GetSystemInfo version 3.0.0.5:
------------------------------
HARDWARE Information:
---------------------
Processor:
		Intel(R) Pentium(R) M processor 1.73GHz Unknown speed

Processors number:
		1

BIOS:
		HP     - 31100620 KBC Version 77.16 EPP runtime BIOS - Version 1.1  BIOS Date: 11/25/06

System Date:
		25/10/2008 (dd/mm/yyyy)

Total phisical memory:
		503,368 Mb

Total virtual memory:
		2047,896 Mb

Available phisical memory:
		503,368 Mb

Available virtual memory:
		2006,080 Mb

Hard drives:
		WDC WD600UE-22KVT0

Logical disks structure:
		c:\ FIXED SYSTEM Full size - 10705 Mb, Free size - 2141 Mb, File system - NTFS
		d:\ CDROM Full size - 98 Mb, Free size - 0 Mb, File system - CDFS
		e:\ FIXED Full size - 5426 Mb, Free size - 448 Mb, File system - NTFS
		f:\ FIXED Full size - 41100 Mb, Free size - 1378 Mb, File system - NTFS

Video adapters:
		Mobile Intel(R) 915GM/GMS,910GML Express Chipset Family
			DRIVER - system32\DRIVERS\ialmnt5.sys ("c:\windows\system32\drivers\ialmnt5.sys") File version = 6.14.10.4410, File size = 1302812, File modification date = 19/10/2005  10:15, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |-659618172|0x5a8e05f1d5c36abd58cffa111eb325ea|
		Mobile Intel(R) 915GM/GMS,910GML Express Chipset Family
			DRIVER - system32\DRIVERS\ialmnt5.sys ("c:\windows\system32\drivers\ialmnt5.sys") File version = 6.14.10.4410, File size = 1302812, File modification date = 19/10/2005  10:15, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |-659618172|0x5a8e05f1d5c36abd58cffa111eb325ea|

NetWork adapters:
		Intel(R) PRO/Wireless 2200BG Network Connection
			DRIVER - system32\DRIVERS\w29n51.sys ("c:\windows\system32\drivers\w29n51.sys") File version = 9.0.4.17 Driver, File size = 2206720, File modification date = 17/07/2006  15:17, File description = Intel Wireless LAN Driver, Product Name = Intel Wireless LAN Adapter, Product version = (null), Company name = Intel Corporation (Copyright  Intel Corporation 2004-2006) |384020172|0x68eb5bc07781a36a63633541c11e1ad6|
		Sony Ericsson Device 039 USB Ethernet Emulation (NDIS 5)
			DRIVER - system32\DRIVERS\se27nd5.sys ("c:\windows\system32\drivers\se27nd5.sys") File version = V4.34, File size = 18704, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation (NDIS 5 Miniport), Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |912335448|0xbb30139683bbf3ee89ec931393d9335c|
		Intel(R) PRO/100 VE Network Connection
			DRIVER - system32\DRIVERS\e100b325.sys ("c:\windows\system32\drivers\e100b325.sys") File version = 8.0.27.0 built by: WinDDK, File size = 163328, File modification date = 22/08/2006  07:21, File description = Intel(R) PRO/100 Adapter NDIS 5.1 driver, Product Name = Intel(R) PRO/100 Adapter, Product version = 8.0.27.0, Company name = Intel Corporation (Copyright (C) 1995-2005 Intel Corporation.  All Rights Reserved.) |-767160625|0x83403675cab29e7a4b885b11e7c855d8|

Modems:
		Sony Ericsson Device 039 USB WMC Data Modem
		Sony Ericsson Device 039 USB WMC Modem

Multimedia:
		Conexant AC-Link Audio
			DRIVER - system32\drivers\camc6aud.sys ("c:\windows\system32\drivers\camc6aud.sys") File version = 6.14.10.0675, File size = 38144, File modification date = 21/08/2006  22:16, File description = Conexant WDM AC97 Audio Driver, Product Name = Conexant Audio Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |-2137843940|0x619fae09d910c78cc6aa4abdb5c42dcb|
		   Microsoft
			DRIVER - system32\drivers\MSPCLOCK.sys ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
		    Microsoft
			DRIVER - system32\drivers\MSPQM.sys ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
		   Microsoft
			DRIVER - system32\drivers\MSKSSRV.sys ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
		  
			DRIVER - system32\drivers\sysaudio.sys ("c:\windows\system32\drivers\sysaudio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
		  DRM  
			DRIVER - system32\drivers\drmkaud.sys ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
		   
			DRIVER - system32\drivers\kmixer.sys ("c:\windows\system32\drivers\kmixer.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
		    
			DRIVER - system32\drivers\aec.sys ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
		   Microsoft Kernel GS
			DRIVER - system32\drivers\swmidi.sys ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
		 DLS  
			DRIVER - system32\drivers\DMusic.sys ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
		   Microsoft (WINMM WDM)
			DRIVER - system32\drivers\wdmaud.sys ("c:\windows\system32\drivers\wdmaud.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
		   
			DRIVER - system32\drivers\splitter.sys ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|

Printers:
		Microsoft Office Document Image Writer - default printer
			DRIVER - C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\mdigraph.dll ("c:\windows\system32\spool\drivers\w32x86\3\mdigraph.dll") File version = 11.3.1897.0, File size = 758784, File modification date = 18/06/2003  15:31, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.1897.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |44298690|0x365d6248953729f90d8a0caeaedfcc7a|

Removable devices:
		TSSTcorp CD/DVDW TS-L632D
			DRIVER - system32\DRIVERS\cdrom.sys ("c:\windows\system32\drivers\cdrom.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  08:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|

SOFTWARE Information:
---------------------
Operation system:
		Microsoft Windows XP Home Edition, 5.1.2600 Service Pack 2

Environment variables:
		ALLUSERSPROFILE=C:\Documents and Settings\All Users
		APPDATA=C:\Documents and Settings\viktor\Application Data
		CLASSPATH=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
		CLIENTNAME=Console
		CommonProgramFiles=C:\Program Files\Common Files
		COMPUTERNAME=PC199238472315
		ComSpec=C:\WINDOWS\system32\cmd.exe
		DEFAULT_CA_NR=CA6
		FP_NO_HOST_CHECK=NO
		HOMEDRIVE=C:
		HOMEPATH=\Documents and Settings\viktor
		LOGONSERVER=\\PC199238472315
		NUMBER_OF_PROCESSORS=1
		OS=Windows_NT
		Path=C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem
		PATHEXT=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
		PROCESSOR_ARCHITECTURE=x86
		PROCESSOR_IDENTIFIER=x86 Family 6 Model 13 Stepping 8, GenuineIntel
		PROCESSOR_LEVEL=6
		PROCESSOR_REVISION=0d08
		ProgramFiles=C:\Program Files
		QTJAVA=C:\Program Files\Java\jre1.5.0_06\lib\ext\QTJava.zip
		SESSIONNAME=Console
		SystemDrive=C:
		SystemRoot=C:\WINDOWS
		TEMP=C:\DOCUME~1\viktor\LOCALS~1\Temp
		TMP=C:\DOCUME~1\viktor\LOCALS~1\Temp
		USERDOMAIN=PC199238472315
		USERNAME=viktor
		USERPROFILE=C:\Documents and Settings\viktor
		windir=C:\WINDOWS

Installed network protocols:
---------clients---------
		   Microsoft
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		-
			DRIVER - %SystemRoot%\system32\svchost.exe -k LocalService ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
--------protocol---------
		  -
		 -  Ethernet
			DRIVER - system32\DRIVERS\raspppoe.sys ("c:\windows\system32\drivers\raspppoe.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  08:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
		   2
		  (TCP/IP)
			DRIVER - system32\DRIVERS\tcpip.sys ("c:\windows\system32\drivers\tcpip.sys") File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
		NDIS- WAN  
			DRIVER - system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  08:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
		NDIS- /  
			DRIVER - system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  08:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
		  WINS (TCP/IP)
			DRIVER - system32\DRIVERS\netbt.sys ("c:\windows\system32\drivers\netbt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  08:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
		  TCP/IP ( SMB)
--------services---------
		 NetBIOS
			DRIVER - system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
		    
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  QoS
			DRIVER - system32\DRIVERS\psched.sys ("c:\windows\system32\drivers\psched.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  08:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
		QoS RSVP
			DRIVER - %SystemRoot%\system32\rsvp.exe ("C:\WINDOWS\system32\rsvp.exe") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  08:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
		   
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  
		  
		  
			DRIVER - system32\DRIVERS\msgpc.sys ("c:\windows\system32\drivers\msgpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  08:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
		  
			DRIVER - %SystemRoot%\System32\alg.exe ("C:\WINDOWS\system32\alg.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  08:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
		       Microsoft
			DRIVER - %SystemRoot%\system32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		 
			DRIVER - %SystemRoot%\System32\svchost.exe -k netsvcs ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
-----------by type----------
		MSAFD Tcpip [TCP/IP]
		MSAFD Tcpip [UDP/IP]
		MSAFD Tcpip [RAW/IP]
		RSVP UDP Service Provider
		RSVP TCP Service Provider
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{383224FA-AB1C-4F03-A5BD-B8369AC21C1F}] SEQPACKET 3
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{383224FA-AB1C-4F03-A5BD-B8369AC21C1F}] DATAGRAM 3
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{F5E9DC9C-188E-49E3-8033-3C8C2FC58C67}] SEQPACKET 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{F5E9DC9C-188E-49E3-8033-3C8C2FC58C67}] DATAGRAM 0
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{E0FBC25A-2C66-464C-8876-CE0AF49D3703}] SEQPACKET 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{E0FBC25A-2C66-464C-8876-CE0AF49D3703}] DATAGRAM 1
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{03543EFA-95EA-453E-865A-FB046A515CD4}] SEQPACKET 2
		MSAFD NetBIOS [\Device\NetBT_Tcpip_{03543EFA-95EA-453E-865A-FB046A515CD4}] DATAGRAM 2

Installed applications/hotfixes:
		A1Click Ultra PC Cleaner 1.01 (Registered Version), installation data=20070322 (Super Win Software, Inc.)
			DEINSTALLATION: "C:\Program Files\A1Click Ultra PC Cleaner\unins000.exe"
		Active@ Partition Recovery
			DEINSTALLATION: F:\Program Files\Active Data Recovery Software\Active Partition Recovery\UNWISE.EXE F:\Program Files\Active Data Recovery Software\Active Partition Recovery\INSTALL.LOG
		Archibalds Digger
			DEINSTALLATION: C:\WINDOWS\IsUninst.exe -f"C:\GAMES\MMedia\Archibalds Digger\Uninst.isu"
		Conexant AC-Link Audio
			DEINSTALLATION: C:\Program Files\CONEXANT\CNXT_AUDIO\HXFSETUP.EXE -U -IVlg103CA.INF
		DonREST 36
			DEINSTALLATION: C:\PROGRA~1\DonREST 36\UNWISE.EXE C:\PROGRA~1\DonREST 36\INSTALL.LOG
		DonREST 37
			DEINSTALLATION: C:\PROGRA~1\DonREST 37\UNWISE.EXE C:\PROGRA~1\DonREST 37\INSTALL.LOG
		DonREST 38
			DEINSTALLATION: C:\PROGRA~1\DonREST 38\UNWISE.EXE C:\PROGRA~1\DonREST 38\INSTALL.LOG
		DonREST 40
			DEINSTALLATION: C:\PROGRA~1\DonREST 40\UNWISE.EXE C:\PROGRA~1\DonREST 40\INSTALL.LOG
		GetDiz 3.0 3.0 (Outer Technologies)
			DEINSTALLATION: C:\PROGRA~1\GetDiz\UNINST~1\UNWISE.EXE C:\PROGRA~1\GetDiz\UNINST~1\install.log
		HijackThis 2.0.2 2.0.2 (TrendMicro)
			DEINSTALLATION: "C:\ht\HijackThis.exe" /uninstall
		Microsoft Internationalized Domain Names Mitigation APIs, installation data=20070321 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
		Windows Installer 3.1 (KB893803) (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe"
		  Windows XP (KB912945) 1, installation data=20061013 (Microsoft Corporation)
			DEINSTALLATION: 
		   Windows XP (KB923789) (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\system32\MacroMed\Flash\genuinst.exe C:\WINDOWS\system32\MacroMed\Flash\KB923789.inf
		   Windows Internet Explorer 7 (KB929969) 20061222.120000, installation data=20070321 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\ie7updates\KB929969\spuninst\spuninst.exe"
		Malwarebytes' Anti-Malware, installation data=20081025 (Malwarebytes Corporation)
			DEINSTALLATION: "C:\Program Files\Malwarebytes' Anti-Malware\unins000.exe"
		Microsoft .NET Framework 2.0 (Microsoft Corporation)
			DEINSTALLATION: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe
		Mozilla Firefox (3.0.3) 3.0.3 (ru) (Mozilla)
			DEINSTALLATION: C:\Program Files\Mozilla Firefox\uninstall\helper.exe
		Microsoft National Language Support Downlevel APIs, installation data=20070321 (Microsoft Corporation)
			DEINSTALLATION: "C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
		Intel(R) PRO Network Connections Drivers
			DEINSTALLATION: Prounstl.exe
		Reg Organizer 4.0
			DEINSTALLATION: "C:\Program Files\Reg Organizer\unins000.exe"
		RegVac Registry Cleaner 4.02 (Registered Version), installation data=20070322 (Super Win Software, Inc.)
			DEINSTALLATION: "C:\Program Files\RegVac Registry Cleaner\unins000.exe"
		Shredder 10
			DEINSTALLATION: "F:\\Shredder 10\unins000.exe"
		Sound'Em
		Synaptics Pointing Device Driver 8.3.8.0 (Synaptics)
			DEINSTALLATION: rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall
		Windows Genuine Advantage Validation Tool (KB892130) 1.5.0530.0, installation data=20061013 (Microsoft Corporation)
			DEINSTALLATION: 
		Windows Genuine Advantage Notifications (KB905474) 1.7.0018.5, installation data=20070321 (Microsoft Corporation)
			DEINSTALLATION: 
		Windows Media Connect
			DEINSTALLATION: msiexec.exe /I {F6869CD2-3DB4-476D-A4C7-B3AE7C3ACF7B}
		Windows Media Format Runtime
			DEINSTALLATION: "C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
		 Windows Media 10
			DEINSTALLATION: "C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
		 WinRAR
		xp-AntiSpy 3.96-4 (Christian Taubenheim)
			DEINSTALLATION: C:\Program Files\xp-AntiSpy\Uninstall.exe
		J2SE Runtime Environment 5.0 Update 6 (Ukrainian) 1.5.0.60, installation data=20061013 (Sun Microsystems, Inc.)
			DEINSTALLATION: MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150060}
		HP Quick Launch Buttons 6.10 A2 (Russian) 6.10 A2, installation data=20061014 (Hewlett-Packard Company)
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{34D2AB40-150D-475D-AE32-BD23FB5EE355}\setup.exe" -l0x19  -removeonly uninst
		       HP (Russian) 2.1Z, installation data=20061014 (Hewlett-Packard Company)
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9F7336-6DF8-476F-ABF6-C70A17FAF619}\setup.exe" -l0x19  -uninst  -removeonly
		HP Wireless Assistant 2.00 G2 2.00 G2 (Hewlett-Packard Company)
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{4302B2DD-D958-40E3-BAF3-B07FFE1978CE}\setup.exe" -l0x9  hpquninst
		Microsoft .NET Framework 2.0 (Ukrainian) 2.0.50727, installation data=20070723 (Microsoft Corporation)
		Intel(R) Graphics Media Accelerator Driver for Mobile 6.14.10.4410
			DEINSTALLATION: RUNDLL32.EXE C:\WINDOWS\system32\ialmrem.dll,UninstallW2KIGfx2ID PCI\VEN_8086&DEV_2792 PCI\VEN_8086&DEV_2592
		Microsoft Office Professional Edition 2003 (English) 11.0.5614.0, installation data=20070322 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{90110409-6000-11D3-8CFE-0150048383C9}
		Microsoft Office 2003 Russian User Interface Pack (English) 11.0.5614.0, installation data=20070322 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{901E0419-6000-11D3-8CFE-0150048383C9}
		HP User Guides 0038 (Russian) 1.00.0000, installation data=20061014 (Hewlett-Packard)
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{929AB598-BB08-4875-B8D2-952C151D6E47}\setup.exe" -l0x19  -removeonly
		HP Help and Support (Russian) 4.2.0015, installation data=20061013 (HPQ)
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A93C4E94-1005-489D-BEAA-B873C1AA6CFC}\setup.exe" -l0x19  -removeonly
		AudaUpdate Client 2.3 (Remove Only) 2.3
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AFC6827A-7D8E-4569-9F53-43FACA98F384}\setup.exe" -l0x9  UNINSTALL
		ImageMixer VCD2 LE for FinePix 2.5.2.0
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B093990A-AAF2-44AC-9216-14BB7A2189B6}\SETUP.EXE" -l0x9 
		HP Software Update (Ukrainian) 3.0.7.014, installation data=20061013 (Hewlett-Packard)
			DEINSTALLATION: MsiExec.exe /X{BB85ED9C-AFC9-43BD-B8DC-258C3C7DF72E}
		RAW FILE CONVERTER LE
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D680C913-5955-469D-9D88-C1940F7506D6}\SETUP.EXE" -l0x9 
		HpSdpAppCoreApp (Ukrainian) 3.00.0000, installation data=20061013 (Hewlett-Packard)
		Windows Media Connect (Russian) 1.0.0.0, installation data=20061014 (Microsoft Corporation)
			DEINSTALLATION: MsiExec.exe /I{F6869CD2-3DB4-476D-A4C7-B3AE7C3ACF7B}
		AudaPen/AudaStation v.2.64 (Remove Only) 2.64.0.28, installation data=20080711 (Audatex)
			DEINSTALLATION: RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FE58DBD8-129B-11D7-8D51-005056CAD6CB}\setup.exe" -l0x9  ~Uninstall ~RemoveOnly ~NoCabData
		Disc2Phone (Ukrainian) 1.4.0.112, installation data=20070820 (Sony Media Software)
			DEINSTALLATION: MsiExec.exe /I{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9}
		  3.1 3.1.0.1 ( "-")
			DEINSTALLATION: "C:\Program Files\Translate31\unins000.exe"
		  Reg Organizer 4.0
			DEINSTALLATION: "C:\Program Files\Reg Organizer\unins001.exe"

