROCESS	smss, PID = 496, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = 
	  \SystemRoot\System32\smss.exe, MID = 48580000,  ("C:\WINDOWS\system32\smss.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 50688, File modification date = 17/08/2004  12:05, File description =    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (()  .   .) |-2018233285|0x6782caa22c9a071b3b4f7640952a8484|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|

	PROCESS	csrss, PID = 552, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
		  "c:\windows\system32\csrss.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6144, File modification date = 17/08/2004  12:04, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1024271834|0x7a2a670afc37eb03e36cf9f08132c765|
		  "c:\windows\system32\basesrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52736, File modification date = 17/08/2004  12:04, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |418240048|0x25f8893a3f0fd075c44471b663b307d9|
	  \??\C:\WINDOWS\system32\csrss.exe, MID = 4a680000,  ("\\?\c:\windows\system32\csrss.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6144, File modification date = 17/08/2004  12:04, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1024271834|0x7a2a670afc37eb03e36cf9f08132c765|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\CSRSRV.dll, MID = 75b10000,  ("c:\windows\system32\csrsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 17/08/2004  12:04, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1852343270|0x46fde3a18bf348cb37c69f80e8f36925|
	  C:\WINDOWS\system32\basesrv.dll, MID = 75b20000,  ("c:\windows\system32\basesrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52736, File modification date = 17/08/2004  12:04, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |418240048|0x25f8893a3f0fd075c44471b663b307d9|
	  C:\WINDOWS\system32\winsrv.dll, MID = 75b30000,  ("c:\windows\system32\winsrv.dll") File version = 5.1.2600.3103 (xpsp_sp2_gdr.070316-1309), File size = 292864, File modification date = 17/03/2007  13:45, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.3103, Company name =   (  .   .) |1483574970|0xf2f0fecea9541555695839088d03d1f4|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\KERNEL32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\sxs.dll, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|

	PROCESS	winlogon, PID = 576, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = winlogon.exe
		  "c:\windows\system32\winlogon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 503808, File modification date = 17/09/2004  12:16, File description =     Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1628532717|0xa975a70fcefe2a224412214320c89ded|
	  \??\C:\WINDOWS\system32\winlogon.exe, MID = 1000000,  ("\\?\c:\windows\system32\winlogon.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 503808, File modification date = 17/09/2004  12:16, File description =     Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1628532717|0xa975a70fcefe2a224412214320c89ded|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\NDdeApi.dll, MID = 75910000,  ("c:\windows\system32\nddeapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 17/08/2004  12:04, File description =      DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1135066814|0x594cb60688052925a47bb9bf2eb0581d|
	  C:\WINDOWS\system32\PROFMAP.dll, MID = 75900000,  ("c:\windows\system32\profmap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27648, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1817382660|0xe240a14197389c6ab541c45c33f7227c|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 17/08/2004  12:04, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76ba0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 17/08/2004  12:04, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |129386638|0xdfb5008b38bd3a487469b689d9813c0f|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 17/08/2004  12:04, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 17/08/2004  12:04, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 17/08/2004  12:04, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\odbcint.dll, MID = 20000000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 17/08/2004  12:03, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\SHSVCS.dll, MID = 776d0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
	  C:\WINDOWS\system32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 17/08/2004  12:04, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\WINSCARD.DLL, MID = 723b0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 98816, File modification date = 17/08/2004  12:04, File description = API - (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |739881181|0x05e1bf6816d52354e88fd7cf451b4871|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 17/08/2004  12:04, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\sxs.dll, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\cscdll.dll, MID = 765d0000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\klogon.dll, MID = 10000000,  ("c:\windows\system32\klogon.dll") File version = 6.0.1.411, File size = 94314, File modification date = 01/11/2006  12:42, File description = Logon Visualizer, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |802746315|0x3f97f0f4a9a6d21a1a496c1d8fe84e4e|
	  C:\WINDOWS\system32\WlNotify.dll, MID = 75920000,  ("c:\windows\system32\wlnotify.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 17/08/2004  12:05, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 17/08/2004  12:04, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 17/08/2004  12:04, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\cscui.dll, MID = 77a10000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 17/08/2004  12:04, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 20/10/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1810000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|

	PROCESS	services, PID = 620, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\services.exe
		  "c:\windows\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 17/08/2004  12:05, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
	  C:\WINDOWS\system32\services.exe, MID = 1000000,  ("c:\windows\system32\services.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 17/08/2004  12:05, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\SCESRV.dll, MID = 77b60000,  ("c:\windows\system32\scesrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 320000, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1438568854|0xb72ce4d02710c8bdbb4672a4f93e7a14|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  C:\WINDOWS\system32\umpnpmgr.dll, MID = 7dba0000,  ("c:\windows\system32\umpnpmgr.dll") File version = 5.1.2600.2744 (xpsp_sp2_gdr.050822-1647), File size = 123904, File modification date = 23/08/2005  03:39, File description =     (Plug-and-Play), Product Name =   Microsoft Windows, Product version = 5.1.2600.2744, Company name =   (  .   .) |1108115175|0x4aaf4c1da44ddf92bb10486f8ce7d416|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 17/08/2004  12:04, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 17/08/2004  12:04, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\eventlog.dll, MID = 772f0000,  ("c:\windows\system32\eventlog.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1293876684|0x6cd35be0991df15a07bc60b894e6482b|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 17/08/2004  12:04, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 17/08/2004  12:04, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|

	PROCESS	lsass, PID = 632, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\lsass.exe
		  "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	  C:\WINDOWS\system32\lsass.exe, MID = 1000000,  ("c:\windows\system32\lsass.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\LSASRV.dll, MID = 75410000,  ("c:\windows\system32\lsasrv.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 723968, File modification date = 17/08/2006  12:29, File description =  DLL  LSA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2976, Company name =   (  .   .) |-2118863780|0x0cb6733d495100a33d8be1db73c7d644|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 17/08/2004  12:04, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 17/08/2004  12:04, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\SAMSRV.dll, MID = 74400000,  ("c:\windows\system32\samsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 427520, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1859521497|0x356779ca52f2b3c073335b9aad53ecff|
	  C:\WINDOWS\system32\cryptdll.dll, MID = 76770000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:04, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983794638|0xade2386e4cf3e9bb97ec1545ab999560|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\msprivs.dll, MID = 20000000,  ("c:\windows\system32\msprivs.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 17/08/2004  12:02, File description = Microsoft Privilege Translations, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100154152|0x06d8bdd91fd844e1a4c3107d531063fd|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cd0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.2698 (xpsp_sp2_gdr.050614-1522), File size = 295936, File modification date = 15/06/2005  17:50, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-882011971|0xc998ef86b2203f36454aad8a3cac3efd|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 17/08/2004  12:04, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\netlogon.dll, MID = 74470000,  ("c:\windows\system32\netlogon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 407040, File modification date = 17/08/2004  12:04, File description = Net Logon Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1815651328|0x4922b0c854a0b4a2cd2061bbfe29b251|
	  C:\WINDOWS\system32\w32time.dll, MID = 767a0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\schannel.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226), File size = 144896, File modification date = 25/04/2007  14:22, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112551157|0x0964bdcf0b80bede5a9ec6f8d53474b0|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\wdigest.dll, MID = 74340000,  ("c:\windows\system32\wdigest.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49152, File modification date = 17/08/2004  12:04, File description = Microsoft Digest Access, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456741888|0x8514979dd07f96364f0e1fd451fdb8f5|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\scecli.dll, MID = 743d0000,  ("c:\windows\system32\scecli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 183808, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1597674520|0x5d5a37c65a5e86ed3811a4128b3a84e4|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\ipsecsvc.dll, MID = 743a0000,  ("c:\windows\system32\ipsecsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 183808, File modification date = 17/08/2004  12:04, File description = Windows IPSEC SPD Server DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1339158444|0x328339d5923c6b1fe79d4244a9a8c725|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  C:\WINDOWS\system32\oakley.DLL, MID = 75700000,  ("c:\windows\system32\oakley.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 267264, File modification date = 17/08/2004  12:04, File description =   Oakley, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1811355481|0xdf4547567f210f88f74f31de6e5a6997|
	  C:\WINDOWS\system32\WINIPSEC.DLL, MID = 74330000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 17/08/2004  12:04, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565047191|0x9fb629f466ba79ab15e9238ecfe723cf|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\pstorsvc.dll, MID = 74360000,  ("c:\windows\system32\pstorsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1065846480|0x15859ade25a14154f0153ec5c3866272|
	  C:\WINDOWS\system32\psbase.dll, MID = 74380000,  ("c:\windows\system32\psbase.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1945025660|0x639ebd64394197c0f74a1a2ef66ed18e|
	  C:\WINDOWS\system32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.2133 (xpsp.040514-1639), File size = 137216, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2133, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2063081844|0xcacd2c63a79268d131ea37e85524cc44|

	PROCESS	svchost, PID = 792, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost -k DcomLaunch
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 17/08/2004  12:04, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 17/08/2004  12:04, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  c:\windows\system32\rpcss.dll, MID = 76a60000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  c:\windows\system32\termsrv.dll, MID = 766e0000,  ("c:\windows\system32\termsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
	  c:\windows\system32\ICAAPI.dll, MID = 74f30000,  ("c:\windows\system32\icaapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 17/08/2004  12:04, File description = DLL Interface to TermDD Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |422815548|0xa7b6bc89a619b6b747d9f9f7dc215cfa|
	  c:\windows\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  c:\windows\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  c:\windows\system32\mstlsapi.dll, MID = 750d0000,  ("c:\windows\system32\mstlsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 115712, File modification date = 17/08/2004  12:04, File description = Microsoft Terminal Server Licensing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-7798303|0x01b9bd9a50558626fec221f5323dd5d2|
	  c:\windows\system32\ACTIVEDS.dll, MID = 77cb0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 194048, File modification date = 17/08/2004  12:04, File description =  DLL   AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2101867215|0xf37ae01afa020a00337639c5ca4c2d06|
	  c:\windows\system32\adsldpc.dll, MID = 76e00000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 17/08/2004  12:04, File description =  DLL  LDAP AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1861023778|0xc4e82ad1f55c18f7d0a9c1701ae0aacd|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  c:\windows\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/08/2004  12:04, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76ba0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 17/08/2004  12:04, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |129386638|0xdfb5008b38bd3a487469b689d9813c0f|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 17/08/2004  12:04, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|

	PROCESS	svchost, PID = 840, USER = , Command Line = C:\WINDOWS\system32\svchost -k rpcss
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\rpcss.dll, MID = 76a60000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 17/08/2004  12:04, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|

	PROCESS	svchost, PID = 904, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\System32\svchost.exe -k netsvcs
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\System32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\System32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 17/08/2004  12:04, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 17/08/2004  12:04, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\windows\system32\shsvcs.dll, MID = 776d0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
	  C:\WINDOWS\System32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 17/08/2004  12:04, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  c:\windows\system32\dhcpcsvc.dll, MID = 76d70000,  ("c:\windows\system32\dhcpcsvc.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
	  c:\windows\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\System32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  c:\windows\system32\wzcsvc.dll, MID = 77610000,  ("c:\windows\system32\wzcsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 17/08/2004  12:16, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
	  c:\windows\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 17/08/2004  12:04, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  c:\windows\system32\WMI.dll, MID = 76d20000,  ("c:\windows\system32\wmi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 17/08/2004  12:03, File description = WMI DC and DP functionality, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491571787|0x2d1360943eaad724e794541eef38954c|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  c:\windows\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 17/08/2004  12:04, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  c:\windows\system32\ESENT.dll, MID = 6f940000,  ("c:\windows\system32\esent.dll") File version = 5.1.2468.0 (Lab03_N(jliem).010306-1456), File size = 1085952, File modification date = 20/10/2005  22:30, File description =    , Product Name = Microsoft Windows Operating System, Product version = 5.1.2468.0, Company name = Microsoft Corporation ((C)   (Microsoft Corp.), 1981-2001.) |1128106826|0x8699a155bb7b1fb9a9b08af4a7fa5f52|
	  c:\windows\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/08/2004  12:04, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\System32\rastls.dll, MID = 76bb0000,  ("c:\windows\system32\rastls.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 112640, File modification date = 17/08/2004  12:04, File description =    PPP EAP-TLS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |94570726|0xb020978349743f090e521b53d6a2a149|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 76650000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 514560, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-910066801|0x397f812c5f0ab9fa08f034c3d3b688c5|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\WININET.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\System32\MPRAPI.dll, MID = 76d30000,  ("c:\windows\system32\mprapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 87040, File modification date = 17/08/2004  12:04, File description = Windows NT MP Router Administration DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-973786734|0x8cbd5fab0bc10357d0c982ffc5d89af0|
	  C:\WINDOWS\System32\ACTIVEDS.dll, MID = 77cb0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 194048, File modification date = 17/08/2004  12:04, File description =  DLL   AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2101867215|0xf37ae01afa020a00337639c5ca4c2d06|
	  C:\WINDOWS\System32\adsldpc.dll, MID = 76e00000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 17/08/2004  12:04, File description =  DLL  LDAP AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1861023778|0xc4e82ad1f55c18f7d0a9c1701ae0aacd|
	  C:\WINDOWS\System32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\System32\RASAPI32.dll, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 17/08/2004  12:04, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\System32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 17/08/2004  12:04, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\System32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 17/08/2004  12:04, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\System32\SCHANNEL.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226), File size = 144896, File modification date = 25/04/2007  14:22, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112551157|0x0964bdcf0b80bede5a9ec6f8d53474b0|
	  C:\WINDOWS\System32\WinSCard.dll, MID = 723b0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 98816, File modification date = 17/08/2004  12:04, File description = API - (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |739881181|0x05e1bf6816d52354e88fd7cf451b4871|
	  C:\WINDOWS\System32\raschap.dll, MID = 76cd0000,  ("c:\windows\system32\raschap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69632, File modification date = 17/08/2004  12:04, File description = Remote Access PPP CHAP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1908848325|0x52489757d3090f02c290c90877f1492e|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 17/08/2004  12:04, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  c:\windows\system32\schedsvc.dll, MID = 76860000,  ("c:\windows\system32\schedsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 17/08/2004  12:04, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
	  c:\windows\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 17/08/2004  12:04, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\System32\MSIDLE.DLL, MID = 74f10000,  ("c:\windows\system32\msidle.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 17/08/2004  12:04, File description = User Idle Monitor, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1560411407|0x2cb2667f7caf6afa2233a5568b2b4dd4|
	  c:\windows\system32\audiosrv.dll, MID = 70e40000,  ("c:\windows\system32\audiosrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 17/08/2004  12:04, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
	  c:\windows\system32\wkssvc.dll, MID = 76e30000,  ("c:\windows\system32\wkssvc.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
	  c:\windows\system32\qmgr.dll, MID = 59620000,  ("c:\windows\system32\qmgr.dll") File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 17/08/2004  12:04, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  c:\windows\system32\SHFOLDER.dll, MID = 76760000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 17/08/2004  12:04, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-172052297|0x61c31ca3b2492c93724af65ec799e77c|
	  c:\windows\system32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 17/08/2004  12:04, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  c:\windows\system32\srvsvc.dll, MID = 75050000,  ("c:\windows\system32\srvsvc.dll") File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
	  c:\windows\system32\hidserv.dll, MID = 68e50000,  ("c:\windows\system32\hidserv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 21504, File modification date = 17/08/2004  12:04, File description = HID Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2116251098|0xa5b29888a120408e674663b7b09a3ac0|
	  c:\windows\system32\HID.DLL, MID = 68e60000,  ("c:\windows\system32\hid.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 17/08/2004  12:16, File description = Hid User Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529169033|0xe23e7431ad6f44d2b0e39a4dacc7a704|
	  c:\windows\pchealth\helpctr\binaries\pchsvc.dll, MID = 74f00000,  ("c:\windows\pchealth\helpctr\binaries\pchsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 17/08/2004  12:04, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
	  c:\windows\system32\es.dll, MID = 77700000,  ("c:\windows\system32\es.dll") File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
	  c:\windows\system32\ersvc.dll, MID = 74f40000,  ("c:\windows\system32\ersvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 17/08/2004  12:04, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
	  c:\windows\system32\dmserver.dll, MID = 74f50000,  ("c:\windows\system32\dmserver.dll") File version = 2600.2180.503.0, File size = 24064, File modification date = 17/08/2004  12:04, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
	  c:\windows\system32\cryptsvc.dll, MID = 76d00000,  ("c:\windows\system32\cryptsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 17/08/2004  12:04, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
	  c:\windows\system32\certcli.dll, MID = 76b50000,  ("c:\windows\system32\certcli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196096, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |321406248|0x9f00937676fca40de3a772e076ccb39d|
	  C:\WINDOWS\System32\HNETCFG.DLL, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  c:\windows\system32\seclogon.dll, MID = 73ce0000,  ("c:\windows\system32\seclogon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
	  c:\windows\system32\sens.dll, MID = 722b0000,  ("c:\windows\system32\sens.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 17/08/2004  12:04, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  c:\windows\system32\srsvc.dll, MID = 75160000,  ("c:\windows\system32\srsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
	  c:\windows\system32\POWRPROF.dll, MID = 74a90000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 17/08/2004  12:04, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1298904202|0x604f22705c12080012968d72d97c6d64|
	  c:\windows\system32\trkwks.dll, MID = 75030000,  ("c:\windows\system32\trkwks.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 17/08/2004  12:04, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
	  C:\WINDOWS\System32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  c:\windows\system32\w32time.dll, MID = 767a0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
	  c:\windows\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  c:\windows\system32\wbem\wmisvc.dll, MID = 5a8f0000,  ("c:\windows\system32\wbem\wmisvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 17/08/2004  12:04, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
	  C:\WINDOWS\system32\VSSAPI.DLL, MID = 753a0000,  ("c:\windows\system32\vssapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 430592, File modification date = 17/08/2004  12:04, File description = Microsoft Volume Shadow Copy Requestor/Writer Services API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1849286963|0xce576cee0842e1fca711d95653d2f9c1|
	  c:\windows\system32\wuauserv.dll, MID = 50000000,  ("c:\windows\system32\wuauserv.dll") File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 17/08/2004  12:04, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
	  C:\WINDOWS\system32\wuaueng.dll, MID = 50040000,  ("c:\windows\system32\wuaueng.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 1712984, File modification date = 30/07/2007  14:19, File description = Windows Update Agent, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |567071557|0x3eec20e41f5f331b94002970ceaec92f|
	  C:\WINDOWS\System32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 17/08/2004  12:05, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\System32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\System32\mspatcha.dll, MID = 605c0000,  ("c:\windows\system32\mspatcha.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 17/08/2004  12:04, File description = Microsoft(R) Patch Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266572750|0x40e6f5398d37ef77ce9a45177cbfda03|
	  c:\windows\system32\browser.dll, MID = 77310000,  ("c:\windows\system32\browser.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 17/08/2004  12:04, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
	  c:\windows\system32\wscsvc.dll, MID = 4c100000,  ("c:\windows\system32\wscsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 17/08/2004  12:04, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
	  c:\windows\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  c:\windows\system32\netshell.dll, MID = 763d0000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
	  c:\windows\system32\credui.dll, MID = 76bf0000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 164352, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1301523741|0x144304f02cef124b4ffc57dad95f2bca|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75250000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 214528, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1186626859|0x7fd8eca23963c13600d681de85996e3e|
	  C:\WINDOWS\System32\Wbem\wbemcore.dll, MID = 76290000,  ("c:\windows\system32\wbem\wbemcore.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 530944, File modification date = 17/08/2004  12:04, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1022282652|0xafcd7e2202ffccf56b73f0fb9d1f92c0|
	  C:\WINDOWS\System32\Wbem\esscli.dll, MID = 752d0000,  ("c:\windows\system32\wbem\esscli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247808, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1415488570|0xf0b1f4f8d4e5d640d98dd4a7c6bbb510|
	  C:\WINDOWS\System32\Wbem\FastProx.dll, MID = 75660000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 472064, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-792155897|0x61bf3d7e1b81d9705b054c5ee0660355|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74e90000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1042801053|0xe08385fba3ad1c8017f9a391ff846659|
	  C:\WINDOWS\system32\comsvcs.dll, MID = 760c0000,  ("c:\windows\system32\comsvcs.dll") File version = 2001.12.4414.308, File size = 1267200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-96309662|0xd76b93af3382a98ca12d748bd0890fde|
	  C:\WINDOWS\system32\colbact.DLL, MID = 750f0000,  ("c:\windows\system32\colbact.dll") File version = 2001.12.4414.308, File size = 60416, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1965206585|0x61976f72986b38e355a13bd1f39a6797|
	  C:\WINDOWS\system32\MTXCLU.DLL, MID = 750b0000,  ("c:\windows\system32\mtxclu.dll") File version = 2001.12.4414.311, File size = 66560, File modification date = 01/03/2006  19:44, File description = MS DTC amd MTS clustering support DLL, Product Name = COM Services, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-1199266982|0x66962ec14a48ab54b3ef2668b0d55c83|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\System32\CLUSAPI.DLL, MID = 76d90000,  ("c:\windows\system32\clusapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57856, File modification date = 17/08/2004  12:04, File description = Cluster API Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1563754742|0x7a745ffc0fc5b9cd58b8078fb9c5017a|
	  C:\WINDOWS\System32\RESUTILS.DLL, MID = 75070000,  ("c:\windows\system32\resutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58880, File modification date = 17/08/2004  12:04, File description = Microsoft Cluster Resource Utility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190749271|0x0cd39488ace702f54263ec35176d15c8|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 74fe0000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 97792, File modification date = 17/08/2004  12:04, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |206636464|0x82e0563f98ba1fab48a18dd5ebedf715|
	  C:\WINDOWS\system32\wbem\repdrvfs.dll, MID = 751c0000,  ("c:\windows\system32\wbem\repdrvfs.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |642863371|0xc9de8d23517f72eaa7065597b1a7720b|
	  C:\WINDOWS\system32\wbem\wmiprvsd.dll, MID = 599d0000,  ("c:\windows\system32\wbem\wmiprvsd.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 437248, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1721772680|0x498ce5fcdc44b9a9a800bc2e05630b87|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 17/08/2004  12:04, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\wbem\wbemess.dll, MID = 75350000,  ("c:\windows\system32\wbem\wbemess.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 273920, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1110874053|0xa1129f477083a8c617d7b07d1fc7487e|
	  C:\WINDOWS\system32\wbem\ncprov.dll, MID = 5fc60000,  ("c:\windows\system32\wbem\ncprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 47104, File modification date = 17/08/2004  12:04, File description = Non-COM WMI Event Provision APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-742919636|0x6674ef0f555409de0bf269116a4ca9ff|
	  C:\WINDOWS\System32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 17/08/2004  12:04, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\System32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  c:\windows\system32\netman.dll, MID = 77cf0000,  ("c:\windows\system32\netman.dll") File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
	  c:\windows\system32\WZCSAPI.DLL, MID = 72ff0000,  ("c:\windows\system32\wzcsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51712, File modification date = 17/08/2004  12:16, File description = Wireless Zero Configuration service API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1737372417|0x4ee37cefcf6f11fbbcbb381620ba1b6f|
	  C:\WINDOWS\system32\upnp.dll, MID = 76dd0000,  ("c:\windows\system32\upnp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 132608, File modification date = 17/08/2004  12:04, File description = Universal Plug and Play API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1640714709|0x296fc471c4d403a263ff652a08ac4704|
	  C:\WINDOWS\system32\SSDPAPI.dll, MID = 74ec0000,  ("c:\windows\system32\ssdpapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34816, File modification date = 17/08/2004  12:04, File description = SSDP Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-853188418|0xea67cea66574d77e10fec372afdf26e8|
	  C:\WINDOWS\System32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\System32\RASDLG.dll, MID = 768b0000,  ("c:\windows\system32\rasdlg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 667136, File modification date = 17/08/2004  12:04, File description = API     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1681926931|0x6bc4ea8eb46e1a28bf49ab7c0bc1758e|
	  C:\WINDOWS\system32\msxml3.dll, MID = 74940000,  ("c:\windows\system32\msxml3.dll") File version = 8.90.1101.0, File size = 1104896, File modification date = 26/06/2007  06:10, File description = MSXML 3.0 SP9, Product Name = Microsoft(R) MSXML 3.0 SP9, Product version = 8.90.1101.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2007) |-667680133|0x3cc14c529ff813f93155d7a3525df512|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 17/08/2004  12:04, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\advpack.dll, MID = 75220000,  ("c:\windows\system32\advpack.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 100352, File modification date = 17/08/2004  12:04, File description = ADVPACK, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |512852977|0x48dc3e955fe1ccd75df6fec7bc61c1df|
	  C:\WINDOWS\system32\wuapi.dll, MID = 506a0000,  ("c:\windows\system32\wuapi.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 549720, File modification date = 30/07/2007  14:19, File description = Windows Update Client API, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1590345386|0xedced3393985ed2d86641747edca53ae|
	  C:\WINDOWS\system32\wbem\wbemcons.dll, MID = 73cf0000,  ("c:\windows\system32\wbem\wbemcons.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description = WMI Standard Event Consumers, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-632448235|0x90cfbeab0c25c855f48b86b3323636b2|