Runned drivers:
	system32\drivers\aec.sys - stopped (demand) ("c:\windows\system32\drivers\aec.sys") File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
	system32\DRIVERS\arp1394.sys - stopped (demand) ("c:\windows\system32\drivers\arp1394.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 18/08/2004  08:00, File description = IP/1394 Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1866048193|0xf0d692b0bffb46e30eb3cea168bbc49f|
	system32\DRIVERS\asyncmac.sys - stopped (demand) ("c:\windows\system32\drivers\asyncmac.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
	system32\DRIVERS\atmarpc.sys - stopped (demand) ("c:\windows\system32\drivers\atmarpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  08:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
	System32\drivers\dmboot.sys - stopped (disabled) ("c:\windows\system32\drivers\dmboot.sys") File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  08:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
	System32\drivers\dmio.sys - stopped (disabled) ("c:\windows\system32\drivers\dmio.sys") File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  08:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
	System32\drivers\dmload.sys - stopped (disabled) ("c:\windows\system32\drivers\dmload.sys") File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  08:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
	system32\drivers\DMusic.sys - stopped (demand) ("c:\windows\system32\drivers\dmusic.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
	system32\drivers\drmkaud.sys - stopped (demand) ("c:\windows\system32\drivers\drmkaud.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
	system32\DRIVERS\e100b325.sys - stopped (demand) ("c:\windows\system32\drivers\e100b325.sys") File version = 8.0.27.0 built by: WinDDK, File size = 163328, File modification date = 22/08/2006  07:21, File description = Intel(R) PRO/100 Adapter NDIS 5.1 driver, Product Name = Intel(R) PRO/100 Adapter, Product version = 8.0.27.0, Company name = Intel Corporation (Copyright (C) 1995-2005 Intel Corporation.  All Rights Reserved.) |-767160625|0x83403675cab29e7a4b885b11e7c855d8|
	system32\DRIVERS\eabusb.sys - stopped (demand) ("c:\windows\system32\drivers\eabusb.sys") File version = 4.20.02.02, File size = 5760, File modification date = 19/09/2005  10:24, File description = QLB USB Keyboard filter driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |1778506247|0x231f4547ae1e4b3e60eca66c3a96d218|
	system32\DRIVERS\epfw.sys - stopped (automatic)
	system32\DRIVERS\epfwtdi.sys - stopped (system)
	system32\DRIVERS\fdc.sys - stopped (demand) ("c:\windows\system32\drivers\fdc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  08:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
	system32\DRIVERS\flpydisk.sys - stopped (demand) ("c:\windows\system32\drivers\flpydisk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  08:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
	system32\DRIVERS\HSFHWICH.sys - stopped (demand)
	system32\DRIVERS\HSF_DPV.sys - stopped (demand)
	System32\Drivers\HTTP.sys - stopped (demand) ("c:\windows\system32\drivers\http.sys") File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
	System32\Drivers\imagedrv.sys - stopped (boot)
	system32\DRIVERS\imagesrv.sys - stopped (boot)
	system32\DRIVERS\Ip6Fw.sys - stopped (demand) ("c:\windows\system32\drivers\ip6fw.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  08:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
	system32\DRIVERS\ipfltdrv.sys - stopped (demand) ("c:\windows\system32\drivers\ipfltdrv.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  08:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
	system32\DRIVERS\ipinip.sys - stopped (demand) ("c:\windows\system32\drivers\ipinip.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
	system32\DRIVERS\irenum.sys - stopped (demand) ("c:\windows\system32\drivers\irenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  08:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
	system32\drivers\kmixer.sys - stopped (demand) ("c:\windows\system32\drivers\kmixer.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
	system32\DRIVERS\mdmxsdk.sys - stopped (automatic)
	system32\drivers\MSKSSRV.sys - stopped (demand) ("c:\windows\system32\drivers\mskssrv.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
	system32\drivers\MSPCLOCK.sys - stopped (demand) ("c:\windows\system32\drivers\mspclock.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
	system32\drivers\MSPQM.sys - stopped (demand) ("c:\windows\system32\drivers\mspqm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
	\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VirusDefs\20020829.003\NAVENG.SYS - stopped (demand)
	\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VirusDefs\20020829.003\NAVEX15.SYS - stopped (demand)
	system32\DRIVERS\netbt.sys - stopped (system) ("c:\windows\system32\drivers\netbt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  08:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
	system32\DRIVERS\nic1394.sys - stopped (demand) ("c:\windows\system32\drivers\nic1394.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61824, File modification date = 18/08/2004  08:00, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1582580385|0x5c5c53db4fef16cf87b9911c7e8c6fbc|
	\??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS - stopped (demand) ("\\?\c:\windows\system32\drivers\npdriver.sys") File version = 16.00.0.22, File size = 34578, File modification date = 14/08/2002  03:03, File description = Norton Protection Driver, Product Name = Norton Utilities, Product version = 16.00.0.22, Company name = Symantec Corporation (Copyright (C) 2003 Symantec Corporation) |620453588|0x410ab482d8a1e1655a7158a7b5c72ce7|
	system32\DRIVERS\nwlnkflt.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkflt.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  08:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
	system32\DRIVERS\nwlnkfwd.sys - stopped (demand) ("c:\windows\system32\drivers\nwlnkfwd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  08:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
	system32\DRIVERS\rasirda.sys - stopped (demand) ("c:\windows\system32\drivers\rasirda.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19584, File modification date = 17/08/2001  16:51, File description = IrDA WAN Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2137000575|0x0207d26ddf796a193ccd9f83047bb5fc|
	System32\DRIVERS\RDPCDD.sys - stopped (system) ("c:\windows\system32\drivers\rdpcdd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  08:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
	\??\C:\WINDOWS\system32\Drivers\SAVRT.SYS - stopped (demand) ("\\?\c:\windows\system32\drivers\savrt.sys") File version = 9.0.1.35, File size = 235184, File modification date = 25/07/2002  19:28, File description = AutoProtect, Product Name = Symantec AntiVirus AutoProtect, Product version = 9.0, Company name = Symantec Corporation (Copyright (c) 2002 Symantec Corporation) |1539973378|0x97bd082cb7adc2167cb544bd7768e339|
	system32\DRIVERS\SE27bus.sys - stopped (demand) ("c:\windows\system32\drivers\se27bus.sys") File version = V4.34, File size = 61600, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 Driver Driver, Product Name = Sony Ericsson Device 039 Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |38144385|0x59a9eb4073a39895af314780d0a032fa|
	system32\DRIVERS\SE27mdfl.sys - stopped (demand) ("c:\windows\system32\drivers\se27mdfl.sys") File version = V4.34, File size = 9360, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product Name = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-12795651|0xd53e7e53107d1796825540129f8fe89f|
	system32\DRIVERS\SE27mdm.sys - stopped (demand) ("c:\windows\system32\drivers\se27mdm.sys") File version = V4.34, File size = 97184, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem WDM Driver, Product Name = Sony Ericsson Device 039 USB WMC Data Modem, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-1549162460|0x2afa2f65a6e91da5b5070e734769827e|
	system32\DRIVERS\SE27mgmt.sys - stopped (demand) ("c:\windows\system32\drivers\se27mgmt.sys") File version = V4.34, File size = 88688, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Device Management Driver, Product Name = Sony Ericsson Device 039 USB WMC Device Management, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1239930657|0x5a33a8d7b44c7bd8abe248b4dcd1ff3c|
	system32\DRIVERS\se27nd5.sys - stopped (demand) ("c:\windows\system32\drivers\se27nd5.sys") File version = V4.34, File size = 18704, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation (NDIS 5 Miniport), Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |912335448|0xbb30139683bbf3ee89ec931393d9335c|
	system32\DRIVERS\SE27obex.sys - stopped (demand) ("c:\windows\system32\drivers\se27obex.sys") File version = V4.34, File size = 86560, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB WMC OBEX Interface Device Driver, Product Name = Sony Ericsson Device 039 USB WMC OBEX Interface, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1395277399|0x5da6ff71e94b9134ddd094ebb09f05e6|
	system32\DRIVERS\se27unic.sys - stopped (demand) ("c:\windows\system32\drivers\se27unic.sys") File version = V4.34, File size = 90800, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation, Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |2078164515|0x4d54a9d7c22157ab3d2442e8bcf5ecd2|
	system32\DRIVERS\secdrv.sys - stopped (demand) ("c:\windows\system32\drivers\secdrv.sys") File version = (null), File size = 27440, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
	system32\DRIVERS\serenum.sys - stopped (demand) ("c:\windows\system32\drivers\serenum.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
	system32\DRIVERS\serial.sys - stopped (system) ("c:\windows\system32\drivers\serial.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
	system32\DRIVERS\smcirda.sys - stopped (demand) ("c:\windows\system32\drivers\smcirda.sys") File version = 5.1.2462.0, File size = 35913, File modification date = 19/10/2001  16:43, File description = SMC IrCC IrDA FIR NDIS 5.0  , Product Name =    , Product version = 5.1.2462.0, Company name = SMC (Copyright  SMC 1996-2001) |-89736589|0x27c56365d6f07347e4e0d0e17c4907cf|
	system32\drivers\splitter.sys - stopped (demand) ("c:\windows\system32\drivers\splitter.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
	system32\drivers\swmidi.sys - stopped (demand) ("c:\windows\system32\drivers\swmidi.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
	\??\C:\Program Files\Symantec\SYMEVENT.SYS - stopped (demand)
	\??\C:\WINDOWS\system32\Drivers\SYMREDRV.SYS - stopped (demand) ("\\?\c:\windows\system32\drivers\symredrv.sys") File version = 4.7.0.58, File size = 15640, File modification date = 15/08/2002  14:45, File description = Redirector Filter, Product Name = Symantec Security Drivers, Product version = 4.7, Company name = Symantec Corporation (Copyright (c) 2001 Symantec Corporation) |1788001501|0x792cd16e3a656b5c0ec060e9ca490178|
	\??\C:\WINDOWS\system32\Drivers\SYMTDI.SYS - stopped (automatic)
	system32\DRIVERS\usbccgp.sys - stopped (demand) ("c:\windows\system32\drivers\usbccgp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  20:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
	system32\DRIVERS\usbprint.sys - stopped (demand) ("c:\windows\system32\drivers\usbprint.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  20:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
	system32\DRIVERS\usbscan.sys - stopped (demand) ("c:\windows\system32\drivers\usbscan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  19:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
	system32\DRIVERS\USBSTOR.SYS - stopped (demand) ("c:\windows\system32\drivers\usbstor.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  20:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
	system32\DRIVERS\HSF_CNXT.sys - stopped (demand)
	\SystemRoot\System32\drivers\ws2ifsl.sys - stopped (disabled) ("C:\WINDOWS\system32\drivers\ws2ifsl.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  08:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
	\WINDOWS\system32\ntkrnlpa.exe ("c:\windows\system32\ntkrnlpa.exe") File version = 5.1.2600.3051 (xpsp_sp2_qfe.061219-0311), File size = 2061184, File modification date = 19/12/2006  18:47, File description =    NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |337193748|0x8649289c5e7515429f47a1a89f114a3c|
	\WINDOWS\system32\hal.dll ("c:\windows\system32\hal.dll") File version = 5.1.2600.2562 (xpsp.040919-1030), File size = 131712, File modification date = 16/11/2004  01:37, File description = Hardware Abstraction Layer DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2562, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |785062805|0xf9a83d160c80ee6f45aa577cb101b83f|
	\WINDOWS\system32\KDCOM.DLL ("c:\windows\system32\kdcom.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7040, File modification date = 18/08/2004  08:00, File description = Kernel Debugger HW Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |662002680|0x945fbb881ae927a44dfd96440f2f4f44|
	\WINDOWS\system32\BOOTVID.dll ("c:\windows\system32\bootvid.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12288, File modification date = 18/08/2004  08:00, File description = VGA Boot Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-890525799|0xcc306bf581446d5e443eae5b3bb900f0|
	ACPI.sys ("c:\windows\system32\drivers\acpi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  08:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
	\WINDOWS\system32\DRIVERS\WMILIB.SYS ("c:\windows\system32\drivers\wmilib.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4352, File modification date = 18/08/2004  08:00, File description = WMILIB WMI support library Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-328804909|0x2f31b7f954bed437f2c75026c65caf7b|
	pci.sys ("c:\windows\system32\drivers\pci.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 17/08/2004  06:46, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
	isapnp.sys ("c:\windows\system32\drivers\isapnp.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 19/10/2001  11:22, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
	ohci1394.sys ("c:\windows\system32\drivers\ohci1394.sys") File version = 5.1.2600.2524 (xpsp.040919-1030), File size = 61056, File modification date = 27/09/2004  22:19, File description = 1394 OpenHCI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |964499203|0x197ddf60b254a84d8656850397b5f923|
	\WINDOWS\system32\DRIVERS\1394BUS.SYS ("c:\windows\system32\drivers\1394bus.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53248, File modification date = 18/08/2004  08:00, File description = 1394 Bus Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1832825844|0x009927db8019c54477dabf6f9d795053|
	compbatt.sys ("c:\windows\system32\drivers\compbatt.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9344, File modification date = 17/08/2001  16:58, File description = Composite Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-703322978|0xdf1b1a24bf52d0ebc01ed4ece8979f50|
	\WINDOWS\system32\DRIVERS\BATTC.SYS ("c:\windows\system32\drivers\battc.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 14080, File modification date = 17/08/2001  16:57, File description = Battery Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1861968742|0xea22edadf90c0aba8319454b2a07b700|
	pciide.sys ("c:\windows\system32\drivers\pciide.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 19/10/2001  11:32, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
	\WINDOWS\system32\DRIVERS\PCIIDEX.SYS ("c:\windows\system32\drivers\pciidex.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 03/08/2004  13:59, File description = PCI IDE Bus Driver Extension, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-898173944|0x520b91ab011456b940d9b05fc91108ff|
	intelide.sys ("c:\windows\system32\drivers\intelide.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  06:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
	viaide.sys ("c:\windows\system32\drivers\viaide.sys") File version = 1.00.01.01, File size = 5376, File modification date = 03/08/2004  13:59, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft(R) Windows NT(R) Operating System, Product version = 5.00.1636.1, Company name = Microsoft Corporation (Copyright (C) VIA Technologies, Inc. 2000) |-48370474|0x59cb1338ad3654417bea49636457f65d|
	aliide.sys ("c:\windows\system32\drivers\aliide.sys") File version = 1.20, File size = 5248, File modification date = 17/08/2001  12:51, File description = ALi mini IDE Driver, Product Name = ALi mini IDE Driver, Product version = 1.20, Company name = Acer Laboratories Inc. (Copyright (C) Acer Laboratories Inc.  2000 ) |1465498541|0x1140ab9938809700b46bb88e46d72a96|
	pcmcia.sys ("c:\windows\system32\drivers\pcmcia.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119936, File modification date = 18/08/2004  08:00, File description =   PCMCIA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1848810773|0x602f2a5226d92b948723a13b8b263dbb|
	MountMgr.sys ("c:\windows\system32\drivers\mountmgr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42240, File modification date = 18/08/2004  08:00, File description = Mount Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1645669973|0x65653f3b4477f3c63e68a9659f85ee2e|
	ftdisk.sys ("c:\windows\system32\drivers\ftdisk.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
	ACPIEC.sys ("c:\windows\system32\drivers\acpiec.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 11776, File modification date = 18/08/2004  08:00, File description =    ACPI, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-907087436|0xcea8d1da7696acbfc69a3823bcf1c738|
	\WINDOWS\system32\DRIVERS\OPRGHDLR.SYS ("c:\windows\system32\drivers\oprghdlr.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 3456, File modification date = 18/08/2004  08:00, File description = ACPI Operation Registration Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1879075940|0x4bb30ddc53ebc76895e38694580cdfe9|
	PartMgr.sys ("c:\windows\system32\drivers\partmgr.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 18688, File modification date = 18/08/2004  08:00, File description = Partition Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1387024081|0x3334430c29dc338092f79c38ef7b4cd0|
	sfsync02.sys ("c:\windows\system32\drivers\sfsync02.sys") File version = 2.12, File size = 19968, File modification date = 10/08/2005  14:06, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |1223380688|0xefebbc1d13fdb77a6af4eddfc7232edf|
	VolSnap.sys ("c:\windows\system32\drivers\volsnap.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51968, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-266541180|0x30c744f65751e03465fb7e61315468a2|
	atapi.sys ("c:\windows\system32\drivers\atapi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 03/08/2004  13:59, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
	disk.sys ("c:\windows\system32\drivers\disk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  08:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
	\WINDOWS\system32\DRIVERS\CLASSPNP.SYS ("c:\windows\system32\drivers\classpnp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 18/08/2004  08:00, File description = SCSI Class System Dll, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1925477481|0xd86173b401470f06d9810f7962969ddf|
	fltMgr.sys ("c:\windows\system32\drivers\fltmgr.sys") File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
	sr.sys ("c:\windows\system32\drivers\sr.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
	KSecDD.sys ("c:\windows\system32\drivers\ksecdd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 92032, File modification date = 18/08/2004  08:00, File description = Kernel Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1324865035|0xeb7ffe87fd367ea8fca0506f74a87fbb|
	Ntfs.sys ("c:\windows\system32\drivers\ntfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 574592, File modification date = 18/08/2004  08:00, File description = NT File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |235239102|0xb78be402c3f63dd55521f73876951cdd|
	NDIS.sys ("c:\windows\system32\drivers\ndis.sys") File version = 5.1.2600.2824 (xpsp.060109-1522), File size = 182528, File modification date = 10/01/2006  01:01, File description = NDIS 5.1 wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2824, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-453056256|0xaa898f84d2b59129fb92e143a2c73434|
	sfhlp02.sys ("c:\windows\system32\drivers\sfhlp02.sys") File version = 2.3, File size = 6656, File modification date = 16/05/2005  13:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-565067900|0x15be2b5e4dc5b8623cf167720682abc9|
	sfhlp01.sys ("c:\windows\system32\drivers\sfhlp01.sys") File version = 1.5, File size = 4832, File modification date = 01/12/2003  15:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |1121420825|0x462aee0ea0481ea8bd45cac876a4ccc4|
	sfdrv01.sys ("c:\windows\system32\drivers\sfdrv01.sys") File version = 1.37, File size = 50688, File modification date = 10/08/2005  12:44, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-1594913562|0x4c0d673281178cb496011a2e28571fc8|
	prosync1.sys ("c:\windows\system32\drivers\prosync1.sys") File version = 1.5, File size = 6944, File modification date = 06/09/2003  12:22, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |-213977908|0xf3471e7971ee62420451d958da635064|
	\WINDOWS\System32\drivers\SCSIPORT.SYS ("c:\windows\system32\drivers\scsiport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96256, File modification date = 18/08/2004  08:00, File description = SCSI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-170042372|0xd7fd0ff761e28ac0ea35ad71e0cd67e9|
	prohlp02.sys ("c:\windows\system32\drivers\prohlp02.sys") File version = 2.45, File size = 111808, File modification date = 13/05/2004  13:00, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |872832002|0x150307b52807d0c493c605ab913038ad|
	Mup.sys ("c:\windows\system32\drivers\mup.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 107904, File modification date = 18/08/2004  08:00, File description = Multiple UNC Provider driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1853925969|0x82035e0f41c2dd05ae41d27fe6cf7de1|
	\SystemRoot\system32\DRIVERS\intelppm.sys ("C:\WINDOWS\system32\drivers\intelppm.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
	\SystemRoot\system32\DRIVERS\ialmnt5.sys ("c:\windows\system32\drivers\ialmnt5.sys") File version = 6.14.10.4410, File size = 1302812, File modification date = 19/10/2005  10:15, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |-659618172|0x5a8e05f1d5c36abd58cffa111eb325ea|
	\SystemRoot\system32\DRIVERS\VIDEOPRT.SYS ("C:\WINDOWS\system32\drivers\videoprt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 79744, File modification date = 18/08/2004  08:00, File description = Video Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1505993728|0xd5a9d123f5ed7c9965a481bd20cf66d8|
	\SystemRoot\system32\DRIVERS\usbuhci.sys ("C:\WINDOWS\system32\drivers\usbuhci.sys") File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 20608, File modification date = 19/04/2006  11:50, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450089368|0xff6e4fdeb82dc228efa490336409c6bd|
	\SystemRoot\system32\DRIVERS\USBPORT.SYS ("C:\WINDOWS\system32\drivers\usbport.sys") File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 143360, File modification date = 19/04/2006  11:50, File description = USB 1.1 & 2.0 Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1955116740|0x6a6e905b6761edf5bc5245a335950b3d|
	\SystemRoot\system32\DRIVERS\usbehci.sys ("C:\WINDOWS\system32\drivers\usbehci.sys") File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 30080, File modification date = 19/04/2006  11:50, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-539531644|0xb0d7020386c7187ef9c5a9643f289cd3|
	\SystemRoot\system32\DRIVERS\w29n51.sys ("C:\WINDOWS\system32\drivers\w29n51.sys") File version = 9.0.4.17 Driver, File size = 2206720, File modification date = 17/07/2006  15:17, File description = Intel Wireless LAN Driver, Product Name = Intel Wireless LAN Adapter, Product version = (null), Company name = Intel Corporation (Copyright  Intel Corporation 2004-2006) |384020172|0x68eb5bc07781a36a63633541c11e1ad6|
	\SystemRoot\system32\drivers\camc6hal.sys ("C:\WINDOWS\system32\drivers\camc6hal.sys") File version = 6.14.10.0675, File size = 530176, File modification date = 21/08/2006  22:16, File description = Conexant AmcHal Driver, Product Name = Conexant AmcHal Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |153275874|0x951a4bf4305cb16cf1014ebae9bf8113|
	\SystemRoot\system32\drivers\camc6aud.sys ("C:\WINDOWS\system32\drivers\camc6aud.sys") File version = 6.14.10.0675, File size = 38144, File modification date = 21/08/2006  22:16, File description = Conexant WDM AC97 Audio Driver, Product Name = Conexant Audio Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |-2137843940|0x619fae09d910c78cc6aa4abdb5c42dcb|
	\SystemRoot\system32\drivers\portcls.sys ("C:\WINDOWS\system32\drivers\portcls.sys") File version = 5.1.2600.2637 (xpsp.050321-1805), File size = 145920, File modification date = 22/03/2005  03:43, File description = Port Class (Class Driver for Port/Miniport Devices), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2637, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1311730986|0x580d49724dcd58d56f09cdd367dcb669|
	\SystemRoot\system32\drivers\drmk.sys ("C:\WINDOWS\system32\drivers\drmk.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60288, File modification date = 03/08/2004  19:08, File description = Microsoft Kernel DRM Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1594474973|0xff86422268de771d571e123eb7092c6a|
	\SystemRoot\system32\drivers\ks.sys ("C:\WINDOWS\system32\drivers\ks.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140928, File modification date = 18/08/2004  08:00, File description = Kernel CSA Library, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2104684906|0xb9540e258f952650de8dec68719a5c97|
	\SystemRoot\system32\DRIVERS\parport.sys ("C:\WINDOWS\system32\drivers\parport.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
	\SystemRoot\system32\DRIVERS\i8042prt.sys ("C:\WINDOWS\system32\drivers\i8042prt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  08:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
	\SystemRoot\system32\DRIVERS\kbdclass.sys ("C:\WINDOWS\system32\drivers\kbdclass.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
	\SystemRoot\system32\DRIVERS\SynTP.sys ("C:\WINDOWS\system32\drivers\syntp.sys") File version = 8.3.8 16Jun06, File size = 193120, File modification date = 16/06/2006  15:40, File description = Synaptics Touchpad Driver, Product Name = Synaptics Pointing Device Driver, Product version = 8.3.8 16Jun06, Company name = Synaptics, Inc. (Copyright (C) Synaptics, Inc. 1996-2006) |253350277|0x369d0626687a968182a9db40fe8a0905|
	\SystemRoot\system32\DRIVERS\USBD.SYS ("C:\WINDOWS\system32\drivers\usbd.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4736, File modification date = 18/08/2004  08:00, File description = Universal Serial Bus Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-371157248|0x596eb39b50d6ebd9b734dc4ae0544693|
	\SystemRoot\system32\DRIVERS\mouclass.sys ("C:\WINDOWS\system32\drivers\mouclass.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
	\SystemRoot\system32\DRIVERS\imapi.sys ("C:\WINDOWS\system32\drivers\imapi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  08:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
	\SystemRoot\System32\Drivers\cdrbsdrv.SYS ("C:\WINDOWS\system32\drivers\cdrbsdrv.sys") File version = 7. 0. 0. 5, File size = 13567, File modification date = 08/03/2004  09:55, File description = CD-ROM Filter Driver for Windows2000/xp, Product Name = B's Recorder GOLD7, Product version = 7. 5. 0. 0, Company name = B.H.A Corporation (Copyright (C) 2000-2004 B.H.A Corporation) |646861642|0x351735695e9ead93de6af85d8beb1ca8|
	\SystemRoot\system32\DRIVERS\cdrom.sys ("C:\WINDOWS\system32\drivers\cdrom.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  08:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
	\SystemRoot\system32\DRIVERS\redbook.sys ("C:\WINDOWS\system32\drivers\redbook.sys") File version = 5.1.2600.2858 (xpsp.060227-1425), File size = 58112, File modification date = 28/02/2006  02:18, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2858, Company name =   (  .   .) |-455279266|0xd2a544c09ca6b1af92627179a3eb262c|
	\SystemRoot\system32\DRIVERS\cpqbttn.sys ("C:\WINDOWS\system32\drivers\cpqbttn.sys") File version = 4.20.02.02, File size = 9344, File modification date = 19/09/2005  10:24, File description = HP Tablet PC Key Button HID Driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2002-2005 Hewlett-Packard Development Company, L.P.) |1389021333|0x4d4d97671c63c3af869b3518e6054204|
	\SystemRoot\system32\DRIVERS\HIDCLASS.SYS ("C:\WINDOWS\system32\drivers\hidclass.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36224, File modification date = 18/08/2004  08:00, File description = Hid Class Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1449852050|0x378055ab8dda86228683c697c4e11685|
	\SystemRoot\system32\DRIVERS\HIDPARSE.SYS ("C:\WINDOWS\system32\drivers\hidparse.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24960, File modification date = 18/08/2004  08:00, File description = Hid Parsing Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-575922150|0x5fff41cd5108e9051d255c37825af697|
	\SystemRoot\system32\DRIVERS\CmBatt.sys ("C:\WINDOWS\system32\drivers\cmbatt.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14080, File modification date = 03/08/2004  18:07, File description = Control Method Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |992075117|0x4266be808f85826aedf3c64c1e240203|
	\SystemRoot\system32\DRIVERS\wmiacpi.sys ("C:\WINDOWS\system32\drivers\wmiacpi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8832, File modification date = 03/08/2004  18:07, File description = Windows Management Interface for ACPI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1211174249|0xae2c8544e747c20062db27456ea2d67a|
	\SystemRoot\system32\DRIVERS\audstub.sys ("C:\WINDOWS\system32\drivers\audstub.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  16:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
	\SystemRoot\system32\DRIVERS\rasl2tp.sys ("C:\WINDOWS\system32\drivers\rasl2tp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  08:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
	\SystemRoot\system32\DRIVERS\ndistapi.sys ("C:\WINDOWS\system32\drivers\ndistapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  08:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
	\SystemRoot\system32\DRIVERS\ndiswan.sys ("c:\windows\system32\drivers\ndiswan.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  08:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
	\SystemRoot\system32\DRIVERS\raspppoe.sys ("C:\WINDOWS\system32\drivers\raspppoe.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  08:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
	\SystemRoot\system32\DRIVERS\raspptp.sys ("C:\WINDOWS\system32\drivers\raspptp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  08:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
	\SystemRoot\system32\DRIVERS\TDI.SYS ("C:\WINDOWS\system32\drivers\tdi.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18560, File modification date = 18/08/2004  08:00, File description = TDI Wrapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-750746922|0x6891b74ab9a016064e82a419388d0601|
	\SystemRoot\system32\DRIVERS\psched.sys ("C:\WINDOWS\system32\drivers\psched.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  08:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
	\SystemRoot\system32\DRIVERS\msgpc.sys ("C:\WINDOWS\system32\drivers\msgpc.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  08:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
	\SystemRoot\system32\DRIVERS\ptilink.sys ("C:\WINDOWS\system32\drivers\ptilink.sys") File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  08:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
	\SystemRoot\system32\DRIVERS\raspti.sys ("C:\WINDOWS\system32\drivers\raspti.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  08:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
	\SystemRoot\system32\DRIVERS\termdd.sys ("C:\WINDOWS\system32\drivers\termdd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  07:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
	\SystemRoot\system32\DRIVERS\swenum.sys ("C:\WINDOWS\system32\drivers\swenum.sys") File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 18/08/2004  08:00, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
	\SystemRoot\system32\DRIVERS\update.sys ("C:\WINDOWS\system32\drivers\update.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 209408, File modification date = 18/08/2004  08:00, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1865716387|0xaff2e5045961bbc0a602bb6f95eb1345|
	\SystemRoot\system32\DRIVERS\mssmbios.sys ("C:\WINDOWS\system32\drivers\mssmbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
	\SystemRoot\system32\DRIVERS\kbdhid.sys ("C:\WINDOWS\system32\drivers\kbdhid.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 17/08/2004  11:54, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |745085733|0xd0c2e1e0b67a4b0ba4f1c5240c892cb4|
	\SystemRoot\System32\Drivers\NDProxy.SYS ("C:\WINDOWS\system32\drivers\ndproxy.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 38016, File modification date = 18/08/2004  08:00, File description = NDIS Proxy, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |438037699|0x59fc3fb44d2669bc144fd87826bb571f|
	\SystemRoot\system32\DRIVERS\usbhub.sys ("C:\WINDOWS\system32\drivers\usbhub.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 18/08/2004  08:00, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
	\SystemRoot\system32\DRIVERS\58480314.sys ("C:\WINDOWS\system32\drivers\58480314.sys") File version = 7.0.0.312, File size = 148496, File modification date = 08/07/2008  11:54, File description = Klif Mini-Filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-503501263|0x0aa3ad071827118fcc8f37f7a6ab7aa1|
	\SystemRoot\System32\Drivers\Fs_Rec.SYS ("C:\WINDOWS\system32\drivers\fs_rec.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 7936, File modification date = 18/08/2004  08:00, File description = File System Recognizer Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |244257554|0x3e1e2bd4f39b0e2b7dc4f4d2bcc2779a|
	\SystemRoot\System32\Drivers\Null.SYS ("C:\WINDOWS\system32\drivers\null.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 2944, File modification date = 18/08/2004  08:00, File description = NULL Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-575384021|0x73c1e1f395918bc2c6dd67af7591a3ad|
	\SystemRoot\System32\Drivers\Beep.SYS ("C:\WINDOWS\system32\drivers\beep.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 4224, File modification date = 18/08/2004  08:00, File description = BEEP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1769750770|0xda1f27d85e0d1525f6621372e7b685e9|
	\SystemRoot\System32\drivers\vga.sys ("C:\WINDOWS\system32\drivers\vga.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
	\SystemRoot\System32\Drivers\Msfs.SYS ("C:\WINDOWS\system32\drivers\msfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19072, File modification date = 18/08/2004  08:00, File description = Mailslot driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1211014042|0x561b3a4333ca2dbdba28b5b956822519|
	\SystemRoot\System32\Drivers\Npfs.SYS ("C:\WINDOWS\system32\drivers\npfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30848, File modification date = 18/08/2004  08:00, File description = NPFS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1063322756|0x4f601bcb8f64ea3ac0994f98fed03f8e|
	\SystemRoot\system32\DRIVERS\rasacd.sys ("C:\WINDOWS\system32\drivers\rasacd.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  08:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
	\SystemRoot\system32\DRIVERS\ipsec.sys ("C:\WINDOWS\system32\drivers\ipsec.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  08:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
	\SystemRoot\system32\DRIVERS\tcpip.sys ("C:\WINDOWS\system32\drivers\tcpip.sys") File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
	\SystemRoot\System32\drivers\afd.sys ("C:\WINDOWS\system32\drivers\afd.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  08:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
	\SystemRoot\system32\DRIVERS\netbios.sys ("c:\windows\system32\drivers\netbios.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
	\SystemRoot\system32\DRIVERS\eabfiltr.sys ("C:\WINDOWS\system32\drivers\eabfiltr.sys") File version = 4.20.02.02, File size = 7808, File modification date = 19/09/2005  10:23, File description = QLB PS/2 Keyboard filter driver, Product Name = HPQuick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |538990764|0xb5cb3084046146fd2587d8c9b219feb4|
	\SystemRoot\system32\DRIVERS\rdbss.sys ("C:\WINDOWS\system32\drivers\rdbss.sys") File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
	\SystemRoot\System32\drivers\prodrv06.sys ("C:\WINDOWS\system32\drivers\prodrv06.sys") File version = 6.45, File size = 79488, File modification date = 13/05/2004  11:19, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |1015908929|0xf2e3c8f1eb6ba0733e0a1f6373df7957|
	\SystemRoot\system32\DRIVERS\mrxsmb.sys ("C:\WINDOWS\system32\drivers\mrxsmb.sys") File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
	\SystemRoot\System32\Drivers\Fips.SYS ("C:\WINDOWS\system32\drivers\fips.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 34944, File modification date = 18/08/2004  08:00, File description =  FIPS Crypto, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |739370389|0x6792034d951145dd18d1d508578e4676|
	\SystemRoot\system32\DRIVERS\ipnat.sys ("C:\WINDOWS\system32\drivers\ipnat.sys") File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
	\SystemRoot\system32\DRIVERS\wanarp.sys ("C:\WINDOWS\system32\drivers\wanarp.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
	\SystemRoot\system32\DRIVERS\hidusb.sys ("C:\WINDOWS\system32\drivers\hidusb.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  19:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
	\SystemRoot\system32\DRIVERS\mouhid.sys ("C:\WINDOWS\system32\drivers\mouhid.sys") File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 19/10/2001  17:33, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1481140716|0xdcf669a6b5682768d3fcf2906453ea97|
	\SystemRoot\System32\Drivers\Cdfs.SYS ("C:\WINDOWS\system32\drivers\cdfs.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63744, File modification date = 18/08/2004  08:00, File description = CD-ROM File System Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1135615718|0xcd7d5152df32b47f4e36f710b35aae02|
	\SystemRoot\System32\win32k.sys ("C:\WINDOWS\system32\win32k.sys") File version = 5.1.2600.2770 (xpsp_sp2_gdr.051005-1513), File size = 1839616, File modification date = 06/10/2005  03:10, File description =   Win32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2770, Company name =   (  .   .) |1875912116|0x6ea37612aac7e88b5926a3c117eb2f59|
	\SystemRoot\System32\drivers\Dxapi.sys ("C:\WINDOWS\system32\drivers\dxapi.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 10496, File modification date = 18/08/2004  08:00, File description = DirectX API Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |741880105|0xfe97d0343acfdebdd578fc67cc91fa87|
	\SystemRoot\System32\watchdog.sys ("C:\WINDOWS\system32\watchdog.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17664, File modification date = 18/08/2004  08:00, File description = Watchdog Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |369096975|0xc9bf2f12c4e6c12f8a85fba4b6bc6208|
	\SystemRoot\System32\drivers\dxg.sys ("C:\WINDOWS\system32\drivers\dxg.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71040, File modification date = 18/08/2004  08:00, File description = DirectX Graphics Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-389278401|0xd3dac8432110aad0b02a58b4459ab835|
	\SystemRoot\System32\drivers\dxgthk.sys ("C:\WINDOWS\system32\drivers\dxgthk.sys") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 3328, File modification date = 18/08/2004  08:00, File description = DirectX Graphics Driver Thunk, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1288314594|0xa73f5d6705b1d820c19b18782e176efd|
	\SystemRoot\System32\ialmdnt5.dll ("C:\WINDOWS\system32\ialmdnt5.dll") File version = 6.14.10.4410, File size = 118395, File modification date = 19/10/2005  10:15, File description = Controller Hub for Intel Graphics Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |69133796|0xa70e25c193fe92936665617d3b4973d6|
	\SystemRoot\System32\ialmrnt5.dll ("C:\WINDOWS\system32\ialmrnt5.dll") File version = 6.14.10.4410, File size = 36990, File modification date = 19/10/2005  10:15, File description = Controller Hub for Intel Graphics Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |1838458024|0x4c3e431c30f13918b2b624839c5851d4|
	\SystemRoot\System32\ialmdev5.DLL ("C:\WINDOWS\system32\ialmdev5.dll") File version = 6.14.10.4410, File size = 213274, File modification date = 19/10/2005  10:15, File description = Component GHAL Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |2138012804|0xd3f8d22ed63cdbb7f535aa4a914296c4|
	\SystemRoot\System32\ialmdd5.DLL ("C:\WINDOWS\system32\ialmdd5.dll") File version = 6.14.10.4410, File size = 901242, File modification date = 19/10/2005  10:15, File description = DirectDraw(R) Driver for Intel(R) Graphics Technology, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |-1812333971|0xecaf48b8262dcefcc605fabcbb15b6ef|
	\SystemRoot\system32\DRIVERS\ndisuio.sys ("c:\windows\system32\drivers\ndisuio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  08:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
	\SystemRoot\system32\DRIVERS\mrxdav.sys ("C:\WINDOWS\system32\drivers\mrxdav.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  08:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
	\SystemRoot\System32\Drivers\Aspi32.SYS ("C:\WINDOWS\system32\drivers\aspi32.sys") File version = 4.71 (0001), File size = 17005, File modification date = 14/08/2002  12:03, File description = ASPI for WIN32 Kernel Driver, Product Name = Adaptec's ASPI Layer, Product version = 4.71 (0001), Company name = Adaptec (Copyright  1989-2002 Adaptec, Inc.) |910788319|0xed8cee58c1e4c5893f5b2fd686a272bf|
	\SystemRoot\system32\DRIVERS\srv.sys ("C:\WINDOWS\system32\drivers\srv.sys") File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
	\??\C:\WINDOWS\system32\Drivers\SAVRTPEL.SYS ("\\?\c:\windows\system32\drivers\savrtpel.sys") File version = 9.0.1.35, File size = 34992, File modification date = 25/07/2002  19:28, File description = SAVRTPEL, Product Name = Symantec AntiVirus AutoProtect, Product version = 9.0, Company name = Symantec Corporation (Copyright (c) 2002 Symantec Corporation) |-327010652|0xee05e06b3cf953339c0b90bcc46b9496|
	\SystemRoot\system32\drivers\wdmaud.sys ("C:\WINDOWS\system32\drivers\wdmaud.sys") File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
	\SystemRoot\system32\drivers\sysaudio.sys ("C:\WINDOWS\system32\drivers\sysaudio.sys") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
	\SystemRoot\System32\DRIVERS\gmer.sys ("C:\WINDOWS\system32\drivers\gmer.sys") File version = 1, 0, 14, 4401, File size = 85969, File modification date = 25/10/2008  21:02, File description = GMER Driver http://www.gmer.net, Product Name = GMER, Product version = 1, 0, 14, 4401, Company name = GMER (Copyright (C) GMER 2003-2007) |-798487648|0xb56eb0a2210980e76390bd670bcb618b|
	\WINDOWS\system32\ntdll.dll ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|