	PROCESS	svchost, PID = 952, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k NetworkService
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\dnsrslvr.dll, MID = 76750000,  ("c:\windows\system32\dnsrslvr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 17/08/2004  12:04, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
	  c:\windows\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|

	PROCESS	svchost, PID = 1092, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k LocalService
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 17/08/2004  12:04, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 17/08/2004  12:04, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\windows\system32\lmhsvc.dll, MID = 74c00000,  ("c:\windows\system32\lmhsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 17/08/2004  12:04, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\webclnt.dll, MID = 5abc0000,  ("c:\windows\system32\webclnt.dll") File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
	  C:\WINDOWS\system32\WININET.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  c:\windows\system32\regsvc.dll, MID = 76ad0000,  ("c:\windows\system32\regsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1569613025|0x461fd36d40dece5f63c0acf7b66899d2|
	  c:\windows\system32\ssdpsrv.dll, MID = 76620000,  ("c:\windows\system32\ssdpsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|

	PROCESS	spoolsv, PID = 1196, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\spoolsv.exe
		  "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
	  C:\WINDOWS\system32\spoolsv.exe, MID = 1000000,  ("c:\windows\system32\spoolsv.exe") File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\SPOOLSS.DLL, MID = 742a0000,  ("c:\windows\system32\spoolss.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 17/08/2004  12:04, File description = Spooler SubSystem DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-616758463|0x58f1353020b1bf30b6890bb3251471e7|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\localspl.dll, MID = 75b80000,  ("c:\windows\system32\localspl.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 342528, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1133760147|0x419b4ea8a0fba2939e16d2c82de2293c|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\winspool.drv, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 17/08/2004  12:05, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\cnbjmon.dll, MID = 74260000,  ("c:\windows\system32\cnbjmon.dll") File version = 5.1.2600.2082 (xpsp(skatari).040213-0952), File size = 48128, File modification date = 17/08/2004  12:16, File description =     Canon Bubble-Jet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2082, Company name =   (  .   .) |-1278402524|0xc267f467a22ad261de0c443bec5e68a7|
	  C:\WINDOWS\system32\mdimon.dll, MID = 970000,  ("c:\windows\system32\mdimon.dll") File version = 11.3.1897.0, File size = 17920, File modification date = 18/06/2003  21:31, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.1897.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |-2083428410|0xcf0376023360aadd55c89ba50564afdc|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\pjlmon.dll, MID = 74240000,  ("c:\windows\system32\pjlmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 17/08/2004  12:16, File description = PJL Language monitor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1959717125|0x01b371b2f51a318513776b6c4b6ae50f|
	  C:\WINDOWS\system32\tcpmon.dll, MID = 723e0000,  ("c:\windows\system32\tcpmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 46080, File modification date = 17/08/2004  12:04, File description =    TCP/IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1757915598|0x73893592069e625c63ba33f755ec4ed7|
	  C:\WINDOWS\system32\usbmon.dll, MID = 723d0000,  ("c:\windows\system32\usbmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 17/08/2004  12:04, File description = Standard Dynamic Printing Port Monitor DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-833273859|0x44ed1b16547ac163585e84e0630da3e2|
	  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll, MID = 980000,  ("c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll") File version = 11.3.1897.0, File size = 18944, File modification date = 18/06/2003  21:31, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.1897.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |-1464179435|0x58e13a2292839321d3cdc918d5a4f5ae|
	  C:\WINDOWS\System32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 17/08/2004  12:04, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\win32spl.dll, MID = 75be0000,  ("c:\windows\system32\win32spl.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 17/08/2004  12:04, File description = 32-  API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1876362858|0x49d07a8ca1728f2058fb640d58783886|
	  C:\WINDOWS\system32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 17/08/2004  12:04, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 17/08/2004  12:04, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\inetpp.dll, MID = 742c0000,  ("c:\windows\system32\inetpp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 17/08/2004  12:04, File description =  DLL Internet Print Provider, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2047356304|0xd9e0a0f626a878000b14ec5d7ad6e55e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|

	PROCESS	explorer, PID = 1412, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = C:\WINDOWS\Explorer.EXE
		  "c:\windows\explorer.exe" File version = 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234), File size = 1033728, File modification date = 13/06/2007  13:23, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.3156, Company name =   (  .   .) |-1482101721|0x3630dbb63bad434e3b1f39c2b61fc62f|
	  C:\WINDOWS\Explorer.EXE, MID = 1000000,  ("c:\windows\explorer.exe") File version = 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234), File size = 1033728, File modification date = 13/06/2007  13:23, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.3156, Company name =   (  .   .) |-1482101721|0x3630dbb63bad434e3b1f39c2b61fc62f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\BROWSEUI.dll, MID = 75f50000,  ("c:\windows\system32\browseui.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\SHDOCVW.dll, MID = 7e1e0000,  ("c:\windows\system32\shdocvw.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 76650000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 514560, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-910066801|0x397f812c5f0ab9fa08f034c3d3b688c5|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\WININET.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\System32\cscui.dll, MID = 77a10000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
	  C:\WINDOWS\System32\CSCDLL.dll, MID = 765d0000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
	  C:\WINDOWS\system32\themeui.dll, MID = 5bf40000,  ("c:\windows\system32\themeui.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 386560, File modification date = 17/08/2004  12:04, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1148789537|0xe034619ae8128d70b09d51c5a9655ea2|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76350000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4608, File modification date = 17/08/2004  12:04, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1779676053|0x0a46c776dd81f03ba9fa94efc3fc7afd|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 17/08/2004  12:04, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll, MID = 67500000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\scrchpg.dll") File version = 1.0.6.411, File size = 69739, File modification date = 01/11/2006  12:38, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |1081495946|0xe4f4b2a19754604fce54d33ac326cc1a|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\msutb.dll, MID = 60130000,  ("c:\windows\system32\msutb.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 195072, File modification date = 17/08/2004  12:04, File description =  (DLL)  MSUTB, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |776068176|0x054933ea809c980e31ad858bfdcaf622|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = 1170000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = 11c0000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76960000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), File size = 19968, File modification date = 01/09/2005  02:28, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2751, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1425770188|0x3e46da8ae679b87d309ebbd3e12283d0|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76970000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/08/2004  12:04, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = 11f0000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\Program Files\Internet Explorer\IEXPLORE32.win, MID = 1a80000,  ("c:\program files\internet explorer\iexplore32.win") File version = (null), File size = 29305, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1274647634|0x75d6f6bbe149275f2fdca16b27b4cc76|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = 1f50000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\urlmon.dll, MID = 7df10000,  ("c:\windows\system32\urlmon.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 614912, File modification date = 22/08/2007  13:14, File description =  OLE32  Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |695922910|0xc69ec1a1ee73552d3129e6c2a6db742d|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\nvcpl.dll, MID = 10000000,  ("c:\windows\system32\nvcpl.dll") File version = 6.14.10.7184, File size = 5537792, File modification date = 24/02/2005  15:32, File description = NVIDIA Display Properties Extension, Product Name = NVIDIA Compatible Windows 2000 Display driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-1724730246|0x03f469b6c2e743565a41ad0997fd493c|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 17/08/2004  12:05, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\OLEACC.dll, MID = 74c40000,  ("c:\windows\system32\oleacc.dll") File version = 4.2.5406.0 (xpclient.010817-1148), File size = 163328, File modification date = 20/10/2001  12:00, File description = Active Accessibility Core Component, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1133819602|0x38217599cf49d4f8ebd3cec5894ed0c9|
	  C:\WINDOWS\system32\NVRSRU.DLL, MID = 2310000,  ("c:\windows\system32\nvrsru.dll") File version = 6.14.10.7184, File size = 249856, File modification date = 24/02/2005  15:32, File description = NVIDIA Russian language resource library, Product Name = NVIDIA Compatible Windows 2000 Display driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |1073575908|0xf63f2add913caf9f960b95d2ef6395d6|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 17/08/2004  12:04, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 17/08/2004  12:04, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\nvshell.dll, MID = 2350000,  ("c:\windows\system32\nvshell.dll") File version = 6.14.10.10035, File size = 466944, File modification date = 24/02/2005  15:32, File description = NVIDIA Desktop Explorer, Version 100.35 , Product Name = NVIDIA Desktop Explorer, Version 100.35 , Product version = 6.14.10.10035, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |123354682|0xaaaa6e67b85eafccc89fe7cc7b14971b|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 17/08/2004  12:04, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\webcheck.dll, MID = 74af0000,  ("c:\windows\system32\webcheck.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
	  C:\WINDOWS\system32\stobject.dll, MID = 75d70000,  ("c:\windows\system32\stobject.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 122368, File modification date = 17/08/2004  12:04, File description =    Systray, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |21103765|0xbf777cb6f3c4a86d811505582769010b|
	  C:\WINDOWS\system32\BatMeter.dll, MID = 74ab0000,  ("c:\windows\system32\batmeter.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 28672, File modification date = 17/08/2004  12:04, File description = Battery Meter Helper DLL, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |531317817|0xaebe4b82f63974384aea2520cb34b23b|
	  C:\WINDOWS\system32\POWRPROF.dll, MID = 74a90000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 17/08/2004  12:04, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1298904202|0x604f22705c12080012968d72d97c6d64|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 17/08/2004  12:04, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 20/10/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\WINDOWS\system32\NETSHELL.dll, MID = 763d0000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 17/08/2004  12:04, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\credui.dll, MID = 76bf0000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 164352, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1301523741|0x144304f02cef124b4ffc57dad95f2bca|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\shellex.dll, MID = 67800000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\shellex.dll") File version = 6.0.1.411, File size = 41067, File modification date = 01/11/2006  12:43, File description = Windows Shell Extension, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |-23339912|0x836a580b5800c8070854060be5ca94c7|
	  C:\WINDOWS\system32\browselc.dll, MID = 12c0000,  ("c:\windows\system32\browselc.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 66560, File modification date = 17/08/2004  12:02, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-855201112|0x599c0ccb1f4843b2f17450a078d05ded|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 17/08/2004  12:04, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 17/08/2004  12:04, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\odbcint.dll, MID = 32d0000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 17/08/2004  12:03, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\DUSER.dll, MID = 6c730000,  ("c:\windows\system32\duser.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 304128, File modification date = 17/08/2004  12:04, File description = Windows DirectUser Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663281275|0x8804a551680a2811621fff1235625393|
	  C:\WINDOWS\system32\MLANG.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 17/08/2004  12:04, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\shdoclc.dll, MID = 3cd0000,  ("c:\windows\system32\shdoclc.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 559104, File modification date = 17/08/2004  12:03, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-356448014|0x83311662a0706746f756fc7a1d953d2e|
	  C:\WINDOWS\system32\mydocs.dll, MID = 723f0000,  ("c:\windows\system32\mydocs.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 17/08/2004  12:04, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
	  C:\WINDOWS\system32\zipfldr.dll, MID = 73340000,  ("c:\windows\system32\zipfldr.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 17/08/2004  12:04, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
	  C:\WINDOWS\system32\IMM32.dll, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 17/08/2004  12:04, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\RASAPI32.DLL, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 17/08/2004  12:04, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 17/08/2004  12:04, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 17/08/2004  12:04, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\system32\sensapi.dll, MID = 72290000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 17/08/2004  12:04, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-330752720|0x28b3398819e998adfe09d8d26e230258|
	  C:\WINDOWS\System32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\DSOUND.dll, MID = 73ed0000,  ("c:\windows\system32\dsound.dll") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 367616, File modification date = 17/08/2004  12:04, File description = DirectSound, Product Name =   Microsoft(R) Windows(R), Product version = 5.3.2600.2180, Company name =   (  .   .) |-1604342746|0x8b4c47df3f10153e8f20dd1c0cf3341b|
	  C:\WINDOWS\system32\twext.dll, MID = 58b90000,  ("c:\windows\system32\twext.dll") File version = 6.00.3800.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 17/08/2004  12:04, File description = :  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name = Microsoft Corporation (  .   .) |-1079143813|0xc43dece53297216c81f1926fa7714192|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 17/08/2004  12:04, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f30000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:04, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1603469464|0x84e62f048e179a53623739b31691f608|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71bf0000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 17/08/2004  12:04, File description = Microsoft LAN Manager, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-164401074|0x7e27508a7492a748ebface597d51b8ac|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cb0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80896, File modification date = 17/08/2004  12:04, File description =   GUI  NT LM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1722132880|0x61b52d7c6c0e902cb8b63c9ab545f0bf|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c70000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 245760, File modification date = 17/08/2004  12:04, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-871070814|0x9568897cd0f9caf45c3aa541bd490782|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f40000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 17/08/2004  12:04, File description =   Web DAV, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1728990969|0xa3777781ed5a0f7a5f81bd0049b331f3|
	  C:\WINDOWS\system32\sti.dll, MID = 73b60000,  ("c:\windows\system32\sti.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68608, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |95021245|0x6ac41be386e49994131effad9ff7c14d|
	  C:\WINDOWS\system32\CFGMGR32.dll, MID = 74aa0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 17/08/2004  12:02, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1794689465|0x7a3971658d42fe35804f88e6e5637bd9|
	  C:\Program Files\Microsoft Office\OFFICE11\msohev.dll, MID = 325c0000,  ("c:\program files\microsoft office\office11\msohev.dll") File version = 11.0.5510, File size = 67128, File modification date = 15/07/2003  02:52, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
	  C:\WINDOWS\system32\diskcopy.dll, MID = 6d200000,  ("c:\windows\system32\diskcopy.dll") File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 1501696, File modification date = 20/10/2001  12:00, File description = Windows DiskCopy, Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |-1768062996|0xa525c37757a1da8ae5acb10feec1ac28|

	PROCESS	SOUNDMAN, PID = 1568, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\SOUNDMAN.EXE" 
		  "c:\windows\soundman.exe" File version = 5.1.0.30, File size = 77824, File modification date = 15/11/2004  10:20, File description = Realtek Sound Manager, Product Name = Realtek Sound Manager, Product version = 5.1.0.29, Company name = Realtek Semiconductor Corp. (Copyright (c) 2001-2004 Realtek Semiconductor Corp.) |-1039784557|0xff86e640e4e0fd18cfb4696b38867222|
	  C:\WINDOWS\SOUNDMAN.EXE, MID = 400000,  ("c:\windows\soundman.exe") File version = 5.1.0.30, File size = 77824, File modification date = 15/11/2004  10:20, File description = Realtek Sound Manager, Product Name = Realtek Sound Manager, Product version = 5.1.0.29, Company name = Realtek Semiconductor Corp. (Copyright (c) 2001-2004 Realtek Semiconductor Corp.) |-1039784557|0xff86e640e4e0fd18cfb4696b38867222|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\HID.DLL, MID = 68e60000,  ("c:\windows\system32\hid.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 17/08/2004  12:16, File description = Hid User Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529169033|0xe23e7431ad6f44d2b0e39a4dacc7a704|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = 910000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
	  C:\WINDOWS\system32\oleaut32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\wininet.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = b90000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = bd0000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = be0000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|

	PROCESS	hpwuSchd2, PID = 1576, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" 
		  "c:\program files\hp\hp software update\hpwuschd2.exe" File version = 2, 0, 39, 0, File size = 49152, File modification date = 12/02/2004  09:38, File description = hpwuSchd, Product Name = Hewlett-Packard hpwuSchd, Product version = 2, 0, 39, 0, Company name = Hewlett-Packard Company (Copyright  2003) |-1416746216|0x5468859b5dc0f3291d7eec960b569142|
	  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe, MID = 400000,  ("c:\program files\hp\hp software update\hpwuschd2.exe") File version = 2, 0, 39, 0, File size = 49152, File modification date = 12/02/2004  09:38, File description = hpwuSchd, Product Name = Hewlett-Packard hpwuSchd, Product version = 2, 0, 39, 0, Company name = Hewlett-Packard Company (Copyright  2003) |-1416746216|0x5468859b5dc0f3291d7eec960b569142|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = 920000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\WINDOWS\system32\wininet.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = 8f0000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\WINDOWS\system32\IMAGEHLP.DLL, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = 900000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = d60000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|

	PROCESS	hpcmpmgr, PID = 1584, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" 
		  "c:\program files\hp\hpcoretech\hpcmpmgr.exe" File version = 2.1.1.0, File size = 241664, File modification date = 22/12/2003  04:38, File description = HP Framework Component Manager Service, Product Name = hp coretech  (COmponent REuse TECHnology), Product version = 2.1.4, Company name = Hewlett-Packard Company (Copyright (C) Hewlett-Packard. 2002-2003) |710555374|0xb75b654ee1da99876461b24597ae3ff3|
	  C:\Program Files\HP\hpcoretech\hpcmpmgr.exe, MID = 400000,  ("c:\program files\hp\hpcoretech\hpcmpmgr.exe") File version = 2.1.1.0, File size = 241664, File modification date = 22/12/2003  04:38, File description = HP Framework Component Manager Service, Product Name = hp coretech  (COmponent REuse TECHnology), Product version = 2.1.4, Company name = Hewlett-Packard Company (Copyright (C) Hewlett-Packard. 2002-2003) |710555374|0xb75b654ee1da99876461b24597ae3ff3|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\Program Files\HP\hpcoretech\HPVCR70.dll, MID = 7c000000,  ("c:\program files\hp\hpcoretech\hpvcr70.dll") File version = 7.00.9466.0, File size = 344064, File modification date = 11/12/2003  07:15, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1516284386|0xa940874b1904f1c48d09f9196f9bc178|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = 910000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
	  C:\WINDOWS\system32\wininet.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\MSXML4.dll, MID = 69b10000,  ("c:\windows\system32\msxml4.dll") File version = 4.20.9848.0, File size = 1275392, File modification date = 08/05/2007  10:03, File description = MSXML 4.0 SP 2, Product Name = Microsoft(R) MSXML 4.0 SP 2, Product version = 4.20.9848.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation. 1981-2002) |-974396841|0x17a9f3bb60c391c7446e8e03aa3553e6|
	  C:\WINDOWS\system32\urlmon.dll, MID = 7df10000,  ("c:\windows\system32\urlmon.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 614912, File modification date = 22/08/2007  13:14, File description =  OLE32  Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |695922910|0xc69ec1a1ee73552d3129e6c2a6db742d|
	  C:\WINDOWS\system32\mlang.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 17/08/2004  12:04, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = c90000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = cd0000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = ce0000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|

	PROCESS	nbiqjha, PID = 1592, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\system32\nbiqjha.exe" 
		  "c:\windows\system32\nbiqjha.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
	  C:\WINDOWS\system32\nbiqjha.exe, MID = 400000,  ("c:\windows\system32\nbiqjha.exe") File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\urlmon.dll, MID = 7df10000,  ("c:\windows\system32\urlmon.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 614912, File modification date = 22/08/2007  13:14, File description =  OLE32  Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |695922910|0xc69ec1a1ee73552d3129e6c2a6db742d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\oleaut32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\shell32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\wininet.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = 8d0000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = c20000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\WINDOWS\system32\IMAGEHLP.DLL, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = e30000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = f40000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\mlang.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 17/08/2004  12:04, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\RASAPI32.DLL, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 17/08/2004  12:04, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 17/08/2004  12:04, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 17/08/2004  12:04, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 17/08/2004  12:04, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\sensapi.dll, MID = 72290000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 17/08/2004  12:04, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-330752720|0x28b3398819e998adfe09d8d26e230258|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|

	PROCESS	glvfnpo, PID = 1612, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = C:\WINDOWS\system32\glvfnpo.exe "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" 
		  "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
		  "c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp.exe" File version = 6.0.1.411, File size = 155751, File modification date = 08/11/2006  13:28, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |967145827|0x250f20c64fd9eaa0f2d7844bca92e741|
	  C:\WINDOWS\system32\glvfnpo.exe, MID = 400000,  ("c:\windows\system32\glvfnpo.exe") File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\urlmon.dll, MID = 7df10000,  ("c:\windows\system32\urlmon.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 614912, File modification date = 22/08/2007  13:14, File description =  OLE32  Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |695922910|0xc69ec1a1ee73552d3129e6c2a6db742d|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\oleaut32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\shell32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\wininet.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll, MID = 67500000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\scrchpg.dll") File version = 1.0.6.411, File size = 69739, File modification date = 01/11/2006  12:38, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |1081495946|0xe4f4b2a19754604fce54d33ac326cc1a|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = fd0000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = fe0000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = 1210000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = eb0000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
	  C:\WINDOWS\system32\mlang.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 17/08/2004  12:04, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\RASAPI32.DLL, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 17/08/2004  12:04, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 17/08/2004  12:04, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 17/08/2004  12:04, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 17/08/2004  12:04, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\sensapi.dll, MID = 72290000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 17/08/2004  12:04, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-330752720|0x28b3398819e998adfe09d8d26e230258|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|

	PROCESS	ctfmon, PID = 1620, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\WINDOWS\system32\ctfmon.exe" 
		  "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 17/08/2004  12:04, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
	  C:\WINDOWS\system32\ctfmon.exe, MID = 400000,  ("c:\windows\system32\ctfmon.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 17/08/2004  12:04, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\MSUTB.dll, MID = 60130000,  ("c:\windows\system32\msutb.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 195072, File modification date = 17/08/2004  12:04, File description =  (DLL)  MSUTB, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |776068176|0x054933ea809c980e31ad858bfdcaf622|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = 9d0000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\WINDOWS\system32\wininet.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = a10000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\WINDOWS\system32\IMAGEHLP.DLL, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = a20000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = a30000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|

	PROCESS	msmsgs, PID = 1628, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Messenger\msmsgs.exe" /background
		  "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
	  C:\Program Files\Messenger\msmsgs.exe, MID = 1000000,  ("c:\program files\messenger\msmsgs.exe") File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll, MID = 4ebe0000,  ("c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll") File version = 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158), File size = 1712128, File modification date = 17/08/2004  12:01, File description = Microsoft GDI+, Product Name = Microsoft Windows Operating System, Product version = 5.1.3102.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |133300943|0x27d0bf463198c8e6efbdb6bcefce2d74|
	  C:\WINDOWS\system32\MSIMG32.dll, MID = 76350000,  ("c:\windows\system32\msimg32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4608, File modification date = 17/08/2004  12:04, File description = GDIEXT Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1779676053|0x0a46c776dd81f03ba9fa94efc3fc7afd|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\WININET.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\cryptdll.dll, MID = 76770000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:04, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983794638|0xade2386e4cf3e9bb97ec1545ab999560|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\XPOB2RES.DLL, MID = 20000000,  ("c:\windows\system32\xpob2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 462336, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |2118848834|0x602f33fb28334b9f92d34f054f4212c6|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 910000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\es.dll, MID = 77700000,  ("c:\windows\system32\es.dll") File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 17/08/2004  12:04, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 17/08/2004  12:04, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = cd0000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = e10000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\WINDOWS\system32\IMAGEHLP.DLL, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = f20000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = f30000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
	  C:\WINDOWS\system32\credui.dll, MID = 76bf0000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 164352, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1301523741|0x144304f02cef124b4ffc57dad95f2bca|

	PROCESS	hpqgalry, PID = 1716, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe" -s 
		  "c:\program files\hp\digital imaging\bin\hpqgalry.exe" File version = 043.000.120.000, File size = 520192, File modification date = 15/03/2004  15:47, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |830990280|0x52975da6ca9aa2323caffeb494b4d167|
	  C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe, MID = 400000,  ("c:\program files\hp\digital imaging\bin\hpqgalry.exe") File version = 043.000.120.000, File size = 520192, File modification date = 15/03/2004  15:47, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |830990280|0x52975da6ca9aa2323caffeb494b4d167|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\mscoree.dll, MID = 79170000,  ("c:\windows\system32\mscoree.dll") File version = 1.1.4322.573, File size = 155648, File modification date = 20/02/2003  15:06, File description = Microsoft .NET Runtime Execution Engine, Product Name = Microsoft .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1998-2002. All rights reserved.) |1143201390|0x4c702aea1c11d15c176c2c276d0907dd|
	  C:\WINDOWS\system32\KERNEL32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll, MID = 791b0000,  ("c:\windows\microsoft.net\framework\v1.1.4322\mscorwks.dll") File version = 1.1.4322.573, File size = 2482176, File modification date = 20/02/2003  15:08, File description = Microsoft .NET Runtime Common Language Runtime - WorkStation, Product Name = Microsoft .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1998-2002. All rights reserved.) |-2097235044|0xd928ffabce0ac9d69fef1f645c6c7b1d|
	  C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll, MID = 7c340000,  ("c:\windows\microsoft.net\framework\v1.1.4322\msvcr71.dll") File version = 7.10.3052.4, File size = 348160, File modification date = 21/02/2003  00:42, File description = Microsoft C Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3052.4, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |894841200|0x86f1895ae8c5e8b17d99ece768a70732|
	  C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll, MID = 79040000,  ("c:\windows\microsoft.net\framework\v1.1.4322\fusion.dll") File version = 1.1.4322.573, File size = 282624, File modification date = 20/02/2003  15:06, File description = Assembly manager, Product Name = Microsoft .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1998-2002. All rights reserved.) |1836172152|0xb8294afc55b31d835be038222f61230c|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll, MID = 79780000,  ("c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll") File version = 1.1.4322.573, File size = 2088960, File modification date = 21/02/2003  03:26, File description = Microsoft Common Language Runtime Class Library, Product Name = Microsoft .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1998-2002. All rights reserved.) |140759551|0xa162574c97bb7c3c6dbe32d8dbca42c2|
	  c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_d1e4a03e\mscorlib.dll, MID = 79980000,  ("c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_d1e4a03e\mscorlib.dll") File version = (null), File size = 3289088, File modification date = 18/10/2005  12:54, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |516733646|0xde119c2d92bc58c9dc93e5229b7c42fb|
	  C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll, MID = 79510000,  ("c:\windows\microsoft.net\framework\v1.1.4322\mscorsn.dll") File version = 1.1.4322.573, File size = 77824, File modification date = 20/02/2003  15:09, File description = Microsoft .NET Strong Name Support, Product Name = Microsoft .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1998-2002. All rights reserved.) |332030804|0x4c2bb0e88229d59c276d7ea31951eb5b|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  c:\windows\assembly\gac\hpqiface\3.0.0.0__a53cf5803f4c3827\hpqiface.dll, MID = 11000000,  ("c:\windows\assembly\gac\hpqiface\3.0.0.0__a53cf5803f4c3827\hpqiface.dll") File version = 043.000.120.000, File size = 16384, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |1147023055|0x1aec45bf1912387b234197942251a8dd|
	  c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll, MID = 7b610000,  ("c:\windows\assembly\gac\system.windows.forms\1.0.5000.0__b77a5c561934e089\system.windows.forms.dll") File version = 1.1.4322.573, File size = 2039808, File modification date = 18/10/2005  12:53, File description = System.Windows.Forms.dll, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |-1172571092|0x02681152fe52fc6e91a812a8a9420d2f|
	  c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_feea0c5e\system.windows.forms.dll, MID = 7b810000,  ("c:\windows\assembly\nativeimages1_v1.1.4322\system.windows.forms\1.0.5000.0__b77a5c561934e089_feea0c5e\system.windows.forms.dll") File version = (null), File size = 2994176, File modification date = 18/10/2005  12:54, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |250012217|0xf84a95090dc719aae0a5a5875bacd121|
	  C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSCORJIT.DLL, MID = 79430000,  ("c:\windows\microsoft.net\framework\v1.1.4322\mscorjit.dll") File version = 1.1.4322.573, File size = 311296, File modification date = 20/02/2003  15:06, File description = Microsoft .NET Runtime Just-In-Time Compiler, Product Name = Microsoft .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1998-2002. All rights reserved.) |828634399|0xe9634a7e73a30f0bd17f9b0c19bd211a|
	  c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll, MID = 7b0a0000,  ("c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll") File version = 1.1.4322.573, File size = 1216512, File modification date = 18/10/2005  12:53, File description = System.dll, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |467027087|0xd4525bffc6de7ddd95e841104494704f|
	  c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_74ca1954\system.dll, MID = 7b1d0000,  ("c:\windows\assembly\nativeimages1_v1.1.4322\system\1.0.5000.0__b77a5c561934e089_74ca1954\system.dll") File version = (null), File size = 1929216, File modification date = 18/10/2005  12:54, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1502431720|0x8d803ba3f9ac6952f2bf722f9b6396c5|
	  c:\windows\assembly\gac\hpqutils\3.0.0.0__a53cf5803f4c3827\hpqutils.dll, MID = 6f00000,  ("c:\windows\assembly\gac\hpqutils\3.0.0.0__a53cf5803f4c3827\hpqutils.dll") File version = 043.000.123.000, File size = 151552, File modification date = 18/10/2005  12:55, File description = HP DotNetUtils, Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.123.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |-872379523|0xc1880006c9ddfc944736c997290d9aaf|
	  c:\windows\assembly\gac\hpqfmrsc\3.0.0.0__a53cf5803f4c3827\hpqfmrsc.dll, MID = 6f40000,  ("c:\windows\assembly\gac\hpqfmrsc\3.0.0.0__a53cf5803f4c3827\hpqfmrsc.dll") File version = 043.000.120.000, File size = 28672, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |-2018842012|0x95c75961ffc09a690c43e6c15546dcf5|
	  c:\windows\assembly\gac\hpqgldlg\3.0.0.0__a53cf5803f4c3827\hpqgldlg.dll, MID = 6f60000,  ("c:\windows\assembly\gac\hpqgldlg\3.0.0.0__a53cf5803f4c3827\hpqgldlg.dll") File version = 043.000.120.000, File size = 151552, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |-1226865287|0x868fd22402c0002288e343cc3fea2cde|
	  c:\windows\assembly\gac\hpqtray\3.0.0.0__a53cf5803f4c3827\hpqtray.dll, MID = 6fa0000,  ("c:\windows\assembly\gac\hpqtray\3.0.0.0__a53cf5803f4c3827\hpqtray.dll") File version = 043.000.120.000, File size = 368640, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |201485646|0xb15d41e011657426e3934175b2e3a3ee|
	  c:\windows\assembly\gac\hpqgskin\3.0.0.0__a53cf5803f4c3827\hpqgskin.dll, MID = 7010000,  ("c:\windows\assembly\gac\hpqgskin\3.0.0.0__a53cf5803f4c3827\hpqgskin.dll") File version = 043.000.123.000, File size = 77824, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.123.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |1739358185|0x9cb0501394b49b4206bde249296a214d|
	  c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll, MID = 7b490000,  ("c:\windows\assembly\gac\system.drawing\1.0.5000.0__b03f5f7f11d50a3a\system.drawing.dll") File version = 1.1.4322.573, File size = 466944, File modification date = 18/10/2005  12:53, File description = System.Drawing.dll, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |-1857620972|0x5b8755429a40c7280ff9ad7b4194df47|
	  c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_275d837d\system.drawing.dll, MID = 7b510000,  ("c:\windows\assembly\nativeimages1_v1.1.4322\system.drawing\1.0.5000.0__b03f5f7f11d50a3a_275d837d\system.drawing.dll") File version = (null), File size = 835584, File modification date = 18/10/2005  12:54, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1884454254|0xc82138ffbe7bd2796414ca7b70e3b603|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\program files\hp\digital imaging\bin\ru\hpqgalry.resources.dll, MID = 7090000,  ("c:\program files\hp\digital imaging\bin\ru\hpqgalry.resources.dll") File version = 5.40.53.000, File size = 163840, File modification date = 24/02/2004  11:50, File description =  , Product Name =  , Product version = 5.40.53.000, Company name =   ( ) |640992974|0xfb27eb89701d86bd56c0edffee87ad05|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll, MID = 4ebe0000,  ("c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll") File version = 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158), File size = 1712128, File modification date = 17/08/2004  12:01, File description = Microsoft GDI+, Product Name = Microsoft Windows Operating System, Product version = 5.1.3102.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |133300943|0x27d0bf463198c8e6efbdb6bcefce2d74|
	  c:\windows\assembly\gac\hpqptfnd\3.0.0.0__a53cf5803f4c3827\hpqptfnd.dll, MID = 7480000,  ("c:\windows\assembly\gac\hpqptfnd\3.0.0.0__a53cf5803f4c3827\hpqptfnd.dll") File version = 043.000.123.000, File size = 16384, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.123.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |1049444715|0xedc662423830a9f60a9ccde5d3c7dcb7|
	  c:\windows\assembly\gac\interop.hpqcxm08\3.0.0.0__a53cf5803f4c3827\interop.hpqcxm08.dll, MID = 74a0000,  ("c:\windows\assembly\gac\interop.hpqcxm08\3.0.0.0__a53cf5803f4c3827\interop.hpqcxm08.dll") File version = 3.0.0.0, File size = 36864, File modification date = 18/10/2005  12:55, File description =  , Product Name = Assembly imported from type library CTXMGRIMPLib, Product version = 3.0.0.0, Company name =   ( ) |419842815|0x60ca2a4441b509725a1711630709dee4|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\Program Files\HP\Digital Imaging\bin\hpqcxm08.dll, MID = 14a00000,  ("c:\program files\hp\digital imaging\bin\hpqcxm08.dll") File version = 43.0.123.000, File size = 139264, File modification date = 06/05/2004  19:42, File description = HP CUE Context Manager Objects, Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.123.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |1234430234|0x7b6439bca2c07cf60025b4018e1d0f22|
	  C:\WINDOWS\system32\SHFOLDER.dll, MID = 76760000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 17/08/2004  12:04, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-172052297|0x61c31ca3b2492c93724af65ec799e77c|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll, MID = 7bc10000,  ("c:\windows\assembly\gac\system.xml\1.0.5000.0__b77a5c561934e089\system.xml.dll") File version = 1.1.4322.573, File size = 1335296, File modification date = 18/10/2005  12:53, File description = System.Xml.dll, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |1692709210|0x4e0351ee76439f1fc14914b5bff7c9ae|
	  c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_39303f24\system.xml.dll, MID = 7bd60000,  ("c:\windows\assembly\nativeimages1_v1.1.4322\system.xml\1.0.5000.0__b77a5c561934e089_39303f24\system.xml.dll") File version = (null), File size = 2076672, File modification date = 18/10/2005  12:54, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |280033014|0x327a4086336e58ef1595cfc96d6424f7|
	  c:\windows\assembly\gac\lead\13.0.0.66__9cf889f53ea9b907\lead.dll, MID = 7600000,  ("c:\windows\assembly\gac\lead\13.0.0.66__9cf889f53ea9b907\lead.dll") File version = 13.0.0.66, File size = 81920, File modification date = 18/10/2005  12:55, File description = LEAD Base Module, Product Name = LEADTOOLS For .NET, Product version = 13.0.0.66, Company name = LEAD Technologies, Inc. (Copyright (c) 1991-2000 LEAD Technologies, Inc.) |-1624256801|0x26aaf8560af2857b411e16587f5e21a4|
	  c:\windows\assembly\gac\lead.wrapper\13.0.0.66__9cf889f53ea9b907\lead.wrapper.dll, MID = 7640000,  ("c:\windows\assembly\gac\lead.wrapper\13.0.0.66__9cf889f53ea9b907\lead.wrapper.dll") File version = 13.0.0.66, File size = 430080, File modification date = 18/10/2005  12:55, File description = LEAD Wrapper Module, Product Name = LEADTOOLS For .NET, Product version = 13.0.0.66, Company name = LEAD Technologies, Inc. (Copyright (c) 1991-2000 LEAD Technologies, Inc.) |1153499494|0x1497069481fda6967436cf5096e93b05|
	  C:\Program Files\HP\Digital Imaging\bin\ltkrn13n.dll, MID = 76c0000,  ("c:\program files\hp\digital imaging\bin\ltkrn13n.dll") File version = 13.0.0.066, File size = 446976, File modification date = 15/12/2003  22:18, File description = LEADTOOLS(r) DLL for Win32, Product Name = LEADTOOLS(r) DLL for Win32, Product version = 13.0.0.066, Company name = LEAD Technologies, Inc. (Copyright 1991-2003 LEAD Technologies, Inc.) |429841920|0xcb7bba5413cb8ee3e13c240bfa119715|
	  c:\windows\assembly\gac\hpqimgrc\3.0.0.0__a53cf5803f4c3827\hpqimgrc.dll, MID = 7b50000,  ("c:\windows\assembly\gac\hpqimgrc\3.0.0.0__a53cf5803f4c3827\hpqimgrc.dll") File version = 043.000.120.000, File size = 163840, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |511290355|0xcb5b29ac31abf3651d2c0c801de0d385|
	  c:\windows\assembly\gac\hpqcmctl\3.0.0.0__a53cf5803f4c3827\hpqcmctl.dll, MID = 7b90000,  ("c:\windows\assembly\gac\hpqcmctl\3.0.0.0__a53cf5803f4c3827\hpqcmctl.dll") File version = 043.000.123.000, File size = 557056, File modification date = 18/10/2005  12:55, File description = HP CommonControls, Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.123.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |-659905060|0x39e720cdd30e18f1b03a326991edc25d|
	  c:\windows\assembly\gac\hpqtray.resources\3.0.0.0_ru_a53cf5803f4c3827\hpqtray.resources.dll, MID = 7c40000,  ("c:\windows\assembly\gac\hpqtray.resources\3.0.0.0_ru_a53cf5803f4c3827\hpqtray.resources.dll") File version = 5.40.87.0, File size = 245760, File modification date = 18/10/2005  12:55, File description =  , Product Name =  , Product version = 5.40.87.000, Company name =   ( ) |-1556968168|0xe6f9083026551067d36e955458b3321e|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = 7c90000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
	  C:\WINDOWS\system32\wininet.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  c:\windows\assembly\gac\lead.windows.forms\13.0.0.66__9cf889f53ea9b907\lead.windows.forms.dll, MID = 7ca0000,  ("c:\windows\assembly\gac\lead.windows.forms\13.0.0.66__9cf889f53ea9b907\lead.windows.forms.dll") File version = 13.0.0.66, File size = 36864, File modification date = 18/10/2005  12:55, File description = LEAD Windows.Forms Module, Product Name = LEADTOOLS For .NET, Product version = 13.0.0.66, Company name = LEAD Technologies, Inc. (Copyright (c) 1991-2000 LEAD Technologies, Inc.) |782808305|0x656421105e87f4ece5633d0061412a88|
	  c:\windows\assembly\gac\lead.drawing\13.0.0.66__9cf889f53ea9b907\lead.drawing.dll, MID = 7cd0000,  ("c:\windows\assembly\gac\lead.drawing\13.0.0.66__9cf889f53ea9b907\lead.drawing.dll") File version = 13.0.0.66, File size = 81920, File modification date = 18/10/2005  12:55, File description = LEAD Drawing Module, Product Name = LEADTOOLS For .NET, Product version = 13.0.0.66, Company name = LEAD Technologies, Inc. (Copyright (c) 1991-2000 LEAD Technologies, Inc.) |1298364798|0xf27508b6da412e005a732767dcb2b32f|
	  c:\windows\assembly\gac\hpqfmrsc.resources\3.0.0.0_ru_a53cf5803f4c3827\hpqfmrsc.resources.dll, MID = 7d00000,  ("c:\windows\assembly\gac\hpqfmrsc.resources\3.0.0.0_ru_a53cf5803f4c3827\hpqfmrsc.resources.dll") File version = 5.40.53.0, File size = 8704, File modification date = 18/10/2005  12:55, File description =  , Product Name =  , Product version = 5.40.53.000, Company name =   ( ) |2031649764|0xda450d342ef0115b4431ba645a03ca66|
	  c:\windows\assembly\gac\interop.hpqimgr\1.0.0.0__a53cf5803f4c3827\interop.hpqimgr.dll, MID = 7d20000,  ("c:\windows\assembly\gac\interop.hpqimgr\1.0.0.0__a53cf5803f4c3827\interop.hpqimgr.dll") File version = 1.0.0.0, File size = 10240, File modification date = 18/10/2005  12:55, File description =  , Product Name = Assembly imported from type library IMAGEMANAGERLib, Product version = 1.0.0.0, Company name =   ( ) |1880840683|0xfed65d51dcce0adb6d2ccd0376c1d2d0|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\Program Files\HP\Digital Imaging\Bin\hpqimgr.dll, MID = 10000000,  ("c:\program files\hp\digital imaging\bin\hpqimgr.dll") File version = 43.0.120.000, File size = 479232, File modification date = 15/03/2004  15:57, File description = HP CUE ImageManager COM Object, Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |1918873234|0x470ed6a985fe3555adfae55caa4044cd|
	  C:\WINDOWS\system32\MFC71.DLL, MID = 7c140000,  ("c:\windows\system32\mfc71.dll") File version = 7.10.3077.0, File size = 1060864, File modification date = 18/03/2003  17:20, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |751878168|0xf35a584e947a5b401feb0fe01db4a0d7|
	  C:\WINDOWS\system32\ATL71.DLL, MID = 7c120000,  ("c:\windows\system32\atl71.dll") File version = 7.10.3077.0, File size = 89088, File modification date = 18/03/2003  15:05, File description = ATL Module for Windows (Unicode), Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-2076175466|0x8f2097e8b174f38178570c611464935f|
	  C:\WINDOWS\system32\MSVCP71.dll, MID = 7c3a0000,  ("c:\windows\system32\msvcp71.dll") File version = 7.10.3077.0, File size = 499712, File modification date = 18/03/2003  16:14, File description = Microsoft C++ Runtime Library, Product Name = Microsoft Visual Studio .NET, Product version = 7.10.3077.0, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1513820628|0x561fa2abb31dfa8fab762145f81667c2|
	  c:\windows\assembly\gac\hpqasset\3.0.0.0__a53cf5803f4c3827\hpqasset.dll, MID = 80e0000,  ("c:\windows\assembly\gac\hpqasset\3.0.0.0__a53cf5803f4c3827\hpqasset.dll") File version = 043.000.120.000, File size = 24576, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |1443944312|0x9d1165c506da668f8493aa1453e306dc|
	  c:\windows\assembly\gac\hpqccrsc\3.0.0.0__a53cf5803f4c3827\hpqccrsc.dll, MID = 85c0000,  ("c:\windows\assembly\gac\hpqccrsc\3.0.0.0__a53cf5803f4c3827\hpqccrsc.dll") File version = 043.000.123.000, File size = 192512, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.123.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |-1788389738|0xa97426b97d158145bd9c802757d46f4c|
	  c:\windows\assembly\gac\accessibility\1.0.5000.0__b03f5f7f11d50a3a\accessibility.dll, MID = 79e40000,  ("c:\windows\assembly\gac\accessibility\1.0.5000.0__b03f5f7f11d50a3a\accessibility.dll") File version = 1.1.4322.573, File size = 7680, File modification date = 18/10/2005  12:53, File description = Accessibility.dll, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |768413628|0xa1b44c0a1ad71f86579a4521d5b1c024|
	  c:\program files\hp\digital imaging\bin\hpqmirsc.dll, MID = 8790000,  ("c:\program files\hp\digital imaging\bin\hpqmirsc.dll") File version = 043.000.120.000, File size = 49152, File modification date = 15/03/2004  15:47, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |-591252681|0x07cd976b240fa393095224d0803fcfac|
	  c:\program files\hp\digital imaging\bin\ru\hpqmirsc.resources.dll, MID = 87b0000,  ("c:\program files\hp\digital imaging\bin\ru\hpqmirsc.resources.dll") File version = 5.40.87.000, File size = 40960, File modification date = 25/02/2004  07:47, File description =  , Product Name =  , Product version = 5.40.87.000, Company name =   ( ) |-1235829931|0x1a9d8cecda823ab3d0768c765de6df73|
	  c:\windows\assembly\gac\hpqietpz\3.0.0.0__a53cf5803f4c3827\hpqietpz.dll, MID = 87d0000,  ("c:\windows\assembly\gac\hpqietpz\3.0.0.0__a53cf5803f4c3827\hpqietpz.dll") File version = 043.000.120.000, File size = 614400, File modification date = 18/10/2005  12:55, File description = Image Editor, Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |-1509459954|0xb6648869d47891bfd8309af4ae43a3fc|
	  c:\windows\assembly\gac\hpqietpz.resources\3.0.0.0_ru_a53cf5803f4c3827\hpqietpz.resources.dll, MID = 8880000,  ("c:\windows\assembly\gac\hpqietpz.resources\3.0.0.0_ru_a53cf5803f4c3827\hpqietpz.resources.dll") File version = 3.0.0.0, File size = 69632, File modification date = 18/10/2005  12:55, File description = Image Editor, Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |417028116|0x60d546945e15125a37003e65dd9626b2|
	  c:\windows\assembly\gac\hpqcprsc\3.0.0.0__a53cf5803f4c3827\hpqcprsc.dll, MID = 88b0000,  ("c:\windows\assembly\gac\hpqcprsc\3.0.0.0__a53cf5803f4c3827\hpqcprsc.dll") File version = 043.000.120.000, File size = 32768, File modification date = 18/10/2005  12:55, File description = HP Projects Resources, Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |1937536237|0xd17a14fecbf1a9611ac30215a7c6db17|
	  c:\windows\assembly\gac\hpqcprsc.resources\3.0.0.0_ru_a53cf5803f4c3827\hpqcprsc.resources.dll, MID = 88e0000,  ("c:\windows\assembly\gac\hpqcprsc.resources\3.0.0.0_ru_a53cf5803f4c3827\hpqcprsc.resources.dll") File version = 5.40.87.0, File size = 6656, File modification date = 18/10/2005  12:55, File description = HP Projects Resources, Product Name =  , Product version = 5.40.87.000, Company name =   ( ) |1611391813|0x3461868351f1f1bb080a6c161646ccdb|
	  c:\windows\assembly\gac\hpqisrtb\4.0.0.0__a53cf5803f4c3827\hpqisrtb.dll, MID = 8900000,  ("c:\windows\assembly\gac\hpqisrtb\4.0.0.0__a53cf5803f4c3827\hpqisrtb.dll") File version = 4.0.0.0, File size = 32768, File modification date = 18/10/2005  12:57, File description = hpqisrtb, Product Name =  , Product version = 4.0.0.0, Company name = Hewlett-Packard ( ) |822034473|0x292a4b5be5db485e7088955f34586878|
	  c:\windows\assembly\gac\hpqisrtb.resources\4.0.0.0_ru_a53cf5803f4c3827\hpqisrtb.resources.dll, MID = 8920000,  ("c:\windows\assembly\gac\hpqisrtb.resources\4.0.0.0_ru_a53cf5803f4c3827\hpqisrtb.resources.dll") File version = 4.0.0.0, File size = 19968, File modification date = 18/10/2005  12:57, File description = hpqisrtb, Product Name =  , Product version = 4.0.0.0, Company name = Hewlett-Packard ( ) |2072998898|0x5a1a9a48fed2345c517891276d31dcad|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = 89a0000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = 8ae0000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\WINDOWS\system32\IMAGEHLP.DLL, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = 8cf0000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  c:\windows\assembly\gac\hpqthumb\3.0.0.0__a53cf5803f4c3827\hpqthumb.dll, MID = 8e00000,  ("c:\windows\assembly\gac\hpqthumb\3.0.0.0__a53cf5803f4c3827\hpqthumb.dll") File version = 043.000.120.000, File size = 45056, File modification date = 18/10/2005  12:55, File description =  , Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |-356406541|0x9387844fa3976c8cc08b2f8ac426876f|

	PROCESS	MDM, PID = 1884, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
		  "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  19:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
	  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE, MID = 400000,  ("c:\program files\common files\microsoft shared\vs7debug\mdm.exe") File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  19:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\psapi.dll, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 17/08/2004  12:04, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|

	PROCESS	nvsvc32, PID = 1896, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\nvsvc32.exe
		  "c:\windows\system32\nvsvc32.exe" File version = 6.14.10.7184, File size = 127043, File modification date = 24/02/2005  15:32, File description = NVIDIA Driver Helper Service, Version 71.84, Product Name = NVIDIA Driver Helper Service, Version 71.84, Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-469665854|0x43b0a0774ea90bf699d267c45d2702f9|
	  C:\WINDOWS\system32\nvsvc32.exe, MID = 400000,  ("c:\windows\system32\nvsvc32.exe") File version = 6.14.10.7184, File size = 127043, File modification date = 24/02/2005  15:32, File description = NVIDIA Driver Helper Service, Version 71.84, Product Name = NVIDIA Driver Helper Service, Version 71.84, Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-469665854|0x43b0a0774ea90bf699d267c45d2702f9|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\POWRPROF.dll, MID = 74a90000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 17/08/2004  12:04, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1298904202|0x604f22705c12080012968d72d97c6d64|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 17/08/2004  12:04, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 17/08/2004  12:04, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 17/08/2004  12:04, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\NVRSRU.DLL, MID = da0000,  ("c:\windows\system32\nvrsru.dll") File version = 6.14.10.7184, File size = 249856, File modification date = 24/02/2005  15:32, File description = NVIDIA Russian language resource library, Product Name = NVIDIA Compatible Windows 2000 Display driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |1073575908|0xf63f2add913caf9f960b95d2ef6395d6|