Runned processes/modules:

	PROCESS	System, PID = 4, USER = , Command Line = 

	PROCESS	smss, PID = 512, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = 
	  \SystemRoot\System32\smss.exe, MID = 48580000,  ("C:\WINDOWS\system32\smss.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 50688, File modification date = 18/08/2004  08:00, File description =    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (()  .   .) |-2018233285|0x6782caa22c9a071b3b4f7640952a8484|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|

	PROCESS	csrss, PID = 584, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16
		  "c:\windows\system32\csrss.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6144, File modification date = 18/08/2004  08:00, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1024271834|0x7a2a670afc37eb03e36cf9f08132c765|
		  "c:\windows\system32\basesrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52736, File modification date = 18/08/2004  08:00, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |418240048|0x25f8893a3f0fd075c44471b663b307d9|
	  \??\C:\WINDOWS\system32\csrss.exe, MID = 4a680000,  ("\\?\c:\windows\system32\csrss.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 6144, File modification date = 18/08/2004  08:00, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1024271834|0x7a2a670afc37eb03e36cf9f08132c765|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\CSRSRV.dll, MID = 75b10000,  ("c:\windows\system32\csrsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  08:00, File description = Client Server Runtime Process, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1852343270|0x46fde3a18bf348cb37c69f80e8f36925|
	  C:\WINDOWS\system32\basesrv.dll, MID = 75b20000,  ("c:\windows\system32\basesrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52736, File modification date = 18/08/2004  08:00, File description = Windows NT BASE API Server DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |418240048|0x25f8893a3f0fd075c44471b663b307d9|
	  C:\WINDOWS\system32\winsrv.dll, MID = 75b30000,  ("c:\windows\system32\winsrv.dll") File version = 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), File size = 291840, File modification date = 01/09/2005  02:28, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2751, Company name =   (  .   .) |196365502|0xbed73e5f31e8b4d6ec25225f7d4cb656|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\KERNEL32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\sxs.dll, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|

	PROCESS	winlogon, PID = 608, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = winlogon.exe
		  "c:\windows\system32\winlogon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 503808, File modification date = 18/08/2004  08:00, File description =     Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2129434895|0xba9df5930b2582c31c0c8e52c94dda48|
	  \??\C:\WINDOWS\system32\winlogon.exe, MID = 1000000,  ("\\?\c:\windows\system32\winlogon.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 503808, File modification date = 18/08/2004  08:00, File description =     Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2129434895|0xba9df5930b2582c31c0c8e52c94dda48|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  08:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  08:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\NDdeApi.dll, MID = 75910000,  ("c:\windows\system32\nddeapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  08:00, File description =      DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1135066814|0x594cb60688052925a47bb9bf2eb0581d|
	  C:\WINDOWS\system32\PROFMAP.dll, MID = 75900000,  ("c:\windows\system32\profmap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27648, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1817382660|0xe240a14197389c6ab541c45c33f7227c|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76ba0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 18/08/2004  08:00, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |129386638|0xdfb5008b38bd3a487469b689d9813c0f|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  08:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  08:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  08:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\MSGINA.dll, MID = 75940000,  ("c:\windows\system32\msgina.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 997376, File modification date = 18/08/2004  08:00, File description =  GINA    Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |973309263|0xf329895dbe2645ea4d2aaa95d0274680|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\ODBC32.dll, MID = 73fb0000,  ("c:\windows\system32\odbc32.dll") File version = 3.525.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 249856, File modification date = 18/08/2004  08:00, File description = Microsoft Data Access - ODBC Driver Manager, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1990-2000) |-957216879|0xf0abaebc5b3b58b1d6ff123d2b42e1f5|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\odbcint.dll, MID = 20000000,  ("c:\windows\system32\odbcint.dll") File version = 3.525.1117.0 built by: (_sqlbld), File size = 98304, File modification date = 18/08/2004  08:00, File description = Microsoft Data Access -  ODBC, Product Name = Microsoft Data Access Components, Product version = 3.525.1117.0, Company name =   (Microsoft Corp.) ((C)   (Microsoft Corp.), 1990-2000) |-419203250|0x8807ef50b2392948b5975c11b60bae16|
	  C:\WINDOWS\system32\SHSVCS.dll, MID = 776d0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
	  C:\WINDOWS\system32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  08:00, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  08:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\WINSCARD.DLL, MID = 723b0000,  ("c:\windows\system32\winscard.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 98816, File modification date = 18/08/2004  08:00, File description = API - (Microsoft), Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |739881181|0x05e1bf6816d52354e88fd7cf451b4871|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  08:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\sxs.dll, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\cscdll.dll, MID = 765d0000,  ("c:\windows\system32\cscdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
	  C:\WINDOWS\system32\WlNotify.dll, MID = 75920000,  ("c:\windows\system32\wlnotify.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  08:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  08:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  08:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  08:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  08:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\cscui.dll, MID = 77a10000,  ("c:\windows\system32\cscui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 13d0000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  08:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  08:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\wdmaud.drv, MID = 72ce0000,  ("c:\windows\system32\wdmaud.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 18/08/2004  08:00, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
	  C:\WINDOWS\system32\msacm32.drv, MID = 72cd0000,  ("c:\windows\system32\msacm32.drv") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\midimap.dll, MID = 77bc0000,  ("c:\windows\system32\midimap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|

	PROCESS	services, PID = 652, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\services.exe
		  "c:\windows\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
	  C:\WINDOWS\system32\services.exe, MID = 1000000,  ("c:\windows\system32\services.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\SCESRV.dll, MID = 77b60000,  ("c:\windows\system32\scesrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 320000, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1438568854|0xb72ce4d02710c8bdbb4672a4f93e7a14|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  C:\WINDOWS\system32\umpnpmgr.dll, MID = 7dba0000,  ("c:\windows\system32\umpnpmgr.dll") File version = 5.1.2600.2744 (xpsp_sp2_gdr.050822-1647), File size = 123904, File modification date = 23/08/2005  03:39, File description =     (Plug-and-Play), Product Name =   Microsoft Windows, Product version = 5.1.2600.2744, Company name =   (  .   .) |1108115175|0x4aaf4c1da44ddf92bb10486f8ce7d416|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  08:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  08:00, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  08:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  08:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\eventlog.dll, MID = 772f0000,  ("c:\windows\system32\eventlog.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1293876684|0x6cd35be0991df15a07bc60b894e6482b|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\wtsapi32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  08:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\setupapi.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  08:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  08:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  08:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  08:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  08:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|