	PROCESS	svchost, PID = 208, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost.exe -k imgsvc
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\wiaservc.dll, MID = 75a70000,  ("c:\windows\system32\wiaservc.dll") File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
	  c:\windows\system32\CFGMGR32.dll, MID = 74aa0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 17/08/2004  12:02, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1794689465|0x7a3971658d42fe35804f88e6e5637bd9|
	  C:\WINDOWS\system32\setupapi.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  c:\windows\system32\mscms.dll, MID = 73af0000,  ("c:\windows\system32\mscms.dll") File version = 5.1.2600.2709 (xpsp_sp2_gdr.050628-1518), File size = 74240, File modification date = 29/06/2005  01:50, File description = Microsoft Color Matching System DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2709, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1545814642|0x7ff0bafe9e9c74f35a468004817ffa77|
	  c:\windows\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 17/08/2004  12:05, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  c:\windows\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 17/08/2004  12:04, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 17/08/2004  12:04, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\WINDOWS\system32\sti.dll, MID = 73b60000,  ("c:\windows\system32\sti.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68608, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |95021245|0x6ac41be386e49994131effad9ff7c14d|

	PROCESS	IEXPLORE, PID = 1352, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" 
		  "c:\program files\internet explorer\iexplore.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description = Internet Explorer, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |2061675851|0x1628da648e989fb9575ba9db0640f3fd|
	  C:\Program Files\Internet Explorer\IEXPLORE.EXE, MID = 400000,  ("c:\program files\internet explorer\iexplore.exe") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description = Internet Explorer, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |2061675851|0x1628da648e989fb9575ba9db0640f3fd|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SHDOCVW.dll, MID = 7e1e0000,  ("c:\windows\system32\shdocvw.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 76650000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 514560, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-910066801|0x397f812c5f0ab9fa08f034c3d3b688c5|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\WININET.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = 3e0000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
	  C:\WINDOWS\system32\BROWSEUI.dll, MID = 75f50000,  ("c:\windows\system32\browseui.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll, MID = 67500000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\scrchpg.dll") File version = 1.0.6.411, File size = 69739, File modification date = 01/11/2006  12:38, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |1081495946|0xe4f4b2a19754604fce54d33ac326cc1a|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\browselc.dll, MID = 20000000,  ("c:\windows\system32\browselc.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 66560, File modification date = 17/08/2004  12:02, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-855201112|0x599c0ccb1f4843b2f17450a078d05ded|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\urlmon.dll, MID = 7df10000,  ("c:\windows\system32\urlmon.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 614912, File modification date = 22/08/2007  13:14, File description =  OLE32  Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |695922910|0xc69ec1a1ee73552d3129e6c2a6db742d|
	  C:\WINDOWS\system32\shdoclc.dll, MID = 1830000,  ("c:\windows\system32\shdoclc.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 559104, File modification date = 17/08/2004  12:03, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-356448014|0x83311662a0706746f756fc7a1d953d2e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 18d0000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\mlang.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 17/08/2004  12:04, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\RASAPI32.DLL, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 17/08/2004  12:04, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 17/08/2004  12:04, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 17/08/2004  12:04, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 17/08/2004  12:04, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\sensapi.dll, MID = 72290000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 17/08/2004  12:04, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-330752720|0x28b3398819e998adfe09d8d26e230258|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = 2240000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = 1c00000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = 1c10000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\mshtml.dll, MID = 7dbd0000,  ("c:\windows\system32\mshtml.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 3079168, File modification date = 22/08/2007  13:14, File description =   HTML Microsoft, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |3283378|0x967eb63ca173705c070dc4378078662b|
	  C:\WINDOWS\system32\msls31.dll, MID = 74680000,  ("c:\windows\system32\msls31.dll") File version = 3.10.349.0, File size = 146432, File modification date = 20/10/2001  12:00, File description = Microsoft Line Services library file, Product Name = Microsoft Line Services, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1996-1999) |-544264483|0x288739d85501ace0479c3d638732930e|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 17/08/2004  12:04, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 17/08/2004  12:04, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f30000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:04, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1603469464|0x84e62f048e179a53623739b31691f608|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71bf0000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 17/08/2004  12:04, File description = Microsoft LAN Manager, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-164401074|0x7e27508a7492a748ebface597d51b8ac|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cb0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80896, File modification date = 17/08/2004  12:04, File description =   GUI  NT LM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1722132880|0x61b52d7c6c0e902cb8b63c9ab545f0bf|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c70000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 245760, File modification date = 17/08/2004  12:04, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-871070814|0x9568897cd0f9caf45c3aa541bd490782|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 17/08/2004  12:04, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 17/08/2004  12:04, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f40000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 17/08/2004  12:04, File description =   Web DAV, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1728990969|0xa3777781ed5a0f7a5f81bd0049b331f3|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 17/08/2004  12:04, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 17/08/2004  12:04, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 17/08/2004  12:04, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\odbcint.dll, MID = 2fb0000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 17/08/2004  12:03, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\jscript.dll, MID = 75c20000,  ("c:\windows\system32\jscript.dll") File version = 5.6.0.8831, File size = 450560, File modification date = 18/05/2006  05:43, File description = Microsoft (r) JScript, Product Name = Microsoft (r) JScript, Product version = 5.6.0.8831, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 2002) |-1198432807|0xa31988d999de8877f67b42dd8ae5525a|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 20/10/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\WINDOWS\system32\schannel.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.3126 (xpsp_sp2_gdr.070425-0226), File size = 144896, File modification date = 25/04/2007  14:22, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3126, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1112551157|0x0964bdcf0b80bede5a9ec6f8d53474b0|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll, MID = 67000000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\klscav.dll") File version = 6.0.1.411, File size = 36970, File modification date = 01/11/2006  12:34, File description = Script Checker AV Plugin, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |-1510969157|0xadb051864ac59834c96af2109448ca1f|
	  C:\WINDOWS\system32\xpsp3res.dll, MID = 4c90000,  ("c:\windows\system32\xpsp3res.dll") File version = 5.1.2600.3243 (xpsp_sp2_gdr.071029-1246), File size = 120320, File modification date = 29/10/2007  11:35, File description =    3, Product Name =   Microsoft Windows, Product version = 5.1.2600.3243, Company name =   (()  .   .) |927103148|0xa605ff9e338958a024aca5c97a66ddb4|
	  C:\WINDOWS\system32\ddrawex.dll, MID = 6d9c0000,  ("c:\windows\system32\ddrawex.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27136, File modification date = 17/08/2004  12:04, File description = Direct Draw Ex, Product Name = Microsoft Windows Operating System, Product version = 5.03.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-541135331|0x0fae8c70918c7450307c285655ad8f19|
	  C:\WINDOWS\system32\DDRAW.dll, MID = 73720000,  ("c:\windows\system32\ddraw.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 266240, File modification date = 17/08/2004  12:04, File description = Microsoft DirectDraw, Product Name =   Microsoft Windows, Product version = 5.03.2600.2180, Company name =   (  .   .) |-1992087609|0x0f143a8d803bae20cd9b120b8084bc1c|
	  C:\WINDOWS\system32\DCIMAN32.dll, MID = 73b80000,  ("c:\windows\system32\dciman32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8704, File modification date = 17/08/2004  12:04, File description = DCI Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630976475|0x9036824c541b5e7904cce895dac84def|
	  C:\WINDOWS\system32\mshtmled.dll, MID = 76200000,  ("c:\windows\system32\mshtmled.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 449024, File modification date = 22/08/2007  13:14, File description =    HTML (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1626100083|0x9cea66aca4dd5bfd821cf7b839b21abf|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll, MID = 64d00000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\prloader.dll") File version = 6.0.1.411, File size = 282732, File modification date = 01/11/2006  12:37, File description = Prague Loader, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |-43367494|0x940f024b00f5c329fdf004a621ec12a9|
	  C:\WINDOWS\system32\actxprxy.dll, MID = 71d20000,  ("c:\windows\system32\actxprxy.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 101888, File modification date = 17/08/2004  12:04, File description = ActiveX Interface Marshaling Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-163113500|0x78240b32fb237a37ecd73e3ba7ff6de6|
	  C:\WINDOWS\system32\vbscript.dll, MID = 732c0000,  ("c:\windows\system32\vbscript.dll") File version = 5.6.0.8820, File size = 417792, File modification date = 17/08/2004  12:04, File description = Microsoft (r) VBScript, Product Name = Microsoft (r) VBScript, Product version = 5.6.0.8820, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 2002) |16569613|0x54e4c2f75fcb9fe49186c4a6abe1a3c8|
	  C:\WINDOWS\system32\MFC42.DLL, MID = 73d90000,  ("c:\windows\system32\mfc42.dll") File version = 6.02.4131.0, File size = 1028096, File modification date = 17/08/2004  12:04, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft (R) Visual C++, Product version = 6.02.400, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1993-1998) |618104331|0x808a87c6c2a412dfbfed3b84301a6d26|
	  C:\WINDOWS\system32\MFC42LOC.DLL, MID = 61ec0000,  ("c:\windows\system32\mfc42loc.dll") File version = 6.00.8665.0, File size = 57344, File modification date = 20/10/2001  12:00, File description =   MFC, Product Name = Microsoft Visual C++, Product version = 6.0.400, Company name =  Microsoft (  Microsoft, 1993-1998) |2079313362|0x9cfc5a99601ebf7e61ed0a35a180ff41|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 03/08/2004  18:31, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\corpol.dll, MID = 6ea30000,  ("c:\windows\system32\corpol.dll") File version = 2003.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35328, File modification date = 17/08/2004  12:04, File description = Microsoft COM Runtime Execution Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1974965094|0x553970aca1c58e6cfd94d78531212706|
	  C:\WINDOWS\system32\cryptnet.dll, MID = 75f10000,  ("c:\windows\system32\cryptnet.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63488, File modification date = 17/08/2004  12:04, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1707137241|0x48e2c7182fe73f9236c2c3e0d144ac7a|
	  C:\WINDOWS\system32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 17/08/2004  12:04, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  C:\WINDOWS\system32\ADVPACK.DLL, MID = 75220000,  ("c:\windows\system32\advpack.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 100352, File modification date = 17/08/2004  12:04, File description = ADVPACK, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |512852977|0x48dc3e955fe1ccd75df6fec7bc61c1df|
	  C:\WINDOWS\system32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavwebscan.dll, MID = 10000000,  ("c:\windows\system32\kaspersky lab\kaspersky online scanner\kavwebscan.dll") File version = 5.0.98.0, File size = 950272, File modification date = 29/08/2007  10:49, File description = Kaspersky Online Scanner GUI Part, Product Name = Kaspersky Online Scanner, Product version = 5.0.1.0, Company name = Kaspersky Lab (Copyright c Kaspersky Lab 1997-2007. Portions Copyright c Lan Crypto) |285507953|0xbc915c49931ce46222f9b0a7efb56cee|
	  C:\WINDOWS\system32\SHFOLDER.dll, MID = 76760000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 17/08/2004  12:04, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-172052297|0x61c31ca3b2492c93724af65ec799e77c|
	  C:\WINDOWS\system32\Kaspersky Lab\Kaspersky Online Scanner\kavss.dll, MID = 63660000,  ("c:\windows\system32\kaspersky lab\kaspersky online scanner\kavss.dll") File version = 4, 0, 2, 28, File size = 213048, File modification date = 24/05/2005  07:27, File description = Kaspersky Anti-Virus Single Scanner Library, Product Name = Kaspersky Anti-Virus Scanner Server, Product version = 4, 0, 2, 28, Company name = Kaspersky Lab. (Copyright (C) 1999-2002 Kaspersky Lab.) |310348664|0x09a567f52562beafb0420f1b8196182e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 17/08/2004  12:04, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 17/08/2004  12:04, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|

	PROCESS	IEXPLORE, PID = 704, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "C:\Program Files\Internet Explorer\IEXPLORE.EXE" http://www.qqkx.com
		  "c:\program files\internet explorer\iexplore.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description = Internet Explorer, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |2061675851|0x1628da648e989fb9575ba9db0640f3fd|
	  C:\Program Files\Internet Explorer\IEXPLORE.EXE, MID = 400000,  ("c:\program files\internet explorer\iexplore.exe") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description = Internet Explorer, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |2061675851|0x1628da648e989fb9575ba9db0640f3fd|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SHDOCVW.dll, MID = 7e1e0000,  ("c:\windows\system32\shdocvw.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\CRYPTUI.dll, MID = 76650000,  ("c:\windows\system32\cryptui.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 514560, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-910066801|0x397f812c5f0ab9fa08f034c3d3b688c5|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 17/08/2004  12:04, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\WININET.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\BROWSEUI.dll, MID = 75f50000,  ("c:\windows\system32\browseui.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll, MID = 67500000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\scrchpg.dll") File version = 1.0.6.411, File size = 69739, File modification date = 01/11/2006  12:38, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |1081495946|0xe4f4b2a19754604fce54d33ac326cc1a|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\browselc.dll, MID = c50000,  ("c:\windows\system32\browselc.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 66560, File modification date = 17/08/2004  12:02, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-855201112|0x599c0ccb1f4843b2f17450a078d05ded|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\System32\cscui.dll, MID = 77a10000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
	  C:\WINDOWS\System32\CSCDLL.dll, MID = 765d0000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
	  C:\WINDOWS\system32\urlmon.dll, MID = 7df10000,  ("c:\windows\system32\urlmon.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 614912, File modification date = 22/08/2007  13:14, File description =  OLE32  Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |695922910|0xc69ec1a1ee73552d3129e6c2a6db742d|
	  C:\WINDOWS\system32\shdoclc.dll, MID = 19f0000,  ("c:\windows\system32\shdoclc.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 559104, File modification date = 17/08/2004  12:03, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-356448014|0x83311662a0706746f756fc7a1d953d2e|
	  C:\WINDOWS\system32\mlang.dll, MID = 75da0000,  ("c:\windows\system32\mlang.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 586240, File modification date = 17/08/2004  12:04, File description = Multi Language Support DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1434715655|0x98f5ad2ed416ac687ba235228bbe7e05|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\RASAPI32.DLL, MID = 76ed0000,  ("c:\windows\system32\rasapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 236544, File modification date = 17/08/2004  12:04, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1864383773|0x23657c4b200ce864989e48d66c3dd28b|
	  C:\WINDOWS\system32\rasman.dll, MID = 76e80000,  ("c:\windows\system32\rasman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61440, File modification date = 17/08/2004  12:04, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1243210824|0x53a96af33f4355c548b53d2a26b2b261|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 17/08/2004  12:04, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 17/08/2004  12:04, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\sensapi.dll, MID = 72290000,  ("c:\windows\system32\sensapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 17/08/2004  12:04, File description = SENS Connectivity API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-330752720|0x28b3398819e998adfe09d8d26e230258|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\mshtml.dll, MID = 7dbd0000,  ("c:\windows\system32\mshtml.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 3079168, File modification date = 22/08/2007  13:14, File description =   HTML Microsoft, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |3283378|0x967eb63ca173705c070dc4378078662b|
	  C:\WINDOWS\system32\msls31.dll, MID = 74680000,  ("c:\windows\system32\msls31.dll") File version = 3.10.349.0, File size = 146432, File modification date = 20/10/2001  12:00, File description = Microsoft Line Services library file, Product Name = Microsoft Line Services, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1996-1999) |-544264483|0x288739d85501ace0479c3d638732930e|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 17/08/2004  12:04, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\msimtf.dll, MID = 746b0000,  ("c:\windows\system32\msimtf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 159232, File modification date = 17/08/2004  12:04, File description = Active IMM Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |620728644|0xd942ba5f14c7b0089d1967941e6a697b|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 17/08/2004  12:04, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\Program Files\Microsoft Office\OFFICE11\msohev.dll, MID = 325c0000,  ("c:\program files\microsoft office\office11\msohev.dll") File version = 11.0.5510, File size = 67128, File modification date = 15/07/2003  02:52, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
	  C:\WINDOWS\system32\jscript.dll, MID = 75c20000,  ("c:\windows\system32\jscript.dll") File version = 5.6.0.8831, File size = 450560, File modification date = 18/05/2006  05:43, File description = Microsoft (r) JScript, Product Name = Microsoft (r) JScript, Product version = 5.6.0.8831, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 2002) |-1198432807|0xa31988d999de8877f67b42dd8ae5525a|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\klscav.dll, MID = 67000000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\klscav.dll") File version = 6.0.1.411, File size = 36970, File modification date = 01/11/2006  12:34, File description = Script Checker AV Plugin, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |-1510969157|0xadb051864ac59834c96af2109448ca1f|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 20/10/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\prloader.dll, MID = 64d00000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\prloader.dll") File version = 6.0.1.411, File size = 282732, File modification date = 01/11/2006  12:37, File description = Prague Loader, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |-43367494|0x940f024b00f5c329fdf004a621ec12a9|
	  C:\WINDOWS\system32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\vbscript.dll, MID = 732c0000,  ("c:\windows\system32\vbscript.dll") File version = 5.6.0.8820, File size = 417792, File modification date = 17/08/2004  12:04, File description = Microsoft (r) VBScript, Product Name = Microsoft (r) VBScript, Product version = 5.6.0.8820, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 2002) |16569613|0x54e4c2f75fcb9fe49186c4a6abe1a3c8|
	  C:\WINDOWS\system32\MFC42.DLL, MID = 73d90000,  ("c:\windows\system32\mfc42.dll") File version = 6.02.4131.0, File size = 1028096, File modification date = 17/08/2004  12:04, File description = MFCDLL Shared Library - Retail Version, Product Name = Microsoft (R) Visual C++, Product version = 6.02.400, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1993-1998) |618104331|0x808a87c6c2a412dfbfed3b84301a6d26|
	  C:\WINDOWS\system32\MFC42LOC.DLL, MID = 61ec0000,  ("c:\windows\system32\mfc42loc.dll") File version = 6.00.8665.0, File size = 57344, File modification date = 20/10/2001  12:00, File description =   MFC, Product Name = Microsoft Visual C++, Product version = 6.0.400, Company name =  Microsoft (  Microsoft, 1993-1998) |2079313362|0x9cfc5a99601ebf7e61ed0a35a180ff41|
	  C:\Program Files\Common Files\System\msadc\msadco.dll, MID = 4efc0000,  ("c:\program files\common files\system\msadc\msadco.dll") File version = 2.81.1124.0 (xpsp_sp2_gdr.060322-1613), File size = 143360, File modification date = 23/03/2006  05:51, File description = Microsoft Data Access - Remote Data Services Data Control, Product Name = Microsoft Data Access Components, Product version = 2.81.1124.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |295997325|0x93e14e518656d595f9ca9c69a8bb74de|
	  C:\WINDOWS\system32\MSDART.DLL, MID = 76580000,  ("c:\windows\system32\msdart.dll") File version = 2.81.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 151552, File modification date = 17/08/2004  12:04, File description = Microsoft Data Access - OLE DB Runtime Routines, Product Name = Microsoft Data Access Components, Product version = 2.81.1117.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |234559748|0x0dcaa6f7975bcf694a8f3abd46df9d96|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\Program Files\Common Files\System\msadc\msadcor.dll, MID = 3480000,  ("c:\program files\common files\system\msadc\msadcor.dll") File version = 2.81.1117.0 built by: (_sqlbld), File size = 16384, File modification date = 17/08/2004  12:02, File description = Microsoft Data Access - Remote Data Services Data Control Resources, Product Name = Microsoft Data Access Components, Product version = 2.81.1117.0, Company name =   (Microsoft Corp.) (   (Microsoft Corp.).   .) |-640082124|0x51027c23e7b8c11a770edd0a883041b8|
	  C:\WINDOWS\system32\msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\wuweb.dll, MID = 50bc0000,  ("c:\windows\system32\wuweb.dll") File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 203096, File modification date = 30/07/2007  14:19, File description = Windows Update Web Control, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-492961453|0x5c9a003e7c6ba03f04dc2d9c82a7e6e0|
	  C:\WINDOWS\system32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\system32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 17/08/2004  12:04, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\Program Files\Common Files\Microsoft Shared\VGX\vgx.dll, MID = 5e350000,  ("c:\program files\common files\microsoft shared\vgx\vgx.dll") File version = 6.00.2900.3164, File size = 851968, File modification date = 26/06/2007  13:57, File description = Microsoft Vector Graphics Rendering(VML), Product Name = Microsoft Vector Graphics Rendering(VML), Product version = 6.00.2900.3164, Company name = Microsoft Corporation (Copyright Microsoft Corporation 1983-1999.  All rights reserved.) |-1723294092|0x01b5dc4509d5f127e41dc5d1baaa07cd|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/08/2004  12:04, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll, MID = 4ebe0000,  ("c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll") File version = 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158), File size = 1712128, File modification date = 17/08/2004  12:01, File description = Microsoft GDI+, Product Name = Microsoft Windows Operating System, Product version = 5.1.3102.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |133300943|0x27d0bf463198c8e6efbdb6bcefce2d74|
	  C:\WINDOWS\system32\dxtrans.dll, MID = 6c350000,  ("c:\windows\system32\dxtrans.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 205312, File modification date = 22/08/2007  13:14, File description = DirectX Media -- DirectX Transform Core, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.3199, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-224631247|0xf52a221a96d8ce359e67cb6064bbacd1|
	  C:\WINDOWS\system32\ddrawex.dll, MID = 6d9c0000,  ("c:\windows\system32\ddrawex.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27136, File modification date = 17/08/2004  12:04, File description = Direct Draw Ex, Product Name = Microsoft Windows Operating System, Product version = 5.03.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-541135331|0x0fae8c70918c7450307c285655ad8f19|
	  C:\WINDOWS\system32\DDRAW.dll, MID = 73720000,  ("c:\windows\system32\ddraw.dll") File version = 5.03.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 266240, File modification date = 17/08/2004  12:04, File description = Microsoft DirectDraw, Product Name =   Microsoft Windows, Product version = 5.03.2600.2180, Company name =   (  .   .) |-1992087609|0x0f143a8d803bae20cd9b120b8084bc1c|
	  C:\WINDOWS\system32\DCIMAN32.dll, MID = 73b80000,  ("c:\windows\system32\dciman32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8704, File modification date = 17/08/2004  12:04, File description = DCI Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630976475|0x9036824c541b5e7904cce895dac84def|
	  C:\WINDOWS\system32\dxtmsft.dll, MID = 6c390000,  ("c:\windows\system32\dxtmsft.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 357888, File modification date = 22/08/2007  13:14, File description = DirectX Media -- Image DirectX Transforms, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.3199, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |380379565|0x4e5b5ac3629c3ed150d94ba5d7726293|

	PROCESS	wmiprvse, PID = 1340, USER = , Command Line = C:\WINDOWS\system32\wbem\wmiprvse.exe -Embedding
		  "c:\windows\system32\wbem\wmiprvse.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 218112, File modification date = 17/08/2004  12:05, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2006706805|0x3b9228821aece65c899910eb8fae709b|
	  C:\WINDOWS\system32\wbem\wmiprvse.exe, MID = 1000000,  ("c:\windows\system32\wbem\wmiprvse.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 218112, File modification date = 17/08/2004  12:05, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2006706805|0x3b9228821aece65c899910eb8fae709b|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75250000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 214528, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1186626859|0x7fd8eca23963c13600d681de85996e3e|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\wbem\FastProx.dll, MID = 75660000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 472064, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-792155897|0x61bf3d7e1b81d9705b054c5ee0660355|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 17/08/2004  12:04, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 17/08/2004  12:04, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 17/08/2004  12:04, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 17/08/2004  12:04, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 17/08/2004  12:04, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\wbem\wbemprox.dll, MID = 74eb0000,  ("c:\windows\system32\wbem\wbemprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1932469142|0xd74ff28418cb97e37ea39db7d32f96df|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74e90000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 17/08/2004  12:04, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1042801053|0xe08385fba3ad1c8017f9a391ff846659|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 74fe0000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 97792, File modification date = 17/08/2004  12:04, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |206636464|0x82e0563f98ba1fab48a18dd5ebedf715|
	  C:\WINDOWS\system32\wbem\cimwin32.dll, MID = 716e0000,  ("c:\windows\system32\wbem\cimwin32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1352704, File modification date = 17/08/2004  12:04, File description =  Win32 WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2146998559|0xa4ae1fc831e1b8ffc6a26b863091d30f|
	  C:\WINDOWS\system32\wbem\framedyn.dll, MID = 69840000,  ("c:\windows\system32\wbem\framedyn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 185856, File modification date = 17/08/2004  12:04, File description = WMI SDK Provider Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1550441545|0x710073d7b3e42416e1674c611f6ad18a|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|

	PROCESS	GetSystemInfo, PID = 272, USER = PREINSTA-43242A\ (Group - PREINSTA-43242A\, , PREINSTA-43242A\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "E:\getsysteminfo\GetSystemInfo.exe" 
		  "e:\getsysteminfo\getsysteminfo.exe" File version = 3, 0, 0, 5, File size = 331857, File modification date = 05/09/2006  12:40, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  E:\getsysteminfo\GetSystemInfo.exe, MID = 400000,  ("e:\getsysteminfo\getsysteminfo.exe") File version = 3, 0, 0, 5, File size = 331857, File modification date = 05/09/2006  12:40, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 17/08/2004  12:04, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.3119 (xpsp_sp2_gdr.070416-1301), File size = 990720, File modification date = 16/04/2007  15:54, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.3119, Company name =   (  .   .) |1584765344|0x9716ce5c88a4eff821503cbeac55830b|
	  C:\WINDOWS\system32\USER32.dll, MID = 7e360000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.3099 (xpsp_sp2_gdr.070308-0222), File size = 578048, File modification date = 08/03/2007  15:38, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.3099, Company name =   (  .   .) |-1568304107|0x94f595b4bb622ab472aeb77cb8274150|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.3159 (xpsp_sp2_gdr.070619-1300), File size = 282112, File modification date = 19/06/2007  13:32, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3159, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-69560983|0x3bf361a7e9e0aca3f069bf0d259d0327|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 17/08/2004  12:05, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 17/08/2004  12:04, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.3173 (xpsp_sp2_gdr.070709-0051), File size = 584192, File modification date = 09/07/2007  13:11, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3173, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2103104685|0xfb13069571122ef3d0d4239beacf75d2|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 17/08/2004  12:04, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 474112, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-203788768|0x1d67479ea8c8a054cd567c9a276d0e07|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 17/08/2004  12:04, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 17/08/2004  12:04, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 17/08/2004  12:04, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\Msi.dll, MID = 7d1e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.4039, File size = 2854400, File modification date = 18/04/2007  16:15, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.4039, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |979385203|0xd83402aeb922ba157f39ba56c2be49bc|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 17/08/2004  12:04, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\MSCTF.dll, MID = 746e0000,  ("c:\windows\system32\msctf.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 294400, File modification date = 17/08/2004  12:04, File description =  (DLL) MSCTF-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-813844439|0x4969975fe0487749f3ed86caf6a832e7|
	  C:\Program Files\Internet Explorer\PLUGINS\WinSys84.Sys, MID = 960000,  ("c:\program files\internet explorer\plugins\winsys84.sys") File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
	  C:\WINDOWS\system32\oleaut32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.3139, File size = 549376, File modification date = 17/05/2007  11:30, File description = (null), Product Name = (null), Product version = 5.1.2600.3139, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |899631094|0x04ffbd0f7fb44005b466e8bf08f0b4ff|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\wininet.dll, MID = 771a0000,  ("c:\windows\system32\wininet.dll") File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 659456, File modification date = 22/08/2007  13:14, File description =    Win32, Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1982636827|0x0a30b5bec262cecc8fcc1da7768f581b|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 17/08/2004  12:04, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 17/08/2004  12:04, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 17/08/2004  12:04, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 17/08/2004  12:04, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76970000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 17/08/2004  12:04, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 17/08/2004  12:04, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\Program Files\Common Files\Microsoft Shared\MSINFO\QQGS1.dll, MID = e70000,  ("c:\program files\common files\microsoft shared\msinfo\qqgs1.dll") File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
	  C:\WINDOWS\system32\wsock32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 17/08/2004  12:04, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Dat, MID = fb0000,  ("c:\program files\internet explorer\iexplore32.dat") File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
	  C:\WINDOWS\system32\IMAGEHLP.DLL, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\Program Files\Internet Explorer\IEXPLORE32.Sys, MID = 11c0000,  ("c:\program files\internet explorer\iexplore32.sys") File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
	  C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scrchpg.dll, MID = 67500000,  ("c:\program files\kaspersky lab\kaspersky anti-virus 6.0\scrchpg.dll") File version = 1.0.6.411, File size = 69739, File modification date = 01/11/2006  12:38, File description = Script Checker, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |1081495946|0xe4f4b2a19754604fce54d33ac326cc1a|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 17/08/2004  12:04, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76960000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), File size = 19968, File modification date = 01/09/2005  02:28, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2751, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1425770188|0x3e46da8ae679b87d309ebbd3e12283d0|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f30000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:04, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1603469464|0x84e62f048e179a53623739b31691f608|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71bf0000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 17/08/2004  12:04, File description = Microsoft LAN Manager, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-164401074|0x7e27508a7492a748ebface597d51b8ac|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cb0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80896, File modification date = 17/08/2004  12:04, File description =   GUI  NT LM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1722132880|0x61b52d7c6c0e902cb8b63c9ab545f0bf|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c70000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 245760, File modification date = 17/08/2004  12:04, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-871070814|0x9568897cd0f9caf45c3aa541bd490782|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 17/08/2004  12:04, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 17/08/2004  12:04, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f40000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 17/08/2004  12:04, File description =   Web DAV, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1728990969|0xa3777781ed5a0f7a5f81bd0049b331f3|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 17/08/2004  12:04, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 17/08/2004  12:04, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 17/08/2004  12:04, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\odbcint.dll, MID = 20000000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 17/08/2004  12:03, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 1650000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 17/08/2004  12:03, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\perfproc.dll, MID = 5ec70000,  ("c:\windows\system32\perfproc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35328, File modification date = 17/08/2004  12:04, File description =      Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2042794600|0x025455ca4a1027345d9ae0a527669874|
	  C:\WINDOWS\system32\psapi.dll, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 17/08/2004  12:04, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|

Opened TCP/UDP ports:

	TCP, LOCAL (host/address/port):preinsta-43242a/0.0.0.0/135(epmap), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 840, Command Line = c:\windows\system32\svchost -k rpcss   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	TCP, LOCAL (host/address/port):preinsta-43242a/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/139(netbios-ssn), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/1252, REMOTE (host/address/port):DARIGA/10.0.0.4/139(netbios-ssn), State:ESTABLISHED, PID = 4, Command Line =  
	TCP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/1274, REMOTE (host/address/port):cmp.p4p.vip.cnb.yahoo.com/202.165.98.251/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/1276, REMOTE (host/address/port):p.mm.vip.cn3.yahoo.com/203.209.244.240/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/1285, REMOTE (host/address/port):*/221.215.59.141/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/1297, REMOTE (host/address/port):p.mm.vip.cn3.yahoo.com/203.209.244.240/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/1299, REMOTE (host/address/port):p.mm.vip.cn3.yahoo.com/203.209.244.240/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/1300, REMOTE (host/address/port):p.mm.vip.cn3.yahoo.com/203.209.244.240/80(http), State:TIME_WAIT, PID = 0, Command Line = (null) 
	TCP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/1301, REMOTE (host/address/port):*/212.47.219.86/80(http), State:ESTABLISHED, PID = 1352, Command Line = "c:\program files\internet explorer\iexplore.exe"    "c:\program files\internet explorer\iexplore.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description = Internet Explorer, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |2061675851|0x1628da648e989fb9575ba9db0640f3fd|
	UDP, LOCAL (host/address/port):preinsta-43242a/0.0.0.0/445(microsoft-ds), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):preinsta-43242a/0.0.0.0/500, REMOTE (host/address/port):*/*/*, State:*, PID = 632, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	UDP, LOCAL (host/address/port):preinsta-43242a/0.0.0.0/1030, REMOTE (host/address/port):*/*/*, State:*, PID = 952, Command Line = c:\windows\system32\svchost.exe -k networkservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):preinsta-43242a/0.0.0.0/1055, REMOTE (host/address/port):*/*/*, State:*, PID = 952, Command Line = c:\windows\system32\svchost.exe -k networkservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):preinsta-43242a/0.0.0.0/4500, REMOTE (host/address/port):*/*/*, State:*, PID = 632, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	UDP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/123, REMOTE (host/address/port):*/*/*, State:*, PID = 904, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/137(netbios-ns), REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/138, REMOTE (host/address/port):*/*/*, State:*, PID = 4, Command Line =  
	UDP, LOCAL (host/address/port):preinsta-43242a/10.0.0.7/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1092, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):preinsta-43242a/127.0.0.1/123, REMOTE (host/address/port):*/*/*, State:*, PID = 904, Command Line = c:\windows\system32\svchost.exe -k netsvcs   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):preinsta-43242a/127.0.0.1/1038, REMOTE (host/address/port):*/*/*, State:*, PID = 1612, Command Line = c:\windows\system32\glvfnpo.exe "c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp.exe"    "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
	UDP, LOCAL (host/address/port):preinsta-43242a/127.0.0.1/1048, REMOTE (host/address/port):*/*/*, State:*, PID = 1592, Command Line = "c:\windows\system32\nbiqjha.exe"    "c:\windows\system32\nbiqjha.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
	UDP, LOCAL (host/address/port):preinsta-43242a/127.0.0.1/1051, REMOTE (host/address/port):*/*/*, State:*, PID = 1352, Command Line = "c:\program files\internet explorer\iexplore.exe"    "c:\program files\internet explorer\iexplore.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description = Internet Explorer, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |2061675851|0x1628da648e989fb9575ba9db0640f3fd|
	UDP, LOCAL (host/address/port):preinsta-43242a/127.0.0.1/1257, REMOTE (host/address/port):*/*/*, State:*, PID = 704, Command Line = "c:\program files\internet explorer\iexplore.exe" http://www.qqkx.com   "c:\program files\internet explorer\iexplore.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description = Internet Explorer, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |2061675851|0x1628da648e989fb9575ba9db0640f3fd|
	UDP, LOCAL (host/address/port):preinsta-43242a/127.0.0.1/1900, REMOTE (host/address/port):*/*/*, State:*, PID = 1092, Command Line = c:\windows\system32\svchost.exe -k localservice   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|

System default language:
		Russian

Default interface language of user:
		Russian

Keyboard layout languages:
		Russian
		English
		Kazakh

Installed code pages:
		10000 = 10000 (MAC - )
		10006 = 10006 (MAC -  1)
		10007 = 10007 (MAC - )
		10010 = 10010 (MAC - )
		10017 = 10017 (MAC - )
		10029 = 10029 (MAC -  2)
		10079 = 10079 (MAC - )
		10081 = 10081 (MAC - )
		10082 = 10082 (MAC - )
		1026 = 1026 (IBM EBCDIC -  (-5))
		1250 = 1250  (ANSI - -)
		1251 = 1251  (ANSI - )
		1252 = 1252  (ANSI -  1)
		1253 = 1251  (ANSI - )
		1254 = 1254  (ANSI - )
		1255 = 1255  (ANSI - )
		1256 = 1256  (ANSI - )
		1257 = 1257  (ANSI - )
		1258 = 1258  (ANSI/OEM - )
		1361 = Korean (Johab)
		20127 = 20127 (-ASCII)
		20261 = 20261 (T.61)
		20866 = 20866 ( - 8)
		21866 = 21866 ( - 8-U)
		28591 = 28591 (ISO 8859-1  1)
		28592 = 28592 (ISO 8859-2 )
		28594 = 28594 (ISO 8859-4 )
		28595 = 28595 (ISO 8859-5 )
		28597 = 28597 (ISO 8859-7 )
		28599 = 28599 (ISO 8859-9  5)
		28605 = 28605 (ISO 8859-15  9)
		37 = 37    (IBM EBCDIC -   )
		437 = 437   (OEM - )
		500 = 500   (IBM EBCDIC - )
		737 = 737   (OEM -  437G)
		775 = 775   (OEM - )
		850 = 850   (OEM -   1)
		852 = 852   (OEM -  2)
		855 = 855   (OEM -  )
		857 = 857   (OEM - )
		860 = 860   (OEM - )
		861 = 861   (OEM - )
		863 = 863   (OEM - -)
		865 = 865   (OEM - )
		866 = 866   (OEM - )
		869 = 869   (OEM -  )
		874 = 874   (ANSI/OEM - )
		875 = 875   (IBM EBCDIC -  )
		932 = 932   (ANSI/OEM -  Shift-JIS)
		936 = 936   (ANSI/OEM -   GBK)
		949 = 949   (ANSI/OEM - )
		950 = 950   (ANSI/OEM -   Big5)
		28603 = 
		65000 = 65000 (UTF-7)
		65001 = 65001 (UTF-8)