	PROCESS	lsass, PID = 664, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\lsass.exe
		  "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	  C:\WINDOWS\system32\lsass.exe, MID = 1000000,  ("c:\windows\system32\lsass.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\LSASRV.dll, MID = 75410000,  ("c:\windows\system32\lsasrv.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 723968, File modification date = 17/08/2006  12:29, File description =  DLL  LSA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2976, Company name =   (  .   .) |-2118863780|0x0cb6733d495100a33d8be1db73c7d644|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  08:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  08:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  08:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  08:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\SAMSRV.dll, MID = 74400000,  ("c:\windows\system32\samsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 427520, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1859521497|0x356779ca52f2b3c073335b9aad53ecff|
	  C:\WINDOWS\system32\cryptdll.dll, MID = 76770000,  ("c:\windows\system32\cryptdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  08:00, File description = Cryptography Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983794638|0xade2386e4cf3e9bb97ec1545ab999560|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  08:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  08:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\msprivs.dll, MID = 20000000,  ("c:\windows\system32\msprivs.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  08:00, File description = Microsoft Privilege Translations, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1100154152|0x06d8bdd91fd844e1a4c3107d531063fd|
	  C:\WINDOWS\system32\kerberos.dll, MID = 71cd0000,  ("c:\windows\system32\kerberos.dll") File version = 5.1.2600.2698 (xpsp_sp2_gdr.050614-1522), File size = 295936, File modification date = 15/06/2005  17:50, File description = Kerberos Security Package, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2698, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-882011971|0xc998ef86b2203f36454aad8a3cac3efd|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  08:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\netlogon.dll, MID = 74470000,  ("c:\windows\system32\netlogon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 407040, File modification date = 18/08/2004  08:00, File description = Net Logon Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1815651328|0x4922b0c854a0b4a2cd2061bbfe29b251|
	  C:\WINDOWS\system32\w32time.dll, MID = 767a0000,  ("c:\windows\system32\w32time.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  08:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\schannel.dll, MID = 767d0000,  ("c:\windows\system32\schannel.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144896, File modification date = 18/08/2004  08:00, File description = TLS / SSL Security Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1020267567|0xd18f949ad10dec0a4c56b7f0dccd6e0f|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  08:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\wdigest.dll, MID = 74340000,  ("c:\windows\system32\wdigest.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49152, File modification date = 18/08/2004  08:00, File description = Microsoft Digest Access, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456741888|0x8514979dd07f96364f0e1fd451fdb8f5|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  08:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\scecli.dll, MID = 743d0000,  ("c:\windows\system32\scecli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 183808, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1597674520|0x5d5a37c65a5e86ed3811a4128b3a84e4|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  08:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\ipsecsvc.dll, MID = 743a0000,  ("c:\windows\system32\ipsecsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 183808, File modification date = 18/08/2004  08:00, File description = Windows IPSEC SPD Server DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1339158444|0x328339d5923c6b1fe79d4244a9a8c725|
	  C:\WINDOWS\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  C:\WINDOWS\system32\oakley.DLL, MID = 75700000,  ("c:\windows\system32\oakley.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 267264, File modification date = 18/08/2004  08:00, File description =   Oakley, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1811355481|0xdf4547567f210f88f74f31de6e5a6997|
	  C:\WINDOWS\system32\WINIPSEC.DLL, MID = 74330000,  ("c:\windows\system32\winipsec.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  08:00, File description = Windows IPSec SPD Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565047191|0x9fb629f466ba79ab15e9238ecfe723cf|
	  C:\WINDOWS\system32\pstorsvc.dll, MID = 74360000,  ("c:\windows\system32\pstorsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1065846480|0x15859ade25a14154f0153ec5c3866272|
	  C:\WINDOWS\system32\psbase.dll, MID = 74380000,  ("c:\windows\system32\psbase.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1945025660|0x639ebd64394197c0f74a1a2ef66ed18e|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\dssenh.dll, MID = 68100000,  ("c:\windows\system32\dssenh.dll") File version = 5.1.2600.2133 (xpsp.040514-1639), File size = 137216, File modification date = 18/08/2004  08:00, File description = Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2133, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2063081844|0xcacd2c63a79268d131ea37e85524cc44|

	PROCESS	svchost, PID = 808, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\svchost -k DcomLaunch
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  08:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  08:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  08:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  08:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  08:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  c:\windows\system32\rpcss.dll, MID = 76a60000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
	  c:\windows\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\windows\system32\termsrv.dll, MID = 766e0000,  ("c:\windows\system32\termsrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
	  c:\windows\system32\ICAAPI.dll, MID = 74f30000,  ("c:\windows\system32\icaapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  08:00, File description = DLL Interface to TermDD Device Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |422815548|0xa7b6bc89a619b6b747d9f9f7dc215cfa|
	  c:\windows\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  08:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  08:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  08:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  08:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  c:\windows\system32\AUTHZ.dll, MID = 776b0000,  ("c:\windows\system32\authz.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 56832, File modification date = 02/03/2005  18:18, File description = Authorization Framework, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2622, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |140853044|0x9e3fc43ac2a4e1cb556662f85b161d6c|
	  c:\windows\system32\mstlsapi.dll, MID = 750d0000,  ("c:\windows\system32\mstlsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 115712, File modification date = 18/08/2004  08:00, File description = Microsoft Terminal Server Licensing, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-7798303|0x01b9bd9a50558626fec221f5323dd5d2|
	  c:\windows\system32\ACTIVEDS.dll, MID = 77cb0000,  ("c:\windows\system32\activeds.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 194048, File modification date = 18/08/2004  08:00, File description =  DLL   AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2101867215|0xf37ae01afa020a00337639c5ca4c2d06|
	  c:\windows\system32\adsldpc.dll, MID = 76e00000,  ("c:\windows\system32\adsldpc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 143360, File modification date = 18/08/2004  08:00, File description =  DLL  LDAP AD, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1861023778|0xc4e82ad1f55c18f7d0a9c1701ae0aacd|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  c:\windows\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  08:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\REGAPI.dll, MID = 76ba0000,  ("c:\windows\system32\regapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49664, File modification date = 18/08/2004  08:00, File description = Registry Configuration APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |129386638|0xdfb5008b38bd3a487469b689d9813c0f|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  08:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  08:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|

	PROCESS	svchost, PID = 888, USER = , Command Line = C:\WINDOWS\system32\svchost -k rpcss
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
		  "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  08:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  08:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\rpcss.dll, MID = 76a60000,  ("c:\windows\system32\rpcss.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
	  c:\windows\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  08:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\system32\hnetcfg.dll, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  08:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  08:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|

	PROCESS	svchost, PID = 928, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\System32\svchost.exe -k netsvcs
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\System32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\System32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  08:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  08:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\System32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\System32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\System32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\System32\NTMARTA.DLL, MID = 77680000,  ("c:\windows\system32\ntmarta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119296, File modification date = 18/08/2004  08:00, File description =  Windows NT MARTA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-40861109|0x10da4b8e5c392baee2b0f8812c9d27bc|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  08:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\System32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  08:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\System32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  c:\windows\system32\shsvcs.dll, MID = 776d0000,  ("c:\windows\system32\shsvcs.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
	  C:\WINDOWS\System32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  08:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\System32\rsaenh.dll, MID = ffd0000,  ("c:\windows\system32\rsaenh.dll") File version = 5.1.2600.2161 (xpsp.040706-1629), File size = 152576, File modification date = 18/08/2004  08:00, File description = Microsoft Enhanced Cryptographic Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2161, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1510428990|0x26acbd865f8cff730f1791c4d0854352|
	  c:\windows\system32\wzcsvc.dll, MID = 77610000,  ("c:\windows\system32\wzcsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
	  c:\windows\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  08:00, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  c:\windows\system32\WMI.dll, MID = 76d20000,  ("c:\windows\system32\wmi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  08:00, File description = WMI DC and DP functionality, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491571787|0x2d1360943eaad724e794541eef38954c|
	  c:\windows\system32\DHCPCSVC.DLL, MID = 76d70000,  ("c:\windows\system32\dhcpcsvc.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
	  c:\windows\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  c:\windows\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  08:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  08:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  c:\windows\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  08:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  c:\windows\system32\ESENT.dll, MID = 6f940000,  ("c:\windows\system32\esent.dll") File version = 5.1.2468.0 (Lab03_N(jliem).010306-1456), File size = 1085952, File modification date = 20/10/2005  22:30, File description =    , Product Name = Microsoft Windows Operating System, Product version = 5.1.2468.0, Company name = Microsoft Corporation ((C)   (Microsoft Corp.), 1981-2001.) |1128106826|0x8699a155bb7b1fb9a9b08af4a7fa5f52|
	  c:\windows\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  08:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\System32\raschap.dll, MID = 76cd0000,  ("c:\windows\system32\raschap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69632, File modification date = 18/08/2004  08:00, File description = Remote Access PPP CHAP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1908848325|0x52489757d3090f02c290c90877f1492e|
	  C:\WINDOWS\system32\msv1_0.dll, MID = 77c60000,  ("c:\windows\system32\msv1_0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  08:00, File description = Microsoft Authentication Package v1.0, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-469709728|0x01ebc1ecbd67d308646cb742e7e17215|
	  C:\WINDOWS\System32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\System32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  c:\windows\system32\schedsvc.dll, MID = 76860000,  ("c:\windows\system32\schedsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  08:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
	  c:\windows\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  08:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\System32\MSIDLE.DLL, MID = 74f10000,  ("c:\windows\system32\msidle.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  08:00, File description = User Idle Monitor, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1560411407|0x2cb2667f7caf6afa2233a5568b2b4dd4|
	  c:\windows\system32\audiosrv.dll, MID = 70e40000,  ("c:\windows\system32\audiosrv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  08:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
	  c:\windows\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  08:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  08:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  c:\windows\system32\wkssvc.dll, MID = 76e30000,  ("c:\windows\system32\wkssvc.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
	  c:\windows\system32\ersvc.dll, MID = 74f40000,  ("c:\windows\system32\ersvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
	  c:\windows\pchealth\helpctr\binaries\pchsvc.dll, MID = 74f00000,  ("c:\windows\pchealth\helpctr\binaries\pchsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
	  c:\windows\system32\es.dll, MID = 77700000,  ("c:\windows\system32\es.dll") File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
	  c:\windows\system32\srvsvc.dll, MID = 75050000,  ("c:\windows\system32\srvsvc.dll") File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
	  C:\WINDOWS\System32\HNETCFG.DLL, MID = 698b0000,  ("c:\windows\system32\hnetcfg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 344064, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |925904153|0xbea6446152e3bcc24c605bd03c980c2a|
	  c:\windows\system32\trkwks.dll, MID = 75030000,  ("c:\windows\system32\trkwks.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  08:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
	  c:\windows\system32\srsvc.dll, MID = 75160000,  ("c:\windows\system32\srsvc.dll") File version = 5.1.2600.2567 (xpsp.040919-1030), File size = 171008, File modification date = 17/11/2004  23:26, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2567, Company name =   (  .   .) |-341239065|0x7587f8feac0f6f0645deff44dfe05d5f|
	  c:\windows\system32\POWRPROF.dll, MID = 74a90000,  ("c:\windows\system32\powrprof.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  08:00, File description = Power Profile Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1298904202|0x604f22705c12080012968d72d97c6d64|
	  c:\windows\system32\sens.dll, MID = 722b0000,  ("c:\windows\system32\sens.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
	  c:\windows\system32\seclogon.dll, MID = 73ce0000,  ("c:\windows\system32\seclogon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
	  c:\windows\system32\wbem\wmisvc.dll, MID = 5a8f0000,  ("c:\windows\system32\wbem\wmisvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  08:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
	  C:\WINDOWS\system32\VSSAPI.DLL, MID = 753a0000,  ("c:\windows\system32\vssapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 430592, File modification date = 18/08/2004  08:00, File description = Microsoft Volume Shadow Copy Requestor/Writer Services API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1849286963|0xce576cee0842e1fca711d95653d2f9c1|
	  c:\windows\system32\browser.dll, MID = 77310000,  ("c:\windows\system32\browser.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  08:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
	  c:\windows\system32\wuauserv.dll, MID = 50000000,  ("c:\windows\system32\wuauserv.dll") File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  08:00, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
	  C:\WINDOWS\system32\wuaueng.dll, MID = 50040000,  ("c:\windows\system32\wuaueng.dll") File version = 5.8.0.2469 built by: lab01_n(wmbla), File size = 1343768, File modification date = 26/05/2005  02:16, File description = Windows Update AutoUpdate Engine, Product Name = Microsoft Windows Operating System, Product version = 5.8.0.2469, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |278212194|0x61fddd18f95b1ebe5447ddf4af48b8e3|
	  C:\WINDOWS\System32\ADVPACK.dll, MID = 6d690000,  ("c:\windows\system32\advpack.dll") File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 124928, File modification date = 08/01/2007  17:00, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611276918|0xb867be16eb572154a9b59959b88d7956|
	  C:\WINDOWS\System32\SHFOLDER.dll, MID = 76760000,  ("c:\windows\system32\shfolder.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  08:00, File description = Shell Folder Service, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-172052297|0x61c31ca3b2492c93724af65ec799e77c|
	  C:\WINDOWS\System32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  08:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\System32\WINHTTP.dll, MID = 4d550000,  ("c:\windows\system32\winhttp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 351232, File modification date = 18/08/2004  08:00, File description = Windows HTTP Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-471748627|0xc41363aadd44134c590e6495c19ae9fc|
	  C:\WINDOWS\System32\Cabinet.dll, MID = 75110000,  ("c:\windows\system32\cabinet.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  08:00, File description = Microsoft Cabinet File API, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-445547431|0xbca0008fcaeac11a6927c5e9a4c7076d|
	  C:\WINDOWS\System32\mspatcha.dll, MID = 605c0000,  ("c:\windows\system32\mspatcha.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 30208, File modification date = 18/08/2004  08:00, File description = Microsoft(R) Patch Engine, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |266572750|0x40e6f5398d37ef77ce9a45177cbfda03|
	  C:\WINDOWS\System32\sfc.dll, MID = 76b90000,  ("c:\windows\system32\sfc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  08:00, File description = Windows File Protection, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1502106467|0xf5f629b5ce930a832a7404a91121db7c|
	  C:\WINDOWS\System32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\System32\SXS.DLL, MID = 75e60000,  ("c:\windows\system32\sxs.dll") File version = 5.1.2600.3019 (xpsp_sp2_gdr.061019-0414), File size = 714240, File modification date = 20/10/2006  01:39, File description = Fusion 2.5, Product Name =   Microsoft Windows, Product version = 5.1.2600.3019, Company name =   (  .   .) |462700503|0xa950ec7ac09f9bcb12a533964b933052|
	  C:\WINDOWS\system32\comsvcs.dll, MID = 760c0000,  ("c:\windows\system32\comsvcs.dll") File version = 2001.12.4414.308, File size = 1267200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-96309662|0xd76b93af3382a98ca12d748bd0890fde|
	  C:\WINDOWS\system32\colbact.DLL, MID = 750f0000,  ("c:\windows\system32\colbact.dll") File version = 2001.12.4414.308, File size = 60416, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |1965206585|0x61976f72986b38e355a13bd1f39a6797|
	  C:\WINDOWS\system32\MTXCLU.DLL, MID = 750b0000,  ("c:\windows\system32\mtxclu.dll") File version = 2001.12.4414.311, File size = 66560, File modification date = 01/03/2006  19:44, File description = MS DTC amd MTS clustering support DLL, Product Name = COM Services, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-1199266982|0x66962ec14a48ab54b3ef2668b0d55c83|
	  C:\WINDOWS\system32\WSOCK32.dll, MID = 71ab0000,  ("c:\windows\system32\wsock32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24576, File modification date = 18/08/2004  08:00, File description = 32-  Windows Socket, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1100373880|0x1151e00fb893a636552566fe796129d3|
	  C:\WINDOWS\System32\CLUSAPI.DLL, MID = 76d90000,  ("c:\windows\system32\clusapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57856, File modification date = 18/08/2004  08:00, File description = Cluster API Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1563754742|0x7a745ffc0fc5b9cd58b8078fb9c5017a|
	  C:\WINDOWS\System32\RESUTILS.DLL, MID = 75070000,  ("c:\windows\system32\resutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 58880, File modification date = 18/08/2004  08:00, File description = Microsoft Cluster Resource Utility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190749271|0x0cd39488ace702f54263ec35176d15c8|
	  c:\windows\system32\wscsvc.dll, MID = 4c100000,  ("c:\windows\system32\wscsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  08:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
	  c:\windows\system32\msi.dll, MID = 745e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.2435, File size = 2890240, File modification date = 03/05/2005  08:58, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.2435, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1247185430|0x1cbc000ecd2de2e6fd2b19bc9aabcc52|
	  c:\windows\system32\netshell.dll, MID = 763d0000,  ("c:\windows\system32\netshell.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
	  c:\windows\system32\credui.dll, MID = 76bf0000,  ("c:\windows\system32\credui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 164352, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1301523741|0x144304f02cef124b4ffc57dad95f2bca|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75250000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 214528, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1186626859|0x7fd8eca23963c13600d681de85996e3e|
	  C:\WINDOWS\system32\wbem\wbemcore.dll, MID = 76290000,  ("c:\windows\system32\wbem\wbemcore.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 530944, File modification date = 18/08/2004  08:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1022282652|0xafcd7e2202ffccf56b73f0fb9d1f92c0|
	  C:\WINDOWS\System32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  08:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\wbem\esscli.dll, MID = 752d0000,  ("c:\windows\system32\wbem\esscli.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247808, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1415488570|0xf0b1f4f8d4e5d640d98dd4a7c6bbb510|
	  C:\WINDOWS\system32\wbem\FastProx.dll, MID = 75660000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 472064, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-792155897|0x61bf3d7e1b81d9705b054c5ee0660355|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74e90000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1042801053|0xe08385fba3ad1c8017f9a391ff846659|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 74fe0000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 97792, File modification date = 18/08/2004  08:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |206636464|0x82e0563f98ba1fab48a18dd5ebedf715|
	  C:\WINDOWS\system32\wbem\repdrvfs.dll, MID = 751c0000,  ("c:\windows\system32\wbem\repdrvfs.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |642863371|0xc9de8d23517f72eaa7065597b1a7720b|
	  C:\WINDOWS\system32\wbem\wmiprvsd.dll, MID = 599d0000,  ("c:\windows\system32\wbem\wmiprvsd.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 437248, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1721772680|0x498ce5fcdc44b9a9a800bc2e05630b87|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  08:00, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\wbem\wbemess.dll, MID = 75350000,  ("c:\windows\system32\wbem\wbemess.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 273920, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1110874053|0xa1129f477083a8c617d7b07d1fc7487e|
	  C:\WINDOWS\system32\wbem\ncprov.dll, MID = 5fc60000,  ("c:\windows\system32\wbem\ncprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 47104, File modification date = 18/08/2004  08:00, File description = Non-COM WMI Event Provision APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-742919636|0x6674ef0f555409de0bf269116a4ca9ff|
	  C:\WINDOWS\system32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\wshtcpip.dll, MID = 71a70000,  ("c:\windows\system32\wshtcpip.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description = Windows Sockets Helper DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1184259492|0x416692e394ddc38dc9abbd49c2c601ba|
	  C:\WINDOWS\system32\wbem\wbemcons.dll, MID = 73cf0000,  ("c:\windows\system32\wbem\wbemcons.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description = WMI Standard Event Consumers, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-632448235|0x90cfbeab0c25c855f48b86b3323636b2|
	  C:\WINDOWS\system32\Apphelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  08:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\wups.dll, MID = 50640000,  ("c:\windows\system32\wups.dll") File version = 5.8.0.2469 built by: lab01_n(wmbla), File size = 41240, File modification date = 26/05/2005  02:16, File description = Windows Update client proxy stub, Product Name = Microsoft Windows Operating System, Product version = 5.8.0.2469, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1763221234|0x63c4faf446b312687ecf4b73b7adc2c1|

	PROCESS	svchost, PID = 1004, USER = , Command Line = C:\WINDOWS\system32\svchost.exe -k NetworkService
		  "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\svchost.exe, MID = 1000000,  ("C:\WINDOWS\system32\svchost.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  08:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  08:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  c:\windows\system32\dnsrslvr.dll, MID = 76750000,  ("c:\windows\system32\dnsrslvr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  08:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
	  c:\windows\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  c:\windows\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  c:\windows\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  c:\windows\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|

	PROCESS	spoolsv, PID = 1240, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\spoolsv.exe
		  "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
	  C:\WINDOWS\system32\spoolsv.exe, MID = 1000000,  ("c:\windows\system32\spoolsv.exe") File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  08:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  08:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\SPOOLSS.DLL, MID = 742a0000,  ("c:\windows\system32\spoolss.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  08:00, File description = Spooler SubSystem DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-616758463|0x58f1353020b1bf30b6890bb3251471e7|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\rasadhlp.dll, MID = 76fb0000,  ("c:\windows\system32\rasadhlp.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 8192, File modification date = 26/06/2006  17:45, File description = Remote Access AutoDial Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2123429674|0xcaa2c7e69f96a7b3f15e05f429a256a0|
	  C:\WINDOWS\system32\localspl.dll, MID = 75b80000,  ("c:\windows\system32\localspl.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 342528, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1133760147|0x419b4ea8a0fba2939e16d2c82de2293c|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\sfc_os.dll, MID = 76c50000,  ("c:\windows\system32\sfc_os.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 140288, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1362573709|0xb63c563be89f50b9e6f94d89528acb37|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  08:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  08:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  08:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|
	  C:\WINDOWS\system32\winspool.drv, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  08:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\netapi32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\cnbjmon.dll, MID = 74260000,  ("c:\windows\system32\cnbjmon.dll") File version = 5.1.2600.2082 (xpsp(skatari).040213-0952), File size = 48128, File modification date = 18/08/2004  08:00, File description =     Canon Bubble-Jet, Product Name =   Microsoft Windows, Product version = 5.1.2600.2082, Company name =   (  .   .) |-1278402524|0xc267f467a22ad261de0c443bec5e68a7|
	  C:\WINDOWS\system32\CNMLM84.DLL, MID = 67380000,  ("c:\windows\system32\cnmlm84.dll") File version = 1.95.2.60, File size = 161792, File modification date = 24/04/2006  05:00, File description = IJ Language Monitor, Product Name = Canon IJ Printer Driver, Product version = 1.95.2.60, Company name = CANON INC. (Copyright CANON INC. 2000-2006 All Rights Reserved) |804217005|0x068389ed9839bdc483a698e7ecb1638a|
	  C:\WINDOWS\system32\PSAPI.DLL, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\mdimon.dll, MID = 9d0000,  ("c:\windows\system32\mdimon.dll") File version = 11.3.1897.0, File size = 17920, File modification date = 18/06/2003  15:31, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.1897.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |-2083428410|0xcf0376023360aadd55c89ba50564afdc|
	  C:\WINDOWS\system32\msi.dll, MID = 745e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.2435, File size = 2890240, File modification date = 03/05/2005  08:58, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.2435, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1247185430|0x1cbc000ecd2de2e6fd2b19bc9aabcc52|
	  C:\WINDOWS\system32\pjlmon.dll, MID = 74240000,  ("c:\windows\system32\pjlmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  08:00, File description = PJL Language monitor, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1959717125|0x01b371b2f51a318513776b6c4b6ae50f|
	  C:\WINDOWS\system32\tcpmon.dll, MID = 723e0000,  ("c:\windows\system32\tcpmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 46080, File modification date = 18/08/2004  08:00, File description =    TCP/IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1757915598|0x73893592069e625c63ba33f755ec4ed7|
	  C:\WINDOWS\system32\usbmon.dll, MID = 723d0000,  ("c:\windows\system32\usbmon.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  08:00, File description = Standard Dynamic Printing Port Monitor DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-833273859|0x44ed1b16547ac163585e84e0630da3e2|
	  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll, MID = 9e0000,  ("c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll") File version = 11.3.1897.0, File size = 18944, File modification date = 18/06/2003  15:31, File description = Microsoft Document Imaging, Product Name = Microsoft Office Document Imaging, Product version = 11.3.1897.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 2001-2003) |-1464179435|0x58e13a2292839321d3cdc918d5a4f5ae|
	  C:\WINDOWS\System32\mswsock.dll, MID = 71a30000,  ("c:\windows\system32\mswsock.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
	  C:\WINDOWS\System32\winrnr.dll, MID = 76fa0000,  ("c:\windows\system32\winrnr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  08:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  08:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\win32spl.dll, MID = 75be0000,  ("c:\windows\system32\win32spl.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  08:00, File description = 32-  API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1876362858|0x49d07a8ca1728f2058fb640d58783886|
	  C:\WINDOWS\system32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  08:00, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  08:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\inetpp.dll, MID = 742c0000,  ("c:\windows\system32\inetpp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  08:00, File description =  DLL Internet Print Provider, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2047356304|0xd9e0a0f626a878000b14ec5d7ad6e55e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|

	PROCESS	MDM, PID = 1344, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"
		  "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  21:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
	  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE, MID = 400000,  ("c:\program files\common files\microsoft shared\vs7debug\mdm.exe") File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  21:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\psapi.dll, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|

	PROCESS	wdfmgr, PID = 1468, USER = , Command Line = C:\WINDOWS\system32\wdfmgr.exe
		  "c:\windows\system32\wdfmgr.exe" File version = 5.2.3790.1230 built by: DNSRV(bld4act), File size = 38912, File modification date = 10/08/2004  18:05, File description = Windows User Mode Driver Manager, Product Name = Microsoft Windows Operating System, Product version = 5.2.3790.1230, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1075300549|0xc81b8635dee0d3ef5f64b3dd643023a5|
	  C:\WINDOWS\system32\wdfmgr.exe, MID = 1000000,  ("c:\windows\system32\wdfmgr.exe") File version = 5.2.3790.1230 built by: DNSRV(bld4act), File size = 38912, File modification date = 10/08/2004  18:05, File description = Windows User Mode Driver Manager, Product Name = Microsoft Windows Operating System, Product version = 5.2.3790.1230, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1075300549|0xc81b8635dee0d3ef5f64b3dd643023a5|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  08:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  08:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  08:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  08:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|

	PROCESS	hpqwmiex, PID = 1516, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = "C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe"
		  "c:\program files\hewlett-packard\shared\hpqwmiex.exe" File version = 2, 0, 1, 9, File size = 135168, File modification date = 02/05/2006  11:41, File description = hpqwmiex Module, Product Name = hpqwmiex Module, Product version = 2, 0, 1, 9, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2003-2006 Hewlett-Packard Development Company, L.P.) |-92200686|0x04c1dcbb226c6ae647b794833ce3ceb6|
	  C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe, MID = 400000,  ("c:\program files\hewlett-packard\shared\hpqwmiex.exe") File version = 2, 0, 1, 9, File size = 135168, File modification date = 02/05/2006  11:41, File description = hpqwmiex Module, Product Name = hpqwmiex Module, Product version = 2, 0, 1, 9, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2003-2006 Hewlett-Packard Development Company, L.P.) |-92200686|0x04c1dcbb226c6ae647b794833ce3ceb6|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\wbem\wbemprox.dll, MID = 74eb0000,  ("c:\windows\system32\wbem\wbemprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1932469142|0xd74ff28418cb97e37ea39db7d32f96df|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75250000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 214528, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1186626859|0x7fd8eca23963c13600d681de85996e3e|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74e90000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1042801053|0xe08385fba3ad1c8017f9a391ff846659|
	  C:\WINDOWS\system32\wbem\fastprox.dll, MID = 75660000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 472064, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-792155897|0x61bf3d7e1b81d9705b054c5ee0660355|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  08:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  08:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  08:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|

	PROCESS	wscntfy, PID = 148, USER = PC199238472315\viktor (Group - PC199238472315\, , PC199238472315\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = C:\WINDOWS\system32\wscntfy.exe
		  "c:\windows\system32\wscntfy.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  08:00, File description = Windows Security Center Notification App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |982228225|0x5bb8bbc718775d48e8776e61b47ddf59|
	  C:\WINDOWS\system32\wscntfy.exe, MID = 1000000,  ("c:\windows\system32\wscntfy.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  08:00, File description = Windows Security Center Notification App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |982228225|0x5bb8bbc718775d48e8776e61b47ddf59|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|

	PROCESS	taskmgr, PID = 392, USER = PC199238472315\viktor (Group - PC199238472315\, , PC199238472315\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = taskmgr.exe
		  "c:\windows\system32\taskmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 139264, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |746422240|0x5871dbff5caaf0b26b8d20c437e281bb|
	  C:\WINDOWS\system32\taskmgr.exe, MID = 1000000,  ("c:\windows\system32\taskmgr.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 139264, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |746422240|0x5871dbff5caaf0b26b8d20c437e281bb|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\VDMDBG.dll, MID = 5b240000,  ("c:\windows\system32\vdmdbg.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26112, File modification date = 18/08/2004  08:00, File description = VDMDBG.DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-203050761|0x7ab798546d95d02df58f7f62a4b3ea2b|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\WINSTA.dll, MID = 76330000,  ("c:\windows\system32\winsta.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53760, File modification date = 18/08/2004  08:00, File description = Winstation Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1630803941|0x03ab2538340f7b27dc2e076dce1e8482|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\UTILDLL.dll, MID = 5b2a0000,  ("c:\windows\system32\utildll.dll") File version = 5.1.2600.0 (xpclient.010817-1148), File size = 26112, File modification date = 18/08/2004  08:00, File description =   WinStation, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1520306977|0xd511f1b1205e3365d0e2d341787cd7e4|
	  C:\WINDOWS\system32\TAPI32.dll, MID = 76ea0000,  ("c:\windows\system32\tapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181760, File modification date = 18/08/2004  08:00, File description =  API  Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2120662745|0x2c29a6a95c3e860e6ea4955f4b5edef1|
	  C:\WINDOWS\system32\rtutils.dll, MID = 76e70000,  ("c:\windows\system32\rtutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  08:00, File description = Routing Utilities, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2023078125|0x4fd525303f6c7806c76fd7d3fa010a5a|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  08:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\WTSAPI32.dll, MID = 76f40000,  ("c:\windows\system32\wtsapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  08:00, File description = Windows Terminal Server SDK APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1169915172|0x87566bd5d94e6173de50d6f06448cee6|
	  C:\WINDOWS\system32\cfgmgr32.dll, MID = 74aa0000,  ("c:\windows\system32\cfgmgr32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  08:00, File description = Configuration Manager Forwarder DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1794689465|0x7a3971658d42fe35804f88e6e5637bd9|
	  C:\WINDOWS\system32\SAMLIB.dll, MID = 71bd0000,  ("c:\windows\system32\samlib.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 64000, File modification date = 18/08/2004  08:00, File description = SAM Library DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |538852373|0xf1e8ec07298a7409b13ffe2fff9ae4a1|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\browseui.dll, MID = 75f50000,  ("c:\windows\system32\browseui.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  08:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76970000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  08:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76960000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), File size = 19968, File modification date = 01/09/2005  02:28, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2751, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1425770188|0x3e46da8ae679b87d309ebbd3e12283d0|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\MPR.dll, MID = 71b00000,  ("c:\windows\system32\mpr.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2113326396|0x2cc42d3407bbbecaf674741dade55a72|
	  C:\WINDOWS\System32\drprov.dll, MID = 75f30000,  ("c:\windows\system32\drprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Microsoft Terminal Server Network Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1603469464|0x84e62f048e179a53623739b31691f608|
	  C:\WINDOWS\System32\ntlanman.dll, MID = 71bf0000,  ("c:\windows\system32\ntlanman.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  08:00, File description = Microsoft LAN Manager, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-164401074|0x7e27508a7492a748ebface597d51b8ac|
	  C:\WINDOWS\System32\NETUI0.dll, MID = 71cb0000,  ("c:\windows\system32\netui0.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80896, File modification date = 18/08/2004  08:00, File description =   GUI  NT LM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1722132880|0x61b52d7c6c0e902cb8b63c9ab545f0bf|
	  C:\WINDOWS\System32\NETUI1.dll, MID = 71c70000,  ("c:\windows\system32\netui1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 245760, File modification date = 18/08/2004  08:00, File description = NT LM UI Common Code - Networking classes, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-871070814|0x9568897cd0f9caf45c3aa541bd490782|
	  C:\WINDOWS\System32\NETRAP.dll, MID = 71c60000,  ("c:\windows\system32\netrap.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  08:00, File description = Net Remote Admin Protocol DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-140391946|0x4e1e97757c63e03e8b883a6df6eb329d|
	  C:\WINDOWS\System32\davclnt.dll, MID = 75f40000,  ("c:\windows\system32\davclnt.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  08:00, File description =   Web DAV, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1728990969|0xa3777781ed5a0f7a5f81bd0049b331f3|
	  C:\WINDOWS\system32\WINTRUST.dll, MID = 76c20000,  ("c:\windows\system32\wintrust.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 176640, File modification date = 18/08/2004  08:00, File description =    (Microsoft), Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-703944321|0xee74ed353a655c768bdde174f5b7e103|
	  C:\WINDOWS\system32\CRYPT32.dll, MID = 77a70000,  ("c:\windows\system32\crypt32.dll") File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  08:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
	  C:\WINDOWS\system32\MSASN1.dll, MID = 77b10000,  ("c:\windows\system32\msasn1.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57344, File modification date = 18/08/2004  08:00, File description = ASN.1 Runtime APIs, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-223753913|0x33408f79cbabd0dbef121ed6c1b5d26f|
	  C:\WINDOWS\system32\IMAGEHLP.dll, MID = 76c80000,  ("c:\windows\system32\imagehlp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description = Windows NT Image Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |818098529|0xc95b10c53523ee40e540c6eedd11933e|

	PROCESS	wmiprvse, PID = 1920, USER = NT AUTHORITY\SYSTEM (Group - BUILTIN\, , NT AUTHORITY\ ), Command Line = C:\WINDOWS\system32\wbem\wmiprvse.exe -Embedding
		  "c:\windows\system32\wbem\wmiprvse.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 218112, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2006706805|0x3b9228821aece65c899910eb8fae709b|
	  C:\WINDOWS\system32\wbem\wmiprvse.exe, MID = 1000000,  ("c:\windows\system32\wbem\wmiprvse.exe") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 218112, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2006706805|0x3b9228821aece65c899910eb8fae709b|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\wbem\wbemcomn.dll, MID = 75250000,  ("c:\windows\system32\wbem\wbemcomn.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 214528, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1186626859|0x7fd8eca23963c13600d681de85996e3e|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\wbem\FastProx.dll, MID = 75660000,  ("c:\windows\system32\wbem\fastprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 472064, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-792155897|0x61bf3d7e1b81d9705b054c5ee0660355|
	  C:\WINDOWS\system32\MSVCP60.dll, MID = 76050000,  ("c:\windows\system32\msvcp60.dll") File version = 6.02.3104.0, File size = 413696, File modification date = 18/08/2004  08:00, File description = Microsoft (R) C++ Runtime Library, Product Name = Microsoft (R) Visual C++, Product version = 6.02.3104.0, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1981-1998) |1880542249|0x043cff8b1e0d6f731274384473823866|
	  C:\WINDOWS\system32\NTDSAPI.dll, MID = 76780000,  ("c:\windows\system32\ntdsapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 67072, File modification date = 18/08/2004  08:00, File description = NT5DS, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1529873536|0xd8bb7250f9b842dac4992b2a3d0cccdf|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\WLDAP32.dll, MID = 76f50000,  ("c:\windows\system32\wldap32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172544, File modification date = 18/08/2004  08:00, File description = Win32 LDAP API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |711619515|0x31fcd3f8c8e8e18a2c09f6566eaaddaa|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\Secur32.dll, MID = 77fe0000,  ("c:\windows\system32\secur32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 55808, File modification date = 18/08/2004  08:00, File description = Security Support Provider Interface, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1590484366|0x535f1cb4f97ad30d61a42c03b0abff77|
	  C:\WINDOWS\system32\NCObjAPI.DLL, MID = 5fc90000,  ("c:\windows\system32\ncobjapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  08:00, File description = , Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-958015204|0x18b32ff2e7123a892fe0adaf03020091|
	  C:\WINDOWS\system32\ShimEng.dll, MID = 5d070000,  ("c:\windows\system32\shimeng.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65536, File modification date = 18/08/2004  08:00, File description = Shim Engine DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1842610354|0x32a92695210c9105bf3a40b673fac386|
	  C:\WINDOWS\AppPatch\AcGenral.DLL, MID = 6fe10000,  ("c:\windows\apppatch\acgenral.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1852416, File modification date = 18/08/2004  08:00, File description = Windows Compatibility DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |399441042|0xb62262f1a49d7a1d6ddc6423bc2afef8|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\MSACM32.dll, MID = 77bd0000,  ("c:\windows\system32\msacm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description =    Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1834335573|0x354496e09e1d9afc01dba743b4e445d9|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\UxTheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\comctl32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\wbem\wbemprox.dll, MID = 74eb0000,  ("c:\windows\system32\wbem\wbemprox.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1932469142|0xd74ff28418cb97e37ea39db7d32f96df|
	  C:\WINDOWS\system32\wbem\wbemsvc.dll, MID = 74e90000,  ("c:\windows\system32\wbem\wbemsvc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 43520, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1042801053|0xe08385fba3ad1c8017f9a391ff846659|
	  C:\WINDOWS\system32\wbem\wmiutils.dll, MID = 74fe0000,  ("c:\windows\system32\wbem\wmiutils.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 97792, File modification date = 18/08/2004  08:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |206636464|0x82e0563f98ba1fab48a18dd5ebedf715|
	  C:\WINDOWS\system32\wbem\wmiprov.dll, MID = 72ee0000,  ("c:\windows\system32\wbem\wmiprov.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144896, File modification date = 18/08/2004  08:00, File description = WMI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |723827086|0x2e5321f4bf9c94be2daa1e4aefe83580|
	  C:\WINDOWS\system32\WMI.dll, MID = 76d20000,  ("c:\windows\system32\wmi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  08:00, File description = WMI DC and DP functionality, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491571787|0x2d1360943eaad724e794541eef38954c|