StartUp link objects:
---------------------
SYSTEM REGISTRY
  *\Software\Microsoft\Windows NT\CurrentVersion\AEDebug
    Debugger=drwtsn32 -p %ld -e %ld -g <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AEDebug>
      "c:\windows\system32\drwtsn32.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 46080, File modification date = 20/10/2001  12:00, File description =  DrWatson, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |540897299|0x6a32ea2baff29f3624d841da20f67e28|
  *\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell=Explorer.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\explorer.exe" File version = 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234), File size = 1033728, File modification date = 13/06/2007  13:23, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.3156, Company name =   (  .   .) |-1482101721|0x3630dbb63bad434e3b1f39c2b61fc62f|
    UserInit=C:\WINDOWS\system32\userinit.exe, <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\system32\userinit.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 17/08/2004  12:05, File description =  Userinit    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1110865795|0xb5f1a73edab83fa2db9662e10e027587|
  *\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\*
    DllName=crypt32.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain>
      "c:\windows\system32\crypt32.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 17/08/2004  12:04, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
    DllName=cryptnet.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet>
      "c:\windows\system32\cryptnet.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63488, File modification date = 17/08/2004  12:04, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1707137241|0x48e2c7182fe73f9236c2c3e0d144ac7a|
    DllName=cscdll.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll>
      "c:\windows\system32\cscdll.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
    DllName=C:\WINDOWS\system32\klogon.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\klogon>
      "c:\windows\system32\klogon.dll" File version = 6.0.1.411, File size = 94314, File modification date = 01/11/2006  12:42, File description = Logon Visualizer, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |802746315|0x3f97f0f4a9a6d21a1a496c1d8fe84e4e|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=sclgntfy.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy>
      "c:\windows\system32\sclgntfy.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 22016, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1015048368|0x017f95e7e577b928827add784b2ca052|
    DllName=WlNotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 17/08/2004  12:04, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
  *\Software\Microsoft\Windows*\CurrentVersion\Run*
    NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:05, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\nvcpl.dll" File version = 6.14.10.7184, File size = 5537792, File modification date = 24/02/2005  15:32, File description = NVIDIA Display Properties Extension, Product Name = NVIDIA Compatible Windows 2000 Display driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-1724730246|0x03f469b6c2e743565a41ad0997fd493c|
    nwiz=nwiz.exe /install <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\nwiz.exe" File version = 6.14.10.10035, File size = 1495040, File modification date = 24/02/2005  15:32, File description = NVIDIA nView Wizard, Version 100.35 , Product Name = NVIDIA nView Wizard, Version 100.35 , Product version = 6.14.10.10035, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-1529739879|0x57a1ef5990967c6fb9b3ee852756e791|
    NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:05, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\nvmctray.dll" File version = 6.14.10.7184, File size = 86016, File modification date = 24/02/2005  15:32, File description = NVIDIA Media Center Library, Product Name = NVIDIA Media Center Library, Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-339475816|0x827b4362bb68cc235fb627dc33a9eff7|
    SoundMan=SOUNDMAN.EXE <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\soundman.exe" File version = 5.1.0.30, File size = 77824, File modification date = 15/11/2004  10:20, File description = Realtek Sound Manager, Product Name = Realtek Sound Manager, Product version = 5.1.0.29, Company name = Realtek Semiconductor Corp. (Copyright (c) 2001-2004 Realtek Semiconductor Corp.) |-1039784557|0xff86e640e4e0fd18cfb4696b38867222|
    HP Software Update="C:\Program Files\HP\HP Software Update\HPWuSchd2.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\hp\hp software update\hpwuschd2.exe" File version = 2, 0, 39, 0, File size = 49152, File modification date = 12/02/2004  09:38, File description = hpwuSchd, Product Name = Hewlett-Packard hpwuSchd, Product version = 2, 0, 39, 0, Company name = Hewlett-Packard Company (Copyright  2003) |-1416746216|0x5468859b5dc0f3291d7eec960b569142|
    HP Component Manager="C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\hp\hpcoretech\hpcmpmgr.exe" File version = 2.1.1.0, File size = 241664, File modification date = 22/12/2003  04:38, File description = HP Framework Component Manager Service, Product Name = hp coretech  (COmponent REuse TECHnology), Product version = 2.1.4, Company name = Hewlett-Packard Company (Copyright (C) Hewlett-Packard. 2002-2003) |710555374|0xb75b654ee1da99876461b24597ae3ff3|
    qeyxuht=C:\WINDOWS\system32\nbiqjha.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\nbiqjha.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    gtnkwkg=C:\WINDOWS\system32\glvfnpo.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    AVP="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp.exe" File version = 6.0.1.411, File size = 155751, File modification date = 08/11/2006  13:28, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |967145827|0x250f20c64fd9eaa0f2d7844bca92e741|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 17/08/2004  12:04, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 17/08/2004  12:04, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 17/08/2004  12:04, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    CTFMON.EXE=C:\WINDOWS\system32\ctfmon.exe <HKEY_USERS\S-1-5-21-1343024091-1897051121-725345543-500\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 17/08/2004  12:04, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    MSMSGS="C:\Program Files\Messenger\msmsgs.exe" /background <HKEY_USERS\S-1-5-21-1343024091-1897051121-725345543-500\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 17/08/2004  12:04, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
  HKLM\System\ControlSet???\Services\*\Parameters
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet001\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 17/08/2004  12:04, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet001\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 171008, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1853871312|0x7a2cf119a6d8c946cc0426e0f6eee733|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet001\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 17/08/2004  12:04, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet001\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 17/08/2004  12:04, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet001\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 17/08/2004  12:04, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet001\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 17/08/2004  12:04, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet001\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet001\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 17/08/2004  12:04, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet001\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 17/08/2004  12:04, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet001\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 17/08/2004  12:04, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet001\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet001\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 17/08/2004  12:04, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\hidserv.dll <HKLM\System\ControlSet001\Services\HidServ\Parameters>
      "c:\windows\system32\hidserv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 21504, File modification date = 17/08/2004  12:04, File description = HID Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2116251098|0xa5b29888a120408e674663b7b09a3ac0|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet001\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 17/08/2004  12:04, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet001\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet001\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet001\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 17/08/2004  12:04, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet001\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 17/08/2004  12:04, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet001\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet001\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet001\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet001\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 17/08/2004  12:04, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet001\Services\RasMan\Parameters>
      "C:\WINDOWS\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet001\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 20/10/2001  12:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet001\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1569613025|0x461fd36d40dece5f63c0acf7b66899d2|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet001\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 17/08/2004  12:04, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet001\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet001\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 17/08/2004  12:04, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet001\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 17/08/2004  12:04, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet001\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet001\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet001\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet001\Services\TapiSrv\Parameters>
      "C:\WINDOWS\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet001\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet001\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 17/08/2004  12:04, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet001\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.3077 (xpsp_sp2_gdr.070204-2255), File size = 185344, File modification date = 05/02/2007  20:19, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.3077, Company name =   (  .   .) |2077781456|0x6e50df8c61419868ca7395aeb30ec401|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet001\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet001\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet001\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 17/08/2004  12:04, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\mspmsnsv.dll <HKLM\System\ControlSet001\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 9.0.1.56, File size = 52736, File modification date = 17/08/2004  12:04, File description =      Microsoft, Product Name = Windows Media Device Manager, Product version = 9.0.1.56, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.)) |1653778287|0xfb1a5361cdf55d94008a6ee5ec36d168|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet001\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet001\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 17/08/2004  12:04, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet001\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 17/08/2004  12:04, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet001\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 17/08/2004  12:16, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet001\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 17/08/2004  12:04, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet002\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 17/08/2004  12:04, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\appmgmts.dll <HKLM\System\ControlSet002\Services\AppMgmt\Parameters>
      "C:\WINDOWS\system32\appmgmts.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 171008, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1853871312|0x7a2cf119a6d8c946cc0426e0f6eee733|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet002\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 17/08/2004  12:04, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet002\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 17/08/2004  12:04, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet002\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 17/08/2004  12:04, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet002\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 17/08/2004  12:04, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet002\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet002\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet002\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 17/08/2004  12:04, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet002\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 17/08/2004  12:04, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet002\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 17/08/2004  12:04, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet002\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet002\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 17/08/2004  12:04, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\hidserv.dll <HKLM\System\ControlSet002\Services\HidServ\Parameters>
      "c:\windows\system32\hidserv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 21504, File modification date = 17/08/2004  12:04, File description = HID Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2116251098|0xa5b29888a120408e674663b7b09a3ac0|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet002\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 17/08/2004  12:04, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet002\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet002\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet002\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 17/08/2004  12:04, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet002\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 17/08/2004  12:04, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet002\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet002\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet002\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet002\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 17/08/2004  12:04, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet002\Services\RasMan\Parameters>
      "C:\WINDOWS\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet002\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 20/10/2001  12:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\system32\regsvc.dll <HKLM\System\ControlSet002\Services\RemoteRegistry\Parameters>
      "C:\WINDOWS\system32\regsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 17/08/2004  12:04, File description = Remote Registry Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1569613025|0x461fd36d40dece5f63c0acf7b66899d2|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet002\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet002\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 17/08/2004  12:04, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet002\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet002\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 17/08/2004  12:04, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet002\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 17/08/2004  12:04, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet002\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 170496, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-115188364|0x6265e5bdd9fd5ec0b35400e4a8de0137|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet002\Services\SSDPSRV\Parameters>
      "c:\windows\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 17/08/2004  12:04, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet002\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet002\Services\TapiSrv\Parameters>
      "C:\WINDOWS\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet002\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet002\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 17/08/2004  12:04, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet002\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.3077 (xpsp_sp2_gdr.070204-2255), File size = 185344, File modification date = 05/02/2007  20:19, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.3077, Company name =   (  .   .) |2077781456|0x6e50df8c61419868ca7395aeb30ec401|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet002\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet002\Services\WebClient\Parameters>
      "c:\windows\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet002\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 17/08/2004  12:04, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\mspmsnsv.dll <HKLM\System\ControlSet002\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 9.0.1.56, File size = 52736, File modification date = 17/08/2004  12:04, File description =      Microsoft, Product Name = Windows Media Device Manager, Product version = 9.0.1.56, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.)) |1653778287|0xfb1a5361cdf55d94008a6ee5ec36d168|
    ServiceDll=%SystemRoot%\System32\advapi32.dll <HKLM\System\ControlSet002\Services\Wmi\Parameters>
      "C:\WINDOWS\system32\advapi32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 17/08/2004  12:04, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet002\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 17/08/2004  12:04, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet002\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 17/08/2004  12:04, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet002\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 17/08/2004  12:16, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet002\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 17/08/2004  12:04, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
  HKLM\System\ControlSet???\Services\*
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet001\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 17/08/2004  11:46, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet001\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet001\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 03/08/2004  19:14, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=system32\DRIVERS\agp440.sys <HKLM\System\ControlSet001\Services\agp440>
      "c:\windows\system32\drivers\agp440.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42368, File modification date = 03/08/2004  19:07, File description = 440 NT AGP Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-942423365|0x2c428fa0c3e3a01ed93c9b2a27d8d4bb|
    ImagePath=system32\drivers\ALCXWDM.SYS <HKLM\System\ControlSet001\Services\ALCXWDM>
      "c:\windows\system32\drivers\alcxwdm.sys" File version = 5.10.5750 built by: WinDDK, File size = 2297664, File modification date = 17/11/2004  11:05, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5750, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2004) |1283149363|0x933933288df5ed26d1928215c97d05c7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet001\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 17/08/2004  12:04, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe <HKLM\System\ControlSet001\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v1.1.4322\aspnet_state.exe" File version = 1.1.4322.573, File size = 32768, File modification date = 20/02/2003  15:19, File description = aspnet_state.exe, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |1596224568|0xa986fcfdac587e68478db51547b90800|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet001\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 03/08/2004  19:05, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet001\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 03/08/2004  18:59, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet001\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 03/08/2004  18:58, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet001\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r <HKLM\System\ControlSet001\Services\AVP>
      "c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp.exe" File version = 6.0.1.411, File size = 155751, File modification date = 08/11/2006  13:28, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |967145827|0x250f20c64fd9eaa0f2d7844bca92e741|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet001\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 03/08/2004  18:59, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet001\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 17/08/2004  12:04, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet001\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:04, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} <HKLM\System\ControlSet001\Services\COMSysApp>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 17/08/2004  12:04, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1673880939|0xbca2a62fadd6458b0ce978f5b74d8dfa|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet001\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet001\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 03/08/2004  18:59, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet001\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 17/08/2004  12:04, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet001\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 17/08/2004  11:55, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet001\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 17/08/2004  11:55, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet001\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 20/10/2001  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet001\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet001\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet001\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 17/08/2004  12:05, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet001\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 03/08/2004  18:59, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet001\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 03/08/2004  18:59, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet001\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet001\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 20/10/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet001\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 03/08/2004  19:04, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet001\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  18:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet001\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet001\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet001\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 17/08/2004  11:51, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet001\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 03/08/2004  19:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet001\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 17/08/2004  12:04, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet001\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  15:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet001\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 17/08/2004  11:53, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet001\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 03/08/2004  19:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet001\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 20/10/2001  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet001\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 03/08/2004  19:04, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet001\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet001\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 03/08/2004  19:14, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet001\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 03/08/2004  19:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet001\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 19/10/2001  16:22, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet001\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 17/08/2004  11:54, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\DRIVERS\kbdhid.sys <HKLM\System\ControlSet001\Services\kbdhid>
      "c:\windows\system32\drivers\kbdhid.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 17/08/2004  11:54, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |745085733|0xd0c2e1e0b67a4b0ba4f1c5240c892cb4|
    ImagePath=system32\drivers\kl1.sys <HKLM\System\ControlSet001\Services\kl1>
      "c:\windows\system32\drivers\kl1.sys" File version = 6.1.5.0, File size = 104448, File modification date = 28/09/2006  09:36, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |1896547209|0xbc02a8e0dd5dc266e5cc3636dd454403|
    ImagePath=\??\C:\WINDOWS\system32\drivers\klif.sys <HKLM\System\ControlSet001\Services\klif>
      "\\?\c:\windows\system32\drivers\klif.sys" File version = 6.12.10.247, File size = 174864, File modification date = 03/11/2007  07:50, File description = spuper-ptor, Product Name = Kaspersky Anti-Virus, Product version = 6.0.2.1, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |259452601|0xf0653e5e164123cad51edda22418c2a3|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet001\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet001\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  19:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet001\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 17/08/2004  12:04, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet001\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 17/08/2004  12:16, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mouhid.sys <HKLM\System\ControlSet001\Services\mouhid>
      "c:\windows\system32\drivers\mouhid.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 19/10/2001  16:33, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1481140716|0xdcf669a6b5682768d3fcf2906453ea97|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet001\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 03/08/2004  19:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet001\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet001\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 17/08/2004  12:04, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=C:\WINDOWS\system32\msiexec.exe /V <HKLM\System\ControlSet001\Services\MSIServer>
      "c:\windows\system32\msiexec.exe" File version = 3.1.4000.1823, File size = 78848, File modification date = 04/05/2005  11:45, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.1823, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1201451646|0xf5f0146580e7023adb963879840777f8|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet001\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet001\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet001\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet001\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 17/08/2004  12:16, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet001\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 20/10/2001  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet001\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 17/08/2004  12:16, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet001\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 03/08/2004  19:14, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet001\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 03/08/2004  19:03, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet001\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 03/08/2004  19:14, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 17/08/2004  12:04, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 17/08/2004  12:04, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\nmwcdc.sys <HKLM\System\ControlSet001\Services\Nokia USB Generic>
      "c:\windows\system32\drivers\nmwcdc.sys" File version = 5.02.13.06, File size = 6262, File modification date = 26/08/2004  09:42, File description = Nokia USB Phone Generic Client, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004. Nokia. All rights reserved.) |-112314610|0x8205bc8eb8c4d9f175ea3b02d4a57e61|
    ImagePath=system32\drivers\nmwcdcm.sys <HKLM\System\ControlSet001\Services\Nokia USB Modem>
      "c:\windows\system32\drivers\nmwcdcm.sys" File version = 5.02.13.06, File size = 9447, File modification date = 26/08/2004  09:42, File description = Nokia USB Phone Modem Client, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002, 2003, 2004. Nokia. All rights reserved.) |1336067166|0xebc320f929e8fec0e6ca454b666f215f|
    ImagePath=system32\drivers\nmwcd.sys <HKLM\System\ControlSet001\Services\Nokia USB Phone Parent>
      "c:\windows\system32\drivers\nmwcd.sys" File version = 5.02.13.06, File size = 125813, File modification date = 26/08/2004  09:42, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004. Nokia. All rights reserved.) |992380679|0xa632fa1473edc303f080a2dd09afdcbf|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nv4_mini.sys <HKLM\System\ControlSet001\Services\nv>
      "c:\windows\system32\drivers\nv4_mini.sys" File version = 6.14.10.7184, File size = 3454144, File modification date = 24/02/2005  15:32, File description = NVIDIA Compatible Windows 2000 Miniport Driver, Version 71.84 , Product Name = NVIDIA Compatible Windows 2000 Miniport Driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |1871401838|0xa28ab3b7e33467c65ee5858da5cb166d|
    ImagePath=%SystemRoot%\system32\nvsvc32.exe <HKLM\System\ControlSet001\Services\NVSvc>
      "c:\windows\system32\nvsvc32.exe" File version = 6.14.10.7184, File size = 127043, File modification date = 24/02/2005  15:32, File description = NVIDIA Driver Helper Service, Version 71.84, Product Name = NVIDIA Driver Helper Service, Version 71.84, Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-469665854|0x43b0a0774ea90bf699d267c45d2702f9|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet001\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 20/10/2001  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet001\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 20/10/2001  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet001\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  16:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet001\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 17/08/2004  12:16, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet001\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 17/08/2004  11:46, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet001\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 19/10/2001  16:32, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 17/08/2004  12:05, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet001\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 03/08/2004  19:14, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet001\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 03/08/2004  19:04, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet001\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 20/10/2001  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet001\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 20/10/2001  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet001\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 03/08/2004  19:14, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet001\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 03/08/2004  19:05, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet001\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 20/10/2001  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet001\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet001\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 20/10/2001  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet001\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet001\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 17/08/2004  12:05, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet001\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet001\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 17/08/2004  12:04, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet001\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet001\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 20/10/2001  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=system32\DRIVERS\RTL8139.SYS <HKLM\System\ControlSet001\Services\rtl8139>
      "c:\windows\system32\drivers\rtl8139.sys" File version = 5.398.613.2003 built by: WinDDK, File size = 20992, File modification date = 03/08/2004  22:31, File description = Realtek RTL8139 NDIS 5.0 Driver, Product Name = Realtek RTL8139 Family Fast Ethernet Adapter, Product version = 5.398.613.2003, Company name = Realtek Semiconductor Corporation (Copyright (C) 1994-2003 Realtek Semiconductor Corporation) |-2104033177|0xd507c1400284176573224903819ffda3|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet001\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 17/08/2004  12:05, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet001\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 17/07/2004  07:36, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet001\Services\serenum>
      "C:\WINDOWS\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 03/08/2004  18:59, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet001\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 17/08/2004  11:51, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet001\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet001\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet001\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 17/08/2004  11:58, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet001\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet001\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet001\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 17/08/2004  12:16, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet001\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{A8CFC9F2-6C2E-4D1A-A20C-16022AA306AF} <HKLM\System\ControlSet001\Services\SwPrv>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 17/08/2004  12:04, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1673880939|0xbca2a62fadd6458b0ce978f5b74d8dfa|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet001\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet001\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 17/08/2004  12:05, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet001\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet001\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet001\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet001\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73216, File modification date = 17/08/2004  12:05, File description = Telnet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-720434843|0x0a450918707a5e63c68a0041d8881bb4|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet001\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.3124 (xpsp_sp2_gdr.070423-0049), File size = 364160, File modification date = 23/04/2007  10:32, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675703786|0xced744117e91bdc0beb810f7d8608183|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet001\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 17/08/2004  12:05, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet001\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26624, File modification date = 03/08/2004  19:08, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050382340|0x15e993ba2f6946b2bfbbfcd30398621e|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet001\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 03/08/2004  19:08, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet001\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet001\Services\USBSTOR>
      "C:\WINDOWS\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  19:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet001\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 03/08/2004  19:08, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-104529926|0xf8fd1400092e23c8f2f31406ef06167b|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet001\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 03/08/2004  19:07, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet001\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 17/08/2004  12:05, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet001\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 03/08/2004  19:04, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet001\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet001\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 17/08/2004  12:05, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet002\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 17/08/2004  11:46, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet002\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet002\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 03/08/2004  19:14, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=system32\DRIVERS\agp440.sys <HKLM\System\ControlSet002\Services\agp440>
      "c:\windows\system32\drivers\agp440.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42368, File modification date = 03/08/2004  19:07, File description = 440 NT AGP Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-942423365|0x2c428fa0c3e3a01ed93c9b2a27d8d4bb|
    ImagePath=system32\drivers\ALCXWDM.SYS <HKLM\System\ControlSet002\Services\ALCXWDM>
      "c:\windows\system32\drivers\alcxwdm.sys" File version = 5.10.5750 built by: WinDDK, File size = 2297664, File modification date = 17/11/2004  11:05, File description = Realtek AC'97 Audio Driver (WDM), Product Name = Windows (R) WDM driver for Realtek AC'97 Audio(HRTF data Copyright 1994 by MIT Media Lab), Product version = 5.10.5750, Company name = Realtek Semiconductor Corp. (Copyright (c) Realtek Semiconductor Corp.1998-2004) |1283149363|0x933933288df5ed26d1928215c97d05c7|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet002\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 17/08/2004  12:04, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe <HKLM\System\ControlSet002\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v1.1.4322\aspnet_state.exe" File version = 1.1.4322.573, File size = 32768, File modification date = 20/02/2003  15:19, File description = aspnet_state.exe, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |1596224568|0xa986fcfdac587e68478db51547b90800|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet002\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 03/08/2004  19:05, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet002\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 03/08/2004  18:59, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet002\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 03/08/2004  18:58, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet002\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  21:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r <HKLM\System\ControlSet002\Services\AVP>
      "c:\program files\kaspersky lab\kaspersky anti-virus 6.0\avp.exe" File version = 6.0.1.411, File size = 155751, File modification date = 08/11/2006  13:28, File description = Kaspersky Anti-Virus, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |967145827|0x250f20c64fd9eaa0f2d7844bca92e741|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet002\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 03/08/2004  18:59, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet002\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 17/08/2004  12:04, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet002\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:04, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet002\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet002\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 03/08/2004  18:59, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet002\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 17/08/2004  12:04, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet002\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 17/08/2004  11:55, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet002\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 17/08/2004  11:55, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet002\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 20/10/2001  12:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet002\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet002\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet002\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 17/08/2004  12:05, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet002\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 03/08/2004  18:59, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet002\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 03/08/2004  18:59, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet002\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet002\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 20/10/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet002\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 03/08/2004  19:04, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet002\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  18:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet002\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet002\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet002\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 17/08/2004  11:51, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet002\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 03/08/2004  19:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet002\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 17/08/2004  12:04, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet002\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  15:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet002\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 17/08/2004  11:53, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet002\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 03/08/2004  19:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet002\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 20/10/2001  12:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet002\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 03/08/2004  19:04, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet002\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet002\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 03/08/2004  19:14, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet002\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 03/08/2004  19:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet002\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 19/10/2001  16:22, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet002\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 17/08/2004  11:54, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\DRIVERS\kbdhid.sys <HKLM\System\ControlSet002\Services\kbdhid>
      "c:\windows\system32\drivers\kbdhid.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 17/08/2004  11:54, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |745085733|0xd0c2e1e0b67a4b0ba4f1c5240c892cb4|
    ImagePath=system32\drivers\kl1.sys <HKLM\System\ControlSet002\Services\kl1>
      "c:\windows\system32\drivers\kl1.sys" File version = 6.1.5.0, File size = 104448, File modification date = 28/09/2006  09:36, File description = Kaspersky Unified Driver, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |1896547209|0xbc02a8e0dd5dc266e5cc3636dd454403|
    ImagePath=\??\C:\WINDOWS\system32\drivers\klif.sys <HKLM\System\ControlSet002\Services\klif>
      "\\?\c:\windows\system32\drivers\klif.sys" File version = 6.12.10.247, File size = 174864, File modification date = 03/11/2007  07:50, File description = spuper-ptor, Product Name = Kaspersky Anti-Virus, Product version = 6.0.2.1, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |259452601|0xf0653e5e164123cad51edda22418c2a3|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet002\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet002\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  19:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet002\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 17/08/2004  12:04, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet002\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 17/08/2004  12:16, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mouhid.sys <HKLM\System\ControlSet002\Services\mouhid>
      "c:\windows\system32\drivers\mouhid.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 19/10/2001  16:33, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1481140716|0xdcf669a6b5682768d3fcf2906453ea97|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet002\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 03/08/2004  19:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet002\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet002\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 17/08/2004  12:04, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet002\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet002\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet002\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet002\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 17/08/2004  12:16, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet002\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 20/10/2001  12:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet002\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 17/08/2004  12:16, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet002\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 03/08/2004  19:14, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet002\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 03/08/2004  19:03, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet002\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 03/08/2004  19:14, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 17/08/2004  12:04, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 17/08/2004  12:04, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\nmwcdc.sys <HKLM\System\ControlSet002\Services\Nokia USB Generic>
      "c:\windows\system32\drivers\nmwcdc.sys" File version = 5.02.13.06, File size = 6262, File modification date = 26/08/2004  09:42, File description = Nokia USB Phone Generic Client, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004. Nokia. All rights reserved.) |-112314610|0x8205bc8eb8c4d9f175ea3b02d4a57e61|
    ImagePath=system32\drivers\nmwcdcm.sys <HKLM\System\ControlSet002\Services\Nokia USB Modem>
      "c:\windows\system32\drivers\nmwcdcm.sys" File version = 5.02.13.06, File size = 9447, File modification date = 26/08/2004  09:42, File description = Nokia USB Phone Modem Client, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002, 2003, 2004. Nokia. All rights reserved.) |1336067166|0xebc320f929e8fec0e6ca454b666f215f|
    ImagePath=system32\drivers\nmwcd.sys <HKLM\System\ControlSet002\Services\Nokia USB Phone Parent>
      "c:\windows\system32\drivers\nmwcd.sys" File version = 5.02.13.06, File size = 125813, File modification date = 26/08/2004  09:42, File description = Nokia USB Phone Bus Driver, Product Name = (null), Product version = (null), Company name = Nokia (Copyright (c) 2002,2003,2004. Nokia. All rights reserved.) |992380679|0xa632fa1473edc303f080a2dd09afdcbf|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nv4_mini.sys <HKLM\System\ControlSet002\Services\nv>
      "c:\windows\system32\drivers\nv4_mini.sys" File version = 6.14.10.7184, File size = 3454144, File modification date = 24/02/2005  15:32, File description = NVIDIA Compatible Windows 2000 Miniport Driver, Version 71.84 , Product Name = NVIDIA Compatible Windows 2000 Miniport Driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |1871401838|0xa28ab3b7e33467c65ee5858da5cb166d|
    ImagePath=%SystemRoot%\system32\nvsvc32.exe <HKLM\System\ControlSet002\Services\NVSvc>
      "c:\windows\system32\nvsvc32.exe" File version = 6.14.10.7184, File size = 127043, File modification date = 24/02/2005  15:32, File description = NVIDIA Driver Helper Service, Version 71.84, Product Name = NVIDIA Driver Helper Service, Version 71.84, Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-469665854|0x43b0a0774ea90bf699d267c45d2702f9|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet002\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 20/10/2001  12:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet002\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 20/10/2001  12:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet002\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  16:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet002\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 17/08/2004  12:16, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet002\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 17/08/2004  11:46, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet002\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 19/10/2001  16:32, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 17/08/2004  12:05, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet002\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 03/08/2004  19:14, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet002\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 03/08/2004  19:04, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet002\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 20/10/2001  12:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet002\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 20/10/2001  12:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet002\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 03/08/2004  19:14, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet002\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 03/08/2004  19:05, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet002\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 20/10/2001  12:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet002\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet002\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 20/10/2001  12:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=system32\DRIVERS\rdpdr.sys <HKLM\System\ControlSet002\Services\rdpdr>
      "c:\windows\system32\drivers\rdpdr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 196864, File modification date = 03/08/2004  19:01, File description = Microsoft RDP Device redirector, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1380747095|0xa2cae2c60bc37e0751ef9dda7ceaf4ad|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet002\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 17/08/2004  12:05, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet002\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58112, File modification date = 17/08/2004  15:49, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |993178370|0x7dc34df240a397db40101d88905fe10e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\RemoteRegistry>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet002\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 17/08/2004  12:04, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet002\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet002\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 20/10/2001  12:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=system32\DRIVERS\RTL8139.SYS <HKLM\System\ControlSet002\Services\rtl8139>
      "c:\windows\system32\drivers\rtl8139.sys" File version = 5.398.613.2003 built by: WinDDK, File size = 20992, File modification date = 03/08/2004  22:31, File description = Realtek RTL8139 NDIS 5.0 Driver, Product Name = Realtek RTL8139 Family Fast Ethernet Adapter, Product version = 5.398.613.2003, Company name = Realtek Semiconductor Corporation (Copyright (C) 1994-2003 Realtek Semiconductor Corporation) |-2104033177|0xd507c1400284176573224903819ffda3|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 17/08/2004  12:04, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet002\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 17/08/2004  12:05, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet002\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 17/07/2004  07:36, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet002\Services\serenum>
      "C:\WINDOWS\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 03/08/2004  18:59, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet002\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 17/08/2004  11:51, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet002\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet002\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet002\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 17/08/2004  11:58, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet002\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet002\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet002\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 17/08/2004  12:16, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet002\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet002\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet002\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 17/08/2004  12:05, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet002\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet002\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  12:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet002\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\tlntsvr.exe <HKLM\System\ControlSet002\Services\TlntSvr>
      "c:\windows\system32\tlntsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73216, File modification date = 17/08/2004  12:05, File description = Telnet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-720434843|0x0a450918707a5e63c68a0041d8881bb4|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet002\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.3124 (xpsp_sp2_gdr.070423-0049), File size = 364160, File modification date = 23/04/2007  10:32, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.3124, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1675703786|0xced744117e91bdc0beb810f7d8608183|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet002\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 17/08/2004  12:05, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet002\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26624, File modification date = 03/08/2004  19:08, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1050382340|0x15e993ba2f6946b2bfbbfcd30398621e|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet002\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 03/08/2004  19:08, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet002\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  18:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet002\Services\USBSTOR>
      "C:\WINDOWS\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  19:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet002\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 03/08/2004  19:08, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-104529926|0xf8fd1400092e23c8f2f31406ef06167b|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet002\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 03/08/2004  19:07, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet002\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 17/08/2004  12:05, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet002\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 03/08/2004  19:04, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet002\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Wmi>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet002\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 17/08/2004  12:05, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 17/08/2004  12:05, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
  HKLM\system\controlset???\control\Session Manager
    BootExecute=autocheck autochk * <HKLM\system\ControlSet001\control\Session Manager>
      "c:\windows\system32\autochk.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 588800, File modification date = 17/08/2004  12:04, File description = Auto Check Utility, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1621887782|0xaf9d1526cb0fbc34e00dcbf47a88c7eb|
  HKLM\Software\Microsoft\Active Setup\Installed Components\*
    StubPath=C:\WINDOWS\inf\unregmp2.exe /ShowWMP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}>
      "c:\windows\inf\unregmp2.exe" File version = 9.00.00.3250, File size = 212992, File modification date = 17/08/2004  12:05, File description =    Windows Media (Microsoft), Product Name = Microsoft(R) Windows Media Player, Product version = 9.00.00.3250, Company name = Microsoft Corporation ((C) Microsoft Corporation.  All rights reserved.) |-243836176|0xcb13e53ee94d71b0c6527a0ce26f9fa6|
    StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE <HKLM\Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}>
      "C:\WINDOWS\system32\shmgrate.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 17/08/2004  12:05, File description = Windows NT User Data Migration Tool, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522851836|0xbccd6ca557fd89e4833a89e5a9ec90b6|
    StubPath=RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:05, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\iedkcs32.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 323584, File modification date = 17/08/2004  12:04, File description =    Internet Explorer, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-1207283011|0xf1b35c4b6efff881b9f661dd3fea5328|
    StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE <HKLM\Software\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}>
      "C:\WINDOWS\system32\shmgrate.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 17/08/2004  12:05, File description = Windows NT User Data Migration Tool, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522851836|0xbccd6ca557fd89e4833a89e5a9ec90b6|
    StubPath=%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}>
      "C:\WINDOWS\system32\regsvr32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 17/08/2004  12:05, File description =  , (C) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1798016058|0x3c5d6ffd2378543406a9fee2178e35b5|
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 386560, File modification date = 17/08/2004  12:04, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1148789537|0xe034619ae8128d70b09d51c5a9655ea2|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 73728, File modification date = 17/08/2004  12:05, File description =     Outlook Express, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-937516386|0x6f3379c7f5f83ef0bd0a1d41ce67e8b5|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 20/10/2001  12:00, File description =   Windows, Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |231921953|0xc9392a06ff9768b4795ae93f37f86efe|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:05, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 100352, File modification date = 17/08/2004  12:04, File description = ADVPACK, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |512852977|0x48dc3e955fe1ccd75df6fec7bc61c1df|
      "c:\windows\inf\msnetmtg.inf" File version = (null), File size = 92618, File modification date = 17/08/2004  11:59, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-42523716|0x79170533b362ee6e5725c97683c865ff|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser <HKLM\Software\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:05, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 100352, File modification date = 17/08/2004  12:04, File description = ADVPACK, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |512852977|0x48dc3e955fe1ccd75df6fec7bc61c1df|
      "c:\windows\inf\msmsgs.inf" File version = (null), File size = 96432, File modification date = 17/08/2004  11:59, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-292250166|0xb7768a8d50c246048f9b5b1d17e6b665|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp.inf,PerUserStub <HKLM\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:05, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 100352, File modification date = 17/08/2004  12:04, File description = ADVPACK, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |512852977|0x48dc3e955fe1ccd75df6fec7bc61c1df|
      "c:\windows\inf\wmp.inf" File version = (null), File size = 57800, File modification date = 17/08/2004  11:59, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1111793405|0x594916309219ec08d117b73066ac1e6b|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 73728, File modification date = 17/08/2004  12:05, File description =     Outlook Express, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-937516386|0x6f3379c7f5f83ef0bd0a1d41ce67e8b5|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 20/10/2001  12:00, File description =   Windows, Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |231921953|0xc9392a06ff9768b4795ae93f37f86efe|
    StubPath=regsvr32.exe /s /n /i:U shell32.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}>
      "c:\windows\system32\regsvr32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 17/08/2004  12:05, File description =  , (C) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1798016058|0x3c5d6ffd2378543406a9fee2178e35b5|
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
    StubPath=%SystemRoot%\system32\ie4uinit.exe <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}>
      "C:\WINDOWS\system32\ie4uinit.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 34304, File modification date = 17/08/2004  12:04, File description =     IE 5.0, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1132244775|0x93d83551e39b9e6cf06fb3e520df535e|
    StubPath=C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install <HKLM\Software\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:05, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\mscories.dll" File version = 1.1.4322.573, File size = 106496, File modification date = 20/02/2003  15:09, File description = Microsoft .NET IE SECURITY REGISTRATION, Product Name = Microsoft .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1998-2002. All rights reserved.) |374983682|0xf0e0877264cc833f4160c4556b092901|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT
    comm.drv=comm.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\comm.drv" File version = 3.10, File size = 10544, File modification date = 20/10/2001  12:00, File description = Windows COMM Driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2048850131|0x01b656374912d7ccf7465a3893f18982|
    display.drv=vga.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\vga.drv" File version = 3.10, File size = 2176, File modification date = 20/10/2001  12:00, File description = WOW Display Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1154556118|0x9c86bbb80450af95b6a4ea8ebda93d76|
    drivers=mmsystem.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mmsystem.dll" File version = 3.10, File size = 69120, File modification date = 17/08/2004  11:47, File description =  API  , Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |937249001|0xf708fce5338bfaf52cb28b0dffa00190|
    keyboard.drv=keyboard.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\keyboard.drv" File version = 3.10, File size = 2000, File modification date = 20/10/2001  12:00, File description = WOW Keyboard Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |297157625|0xed4bf709aad8b665075de06a0945b030|
    mouse.drv=mouse.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mouse.drv" File version = 3.10, File size = 2032, File modification date = 20/10/2001  12:00, File description = WOW MOUSE Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-124025146|0x7d29780ac88bb7292cdcff71ba67433d|
    network.drv=wfwnet.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\wfwnet.drv" File version = 3.10, File size = 13600, File modification date = 20/10/2001  12:00, File description = Windows for Workgroups network driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |819115660|0x5302ada9b0793c84151fc463dd65d7bf|
    shell=progman.exe <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\progman.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 109568, File modification date = 17/08/2004  12:05, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1241159835|0x8923105d90451a754c9365ae9392dff3|
    sound.drv=sound.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\sound.drv" File version = 3.10, File size = 1744, File modification date = 20/10/2001  12:00, File description = WOW SOUND Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2008615310|0x028a1f74926dc3df2d9629edc9aebafb|
    system.drv=system.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\system.drv" File version = 3.10, File size = 3360, File modification date = 20/10/2001  12:00, File description = Windows System Driver core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-635574434|0x4a00d59ae6d75bdfc2c8e5182c4b1376|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers
    timer=timer.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers>
      "c:\windows\system\timer.drv" File version = 3.10, File size = 4064, File modification date = 20/10/2001  12:00, File description =    PC- , Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |-1391970634|0x13b3e8097afc3c12814770621f3487fc|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
    midimapper=midimap.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\midimap.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:04, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
    msacm.imaadpcm=imaadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\imaadp32.acm" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16384, File modification date = 17/08/2004  12:02, File description =   IMA ADPCM  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1638053536|0xb45c691988afab9c9bd93ba187ca2474|
    msacm.msadpcm=msadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msadp32.acm" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 17/08/2004  12:02, File description =   ADPCM  MSACM Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1995141393|0x0bae796a3b96f0e48e11e413d5747b4c|
    msacm.msg711=msg711.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg711.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9216, File modification date = 20/10/2001  12:00, File description =  Microsoft CCITT G.711 (A-Law / u-Law)  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1854403983|0xe065a3c00733efcf1c69d415a87a5068|
    msacm.msgsm610=msgsm32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msgsm32.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19968, File modification date = 20/10/2001  12:00, File description =    GSM 6.10  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1918754933|0xaa2760236496ff786daef9f14014d66d|
    msacm.trspch=tssoft32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tssoft32.acm" File version = 1.01, File size = 8192, File modification date = 20/10/2001  12:00, File description =    DSP Group TrueSpeech  MSACM V3.50, Product Name = DSP GROUP Windows NT TrueSpeech CODEC, Product version = 1.01, Company name = DSP GROUP, INC. ( DSP Group, Inc. 1993-1996) |-594300875|0xa0f3e55689268941af7e1c19c4d4b2f3|
    vidc.cvid=iccvid.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iccvid.dll" File version = 1.10.0.11, File size = 80384, File modification date = 17/08/2004  12:04, File description = Cinepak Codec, Product Name = Cinepak for Windows 32, Product version = 1.10.0.0, Company name = Radius Inc. (Copyright  1992-1995 Radius Inc., All Rights Reserved) |-1194508810|0x16e6c32c0d05cf16e6b0b73beb2bb970|
    vidc.I420=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.2180, File size = 294912, File modification date = 17/08/2004  12:16, File description =  Microsoft H.263 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-874728242|0xcf91400a97fff1fe16df098da85efff2|
    vidc.iv31=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 20/10/2001  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-236959363|0xb8fe8e877e14a78fb326309d4da91a0a|
    vidc.iv32=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 20/10/2001  12:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-236959363|0xb8fe8e877e14a78fb326309d4da91a0a|
    vidc.iv41=ir41_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir41_32.ax" File version = 4.51.16.03, File size = 848384, File modification date = 17/08/2004  12:05, File description = Intel Indeo Video 4.5, Product Name = Intel Indeo Video 4.5, Product version = 4.51.16.03, Company name = Intel Corporation (Copyright Intel Corporation 1994-1998) |-1887696561|0xb3af437917f7cc0b1ff4b52d7079cd17|
    vidc.iyuv=iyuv_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iyuv_32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 47616, File modification date = 17/08/2004  12:16, File description = Intel Indeo(R) Video YUV Codec, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  Intel, 1992-1997) |557179088|0xac314e854bb60b75e45d7a541705ed26|
    vidc.mrle=msrle32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msrle32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 17/08/2004  12:04, File description =   Microsoft RLE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1062918381|0x83949714f70084e2dc25184215ed2d40|
    vidc.msvc=msvidc32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msvidc32.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 25600, File modification date = 20/10/2001  12:00, File description =   Microsoft Video 1, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1998454945|0xc3d62768e82a887f0b8bc3c45fb89acb|
    vidc.uyvy=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 17/08/2004  12:16, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    vidc.yuy2=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 17/08/2004  12:16, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    vidc.yvu9=tsbyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tsbyuv.dll" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 8192, File modification date = 20/10/2001  12:00, File description = Toshiba Video Codec, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation (Copyright (C) Toshiba Corp. 1997) |-1265855821|0x1622231279c17eab9c4d37e3d2aa5fea|
    vidc.yvyu=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 17/08/2004  12:16, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    wavemapper=msacm32.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msacm32.drv" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 20/10/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
    msacm.msg723=msg723.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg723.acm" File version = 4.4.3400, File size = 118784, File modification date = 20/10/2001  12:00, File description = Microsoft G.723.1 CODEC  MSACM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-559110528|0x93091b2a7a3cf80b53046601717d1a2b|
    vidc.M263=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.2180, File size = 294912, File modification date = 17/08/2004  12:16, File description =  Microsoft H.263 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-874728242|0xcf91400a97fff1fe16df098da85efff2|
    vidc.M261=msh261.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh261.drv" File version = 5.1.2600.2180, File size = 188416, File modification date = 17/08/2004  12:05, File description =  Microsoft H.261 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-1117483247|0x01b48472269ebe39f1c52c4696d5ffbb|
    msacm.msaudio1=msaud32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msaud32.acm" File version = 8.00.00.4487, File size = 294912, File modification date = 17/08/2004  12:02, File description = Windows Media Audio, Product Name = Windows Media Audio, Product version = 8.00.00.4487, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1999-2001) |323994253|0xed90974278c0376327838d47adc4173f|
    msacm.sl_anet=sl_anet.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\sl_anet.acm" File version = 3.02, File size = 86016, File modification date = 17/08/2004  12:03, File description = Audio codec for MS ACM, Product Name = ACELP.net Audio Codec, Product version = 3.02, Company name = Sipro Lab Telecom Inc. (Copyright  Sipro Lab Telecom Inc. 1998-99) |271167773|0x39724c2030902f3211103e10399b5701|
    msacm.iac2=C:\WINDOWS\system32\iac25_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iac25_32.ax" File version = 2.05.53, File size = 199680, File modification date = 17/08/2004  12:05, File description = Indeo audio software, Product Name = Indeo audio software, Product version = 2.05.53, Company name = Intel Corporation (Copyright  Intel Corp. 1997) |-940912838|0x415fa906fbc834b06b3aec74bd2e75af|
    vidc.iv50=ir50_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir50_32.dll" File version = R.5.10.15.2.55, File size = 755200, File modification date = 17/08/2004  12:04, File description = Intel Indeo video 5.10, Product Name = Intel Indeo video 5.10, Product version = R.5.10.15.2.55, Company name = Intel Corporation (Copyright  1994-1998 Intel Corp.) |1329995150|0x7fdaa916871c74eda01463132902526b|
    msacm.l3acm=C:\WINDOWS\system32\l3codeca.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\l3codeca.acm" File version = 1, 9, 0, 0305, File size = 290816, File modification date = 17/08/2004  12:02, File description = MPEG Layer-3 Audio Codec for MSACM, Product Name = MPEG Layer-3 Audio Codec for MSACM, Product version = 1, 0, 0, 0, Company name = Fraunhofer Institut Integrierte Schaltungen IIS (Copyright  1996-1999 Fraunhofer Institut Integrierte Schaltungen IIS) |-340337155|0xa519ab541c3da214265fe481a19c0dd2|
    wave=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    midi=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    mixer=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 17/08/2004  12:05, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
    PostBootReminder={7849596a-48ea-486e-8937-a2a3009f31a9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
    CDBurn={fbeb8a05-beee-4442-804e-409d6c4515e9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
    WebCheck={E6FB5E20-DE35-11CF-9C87-00AA005127ED} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    SysTray={35CEC8A3-2BE6-11D2-8773-92E220524153} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\stobject.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 122368, File modification date = 17/08/2004  12:04, File description =    Systray, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |21103765|0xbf777cb6f3c4a86d811505582769010b|
  *\Control Panel\Desktop
    SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr <HKEY_USERS\.DEFAULT\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 17/08/2004  12:05, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-19\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 17/08/2004  12:05, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-20\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 17/08/2004  12:05, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=C:\WINDOWS\system32\ssmyst.scr <HKEY_USERS\S-1-5-21-1343024091-1897051121-725345543-500\Control Panel\Desktop>
      "c:\windows\system32\ssmyst.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 17/08/2004  12:05, File description = - " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1633279685|0x15c43836c6f1e6f1098f5450b0a7f32f|
    SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr <HKEY_USERS\S-1-5-18\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 17/08/2004  12:05, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
    {AEB6717E-7E19-11d0-97EE-00C04FD91972}
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3241 (xpsp_sp2_gdr.071025-1248), File size = 8472064, File modification date = 25/10/2007  16:57, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3241, Company name =   (  .   .) |939234347|0x1bd2fe58caa0a055c8ae0b220f320452|
    {1AB09B3F-A6D0-4B55-B87D-264934EBEAED}
      "c:\program files\internet explorer\plugins\winsys84.sys" File version = (null), File size = 45172, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |902225176|0xa65f5d1829dea6c883820db75a8c0150|
    {C5E87A05-F463-4841-B19E-DD3EC3862368}
      "c:\program files\internet explorer\iexplore32.sys" File version = (null), File size = 30347, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |2342952|0x65871e6e89fef5b19403f4047cc99ce9|
    {EE12D60D-AD9A-4095-B839-3BE6862679FD}
      "c:\program files\internet explorer\iexplore32.dat" File version = (null), File size = 35484, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1578502572|0xf67cab463e88650c0b83c6cbb8e37248|
    {A45B2C37-01D0-4D3E-BE5E-CC119B17BE9E}
      "c:\program files\internet explorer\iexplore32.win" File version = (null), File size = 29305, File modification date = 15/11/2007  04:53, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1274647634|0x75d6f6bbe149275f2fdca16b27b4cc76|
    {A93A4625-6216-499C-B360-BBD0A7C0D479}
      "c:\program files\common files\microsoft shared\msinfo\qqgs1.dll" File version = (null), File size = 240747, File modification date = 15/11/2007  04:41, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |385848245|0xa4bc68c3966d41a2fead2acd0a9f04c5|
  HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
    {00022613-0000-0000-C000-000000000046}
      "c:\windows\system32\mmsys.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 620032, File modification date = 17/08/2004  12:05, File description =   -  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1029054611|0x234237964c059728b21a334ff0d55fbd|
    {176d6597-26d3-11d1-b350-080036a75b03}
      "c:\windows\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 20/10/2001  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {1F2E5C40-9550-11CE-99D2-00AA006E086C}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1280505977|0x128f435bbafba67a3f37a0ee087a0184|
    {3EA48300-8CF6-101B-84FB-666CCB9BCD32}
      "c:\windows\system32\docprop.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 46080, File modification date = 20/10/2001  12:00, File description =   OLE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-797951335|0x992fb236cfe085aeb93d6e8372c9eee9|
    {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
    {41E300E0-78B6-11ce-849B-444553540000}
      "c:\windows\system32\themeui.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 386560, File modification date = 17/08/2004  12:04, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1148789537|0xe034619ae8128d70b09d51c5a9655ea2|
    {42071712-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskadp.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 20/10/2001  12:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |-879404280|0x1ef3747e65cf364f870b891a5bf139aa|
    {42071713-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskmon.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 20/10/2001  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |1757095939|0x6070a9b3048a175a6b75e6e243186b2c|
    {4E40F770-369C-11d0-8922-00A024AB2DBB}
      "c:\windows\system32\dssec.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51712, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |326965962|0x44a2a3005d504834935896e96016e66d|
    {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
      "c:\windows\system32\slayerxp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 17/08/2004  12:04, File description =     "", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-54810607|0xf1b3e5fd6e8a09ec3ba37089cc861caf|
    {56117100-C0CD-101B-81E2-00AA004AE837}
      "c:\windows\system32\shscrap.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27648, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-26443466|0xcc6aef6ae92cc25ebe9e11a0100cabdf|
    {59099400-57FF-11CE-BD94-0020AF85B590}
      "c:\windows\system32\diskcopy.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 1501696, File modification date = 20/10/2001  12:00, File description = Windows DiskCopy, Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |-1768062996|0xa525c37757a1da8ae5acb10feec1ac28|
    {59be4990-f85c-11ce-aff7-00aa003ca9f6}
      "c:\windows\system32\ntlanui2.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 14848, File modification date = 20/10/2001  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1755583219|0xf6fa816cbe46749b8d5c875aa0a0226a|
    {5DB2625A-54DF-11D0-B6C4-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 20/10/2001  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {675F097E-4C4D-11D0-B6C1-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 20/10/2001  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {77597368-7b15-11d0-a0c2-080036af3f03}
      "c:\windows\system32\printui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 565248, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-486691064|0x44fa764e4bea139f5b1b2ac5686b6b65|
    {7988B573-EC89-11cf-9C00-00AA00A14F56}
      "c:\windows\system32\dskquoui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 146432, File modification date = 20/10/2001  12:00, File description =  DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-1193260270|0xf48c6edf98e56bdee91f4d523f24d5c3|
    {85BBD920-42A0-1069-A2E4-08002B30309D}
      "c:\windows\system32\syncui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 190464, File modification date = 17/08/2004  12:04, File description =  Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |224525855|0xb5aa35d0c14683a66b283f91441c5163|
    {88895560-9AA2-1069-930E-00AA0030EBC8}
      "c:\windows\system32\hticons.dll" File version = 5.1.2600.0, File size = 44544, File modification date = 20/10/2001  12:00, File description = HyperTerminal Applet Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Hilgraeve, Inc. (Copyright  Hilgraeve, Inc. 2001) |-554862870|0x2fb8d5af59fadc2eaea0ee56cc8fded7|
    {BD84B380-8CA2-1069-AB1D-08000948F534}
      "c:\windows\system32\fontext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382976, File modification date = 17/08/2004  12:04, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1630719410|0xc53427e90013d85c6b2559e79f2748b1|
    {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 20/10/2001  12:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {F37C5810-4D3F-11d0-B4BF-00AA00BBB723}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1280505977|0x128f435bbafba67a3f37a0ee087a0184|
    {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 17/08/2004  12:04, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
    {f92e8c40-3d33-11d2-b1aa-080036a75b03}
      "c:\windows\system32\deskperf.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 18432, File modification date = 20/10/2001  12:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-1306393081|0xd805d2a6f2fcf780a3c2c21e9b1907d1|
    {7444C717-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 54272, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-1829071292|0x7ccca7c0f5636d3a65cde91ac9fd8e9a|
    {7444C719-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 54272, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-1829071292|0x7ccca7c0f5636d3a65cde91ac9fd8e9a|
    {7007ACC7-3202-11D1-AAD2-00805FC1270E}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
    {992CFFA0-F557-101A-88EC-00DD010CCC48}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
    {E211B736-43FD-11D1-9EFB-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 17/08/2004  12:04, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 17/08/2004  12:04, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {905667aa-acd6-11d2-8080-00805f6596d2}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 17/08/2004  12:04, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {3F953603-1008-4f6e-A73A-04AAC7A992F1}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 17/08/2004  12:04, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {83bbcbf3-b28a-4919-a5aa-73027445d672}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 17/08/2004  12:04, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {F0152790-D56E-4445-850E-4F3117DB740C}
      "c:\windows\system32\remotepg.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60928, File modification date = 17/08/2004  12:04, File description = CPL-  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1054669753|0x3900fdcd2de579aeca9fd731b6faa716|
    {60254CA5-953B-11CF-8C96-00AA00B8708C}
      "c:\windows\system32\wshext.dll" File version = 5.6.0.8820, File size = 65536, File modification date = 17/08/2004  12:04, File description = Microsoft (r) Shell Extension for Windows Script Host, Product Name = Microsoft (r) Windows Script Host, Product version = 5.6.0.8820, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 2002) |-237520076|0x1c905d00411c5df8f9db4bb2a295da5c|
    {2206CDB2-19C1-11D1-89E0-00C04FD7A829}