	PROCESS	GetSystemInfo, PID = 308, USER = PC199238472315\viktor (Group - PC199238472315\, , PC199238472315\Debugger Users, BUILTIN\, BUILTIN\, NT AUTHORITY\, NT AUTHORITY\ , ), Command Line = "D:\  (2)\GetSystemInfo.exe" 
		  "d:\  (2)\getsysteminfo.exe" File version = 3, 0, 0, 5, File size = 331857, File modification date = 25/10/2008  19:05, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  D:\  (2)\GetSystemInfo.exe, MID = 400000,  ("d:\  (2)\getsysteminfo.exe") File version = 3, 0, 0, 5, File size = 331857, File modification date = 25/10/2008  19:05, File description = Retrive system information., Product Name = KL GetSystemInfo, Product version = 3, 0, 0, 5, Company name = Kaspersky Lab (Copyright Alexey Antropov, Kaspersky Lab.  2004) |722413012|0xacd53240c99dfaea6721e1220a112d5a|
	  C:\WINDOWS\system32\ntdll.dll, MID = 7c900000,  ("c:\windows\system32\ntdll.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 712192, File modification date = 18/08/2004  08:00, File description =   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-193463876|0xa0c4b8beaebedb02853d134017e2d607|
	  C:\WINDOWS\system32\kernel32.dll, MID = 7c800000,  ("c:\windows\system32\kernel32.dll") File version = 5.1.2600.2945 (xpsp_sp2_gdr.060704-2349), File size = 990208, File modification date = 05/07/2006  10:56, File description =   Windows NT BASE API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2945, Company name =   (  .   .) |896319917|0x12a83c318f73ec087f49b89d5a57cb55|
	  C:\WINDOWS\system32\USER32.dll, MID = 77d30000,  ("c:\windows\system32\user32.dll") File version = 5.1.2600.2622 (xpsp_sp2_gdr.050301-1519), File size = 577536, File modification date = 02/03/2005  18:18, File description =   USER API Windows XP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2622, Company name =   (  .   .) |-2059124884|0x6cda378517d79c34e879cd664f801091|
	  C:\WINDOWS\system32\GDI32.dll, MID = 77f10000,  ("c:\windows\system32\gdi32.dll") File version = 5.1.2600.2818 (xpsp_sp2_gdr.051228-1427), File size = 280064, File modification date = 29/12/2005  02:56, File description = GDI Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2818, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |155090741|0x991dbd1900b9227706218f406905c2e4|
	  C:\WINDOWS\system32\WINSPOOL.DRV, MID = 72fc0000,  ("c:\windows\system32\winspool.drv") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 146944, File modification date = 18/08/2004  08:00, File description =    Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |578735823|0xc95879d28c9e31736be35d9829cfb2bc|
	  C:\WINDOWS\system32\msvcrt.dll, MID = 77c00000,  ("c:\windows\system32\msvcrt.dll") File version = 7.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 343040, File modification date = 18/08/2004  08:00, File description = Windows NT CRT DLL, Product Name = Microsoft Windows Operating System, Product version = 7.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |887422133|0x27b732c011b32a4d8be4e7a74faf2147|
	  C:\WINDOWS\system32\RPCRT4.dll, MID = 77e70000,  ("c:\windows\system32\rpcrt4.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 581120, File modification date = 18/08/2004  08:00, File description = Remote Procedure Call Runtime, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |109789516|0x4b69a0f7624200f0f0d4f82f86fa331b|
	  C:\WINDOWS\system32\ADVAPI32.dll, MID = 77dc0000,  ("c:\windows\system32\advapi32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 687104, File modification date = 18/08/2004  08:00, File description =   API Windows 32, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1431399397|0xf6657725dd0168572e46e2b8a079c6bb|
	  C:\WINDOWS\system32\comdlg32.dll, MID = 76380000,  ("c:\windows\system32\comdlg32.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 278528, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1959975165|0x555997b963c3b6a61e7e9dfe3ddc7e74|
	  C:\WINDOWS\system32\SHLWAPI.dll, MID = 77f60000,  ("c:\windows\system32\shlwapi.dll") File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 474112, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |-238082699|0x3d13719709401c65f491815082d5d847|
	  C:\WINDOWS\system32\COMCTL32.dll, MID = 5d5b0000,  ("c:\windows\system32\comctl32.dll") File version = 5.82 (xpsp.060825-0040), File size = 617472, File modification date = 25/08/2006  15:53, File description = Common Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1660392326|0xba0065c83f4e340c8fd05eecf199a48e|
	  C:\WINDOWS\system32\SHELL32.dll, MID = 7c9c0000,  ("c:\windows\system32\shell32.dll") File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
	  C:\WINDOWS\system32\WINMM.dll, MID = 76b20000,  ("c:\windows\system32\winmm.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = MCI API DLL, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1998938064|0x58e705659f3992bc3d1b5503ea2b8745|
	  C:\WINDOWS\system32\WS2_32.dll, MID = 71a90000,  ("c:\windows\system32\ws2_32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 82944, File modification date = 18/08/2004  08:00, File description = Windows Socket 2.0 32-Bit DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-255018012|0x0b6185e58290d4e5944f6fb9bf6562a1|
	  C:\WINDOWS\system32\WS2HELP.dll, MID = 71a80000,  ("c:\windows\system32\ws2help.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 19968, File modification date = 18/08/2004  08:00, File description =   Windows Socket 2.0  Windows NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-471948692|0xedc908f59d8243371c9e66839eaf28cf|
	  C:\WINDOWS\system32\VERSION.dll, MID = 77bf0000,  ("c:\windows\system32\version.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = Version Checking and File Installation Libraries, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |384865645|0x4c7d34c4224a4e95dd23d61798e11180|
	  C:\WINDOWS\system32\IMM32.DLL, MID = 76360000,  ("c:\windows\system32\imm32.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 110080, File modification date = 18/08/2004  08:00, File description = Windows XP IMM32 API Client DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009399712|0x318492c9327edbbd7fad35fb3df65cc3|
	  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll, MID = 773c0000,  ("c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll") File version = 6.0 (xpsp.060825-0040), File size = 1054208, File modification date = 25/08/2006  15:53, File description = User Experience Controls Library, Product Name = Microsoft Windows Operating System, Product version = 6.00.2900.2982, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-496071746|0xd9c17e4f0dadd879313011b674960883|
	  C:\WINDOWS\system32\Msi.dll, MID = 745e0000,  ("c:\windows\system32\msi.dll") File version = 3.1.4000.2435, File size = 2890240, File modification date = 03/05/2005  08:58, File description = Windows Installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.2435, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1247185430|0x1cbc000ecd2de2e6fd2b19bc9aabcc52|
	  C:\WINDOWS\system32\uxtheme.dll, MID = 5b260000,  ("c:\windows\system32\uxtheme.dll") File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 219648, File modification date = 18/08/2004  08:00, File description =   UxTheme (Microsoft), Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-926057748|0xa974e31665876e004ffe8c0f07972db0|
	  C:\WINDOWS\system32\msctfime.ime, MID = 75310000,  ("c:\windows\system32\msctfime.ime") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 177152, File modification date = 18/08/2004  08:00, File description = Microsoft Text Frame Work Service IME, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434118332|0xe3466768b910b5dc1ad233bf5ee0bf2f|
	  C:\WINDOWS\system32\ole32.dll, MID = 774d0000,  ("c:\windows\system32\ole32.dll") File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 1284608, File modification date = 26/07/2005  04:42, File description = Microsoft OLE   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2726, Company name =   (  .   .) |-2086545334|0xb05f3bd87134193cb473a7d1ad14efbf|
	  C:\WINDOWS\system32\appHelp.dll, MID = 77b30000,  ("c:\windows\system32\apphelp.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126976, File modification date = 18/08/2004  08:00, File description = Application Compatibility Client Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1508563980|0xddffd0135bb913a53f4fc4a77188c52b|
	  C:\WINDOWS\system32\CLBCATQ.DLL, MID = 76fc0000,  ("c:\windows\system32\clbcatq.dll") File version = 2001.12.4414.308, File size = 498688, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-2128060152|0x24969a7d56e85113d89f2cb3839b28ab|
	  C:\WINDOWS\system32\COMRes.dll, MID = 77040000,  ("c:\windows\system32\comres.dll") File version = 2001.12.4414.258, File size = 797696, File modification date = 18/08/2004  08:00, File description = (null), Product Name =  COM, Product version = 03.00.00.4414, Company name =   ((C)   (Microsoft Corporation), 1995-1999) |-1686155527|0xc8c7b186c2ecdb8568375ae7313e7bd1|
	  C:\WINDOWS\system32\OLEAUT32.dll, MID = 77110000,  ("c:\windows\system32\oleaut32.dll") File version = 5.1.2600.2180, File size = 553472, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = 5.1.2600.2180, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1993-2001.) |-619277577|0x343d7e54eca0f81a1289cc3360fa4775|
	  C:\WINDOWS\system32\SETUPAPI.dll, MID = 77910000,  ("c:\windows\system32\setupapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 990208, File modification date = 18/08/2004  08:00, File description = Windows Setup API, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2052976006|0xa310e2ee72fe1310e413d340dc7ee165|
	  C:\WINDOWS\system32\ntshrui.dll, MID = 76970000,  ("c:\windows\system32\ntshrui.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
	  C:\WINDOWS\system32\ATL.DLL, MID = 76b00000,  ("c:\windows\system32\atl.dll") File version = 3.05.2284, File size = 58880, File modification date = 18/08/2004  08:00, File description = ATL Module for Windows XP (Unicode), Product Name = Microsoft (R) Visual C++, Product version = 6.05.2284, Company name = Microsoft Corporation (Copyright  Microsoft Corp.) |-287891706|0xf6194870ac98ceb9a09ebf9273199292|
	  C:\WINDOWS\system32\NETAPI32.dll, MID = 5bd50000,  ("c:\windows\system32\netapi32.dll") File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 332288, File modification date = 17/08/2006  12:29, File description = Net Win32 API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1940279591|0xe4d0443a5e5b4477a3a769615cd3094e|
	  C:\WINDOWS\system32\USERENV.dll, MID = 769a0000,  ("c:\windows\system32\userenv.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 726016, File modification date = 18/08/2004  08:00, File description = Userenv, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2023999079|0x8c8a04fdbb89595d9a376d53af667355|
	  C:\WINDOWS\system32\LINKINFO.dll, MID = 76960000,  ("c:\windows\system32\linkinfo.dll") File version = 5.1.2600.2751 (xpsp_sp2_gdr.050831-1520), File size = 19968, File modification date = 01/09/2005  02:28, File description = Windows Volume Tracking, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2751, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1425770188|0x3e46da8ae679b87d309ebbd3e12283d0|
	  C:\WINDOWS\system32\xpsp2res.dll, MID = 20000000,  ("c:\windows\system32\xpsp2res.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2929664, File modification date = 18/08/2004  08:00, File description =    2, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (   (Microsoft Corp.)   .) |-752757900|0xf62fbf30673b64d7733e730eedebaf6d|
	  C:\WINDOWS\system32\DNSAPI.dll, MID = 76f10000,  ("c:\windows\system32\dnsapi.dll") File version = 5.1.2600.2938 (xpsp_sp2_gdr.060626-0020), File size = 148480, File modification date = 26/06/2006  17:45, File description = DNS Client API DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2938, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |434811121|0x7ac95572ae9b83e030dbb36a6c1fe907|
	  C:\WINDOWS\system32\iphlpapi.dll, MID = 76d50000,  ("c:\windows\system32\iphlpapi.dll") File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 95744, File modification date = 19/05/2006  13:26, File description = API   IP, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |-1936139934|0xc061ba4b06229abd67a1f04fe5a11386|
	  C:\WINDOWS\system32\perfproc.dll, MID = 5ec70000,  ("c:\windows\system32\perfproc.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35328, File modification date = 18/08/2004  08:00, File description =      Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2042794600|0x025455ca4a1027345d9ae0a527669874|
	  C:\WINDOWS\system32\psapi.dll, MID = 76be0000,  ("c:\windows\system32\psapi.dll") File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Process Status Helper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-639744224|0x1eb118e47c4b9903264c7f41947d6a52|

Opened TCP/UDP ports:

	TCP, LOCAL (host/address/port):PC199238472315/0.0.0.0/135(epmap), REMOTE (host/address/port):*/*/*, State:LISTENING, PID = 888, Command Line = c:\windows\system32\svchost -k rpcss   "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
	UDP, LOCAL (host/address/port):PC199238472315/0.0.0.0/500, REMOTE (host/address/port):*/*/*, State:*, PID = 664, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
	UDP, LOCAL (host/address/port):PC199238472315/0.0.0.0/4500, REMOTE (host/address/port):*/*/*, State:*, PID = 664, Command Line = c:\windows\system32\lsass.exe   "c:\windows\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|

System default language:
		Russian

Default interface language of user:
		Russian

Keyboard layout languages:
		Ukrainian
		English
		Russian

Installed code pages:
		10000 = 10000 (MAC - )
		10006 = 10006 (MAC -  1)
		10007 = 10007 (MAC - )
		10010 = 10010 (MAC - )
		10017 = 10017 (MAC - )
		10029 = 10029 (MAC -  2)
		10079 = 10079 (MAC - )
		10081 = 10081 (MAC - )
		10082 = 10082 (MAC - )
		1026 = 1026 (IBM EBCDIC -  (-5))
		1250 = 1250  (ANSI - -)
		1251 = 1251  (ANSI - )
		1252 = 1252  (ANSI -  1)
		1253 = 1251  (ANSI - )
		1254 = 1254  (ANSI - )
		1255 = 1255  (ANSI - )
		1256 = 1256  (ANSI - )
		1257 = 1257  (ANSI - )
		1258 = 1258  (ANSI/OEM - )
		1361 = Korean (Johab)
		20127 = 20127 (-ASCII)
		20261 = 20261 (T.61)
		20866 = 20866 ( - 8)
		21866 = 21866 ( - 8-U)
		28591 = 28591 (ISO 8859-1  1)
		28592 = 28592 (ISO 8859-2 )
		28594 = 28594 (ISO 8859-4 )
		28595 = 28595 (ISO 8859-5 )
		28597 = 28597 (ISO 8859-7 )
		28599 = 28599 (ISO 8859-9  5)
		28605 = 28605 (ISO 8859-15  9)
		37 = 37    (IBM EBCDIC -   )
		437 = 437   (OEM - )
		500 = 500   (IBM EBCDIC - )
		737 = 737   (OEM -  437G)
		775 = 775   (OEM - )
		850 = 850   (OEM -   1)
		852 = 852   (OEM -  2)
		855 = 855   (OEM -  )
		857 = 857   (OEM - )
		860 = 860   (OEM - )
		861 = 861   (OEM - )
		863 = 863   (OEM - -)
		865 = 865   (OEM - )
		866 = 866   (OEM - )
		869 = 869   (OEM -  )
		874 = 874   (ANSI/OEM - )
		875 = 875   (IBM EBCDIC -  )
		932 = 932   (ANSI/OEM -  Shift-JIS)
		936 = 936   (ANSI/OEM -   GBK)
		949 = 949   (ANSI/OEM - )
		950 = 950   (ANSI/OEM -   Big5)
		28603 = 
		65000 = 65000 (UTF-7)
		65001 = 65001 (UTF-8)