      "c:\program files\common files\system\ole db\oledb32.dll" File version = 2.81.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 487424, File modification date = 17/08/2004  12:04, File description = Microsoft Data Access - OLE DB Core Services, Product Name = Microsoft Data Access Components, Product version = 2.81.1117.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1082205812|0x6bcbbfe858ecf0ede5aa6abc95ce3ba7|
    {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {D6277990-4C6A-11CF-8D87-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {5F327514-6C5E-4d60-8F16-D07FA08A78ED}
      "c:\windows\system32\wuaucpl.cpl" File version = 7.0.6000.381 (winmain(wmbla).070730-1740), File size = 216408, File modification date = 30/07/2007  14:19, File description = Automatic Updates Control Panel, Product Name = Microsoft Windows Operating System, Product version = 7.0.6000.381, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1072536858|0xd7fa9a9750403cc68dc209cde7c50d7a|
    {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {D20EA4E1-3957-11d2-A40B-0C5020524152}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {D20EA4E1-3957-11d2-A40B-0C5020524153}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {596AB062-B4D2-4215-9F74-E9109B0A8153}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 17/08/2004  12:04, File description = :  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name = Microsoft Corporation (  .   .) |-1079143813|0xc43dece53297216c81f1926fa7714192|
    {9DB7A13C-F208-4981-8353-73CC61AE2783}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 17/08/2004  12:04, File description = :  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name = Microsoft Corporation (  .   .) |-1079143813|0xc43dece53297216c81f1926fa7714192|
    {875CB1A1-0F29-45de-A1AE-CFB4950D0B78}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 17/08/2004  12:04, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {40C3D757-D6E4-4b49-BB41-0E5BBEA28817}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 17/08/2004  12:04, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {E4B29F9D-D390-480b-92FD-7DDB47101D71}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 17/08/2004  12:04, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {87D62D94-71B3-4b9a-9489-5FE6850DC73E}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 17/08/2004  12:04, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {A6FD9E45-6E44-43f9-8644-08598F5A74D9}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 17/08/2004  12:04, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {c5a40261-cd64-4ccf-84cb-c394da41d590}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 17/08/2004  12:04, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {5E6AB780-7743-11CF-A12B-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {22BF0C20-6DA7-11D0-B373-00A0C9034938}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {91EA3F8B-C99B-11d0-9815-00C04FD91972}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {6413BA2C-B461-11d1-A18A-080036B11A03}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {F61FFEC1-754F-11d0-80CA-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {7BA4C742-9E81-11CF-99D3-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {30D02401-6A81-11d0-8274-00C04FD5AE38}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {169A0691-8DF9-11d1-A1C4-00C04FD75D13}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {07798131-AF23-11d1-9111-00A0C98BA67D}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {AF4F6510-F982-11d0-8595-00AA004CD6D8}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {01E04581-4EEE-11d0-BFE9-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {A08C11D2-A228-11d0-825B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {00BB2763-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {7376D660-C583-11d0-A3A5-00C04FD706EC}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {6756A641-DE71-11d0-831B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {7e653215-fa25-46bd-a339-34a2790f3cb7}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {acf35015-526e-4230-9596-becbe19f0ac9}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {00BB2764-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {03C036F1-A186-11D0-824A-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {00BB2765-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {ECD4FC4E-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {3CCF8A41-5C85-11d0-9796-00AA00B90ADF}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {ECD4FC4C-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {ECD4FC4D-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {DD313E04-FEFF-11d1-8ECD-0000F87A470C}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {EFA24E61-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {0A89A860-D7B1-11CE-8350-444553540000}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {E7E4BC40-E76A-11CE-A9BB-00AA004AE837}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {A5E46E3A-8849-11D1-9D8C-00C04FC99D61}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {FBF23B40-E3F0-101B-8488-00AA003E56F8}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {3C374A40-BAE4-11CF-BF7D-00AA006946EE}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {FF393560-C2A7-11CF-BFF4-444553540000}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {7BD29E00-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {7BD29E01-76C1-11CF-9DD0-00A0C9034933}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {67EA19A0-CCEF-11d0-8024-00C04FD75D13}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {131A6951-7F78-11D0-A979-00C04FD705A2}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {9461b922-3c5a-11d2-bf8b-00c04fb93661}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {3DC7A020-0ACD-11CF-A9BB-00AA004AE837}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {871C5380-42A0-1069-A2EA-08002B30309D}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {EFA24E64-B078-11d0-89E4-00C04FC9E26E}
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 55296, File modification date = 17/08/2004  12:04, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-1729376145|0xbab3e9b7d02cbed589d26ae06dc78384|
    {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 55296, File modification date = 17/08/2004  12:04, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-1729376145|0xbab3e9b7d02cbed589d26ae06dc78384|
    {88C6C381-2E85-11D0-94DE-444553540000}
      "C:\WINDOWS\system32\occache.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1211413921|0x4559a0683956c5fb09144a3561f4c5db|
    {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {F5175861-2688-11d0-9C5E-00AA00A45957}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {08165EA0-E946-11CF-9C87-00AA005127ED}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {7D559C10-9FE9-11d0-93F7-00AA0059CE02}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {E6CC6978-6B6E-11D0-BECA-00C04FD940BE}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {D8BD2030-6FC9-11D0-864F-00AA006809D9}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}
      "C:\WINDOWS\system32\webcheck.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 17/08/2004  12:04, File description =  -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-49836701|0xdc1088af2f5b40d4c7a31fbde6ecd52e|
    {352EC2B7-8B9A-11D1-B8AE-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 17/08/2004  12:05, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {0B124F8F-91F0-11D1-B8B5-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 17/08/2004  12:05, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {CFCCC7A0-A282-11D1-9082-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 17/08/2004  12:05, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {e84fda7c-1d6a-45f6-b725-cb260c236066}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {00E7B358-F65B-4dcf-83DF-CD026B94BFD4}
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 17/08/2004  12:05, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {3F30C968-480A-4C6C-862D-EFC0897BB84B}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {EAB841A0-9550-11cf-8C16-00805F1408F3}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {eb9b1153-3b57-4e68-959a-a3266bc3d7fe}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {CC6EEFFB-43F6-46c5-9619-51D571967F7D}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {add36aa8-751a-4579-a266-d66f5202ccbb}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {6b33163c-76a5-4b6c-bf21-45de9cd503a1}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {58f1f272-9240-4f51-b6d4-fd63d1618591}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 17/08/2004  12:04, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 17/08/2004  12:04, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {BD472F60-27FA-11cf-B8B4-444553540000}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 17/08/2004  12:04, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {888DCA60-FC0A-11CF-8F0F-00C04FD7D062}
      "c:\windows\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 17/08/2004  12:04, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {f39a0dc0-9cc8-11d0-a599-00c04fd64433}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 151552, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-37656697|0xbd8808a120937d0a80e719f0d7754b5b|
    {f3aa0dc0-9cc8-11d0-a599-00c04fd64434}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 151552, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-37656697|0xbd8808a120937d0a80e719f0d7754b5b|
    {f3ba0dc0-9cc8-11d0-a599-00c04fd64435}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 151552, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-37656697|0xbd8808a120937d0a80e719f0d7754b5b|
    {f3da0dc0-9cc8-11d0-a599-00c04fd64437}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 151552, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-37656697|0xbd8808a120937d0a80e719f0d7754b5b|
    {f3ea0dc0-9cc8-11d0-a599-00c04fd64438}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 151552, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-37656697|0xbd8808a120937d0a80e719f0d7754b5b|
    {692F0339-CBAA-47e6-B5B5-3B84DB604E87}
      "C:\WINDOWS\system32\extmgr.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 55808, File modification date = 22/08/2007  13:14, File description = Extensions Manager, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.3199, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1819467342|0x2555b5b06745daf11a7afb5d5220d70d|
    {63da6ec0-2e98-11cf-8d82-444553540000}
      "c:\windows\system32\msieftp.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 249344, File modification date = 17/08/2004  12:04, File description =   FTP Microsoft Internet Explorer FTP, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1626139983|0xe989f6f58a3b0677ac0107c2eee449c4|
    {883373C3-BF89-11D1-BE35-080036B11A03}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 17/08/2004  12:04, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {A9CF0EAE-901A-4739-A481-E35B73E47F6D}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 17/08/2004  12:04, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {8EE97210-FD1F-4B19-91DA-67914005F020}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 17/08/2004  12:04, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {0EEA25CC-4362-4A12-850B-86EE61B0D3EB}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 17/08/2004  12:04, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {6A205B57-2567-4A2C-B881-F787FAB579A3}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 17/08/2004  12:04, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 17/08/2004  12:04, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {8A23E65E-31C2-11d0-891C-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {9E51E0D0-6E0F-11d2-9601-00C04FA31A86}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {163FDC20-2ABC-11d0-88F0-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {F020E586-5264-11d1-A532-0000F8757D7E}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {0D45D530-764B-11d0-A1CA-00AA00C16E65}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113152, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1530730649|0x03f505f2bac60f808b0525b847b21bea|
    {62AE1F9A-126A-11D0-A14B-0800361B1103}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113152, File modification date = 17/08/2004  12:04, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1530730649|0x03f505f2bac60f808b0525b847b21bea|
    {ECF03A33-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 17/08/2004  12:04, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {ECF03A32-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 17/08/2004  12:04, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {4a7ded0a-ad25-11d0-98a8-0800361b1103}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 17/08/2004  12:04, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {750fdf0e-2a26-11d1-a3ea-080036587f03}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {10CFC467-4392-11d2-8DB4-00C04FA31A66}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 17/08/2004  12:04, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {143A62C8-C33B-11D1-84FE-00C04FA34A14}
      "c:\windows\msagent\agentpsh.dll" File version = 2.00.0.3422, File size = 24064, File modification date = 17/08/2004  12:04, File description = Microsoft Agent Property Sheet Handler, Product Name = Microsoft Agent Property Sheet Handler, Product version = 2.00.0.3422, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1997-98) |-1739972169|0x77bd91b6b34a661789c57f873cfacebe|
    {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}
      "c:\windows\system32\dfsshlex.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 28672, File modification date = 17/08/2004  12:04, File description =      DFS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1748421650|0xe2651ee9dd124f91a8ba547d4a09f33a|
    {60fd46de-f830-4894-a628-6fa81bc0190d}
      "C:\WINDOWS\system32\photowiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172032, File modification date = 17/08/2004  12:04, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-988848672|0x8a2e3ff220444dce8005bd42c896ff99|
    {7A80E4A8-8005-11D2-BCF8-00C04F72C717}
      "C:\WINDOWS\system32\mmcshext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 50688, File modification date = 17/08/2004  12:04, File description = MMC Shell Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1016997120|0x3f74336f9999d7a303ce8a31fa33118a|
    {0CD7A5C0-9F37-11CE-AE65-08002B2E1262}
      "c:\windows\system32\cabview.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 84992, File modification date = 17/08/2004  12:04, File description =    CAB-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1306264757|0xbfe9fba0aea4f8f67e4d3c3fee5eece2|
    {32714800-2E5F-11d0-8B85-00AA0044F941}
      "c:\program files\outlook express\wabfind.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 17/08/2004  12:04, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |837743628|0x1a694b3159d8a4bba2f1cfb8222c5302|
    {8DD448E6-C188-4aed-AF92-44956194EB1F}
      "c:\windows\system32\wmpshell.dll" File version = 9.00.00.3250, File size = 102400, File modification date = 17/08/2004  12:04, File description =    Windows Media, Product Name =  Windows Media (Microsoft(R)), Product version = 9.00.00.3250, Company name = Microsoft Corporation ((C)   (Microsoft Corporation).   .) |-324250970|0x4c2b63f629a2d40b3ca6b2d23198bf44|
    {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}
      "c:\windows\system32\wmpshell.dll" File version = 9.00.00.3250, File size = 102400, File modification date = 17/08/2004  12:04, File description =    Windows Media, Product Name =  Windows Media (Microsoft(R)), Product version = 9.00.00.3250, Company name = Microsoft Corporation ((C)   (Microsoft Corporation).   .) |-324250970|0x4c2b63f629a2d40b3ca6b2d23198bf44|
    {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}
      "c:\windows\system32\wmpshell.dll" File version = 9.00.00.3250, File size = 102400, File modification date = 17/08/2004  12:04, File description =    Windows Media, Product Name =  Windows Media (Microsoft(R)), Product version = 9.00.00.3250, Company name = Microsoft Corporation ((C)   (Microsoft Corporation).   .) |-324250970|0x4c2b63f629a2d40b3ca6b2d23198bf44|
    {A70C977A-BF00-412C-90B7-034C51DA2439}
      "c:\windows\system32\nvcpl.dll" File version = 6.14.10.7184, File size = 5537792, File modification date = 24/02/2005  15:32, File description = NVIDIA Display Properties Extension, Product Name = NVIDIA Compatible Windows 2000 Display driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-1724730246|0x03f469b6c2e743565a41ad0997fd493c|
    {FFB699E0-306A-11d3-8BD1-00104B6F7516}
      "c:\windows\system32\nvcpl.dll" File version = 6.14.10.7184, File size = 5537792, File modification date = 24/02/2005  15:32, File description = NVIDIA Display Properties Extension, Product Name = NVIDIA Compatible Windows 2000 Display driver, Version 71.84 , Product version = 6.14.10.7184, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |-1724730246|0x03f469b6c2e743565a41ad0997fd493c|
    {1CDB2949-8F65-4355-8456-263E7C208A5D}
      "c:\windows\system32\nvshell.dll" File version = 6.14.10.10035, File size = 466944, File modification date = 24/02/2005  15:32, File description = NVIDIA Desktop Explorer, Version 100.35 , Product Name = NVIDIA Desktop Explorer, Version 100.35 , Product version = 6.14.10.10035, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |123354682|0xaaaa6e67b85eafccc89fe7cc7b14971b|
    {1E9B04FB-F9E5-4718-997B-B8DA88302A47}
      "c:\windows\system32\nvshell.dll" File version = 6.14.10.10035, File size = 466944, File modification date = 24/02/2005  15:32, File description = NVIDIA Desktop Explorer, Version 100.35 , Product Name = NVIDIA Desktop Explorer, Version 100.35 , Product version = 6.14.10.10035, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |123354682|0xaaaa6e67b85eafccc89fe7cc7b14971b|
    {1E9B04FB-F9E5-4718-997B-B8DA88302A48}
      "c:\windows\system32\nvshell.dll" File version = 6.14.10.10035, File size = 466944, File modification date = 24/02/2005  15:32, File description = NVIDIA Desktop Explorer, Version 100.35 , Product Name = NVIDIA Desktop Explorer, Version 100.35 , Product version = 6.14.10.10035, Company name = NVIDIA Corporation ((C) NVIDIA Corporation. All rights reserved.) |123354682|0xaaaa6e67b85eafccc89fe7cc7b14971b|
    {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
      "c:\program files\common files\microsoft shared\web folders\msonsext.dll" File version = 11.0.5510.0, File size = 1292872, File modification date = 11/07/2003  06:15, File description = Microsoft Web Folders, Product Name = SharePoint Portal Server, Product version = 11.0.5510.0, Company name = Microsoft Corporation (Copyright (c) 2001-2003 Microsoft Corporation.  All rights reserved.) |1833844665|0xbdbf48d13c5343cced93e675effdb72c|
    {00020D75-0000-0000-C000-000000000046}
      "c:\program files\microsoft office\office11\mlshext.dll" File version = 11.0.5510, File size = 29272, File modification date = 18/09/2003  16:05, File description = Microsoft Shell Extension Library, Product Name = Microsoft Office Outlook, Product version = 11.0.5510, Company name = Microsoft Corporation (   (Microsoft Corporation), 1995-2003.    .) |-1623705147|0xc33aa9803f65c277ddf25b4b15e9e213|
    {0006F045-0000-0000-C000-000000000046}
      "c:\program files\microsoft office\office11\olkfstub.dll" File version = 11.0.5510, File size = 232536, File modification date = 18/09/2003  16:06, File description = Outlook Shell Hook for Start/Find, Product Name = Microsoft Office Outlook, Product version = 11.0.5510, Company name = Microsoft Corporation (   (Microsoft Corporation), 1995-2003.   .) |1011963029|0xe44bfc3cb76734ace6022a5973a2c6d6|
    {42042206-2D85-11D3-8CFF-005004838597}
      "c:\program files\microsoft office\office11\msohev.dll" File version = 11.0.5510, File size = 67128, File modification date = 15/07/2003  02:52, File description = Microsoft Office 2003 component, Product Name = Microsoft Office 2003, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  1983-2003 Microsoft Corporation.  All rights reserved.) |1433809039|0x165ae7a443f2139dd2c078ad87699f91|
    {1D2680C9-0E2A-469d-B787-065558BC7D43}
      "c:\windows\system32\mscoree.dll" File version = 1.1.4322.573, File size = 155648, File modification date = 20/02/2003  15:06, File description = Microsoft .NET Runtime Execution Engine, Product Name = Microsoft .NET Framework, Product version = 1.1.4322.573, Company name = Microsoft Corporation (Copyright  Microsoft Corporation 1998-2002. All rights reserved.) |1143201390|0x4c702aea1c11d15c176c2c276d0907dd|
    {21569614-B795-46b1-85F4-E737A8DC09AD}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {85E0B171-04FA-11D1-B7DA-00A0C90348D6}
      "c:\program files\kaspersky lab\kaspersky anti-virus 6.0\scieplugin.dll" File version = 6.0.1.411, File size = 184430, File modification date = 01/11/2006  12:41, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |-1656064966|0x4cc929e541f65b096342840a7e62cd36|
  *\Software\Microsoft\Internet Explorer\MenuExt\*
    DEFAULT=res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 <HKEY_USERS\S-1-5-21-1343024091-1897051121-725345543-500\Software\Microsoft\Internet Explorer\MenuExt\&  Microsoft Excel>
      "c:\program files\microsoft office\office11\excel.exe" File version = 11.0.5612, File size = 10073144, File modification date = 13/08/2003  06:34, File description = Microsoft Office Excel, Product Name = Microsoft Office 2003, Product version = 11.0.5612, Company name = Microsoft Corporation (Copyright  1985-2003 Microsoft Corporation.  All rights reserved.) |-574925247|0xbbcc5d4e09d7fd9454910261e6dc0725|
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\*
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360rpt.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360Safe.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\360tray.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\adam.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AgentSvr.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AppSvc32.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\autoruns.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avconsol.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avgrssvc.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AvMonitor.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avp.com>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\avp.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CCenter.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ccSvcHst.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\EGHOST.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FileDsty.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FTCleanerShell.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\FYFireWall.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\HijackThis.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IceSword.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\iparmo.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Iparmor.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\isPwdSvc.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kabaload.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KaScrScn.SCR>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KASMain.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KASTask.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAV32.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVDX.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVPF.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVPFW.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVSetup.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KAVStart.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KISLnchr.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KMailMon.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KMFilter.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KPFW32.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KPFW32X.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KPfwSvc.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KRegEx.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KRepair.com>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KsLoader.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVCenter.kxp>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvDetect.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvfwMcl.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVMonXP.kxp>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVMonXP_1.kxp>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvol.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvolself.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvReport.kxp>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVScan.kxp>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVSrvXP.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KVStub.kxp>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvupload.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\kvwsc.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvXP.kxp>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KvXP_1.kxp>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KWatch.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KWatch9x.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\KWatchX.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\loaddll.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\MagicSet.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mcconsol.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmqczj.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\mmsk.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Navapsvc.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Navapw32.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32krn.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\nod32kui.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\NPFMntor.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PFW.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\PFWLiveUpdate.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QHSET.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQDoctor.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\QQKav.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Ras.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rav.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavMon.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavMonD.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavStub.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RavTask.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RegClean.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwcfg.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwmain.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rfwsrv.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\RsAgent.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Rsaupd.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\runiep.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safelive.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\scan32.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\shcfg32.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SmartUp.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SREng.EXE>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\symlcsvc.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SysSafe.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojanDetector.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Trojanwall.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\TrojDie.kxp>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UIHost.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxAgent.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxAttachment.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxCfg.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxFwHlp.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UmxPol.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\UpLive.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vsstat.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\webscanx.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=C:\WINDOWS\system32\glvfnpo.exe <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\WoptiClean.exe>
      "c:\windows\system32\glvfnpo.exe" File version = (null), File size = 24510, File modification date = 26/05/2007  05:13, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1369399872|0x0746356eb0673ba4a8d57ca4c8bb70ad|
    Debugger=ntsd -d <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path>
      "c:\windows\system32\ntsd.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 31744, File modification date = 20/03/2004  12:08, File description = Symbolic Debugger for Windows 2000, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |745496936|0x1c0d28034070f1e1896bf63f645fe859|
  *\SOFTWARE\Microsoft\Internet Explorer\Extensions\*
    HotIcon=C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll,101 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky anti-virus 6.0\scieplugin.dll" File version = 6.0.1.411, File size = 184430, File modification date = 01/11/2006  12:41, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |-1656064966|0x4cc929e541f65b096342840a7e62cd36|
    Icon=C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll,102 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky anti-virus 6.0\scieplugin.dll" File version = 6.0.1.411, File size = 184430, File modification date = 01/11/2006  12:41, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |-1656064966|0x4cc929e541f65b096342840a7e62cd36|
    CLSID={E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    BandCLSID={85E0B171-04FA-11D1-B7DA-00A0C90348D6} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}>
      "c:\program files\kaspersky lab\kaspersky anti-virus 6.0\scieplugin.dll" File version = 6.0.1.411, File size = 184430, File modification date = 01/11/2006  12:41, File description = Script Monitor Internet Explorer plugin, Product Name = Kaspersky Anti-Virus, Product version = 6.0.1.411, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2006.) |-1656064966|0x4cc929e541f65b096342840a7e62cd36|
    BandCLSID={FF059E31-CC5A-4E2E-BF3B-96E929D65503} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refiebar.dll" File version = 11.0.5510, File size = 40512, File modification date = 15/07/2003  02:57, File description = Allows you to use the Research Library and its collection of information services from Microsoft Internet Explorer, Product Name = Research Library Explorer Bar, Product version = 11.0.5510, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |-1898593064|0x0fa0bdaa2ff4ed7e5a2fa2ec1b536712|
    Icon=C:\PROGRA~1\MICROS~2\OFFICE11\REFBAR.ICO <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refbar.ico" File version = (null), File size = 5974, File modification date = 25/03/2003  15:45, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |70333190|0x6f9f10679b6f5928d1dbd0bbaebee0c6|
    HotIcon=C:\PROGRA~1\MICROS~2\OFFICE11\REFBARH.ICO <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\program files\microsoft office\office11\refbarh.ico" File version = (null), File size = 5974, File modification date = 25/03/2003  15:45, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |70333190|0x6f9f10679b6f5928d1dbd0bbaebee0c6|
    CLSID={E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{92780B25-18CC-41C8-B9BE-3C9C571A8263}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    CLSID={1FBA04EE-3024-11D2-8F1F-0000F87ABD16} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\windows\system32\shdocvw.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1494528, File modification date = 22/08/2007  13:14, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |-1156582592|0x1a0fee5f2b4ba64a3f5748619c9108f9|
    Exec=C:\Program Files\Messenger\msmsgs.exe <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
    HotIcon=C:\Program Files\Messenger\msmsgs.exe,302 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
    Icon=C:\Program Files\Messenger\msmsgs.exe,301 <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}>
      "c:\program files\messenger\msmsgs.exe" File version = 4.7.3001, File size = 1694208, File modification date = 13/10/2004  16:24, File description = Windows Messenger, Product Name = Messenger, Product version = Version 4.7.3001, Company name = Microsoft Corporation (Copyright (c) Microsoft Corporation 2004) |-366803301|0x74e6e96c6f0e2eca4edbb7f7a468f259|
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.3199 (xpsp_sp2_gdr.070821-1257), File size = 1022976, File modification date = 22/08/2007  13:14, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.3199, Company name =   (  .   .) |1736784383|0xef63527e468e27955752022fcd52e8d1|
LSP
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\* <value = PackedCatalogItem>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 20/10/2001  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 20/10/2001  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 20/10/2001  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 20/10/2001  12:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\* <value = LibraryPath>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 17/08/2004  12:04, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 17/08/2004  12:04, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 17/08/2004  12:04, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
HOSTS
  C:\WINDOWS\System32\drivers\etc\hosts
      <!doctype html public "-//w3c//dtd html 4.01 transitional//en"
      "http://www.w3.org/tr/html4/loose.dtd">
      <html>
      <head>
      <script language="javascript">
      <!--
      if (window != top)
      top.location.href = location.href;
      // -->
      </script>
      <title>site unavailable</title>
      <meta http-equiv="content-type" content="text/html; charset=iso-8859-1">
      <style type="text/css">
      body{text-align:center;}
      .geohead {font-family:verdana, arial, helvetica, sans-serif; font-size:10px;width:750px;margin:10px 0 10px 0;height:35px;}
      .geohead #geologo {width:270px;display:block; float:left; }
      .geohead #rightside {width:480px;display:block; float:right;border-bottom:1px solid #999999; height:27px;}
      .geohead #rightside #welcome {width:50%;display:block; float:left; text-align:left;}
      .geohead #rightside #wlinks {width:50%;display:block; float:right; text-align:right;}
      .ftr { margin:0px; color:#404040; font:x-small arial,sans-serif; text-align:center; width:750px;}
      .bodywrap{display:block;height:470px;}
      .bodycnt{width:510px; display:block; float:left; background-color:#eee9f5; height:auto; text-align:left; font-family:arial, helvetica, sans-serif;font-size:13px; color:#000000; padding:20px 20px 35px 20px;}
      .title { font-family:arial, helvetica, sans-serif; font-weight:bold; font-size:24px; color:#7c56a9}
      .adcnt{width:172px; display:block; float:right; text-align:left;cursor:pointer;cursor:hand;}
      .adcnt td {text-align:left;}
      .adsubt{font-size:10px; font-family:verdana; font-weight:bold; color:#b4b4b4; cursor:default;margin-top:5px;}
      .ybadge { font-family: verdana, arial, helvetica, sans-serif; font-size:10px; color: #666666; margin-top:10px;}
      .ybadge img {margin-top:6px;}
      .adtable {font-family:verdana, arial, helvetica, sans-serif; font-size:10px;border: 1px solid #d6dbe7; background-color:#eff7ff; padding:3px; margin-bottom:10px; width:172px;}
      .adttl{font-weight:bold;margin-bottom:3px;}
      .addescr{color:#6b6b6b; margin-bottom:3px;}
      .adlink a {color:#008200; text-decoration:none;}
      </style>
      </head>
      <body>
      <!-- following code added by server. please remove -->
      <!-- preceding code added by server. please remove -->
      <div id="maincnt">
      <div class="geohead"><div id="geologo"><a href="http://geocities.yahoo.com"><img height=33 alt="yahoo! geocities" src="http://us.i1.yimg.com/us.yimg.com/i/us/nt/ma/ma_geo_1.gif" width=259 border=0></a></div>
      <div id="rightside"><div id="wlinks"><a href="http://geocities.yahoo.com">geocities home</a> - <a href="http://www.yahoo.com">yahoo!</a> - <a href="http://help.yahoo.com/help/us/geo/">help</a></div>
      </div></div>
      <div class="bodywrap">
      <div class="bodycnt">
      <div class="title">sorry, this geocities site is currently unavailable.</div>
      <p>the geocities web site you were trying to view has temporarily exceeded its  data transfer limit. please try again later. </p>
      <p>are you the site owner? 
      avoid service interruptions in the future by increasing your data transfer limit!
      <a href="http://help.yahoo.com/help/us/geo/transfer/transfer-05.html" target="_blank">find out how.</a> </p>
      <p><a href="http://help.yahoo.com/help/us/geo/transfer/" target="_blank">learn more about data transfer.</a></p>
      </div>
      <div class="adcnt">
      <a target="_top" href="http://geocities.yahoo.com"><img src="http://us.i1.yimg.com/us.yimg.com/i/us/smbiz/b/geo_mast_small2.gif" alt="yahoo! geocities" border="0" height="15" hspace="0" vspace="0" width="141"></a>
      <div class="adsubt">sponsored links</div>
      <!--<table width="172" border="0" bgcolor="#ffffff" class="adtable"><tr><td align=left>-->
      <div class="adtable">
      <div class="adttl" title="reliable plans include domain &amp; 24x7 support."><a href="http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=27166/*http://smallbusiness.yahoo.com/webhosting" target="_blank">yahoo! web hosting<br>
      $25 setup waived</a></div>
      <div class="addescr" title="reliable plans include domain &amp; 24x7 support.">reliable plans include domain &amp; 24x7 support.</div>
      <div class="adlink" title="reliable plans include domain &amp; 24x7 support."><a href="http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=27166/*http://smallbusiness.yahoo.com/webhosting" target="_blank">webhosting.yahoo.com</a></div>
      </div>
      <div class="adtable">
      <div class="adttl" title="reliable plans include domain &amp; 24x7 support."><a href="http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=27176/*http://smallbusiness.yahoo.com/domains/" target="_blank">domain names from yahoo! only $9.95/yr</a></div>
      <div class="addescr" title="includes starter web page, email & domain forwarding, 24x7 support.">includes starter web page, email & domain forwarding, 24x7 support.</div>
      <div class="adlink" title="includes starter web page, email & domain forwarding, 24x7 support."><a href="http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=27176/*http://smallbusiness.yahoo.com/domains/" target="_blank">domains.yahoo.com</a></div>
      </div>
      <div class="adtable">
      <div class="adttl" title="setup fee waived. up to 10 emails, spamguard, forwarding & virus scanning."><a href="http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=27184/*http://smallbusiness.yahoo.com/mail" target="_blank">yahoo! business email<br> domain included</a></div>
      <div class="addescr" title="setup fee waived. up to 10 emails, spamguard, forwarding & virus scanning.">setup fee waived. up to 10 emails, spamguard, forwarding &amp; virus scanning.</div>
      <div class="adlink" title="setup fee waived. up to 10 emails, spamguard, forwarding & virus scanning."><a href="http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=27184/*http://smallbusiness.yahoo.com/mail" target="_blank">smallbusiness.yahoo.com</a></div>
      </div>
      <div class="adtable">
      <div class="adttl" title="$50 setup fee waived. a reliable ecommerce plan, 24x7 support."><a href="http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=/27190/*http://smallbusiness.yahoo.com/merchant" target="_blank">ecommerce from yahoo!<br> 1 month free</a></div>
      <div class="addescr" title="$50 setup fee waived. a reliable ecommerce plan, 24x7 support.">$50 setup fee waived. a reliable ecommerce plan, 24x7 support.</div>
      <div class="adlink" title="$50 setup fee waived. a reliable ecommerce plan, 24x7 support."><a href="http://pa.yahoo.com/*http://us.rd.yahoo.com/evt=/27190/*http://smallbusiness.yahoo.com/merchant" target="_blank">smallbusiness.yahoo.com</a></div>
      </div>
      <div class="ybadge">
      get your own web site at <br><a target="_top" href="http://geocities.yahoo.com">yahoo! geocities</a>
      <a href="http://smallbusiness.yahoo.com/webhosting/" target="_top"><img src="http://us.i1.yimg.com/us.yimg.com/i/us/wh/gr/badge_hostedby_purp_2.gif" alt="hosted by yahoo! web hosting" align="middle" border="0" height="31" width="88"></a>
      </div>
      </div>
      </div>
      <div class=ftr>
      <hr size=1 width=100%>
      copyright &copy;
      2005 yahoo! inc. all rights reserved<br>      
      <a href="http://privacy.yahoo.com/privacy/us/geo/">privacy policy</a> 
      - <a href="http://docs.yahoo.com/info/copyright/copyright.html">copyright policy</a>
      - <a href="http://docs.yahoo.com/info/guidelines/community.html">guidelines</a> 
      - <a href="http://docs.yahoo.com/info/terms/geoterms.html">terms of service</a> 
      - <a href="http://help.yahoo.com/help/us/geo/">help</a>
      </div>
      </div>
      </body>
      </html>
      <!-- text below generated by server. please remove --></object></layer></div></span></style></noscript></table></script></applet>
      <img src="http://geo.yahoo.com/serv?s=19190039&t=1167035504&f=us-w59" alt=1 width=1 height=1>
STARTUP MENU
  C:\Documents and Settings\All Users\ \\
      "C:\Documents and Settings\All Users\ \\\desktop.ini" File version = (null), File size = 84, File modification date = 20/09/2005  11:39, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
      "C:\Documents and Settings\All Users\ \\\HP Digital Imaging Monitor.lnk" File version = (null), File size = 1808, File modification date = 18/10/2005  12:57, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-2117078638|0x5ca4d1b1ccd9d056d28b4cab6276b90b|
        "c:\program files\hp\digital imaging\bin\hpqtra08.exe" File version = 43.0.120.000, File size = 241664, File modification date = 15/03/2004  15:08, File description = HP Digital Imaging Monitor (CUE), Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |-1130571941|0x8bbc035425b2c406f74c9f643926fa37|
      "C:\Documents and Settings\All Users\ \\\  HP Image Zone.lnk" File version = (null), File size = 798, File modification date = 18/10/2005  12:56, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |450233167|0x69fbb0a0b31440055c8014466faf88bd|
        "c:\program files\hp\digital imaging\bin\hpqthb08.exe" File version = 043.000.120.000, File size = 53248, File modification date = 15/03/2004  15:45, File description = HP Image Zone, Product Name = hp digital imaging - hp all-in-one series, Product version = 043.000.120.000, Company name = Hewlett-Packard Co. (Copyright (C) Hewlett-Packard Co. 1995-2004) |1276265896|0x75b4cd7e7f6bcb0f343f3019becb8c51|
  C:\Documents and Settings\\ \\
      "C:\Documents and Settings\\ \\\desktop.ini" File version = (null), File size = 84, File modification date = 20/09/2005  11:39, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