StartUp link objects:
---------------------
SYSTEM REGISTRY
  *\Software\Microsoft\Windows NT\CurrentVersion\AEDebug
    Debugger=drwtsn32 -p %ld -e %ld -g <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AEDebug>
      "c:\windows\system32\drwtsn32.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 46080, File modification date = 18/08/2004  08:00, File description =  DrWatson, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |540897299|0x6a32ea2baff29f3624d841da20f67e28|
  *\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
    Shell=Explorer.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\explorer.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 1032704, File modification date = 17/08/2004  13:04, File description = , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |309134448|0x7637f34cbb1fd9076bdfb13f4eb72a1c|
    UserInit=C:\WINDOWS\system32\userinit.exe, <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon>
      "c:\windows\system32\userinit.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  08:00, File description =  Userinit    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1110865795|0xb5f1a73edab83fa2db9662e10e027587|
  *\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\*
    DllName=crypt32.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain>
      "c:\windows\system32\crypt32.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 600576, File modification date = 18/08/2004  08:00, File description = API32 , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |597054980|0x228373d5d761dfdc68032fd64c734815|
    DllName=cryptnet.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet>
      "c:\windows\system32\cryptnet.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 63488, File modification date = 18/08/2004  08:00, File description = Crypto Network Related API, Product Name = Microsoft Windows Operating System, Product version = 5.131.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1707137241|0x48e2c7182fe73f9236c2c3e0d144ac7a|
    DllName=cscdll.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll>
      "c:\windows\system32\cscdll.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 102400, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-913186761|0x5dc9d6286e5ca35cbbffbb673527cb10|
    DllName=igfxdev.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\igfxcui>
      "c:\windows\system32\igfxdev.dll" File version = 3.0.0.4410, File size = 135168, File modification date = 19/10/2005  10:15, File description = igfxdev Module, Product Name = Intel(R) Common User Interface, Product version = 7.0.0.4410, Company name = Intel Corporation (Copyright 1999-2004, Intel Corporation) |2091150618|0x18c288f56f1d670682d64807914413bf|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  08:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  08:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=sclgntfy.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy>
      "c:\windows\system32\sclgntfy.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 22016, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1015048368|0x017f95e7e577b928827add784b2ca052|
    DllName=WlNotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  08:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  08:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
    DllName=wlnotify.dll <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon>
      "c:\windows\system32\wlnotify.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 93184, File modification date = 18/08/2004  08:00, File description =     Winlogon, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |282839405|0xd110d3c1ee97b61251a2b34fdd05f27a|
  *\Software\Microsoft\Windows*\CurrentVersion\Run*
    Cleanup=C:\cleanup.exe <HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce>
      "c:\cleanup.exe" File version = (null), File size = 19286, File modification date = 25/10/2008  20:52, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-547123452|0xd5816bddd4382975c1693cce68547fcc|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  08:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  08:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  08:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
    CTFMON.EXE=C:\WINDOWS\system32\CTFMON.EXE <HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run>
      "c:\windows\system32\ctfmon.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15360, File modification date = 18/08/2004  08:00, File description = CTF Loader, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1491243658|0xcdc69c55cf6c39162451685020cf6f06|
  HKLM\System\ControlSet???\Services\*\Parameters
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet001\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  08:00, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet001\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  08:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet001\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 18/08/2004  08:00, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet001\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  08:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet001\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  08:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet001\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet001\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  08:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet001\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  08:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet001\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet001\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet001\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet001\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 18/08/2004  08:00, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet001\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet001\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet001\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  08:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet001\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  08:00, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet001\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet001\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet001\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet001\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 18/08/2004  08:00, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet001\Services\RasMan\Parameters>
      "C:\WINDOWS\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet001\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 18/08/2004  08:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet001\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet001\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  08:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet001\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet001\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet001\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  08:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet001\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2567 (xpsp.040919-1030), File size = 171008, File modification date = 17/11/2004  23:26, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2567, Company name =   (  .   .) |-341239065|0x7587f8feac0f6f0645deff44dfe05d5f|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet001\Services\SSDPSRV\Parameters>
      "C:\WINDOWS\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet001\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet001\Services\TapiSrv\Parameters>
      "C:\WINDOWS\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet001\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet001\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet001\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  08:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet001\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 185344, File modification date = 18/08/2004  08:00, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-804537927|0x871b3601468cf8481ef82bddc0522fe8|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet001\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet001\Services\WebClient\Parameters>
      "C:\WINDOWS\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet001\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  08:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet001\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 10.0.3790.3646, File size = 25088, File modification date = 10/08/2004  20:45, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 10.0.3790.3646, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp.) |-589532194|0xa477391b7a8b0a0daabadb17cf533a4b|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet001\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  08:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet001\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  08:00, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet001\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet001\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  08:00, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet002\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  08:00, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet002\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  08:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=%systemroot%\system32\qmgr.dll <HKLM\System\ControlSet002\Services\BITS\Parameters>
      "C:\WINDOWS\system32\qmgr.dll" File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 18/08/2004  08:00, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet002\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  08:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet002\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  08:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet002\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet002\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet002\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  08:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet002\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  08:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet002\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet002\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet002\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet002\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 18/08/2004  08:00, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet002\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet002\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet002\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  08:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet002\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  08:00, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet002\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet002\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet002\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet002\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 18/08/2004  08:00, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet002\Services\RasMan\Parameters>
      "C:\WINDOWS\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet002\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 18/08/2004  08:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\System32\rpcss.dll <HKLM\System\ControlSet002\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet002\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  08:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet002\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet002\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet002\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  08:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet002\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2567 (xpsp.040919-1030), File size = 171008, File modification date = 17/11/2004  23:26, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2567, Company name =   (  .   .) |-341239065|0x7587f8feac0f6f0645deff44dfe05d5f|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet002\Services\SSDPSRV\Parameters>
      "C:\WINDOWS\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet002\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet002\Services\TapiSrv\Parameters>
      "C:\WINDOWS\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet002\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet002\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet002\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  08:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet002\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 185344, File modification date = 18/08/2004  08:00, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-804537927|0x871b3601468cf8481ef82bddc0522fe8|
    ServiceDll=%systemroot%\system32\w32time.dll <HKLM\System\ControlSet002\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet002\Services\WebClient\Parameters>
      "C:\WINDOWS\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet002\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  08:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet002\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 10.0.3790.3646, File size = 25088, File modification date = 10/08/2004  20:45, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 10.0.3790.3646, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp.) |-589532194|0xa477391b7a8b0a0daabadb17cf533a4b|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet002\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  08:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet002\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  08:00, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet002\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet002\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  08:00, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet003\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  08:00, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet003\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  08:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=%systemroot%\system32\qmgr.dll <HKLM\System\ControlSet003\Services\BITS\Parameters>
      "C:\WINDOWS\system32\qmgr.dll" File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 18/08/2004  08:00, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet003\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  08:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet003\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  08:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet003\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet003\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet003\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  08:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet003\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  08:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet003\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet003\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet003\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet003\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet003\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 18/08/2004  08:00, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet003\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet003\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet003\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  08:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet003\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  08:00, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet003\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet003\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet003\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet003\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 18/08/2004  08:00, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet003\Services\RasMan\Parameters>
      "C:\WINDOWS\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet003\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 18/08/2004  08:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\System32\rpcss.dll <HKLM\System\ControlSet003\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet003\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  08:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet003\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet003\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet003\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  08:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet003\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet003\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2567 (xpsp.040919-1030), File size = 171008, File modification date = 17/11/2004  23:26, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2567, Company name =   (  .   .) |-341239065|0x7587f8feac0f6f0645deff44dfe05d5f|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet003\Services\SSDPSRV\Parameters>
      "C:\WINDOWS\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet003\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet003\Services\TapiSrv\Parameters>
      "C:\WINDOWS\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet003\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet003\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet003\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  08:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet003\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 185344, File modification date = 18/08/2004  08:00, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-804537927|0x871b3601468cf8481ef82bddc0522fe8|
    ServiceDll=%systemroot%\system32\w32time.dll <HKLM\System\ControlSet003\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet003\Services\WebClient\Parameters>
      "C:\WINDOWS\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet003\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  08:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet003\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 10.0.3790.3646, File size = 25088, File modification date = 10/08/2004  20:45, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 10.0.3790.3646, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp.) |-589532194|0xa477391b7a8b0a0daabadb17cf533a4b|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet003\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  08:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet003\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  08:00, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet003\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet003\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  08:00, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
    ServiceDll=%SystemRoot%\system32\alrsvc.dll <HKLM\System\ControlSet005\Services\Alerter\Parameters>
      "C:\WINDOWS\system32\alrsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  08:00, File description = Alerter Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |190585322|0xf34bbc58a90117d37c40ac6887b9fff5|
    ServiceDll=%SystemRoot%\System32\audiosrv.dll <HKLM\System\ControlSet005\Services\AudioSrv\Parameters>
      "C:\WINDOWS\system32\audiosrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  08:00, File description = Windows Audio Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1128092811|0xaa30021f082ab3af2e7a8335b6c71af6|
    ServiceDll=C:\WINDOWS\system32\qmgr.dll <HKLM\System\ControlSet005\Services\BITS\Parameters>
      "c:\windows\system32\qmgr.dll" File version = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382464, File modification date = 18/08/2004  08:00, File description =     (BITS), Product Name =   Microsoft Windows, Product version = 6.6.2600.2180, Company name =   (  .   .) |65066487|0xaf6e1507075f3026c6c346cf9a3fa0b0|
    ServiceDll=%SystemRoot%\System32\browser.dll <HKLM\System\ControlSet005\Services\Browser\Parameters>
      "c:\windows\system32\browser.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 77312, File modification date = 18/08/2004  08:00, File description = Computer Browser Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-456273992|0xadd45ccff46267d6b561faef2aab2d10|
    ServiceDll=%SystemRoot%\System32\cryptsvc.dll <HKLM\System\ControlSet005\Services\CryptSvc\Parameters>
      "C:\WINDOWS\system32\cryptsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60416, File modification date = 18/08/2004  08:00, File description = Cryptographic Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-936498513|0x1c9398fef160fb0c40290ecfc2b67f33|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet005\Services\DcomLaunch\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\System32\dhcpcsvc.dll <HKLM\System\ControlSet005\Services\Dhcp\Parameters>
      "C:\WINDOWS\system32\dhcpcsvc.dll" File version = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003), File size = 111104, File modification date = 19/05/2006  13:26, File description =  DHCP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2912, Company name =   (  .   .) |1788057375|0xbed46321c5846d954ce65ac8d53c1f39|
    ServiceDll=%SystemRoot%\System32\dmserver.dll <HKLM\System\ControlSet005\Services\dmserver\Parameters>
      "C:\WINDOWS\system32\dmserver.dll" File version = 2600.2180.503.0, File size = 24064, File modification date = 18/08/2004  08:00, File description =  DLL    , Product Name =     Windows NT, Product version = 1.0, Company name =   (  , 1985-2000.   .) |433586464|0xbcd7f4a26b4c031e6a8977f823fd5089|
    ServiceDll=%SystemRoot%\System32\dnsrslvr.dll <HKLM\System\ControlSet005\Services\Dnscache\Parameters>
      "C:\WINDOWS\system32\dnsrslvr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 45568, File modification date = 18/08/2004  08:00, File description =    DNS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1165328340|0x9053d7d029eb1fe9787a78e6cdd84329|
    ServiceDll=%SystemRoot%\System32\ersvc.dll <HKLM\System\ControlSet005\Services\ERSvc\Parameters>
      "C:\WINDOWS\system32\ersvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23040, File modification date = 18/08/2004  08:00, File description = Windows Error Reporting Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-435344725|0x1a0c257f0ca71a8d2470c23d5081d337|
    ServiceDll=C:\WINDOWS\system32\es.dll <HKLM\System\ControlSet005\Services\EventSystem\Parameters>
      "c:\windows\system32\es.dll" File version = 2001.12.4414.308, File size = 243200, File modification date = 26/07/2005  04:42, File description = (null), Product Name = COM Services, Product version = 03.00.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1999) |-317926973|0x0a6c075d0d80eba816c567a9d9e9a07b|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet005\Services\FastUserSwitchingCompatibility\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll <HKLM\System\ControlSet005\Services\helpsvc\Parameters>
      "c:\windows\pchealth\helpctr\binaries\pchsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = Microsoft PCHealth Service Holder, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1202077698|0x358410d18ce296bc73561bd4b0ecf620|
    ServiceDll=%SystemRoot%\System32\w3ssl.dll <HKLM\System\ControlSet005\Services\HTTPFilter\Parameters>
      "C:\WINDOWS\system32\w3ssl.dll" File version = 6.0.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15872, File modification date = 18/08/2004  08:00, File description = SSL service for HTTP, Product Name = Internet Information Services, Product version = 6.0.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1334678168|0x4e8053fa75c0280f805b4fd8985dac85|
    ServiceDll=%SystemRoot%\System32\srvsvc.dll <HKLM\System\ControlSet005\Services\lanmanserver\Parameters>
      "C:\WINDOWS\system32\srvsvc.dll" File version = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729), File size = 96768, File modification date = 07/12/2004  19:34, File description = Server Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2577, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |857340271|0xb5de15948cc3a45f3c239c52cb41e400|
    ServiceDll=%SystemRoot%\System32\wkssvc.dll <HKLM\System\ControlSet005\Services\lanmanworkstation\Parameters>
      "C:\WINDOWS\system32\wkssvc.dll" File version = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106), File size = 132096, File modification date = 17/08/2006  12:29, File description = Workstation Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2976, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1766924232|0x0a2c7ac4414dfc75f80bbe912d3f32ee|
    ServiceDll=%SystemRoot%\System32\lmhsvc.dll <HKLM\System\ControlSet005\Services\LmHosts\Parameters>
      "C:\WINDOWS\system32\lmhsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13824, File modification date = 18/08/2004  08:00, File description = TCPIP NetBios Transport Services DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1898943476|0xfd3eb6bea06b848fa864d9cc9b3a1847|
    ServiceDll=%SystemRoot%\System32\msgsvc.dll <HKLM\System\ControlSet005\Services\Messenger\Parameters>
      "C:\WINDOWS\system32\msgsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33792, File modification date = 18/08/2004  08:00, File description = NT Messenger Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1440456341|0xa69aa08a453b9baf7782a98ef57af3d1|
    ServiceDll=%SystemRoot%\System32\netman.dll <HKLM\System\ControlSet005\Services\Netman\Parameters>
      "C:\WINDOWS\system32\netman.dll" File version = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525), File size = 197632, File modification date = 22/08/2005  18:36, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2743, Company name =   (  .   .) |-1957469439|0xd6f541412e418f5f538b8163f7f65618|
    ServiceDll=%SystemRoot%\System32\mswsock.dll <HKLM\System\ControlSet005\Services\Nla\Parameters>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
    ServiceDll=%SystemRoot%\system32\ntmssvc.dll <HKLM\System\ControlSet005\Services\NtmsSvc\Parameters>
      "C:\WINDOWS\system32\ntmssvc.dll" File version = 5.1.2400.2180, File size = 436736, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft (R) Windows Whistler(R) 2000, Product version = 5.1.2400.2180, Company name =   ((C)  , 2000) |-1617348598|0x2105738264b4ddaeb24c2b3851d6427b|
    ServiceDll=%SystemRoot%\System32\rasauto.dll <HKLM\System\ControlSet005\Services\RasAuto\Parameters>
      "C:\WINDOWS\system32\rasauto.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 89088, File modification date = 18/08/2004  08:00, File description = Remote Access AutoDial Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1975367996|0x2320d8107baf5284381f70e28751104a|
    ServiceDll=%SystemRoot%\System32\rasmans.dll <HKLM\System\ControlSet005\Services\RasMan\Parameters>
      "C:\WINDOWS\system32\rasmans.dll" File version = 5.1.2600.2936 (xpsp_sp2_gdr.060621-2347), File size = 181248, File modification date = 22/06/2006  10:48, File description = Remote Access Connection Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2936, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1417186478|0x8be55d1fb2da4dac34d9eb5befc8a3d4|
    ServiceDll=%SystemRoot%\System32\mprdim.dll <HKLM\System\ControlSet005\Services\RemoteAccess\Parameters>
      "C:\WINDOWS\system32\mprdim.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 49152, File modification date = 18/08/2004  08:00, File description = Dynamic Interface Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1320033702|0x8dd12dc289ec73c1f33715fe893e5464|
    ServiceDll=%SystemRoot%\system32\rpcss.dll <HKLM\System\ControlSet005\Services\RpcSs\Parameters>
      "C:\WINDOWS\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ServiceDll=%SystemRoot%\system32\schedsvc.dll <HKLM\System\ControlSet005\Services\Schedule\Parameters>
      "C:\WINDOWS\system32\schedsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 191488, File modification date = 18/08/2004  08:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1551155262|0x37791d0744756f6c860e04094b393159|
    ServiceDll=%SystemRoot%\System32\seclogon.dll <HKLM\System\ControlSet005\Services\seclogon\Parameters>
      "C:\WINDOWS\system32\seclogon.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description = DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1287695012|0x751bf6d98769e42da9f1b3adbd29fc8f|
    ServiceDll=%SystemRoot%\system32\sens.dll <HKLM\System\ControlSet005\Services\SENS\Parameters>
      "C:\WINDOWS\system32\sens.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 38912, File modification date = 18/08/2004  08:00, File description = System Event Notification Service (SENS), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1565837498|0x1dd01abdad369137c63e34b4d48d6c25|
    ServiceDll=%SystemRoot%\System32\ipnathlp.dll <HKLM\System\ControlSet005\Services\SharedAccess\Parameters>
      "C:\WINDOWS\system32\ipnathlp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 331264, File modification date = 18/08/2004  08:00, File description =    Microsoft NAT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |110580876|0x03aebe530bd4272c8d1e2f92a76a0b9f|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet005\Services\ShellHWDetection\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=C:\WINDOWS\system32\srsvc.dll <HKLM\System\ControlSet005\Services\srservice\Parameters>
      "c:\windows\system32\srsvc.dll" File version = 5.1.2600.2567 (xpsp.040919-1030), File size = 171008, File modification date = 17/11/2004  23:26, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2567, Company name =   (  .   .) |-341239065|0x7587f8feac0f6f0645deff44dfe05d5f|
    ServiceDll=%SystemRoot%\System32\ssdpsrv.dll <HKLM\System\ControlSet005\Services\SSDPSRV\Parameters>
      "C:\WINDOWS\system32\ssdpsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 71680, File modification date = 18/08/2004  08:00, File description = SSDP Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-544201239|0xaefd0c33fe59a2bbc3a747b8900eeffd|
    ServiceDll=%SystemRoot%\system32\wiaservc.dll <HKLM\System\ControlSet005\Services\stisvc\Parameters>
      "C:\WINDOWS\system32\wiaservc.dll" File version = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316), File size = 333824, File modification date = 19/12/2006  18:18, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.3051, Company name =   (  .   .) |891748941|0x5cfa38708e3a9f4865070e512e26b06a|
    ServiceDll=%SystemRoot%\System32\tapisrv.dll <HKLM\System\ControlSet005\Services\TapiSrv\Parameters>
      "C:\WINDOWS\system32\tapisrv.dll" File version = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657), File size = 249344, File modification date = 08/07/2005  16:29, File description =    Microsoft Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2716, Company name =   (  .   .) |-1352712614|0xb1d67657d8d6df6ec01952bceda31c57|
    ServiceDll=%SystemRoot%\System32\termsrv.dll <HKLM\System\ControlSet005\Services\TermService\Parameters>
      "c:\windows\system32\termsrv.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 295936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1032548131|0xfbe10ed076d1e87782778a6cd2ab7085|
    ServiceDll=%SystemRoot%\System32\shsvcs.dll <HKLM\System\ControlSet005\Services\Themes\Parameters>
      "C:\WINDOWS\system32\shsvcs.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 135168, File modification date = 19/12/2006  21:50, File description =  DLL   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |1750501166|0x0a60cb515812887991b2d485b6e984a4|
    ServiceDll=%SystemRoot%\system32\trkwks.dll <HKLM\System\ControlSet005\Services\TrkWks\Parameters>
      "C:\WINDOWS\system32\trkwks.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 90624, File modification date = 18/08/2004  08:00, File description = Distributed Link Tracking Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |885929171|0xc9d3b7bb48f61a38e1773e55ecc30be8|
    ServiceDll=%SystemRoot%\System32\upnphost.dll <HKLM\System\ControlSet005\Services\upnphost\Parameters>
      "C:\WINDOWS\system32\upnphost.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 185344, File modification date = 18/08/2004  08:00, File description =   PNP-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-804537927|0x871b3601468cf8481ef82bddc0522fe8|
    ServiceDll=C:\WINDOWS\system32\w32time.dll <HKLM\System\ControlSet005\Services\W32Time\Parameters>
      "c:\windows\system32\w32time.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 175104, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1634519955|0x50bfc7dd604903f1ea75750ed9c619e0|
    ServiceDll=%SystemRoot%\System32\webclnt.dll <HKLM\System\ControlSet005\Services\WebClient\Parameters>
      "C:\WINDOWS\system32\webclnt.dll" File version = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536), File size = 68096, File modification date = 04/01/2006  03:36, File description = Web DAV Service DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2821, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-41513237|0x3a0c4a806d15258af1f54096d679d8b1|
    ServiceDll=%SystemRoot%\system32\wbem\WMIsvc.dll <HKLM\System\ControlSet005\Services\winmgmt\Parameters>
      "C:\WINDOWS\system32\wbem\wmisvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 145408, File modification date = 18/08/2004  08:00, File description = WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1307879944|0xe9a52faf729d12b373b668a42f8adfc3|
    ServiceDll=C:\WINDOWS\system32\MsPMSNSv.dll <HKLM\System\ControlSet005\Services\WmdmPmSN\Parameters>
      "c:\windows\system32\mspmsnsv.dll" File version = 10.0.3790.3646, File size = 25088, File modification date = 10/08/2004  20:45, File description = Microsoft Media Device Service Provider, Product Name = Windows Media Device Manager, Product version = 10.0.3790.3646, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp.) |-589532194|0xa477391b7a8b0a0daabadb17cf533a4b|
    ServiceDll=%SYSTEMROOT%\system32\wscsvc.dll <HKLM\System\ControlSet005\Services\wscsvc\Parameters>
      "C:\WINDOWS\system32\wscsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 81408, File modification date = 18/08/2004  08:00, File description = Windows Security Center Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1473129803|0x46e7eb8bb6b8bf7be92b591a00a3b3e3|
    ServiceDll=C:\WINDOWS\system32\wuauserv.dll <HKLM\System\ControlSet005\Services\wuauserv\Parameters>
      "c:\windows\system32\wuauserv.dll" File version = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158), File size = 6656, File modification date = 18/08/2004  08:00, File description = Windows Update AutoUpdate Service, Product Name = Microsoft Windows Operating System, Product version = 5.4.3790.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1702037055|0x1c07a16971c704b75793847f1318ca71|
    ServiceDll=%SystemRoot%\System32\wzcsvc.dll <HKLM\System\ControlSet005\Services\WZCSVC\Parameters>
      "C:\WINDOWS\system32\wzcsvc.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 359936, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1017919057|0x8e9a83578b122c87ef7ed2373573784f|
    ServiceDll=%SystemRoot%\System32\xmlprov.dll <HKLM\System\ControlSet005\Services\xmlprov\Parameters>
      "C:\WINDOWS\system32\xmlprov.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 129536, File modification date = 18/08/2004  08:00, File description = Network Provisioning Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2071627119|0x7f22dc518995f251560a5f1080052946|
  HKLM\System\ControlSet???\Services\*
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet001\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  08:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\DRIVERS\ACPIEC.sys <HKLM\System\ControlSet001\Services\ACPIEC>
      "c:\windows\system32\drivers\acpiec.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 11776, File modification date = 18/08/2004  08:00, File description =    ACPI, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-907087436|0xcea8d1da7696acbfc69a3823bcf1c738|
    ImagePath="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe" <HKLM\System\ControlSet001\Services\AddFiltr>
      "c:\program files\hewlett-packard\hp quick launch buttons\addfiltr.exe" File version = 1.0.0.1, File size = 126976, File modification date = 12/06/2006  09:27, File description = Add Filter For Usb, Product Name = HP Quick Launch Buttons, Product version = 6.0.8.1, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2006 Hewlett-Packard Development Company, L.P.) |342464659|0x127534fd27c18fe21ad05b4dc5ff5918|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet001\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet001\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  08:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\aliide.sys <HKLM\System\ControlSet001\Services\AliIde>
      "c:\windows\system32\drivers\aliide.sys" File version = 1.20, File size = 5248, File modification date = 17/08/2001  12:51, File description = ALi mini IDE Driver, Product Name = ALi mini IDE Driver, Product version = 1.20, Company name = Acer Laboratories Inc. (Copyright (C) Acer Laboratories Inc.  2000 ) |1465498541|0x1140ab9938809700b46bb88e46d72a96|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\arp1394.sys <HKLM\System\ControlSet001\Services\Arp1394>
      "c:\windows\system32\drivers\arp1394.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 18/08/2004  08:00, File description = IP/1394 Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1866048193|0xf0d692b0bffb46e30eb3cea168bbc49f|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe <HKLM\System\ControlSet001\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v2.0.50727\aspnet_state.exe" File version = 2.0.50727.42 (RTM.050727-4200), File size = 29896, File modification date = 23/09/2005  04:28, File description = Microsoft ASP.NET State Server, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2121340652|0xd33c507942299753868204cc7642fa27|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet001\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet001\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 03/08/2004  13:59, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet001\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  08:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet001\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  16:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\camc6aud.sys <HKLM\System\ControlSet001\Services\CAMCAUD>
      "c:\windows\system32\drivers\camc6aud.sys" File version = 6.14.10.0675, File size = 38144, File modification date = 21/08/2006  22:16, File description = Conexant WDM AC97 Audio Driver, Product Name = Conexant Audio Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |-2137843940|0x619fae09d910c78cc6aa4abdb5c42dcb|
    ImagePath=system32\drivers\camc6hal.sys <HKLM\System\ControlSet001\Services\CAMCHALA>
      "c:\windows\system32\drivers\camc6hal.sys" File version = 6.14.10.0675, File size = 530176, File modification date = 21/08/2006  22:16, File description = Conexant AmcHal Driver, Product Name = Conexant AmcHal Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |153275874|0x951a4bf4305cb16cf1014ebae9bf8113|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet001\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  08:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet001\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  08:00, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet001\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  08:00, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet001\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.42 (RTM.050727-4200), File size = 66240, File modification date = 23/09/2005  04:28, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2108567825|0x3c4d595e7f9b747325aef28b4adcaae5|
    ImagePath=system32\DRIVERS\CmBatt.sys <HKLM\System\ControlSet001\Services\CmBatt>
      "c:\windows\system32\drivers\cmbatt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14080, File modification date = 03/08/2004  18:07, File description = Control Method Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |992075117|0x4266be808f85826aedf3c64c1e240203|
    ImagePath=system32\DRIVERS\compbatt.sys <HKLM\System\ControlSet001\Services\Compbatt>
      "c:\windows\system32\drivers\compbatt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9344, File modification date = 17/08/2001  16:58, File description = Composite Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-703322978|0xdf1b1a24bf52d0ebc01ed4ece8979f50|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} <HKLM\System\ControlSet001\Services\COMSysApp>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  08:00, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1673880939|0xbca2a62fadd6458b0ce978f5b74d8dfa|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet001\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet001\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  08:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet001\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 18/08/2004  08:00, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet001\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  08:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet001\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  08:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet001\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  08:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet001\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet001\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet001\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=system32\DRIVERS\e100b325.sys <HKLM\System\ControlSet001\Services\E100B>
      "c:\windows\system32\drivers\e100b325.sys" File version = 8.0.27.0 built by: WinDDK, File size = 163328, File modification date = 22/08/2006  07:21, File description = Intel(R) PRO/100 Adapter NDIS 5.1 driver, Product Name = Intel(R) PRO/100 Adapter, Product version = 8.0.27.0, Company name = Intel Corporation (Copyright (C) 1995-2005 Intel Corporation.  All Rights Reserved.) |-767160625|0x83403675cab29e7a4b885b11e7c855d8|
    ImagePath=system32\DRIVERS\eabfiltr.sys <HKLM\System\ControlSet001\Services\eabfiltr>
      "c:\windows\system32\drivers\eabfiltr.sys" File version = 4.20.02.02, File size = 7808, File modification date = 19/09/2005  10:23, File description = QLB PS/2 Keyboard filter driver, Product Name = HPQuick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |538990764|0xb5cb3084046146fd2587d8c9b219feb4|
    ImagePath=system32\DRIVERS\eabusb.sys <HKLM\System\ControlSet001\Services\eabusb>
      "c:\windows\system32\drivers\eabusb.sys" File version = 4.20.02.02, File size = 5760, File modification date = 19/09/2005  10:24, File description = QLB USB Keyboard filter driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |1778506247|0x231f4547ae1e4b3e60eca66c3a96d218|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet001\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  08:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet001\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  08:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet001\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet001\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet001\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  08:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=system32\DRIVERS\cpqbttn.sys <HKLM\System\ControlSet001\Services\HBtnKey>
      "C:\WINDOWS\system32\drivers\cpqbttn.sys" File version = 4.20.02.02, File size = 9344, File modification date = 19/09/2005  10:24, File description = HP Tablet PC Key Button HID Driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2002-2005 Hewlett-Packard Development Company, L.P.) |1389021333|0x4d4d97671c63c3af869b3518e6054204|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet001\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  19:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
    ImagePath=C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe <HKLM\System\ControlSet001\Services\hpqwmiex>
      "c:\program files\hewlett-packard\shared\hpqwmiex.exe" File version = 2, 0, 1, 9, File size = 135168, File modification date = 02/05/2006  11:41, File description = hpqwmiex Module, Product Name = hpqwmiex Module, Product version = 2, 0, 1, 9, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2003-2006 Hewlett-Packard Development Company, L.P.) |-92200686|0x04c1dcbb226c6ae647b794833ce3ceb6|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet001\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet001\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet001\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  08:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath=system32\DRIVERS\ialmnt5.sys <HKLM\System\ControlSet001\Services\ialm>
      "c:\windows\system32\drivers\ialmnt5.sys" File version = 6.14.10.4410, File size = 1302812, File modification date = 19/10/2005  10:15, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |-659618172|0x5a8e05f1d5c36abd58cffa111eb325ea|
    ImagePath="C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe" <HKLM\System\ControlSet001\Services\IDriverT>
      "c:\program files\common files\installshield\driver\11\intel 32\idrivert.exe" File version = 11.00.28844, File size = 69632, File modification date = 03/04/2005  21:41, File description = IDriverT Module, Product Name = InstallShield (R), Product version = 11.00, Company name = Macrovision Corporation (Copyright (C) 2005 Macrovision Corporation) |2052838774|0xe91d5b62d0c2e1a1fb994adc481ca61b|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet001\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  08:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet001\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 18/08/2004  08:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet001\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  06:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet001\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet001\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  08:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet001\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  08:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet001\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet001\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet001\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  08:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet001\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  08:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet001\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 19/10/2001  11:22, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet001\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\DRIVERS\kbdhid.sys <HKLM\System\ControlSet001\Services\kbdhid>
      "c:\windows\system32\drivers\kbdhid.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 17/08/2004  11:54, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |745085733|0xd0c2e1e0b67a4b0ba4f1c5240c892cb4|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet001\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet001\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  21:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet001\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 18/08/2004  08:00, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet001\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mouhid.sys <HKLM\System\ControlSet001\Services\mouhid>
      "c:\windows\system32\drivers\mouhid.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 19/10/2001  17:33, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1481140716|0xdcf669a6b5682768d3fcf2906453ea97|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet001\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  08:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet001\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet001\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 18/08/2004  08:00, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=C:\WINDOWS\system32\msiexec.exe /V <HKLM\System\ControlSet001\Services\MSIServer>
      "c:\windows\system32\msiexec.exe" File version = 3.1.4000.1823, File size = 78848, File modification date = 03/05/2005  08:58, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.1823, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1201451646|0xf5f0146580e7023adb963879840777f8|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet001\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet001\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet001\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet001\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet001\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  08:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet001\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  08:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet001\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  08:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet001\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet001\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  08:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  08:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet001\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  08:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nic1394.sys <HKLM\System\ControlSet001\Services\NIC1394>
      "c:\windows\system32\drivers\nic1394.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61824, File modification date = 18/08/2004  08:00, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1582580385|0x5c5c53db4fef16cf87b9911c7e8c6fbc|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet001\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  08:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet001\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  08:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath=system32\DRIVERS\ohci1394.sys <HKLM\System\ControlSet001\Services\ohci1394>
      "c:\windows\system32\drivers\ohci1394.sys" File version = 5.1.2600.2524 (xpsp.040919-1030), File size = 61056, File modification date = 27/09/2004  22:19, File description = 1394 OpenHCI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |964499203|0x197ddf60b254a84d8656850397b5f923|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet001\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  10:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet001\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=C:\WINDOWS\SMINST\PCAngel.exe <HKLM\System\ControlSet001\Services\PCA>
      "c:\windows\sminst\pcangel.exe" File version = 4, 0, 1, 17, File size = 294912, File modification date = 12/01/2006  09:22, File description = PC Angel Application, Product Name = PCAngel Application, Product version = 4, 0, 1, 17, Company name = SoftThinks (Copyright 2006 SoftThinks) |471102478|0x5eeb45f500e3e97153cb75723f8ca185|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet001\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 17/08/2004  06:46, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet001\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 19/10/2001  11:32, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=system32\DRIVERS\pcmcia.sys <HKLM\System\ControlSet001\Services\Pcmcia>
      "c:\windows\system32\drivers\pcmcia.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119936, File modification date = 18/08/2004  08:00, File description =   PCMCIA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1848810773|0x602f2a5226d92b948723a13b8b263dbb|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet001\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet001\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  08:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=\SystemRoot\System32\drivers\prodrv06.sys <HKLM\System\ControlSet001\Services\prodrv06>
      "C:\WINDOWS\system32\drivers\prodrv06.sys" File version = 6.45, File size = 79488, File modification date = 13/05/2004  11:19, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |1015908929|0xf2e3c8f1eb6ba0733e0a1f6373df7957|
    ImagePath=System32\drivers\prohlp02.sys <HKLM\System\ControlSet001\Services\prohlp02>
      "c:\windows\system32\drivers\prohlp02.sys" File version = 2.45, File size = 111808, File modification date = 13/05/2004  13:00, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |872832002|0x150307b52807d0c493c605ab913038ad|
    ImagePath=System32\drivers\prosync1.sys <HKLM\System\ControlSet001\Services\prosync1>
      "c:\windows\system32\drivers\prosync1.sys" File version = 1.5, File size = 6944, File modification date = 06/09/2003  12:22, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |-213977908|0xf3471e7971ee62420451d958da635064|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet001\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  08:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet001\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  08:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet001\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  08:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasirda.sys <HKLM\System\ControlSet001\Services\Rasirda>
      "c:\windows\system32\drivers\rasirda.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19584, File modification date = 17/08/2001  16:51, File description = IrDA WAN Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2137000575|0x0207d26ddf796a193ccd9f83047bb5fc|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet001\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  08:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet001\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  08:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet001\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  08:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet001\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet001\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  08:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet001\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 18/08/2004  08:00, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet001\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2858 (xpsp.060227-1425), File size = 58112, File modification date = 28/02/2006  02:18, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2858, Company name =   (  .   .) |-455279266|0xd2a544c09ca6b1af92627179a3eb262c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet001\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  08:00, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet001\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet001\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  08:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet001\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet001\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  08:00, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\SE27bus.sys <HKLM\System\ControlSet001\Services\SE27bus>
      "c:\windows\system32\drivers\se27bus.sys" File version = V4.34, File size = 61600, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 Driver Driver, Product Name = Sony Ericsson Device 039 Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |38144385|0x59a9eb4073a39895af314780d0a032fa|
    ImagePath=system32\DRIVERS\SE27mdfl.sys <HKLM\System\ControlSet001\Services\SE27mdfl>
      "c:\windows\system32\drivers\se27mdfl.sys" File version = V4.34, File size = 9360, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product Name = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-12795651|0xd53e7e53107d1796825540129f8fe89f|
    ImagePath=system32\DRIVERS\SE27mdm.sys <HKLM\System\ControlSet001\Services\SE27mdm>
      "c:\windows\system32\drivers\se27mdm.sys" File version = V4.34, File size = 97184, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem WDM Driver, Product Name = Sony Ericsson Device 039 USB WMC Data Modem, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-1549162460|0x2afa2f65a6e91da5b5070e734769827e|
    ImagePath=system32\DRIVERS\SE27mgmt.sys <HKLM\System\ControlSet001\Services\SE27mgmt>
      "c:\windows\system32\drivers\se27mgmt.sys" File version = V4.34, File size = 88688, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Device Management Driver, Product Name = Sony Ericsson Device 039 USB WMC Device Management, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1239930657|0x5a33a8d7b44c7bd8abe248b4dcd1ff3c|
    ImagePath=system32\DRIVERS\se27nd5.sys <HKLM\System\ControlSet001\Services\se27nd5>
      "c:\windows\system32\drivers\se27nd5.sys" File version = V4.34, File size = 18704, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation (NDIS 5 Miniport), Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |912335448|0xbb30139683bbf3ee89ec931393d9335c|
    ImagePath=system32\DRIVERS\SE27obex.sys <HKLM\System\ControlSet001\Services\SE27obex>
      "c:\windows\system32\drivers\se27obex.sys" File version = V4.34, File size = 86560, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB WMC OBEX Interface Device Driver, Product Name = Sony Ericsson Device 039 USB WMC OBEX Interface, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1395277399|0x5da6ff71e94b9134ddd094ebb09f05e6|
    ImagePath=system32\DRIVERS\se27unic.sys <HKLM\System\ControlSet001\Services\se27unic>
      "c:\windows\system32\drivers\se27unic.sys" File version = V4.34, File size = 90800, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation, Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |2078164515|0x4d54a9d7c22157ab3d2442e8bcf5ecd2|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet001\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet001\Services\serenum>
      "c:\windows\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet001\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath=System32\drivers\sfdrv01.sys <HKLM\System\ControlSet001\Services\sfdrv01>
      "c:\windows\system32\drivers\sfdrv01.sys" File version = 1.37, File size = 50688, File modification date = 10/08/2005  12:44, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-1594913562|0x4c0d673281178cb496011a2e28571fc8|
    ImagePath=System32\drivers\sfhlp01.sys <HKLM\System\ControlSet001\Services\sfhlp01>
      "c:\windows\system32\drivers\sfhlp01.sys" File version = 1.5, File size = 4832, File modification date = 01/12/2003  15:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |1121420825|0x462aee0ea0481ea8bd45cac876a4ccc4|
    ImagePath=System32\drivers\sfhlp02.sys <HKLM\System\ControlSet001\Services\sfhlp02>
      "c:\windows\system32\drivers\sfhlp02.sys" File version = 2.3, File size = 6656, File modification date = 16/05/2005  13:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-565067900|0x15be2b5e4dc5b8623cf167720682abc9|
    ImagePath=System32\drivers\sfsync02.sys <HKLM\System\ControlSet001\Services\sfsync02>
      "c:\windows\system32\drivers\sfsync02.sys" File version = 2.12, File size = 19968, File modification date = 10/08/2005  14:06, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |1223380688|0xefebbc1d13fdb77a6af4eddfc7232edf|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\smcirda.sys <HKLM\System\ControlSet001\Services\SMCIRDA>
      "c:\windows\system32\drivers\smcirda.sys" File version = 5.1.2462.0, File size = 35913, File modification date = 19/10/2001  16:43, File description = SMC IrCC IrDA FIR NDIS 5.0  , Product Name =    , Product version = 5.1.2462.0, Company name = SMC (Copyright  SMC 1996-2001) |-89736589|0x27c56365d6f07347e4e0d0e17c4907cf|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet001\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet001\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet001\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet001\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet001\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet001\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 18/08/2004  08:00, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet001\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=C:\WINDOWS\system32\dllhost.exe /Processid:{3201D776-635E-44FA-91C3-EC7F9DBC91A8} <HKLM\System\ControlSet001\Services\SwPrv>
      "c:\windows\system32\dllhost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5120, File modification date = 18/08/2004  08:00, File description = COM Surrogate, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1673880939|0xbca2a62fadd6458b0ce978f5b74d8dfa|
    ImagePath=system32\DRIVERS\SynTP.sys <HKLM\System\ControlSet001\Services\SynTP>
      "c:\windows\system32\drivers\syntp.sys" File version = 8.3.8 16Jun06, File size = 193120, File modification date = 16/06/2006  15:40, File description = Synaptics Touchpad Driver, Product Name = Synaptics Pointing Device Driver, Product version = 8.3.8 16Jun06, Company name = Synaptics, Inc. (Copyright (C) Synaptics, Inc. 1996-2006) |253350277|0x369d0626687a968182a9db40fe8a0905|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet001\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet001\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet001\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet001\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  07:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet001\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wdfmgr.exe <HKLM\System\ControlSet001\Services\UMWdf>
      "c:\windows\system32\wdfmgr.exe" File version = 5.2.3790.1230 built by: DNSRV(bld4act), File size = 38912, File modification date = 10/08/2004  18:05, File description = Windows User Mode Driver Manager, Product Name = Microsoft Windows Operating System, Product version = 5.2.3790.1230, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1075300549|0xc81b8635dee0d3ef5f64b3dd643023a5|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet001\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 209408, File modification date = 18/08/2004  08:00, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1865716387|0xaff2e5045961bbc0a602bb6f95eb1345|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet001\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  08:00, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet001\Services\usbccgp>
      "c:\windows\system32\drivers\usbccgp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  20:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet001\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 30080, File modification date = 19/04/2006  11:50, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-539531644|0xb0d7020386c7187ef9c5a9643f289cd3|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet001\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 18/08/2004  08:00, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
    ImagePath=system32\DRIVERS\usbprint.sys <HKLM\System\ControlSet001\Services\usbprint>
      "c:\windows\system32\drivers\usbprint.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  20:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet001\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  19:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet001\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  20:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet001\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 20608, File modification date = 19/04/2006  11:50, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450089368|0xff6e4fdeb82dc228efa490336409c6bd|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet001\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=system32\DRIVERS\viaide.sys <HKLM\System\ControlSet001\Services\ViaIde>
      "c:\windows\system32\drivers\viaide.sys" File version = 1.00.01.01, File size = 5376, File modification date = 03/08/2004  13:59, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft(R) Windows NT(R) Operating System, Product version = 5.00.1636.1, Company name = Microsoft Corporation (Copyright (C) VIA Technologies, Inc. 2000) |-48370474|0x59cb1338ad3654417bea49636457f65d|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet001\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 18/08/2004  08:00, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=system32\DRIVERS\w29n51.sys <HKLM\System\ControlSet001\Services\w29n51>
      "c:\windows\system32\drivers\w29n51.sys" File version = 9.0.4.17 Driver, File size = 2206720, File modification date = 17/07/2006  15:17, File description = Intel Wireless LAN Driver, Product Name = Intel Wireless LAN Adapter, Product version = (null), Company name = Intel Corporation (Copyright  Intel Corporation 2004-2006) |384020172|0x68eb5bc07781a36a63633541c11e1ad6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet001\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet001\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet001\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=c:\program files\windows media connect\mswmccds.exe <HKLM\System\ControlSet001\Services\WmcCds>
      "c:\program files\windows media connect\mswmccds.exe" File version = 5.1.2600.1 built by: DNSRV(bld4act), File size = 483328, File modification date = 10/08/2004  20:46, File description = Windows Media Connect, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.1, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25093542|0xb05d05da37fe4f60d95da89f856f74da|
    ImagePath=C:\Program Files\Windows Media Connect\mswmcls.exe <HKLM\System\ControlSet001\Services\WmcCdsLs>
      "c:\program files\windows media connect\mswmcls.exe" File version = 5.1.2600.1 built by: DNSRV(bld4act), File size = 28160, File modification date = 10/08/2004  17:50, File description = Windows Media Connect, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.1, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1373243116|0x28963bbcb4536ca89cbc37b8e2d36cb2|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wmiacpi.sys <HKLM\System\ControlSet001\Services\WmiAcpi>
      "C:\WINDOWS\system32\drivers\wmiacpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8832, File modification date = 03/08/2004  18:07, File description = Windows Management Interface for ACPI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1211174249|0xae2c8544e747c20062db27456ea2d67a|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet001\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 18/08/2004  08:00, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath=\SystemRoot\System32\drivers\ws2ifsl.sys <HKLM\System\ControlSet001\Services\WS2IFSL>
      "C:\WINDOWS\system32\drivers\ws2ifsl.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  08:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet001\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet002\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  08:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\DRIVERS\ACPIEC.sys <HKLM\System\ControlSet002\Services\ACPIEC>
      "c:\windows\system32\drivers\acpiec.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 11776, File modification date = 18/08/2004  08:00, File description =    ACPI, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-907087436|0xcea8d1da7696acbfc69a3823bcf1c738|
    ImagePath="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe" <HKLM\System\ControlSet002\Services\AddFiltr>
      "c:\program files\hewlett-packard\hp quick launch buttons\addfiltr.exe" File version = 1.0.0.1, File size = 126976, File modification date = 12/06/2006  09:27, File description = Add Filter For Usb, Product Name = HP Quick Launch Buttons, Product version = 6.0.8.1, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2006 Hewlett-Packard Development Company, L.P.) |342464659|0x127534fd27c18fe21ad05b4dc5ff5918|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet002\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet002\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  08:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet002\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  08:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath=system32\DRIVERS\aliide.sys <HKLM\System\ControlSet002\Services\AliIde>
      "c:\windows\system32\drivers\aliide.sys" File version = 1.20, File size = 5248, File modification date = 17/08/2001  12:51, File description = ALi mini IDE Driver, Product Name = ALi mini IDE Driver, Product version = 1.20, Company name = Acer Laboratories Inc. (Copyright (C) Acer Laboratories Inc.  2000 ) |1465498541|0x1140ab9938809700b46bb88e46d72a96|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\arp1394.sys <HKLM\System\ControlSet002\Services\Arp1394>
      "c:\windows\system32\drivers\arp1394.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 18/08/2004  08:00, File description = IP/1394 Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1866048193|0xf0d692b0bffb46e30eb3cea168bbc49f|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe <HKLM\System\ControlSet002\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v1.1.4322\aspnet_state.exe" File version = 1.1.4322.2032, File size = 32768, File modification date = 14/07/2004  21:49, File description = aspnet_state.exe, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.2032, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |1073067840|0xe1a1206a4fb19b675e947b29ccd25fba|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet002\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet002\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 03/08/2004  13:59, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet002\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  08:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet002\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  16:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\camc6aud.sys <HKLM\System\ControlSet002\Services\CAMCAUD>
      "c:\windows\system32\drivers\camc6aud.sys" File version = 6.14.10.0675, File size = 38144, File modification date = 21/08/2006  22:16, File description = Conexant WDM AC97 Audio Driver, Product Name = Conexant Audio Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |-2137843940|0x619fae09d910c78cc6aa4abdb5c42dcb|
    ImagePath=system32\drivers\camc6hal.sys <HKLM\System\ControlSet002\Services\CAMCHALA>
      "c:\windows\system32\drivers\camc6hal.sys" File version = 6.14.10.0675, File size = 530176, File modification date = 21/08/2006  22:16, File description = Conexant AmcHal Driver, Product Name = Conexant AmcHal Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |153275874|0x951a4bf4305cb16cf1014ebae9bf8113|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet002\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  08:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet002\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  08:00, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet002\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  08:00, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet002\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.42 (RTM.050727-4200), File size = 66240, File modification date = 23/09/2005  04:28, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2108567825|0x3c4d595e7f9b747325aef28b4adcaae5|
    ImagePath=system32\DRIVERS\CmBatt.sys <HKLM\System\ControlSet002\Services\CmBatt>
      "c:\windows\system32\drivers\cmbatt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14080, File modification date = 03/08/2004  18:07, File description = Control Method Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |992075117|0x4266be808f85826aedf3c64c1e240203|
    ImagePath=system32\DRIVERS\compbatt.sys <HKLM\System\ControlSet002\Services\Compbatt>
      "c:\windows\system32\drivers\compbatt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9344, File modification date = 17/08/2001  16:58, File description = Composite Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-703322978|0xdf1b1a24bf52d0ebc01ed4ece8979f50|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet002\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet002\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  08:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet002\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 18/08/2004  08:00, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet002\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  08:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet002\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  08:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet002\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  08:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet002\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet002\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet002\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=system32\DRIVERS\e100b325.sys <HKLM\System\ControlSet002\Services\E100B>
      "c:\windows\system32\drivers\e100b325.sys" File version = 8.0.27.0 built by: WinDDK, File size = 163328, File modification date = 22/08/2006  07:21, File description = Intel(R) PRO/100 Adapter NDIS 5.1 driver, Product Name = Intel(R) PRO/100 Adapter, Product version = 8.0.27.0, Company name = Intel Corporation (Copyright (C) 1995-2005 Intel Corporation.  All Rights Reserved.) |-767160625|0x83403675cab29e7a4b885b11e7c855d8|
    ImagePath=system32\DRIVERS\eabfiltr.sys <HKLM\System\ControlSet002\Services\eabfiltr>
      "c:\windows\system32\drivers\eabfiltr.sys" File version = 4.20.02.02, File size = 7808, File modification date = 19/09/2005  10:23, File description = QLB PS/2 Keyboard filter driver, Product Name = HPQuick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |538990764|0xb5cb3084046146fd2587d8c9b219feb4|
    ImagePath=system32\DRIVERS\eabusb.sys <HKLM\System\ControlSet002\Services\eabusb>
      "c:\windows\system32\drivers\eabusb.sys" File version = 4.20.02.02, File size = 5760, File modification date = 19/09/2005  10:24, File description = QLB USB Keyboard filter driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |1778506247|0x231f4547ae1e4b3e60eca66c3a96d218|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet002\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  08:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet002\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  08:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet002\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet002\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=System32\DRIVERS\gmer.sys <HKLM\System\ControlSet002\Services\gmer>
      "c:\windows\system32\drivers\gmer.sys" File version = 1, 0, 14, 4401, File size = 85969, File modification date = 25/10/2008  21:02, File description = GMER Driver http://www.gmer.net, Product Name = GMER, Product version = 1, 0, 14, 4401, Company name = GMER (Copyright (C) GMER 2003-2007) |-798487648|0xb56eb0a2210980e76390bd670bcb618b|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet002\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  08:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=system32\DRIVERS\cpqbttn.sys <HKLM\System\ControlSet002\Services\HBtnKey>
      "C:\WINDOWS\system32\drivers\cpqbttn.sys" File version = 4.20.02.02, File size = 9344, File modification date = 19/09/2005  10:24, File description = HP Tablet PC Key Button HID Driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2002-2005 Hewlett-Packard Development Company, L.P.) |1389021333|0x4d4d97671c63c3af869b3518e6054204|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet002\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  19:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
    ImagePath=C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe <HKLM\System\ControlSet002\Services\hpqwmiex>
      "c:\program files\hewlett-packard\shared\hpqwmiex.exe" File version = 2, 0, 1, 9, File size = 135168, File modification date = 02/05/2006  11:41, File description = hpqwmiex Module, Product Name = hpqwmiex Module, Product version = 2, 0, 1, 9, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2003-2006 Hewlett-Packard Development Company, L.P.) |-92200686|0x04c1dcbb226c6ae647b794833ce3ceb6|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet002\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet002\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet002\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  08:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath=system32\DRIVERS\ialmnt5.sys <HKLM\System\ControlSet002\Services\ialm>
      "c:\windows\system32\drivers\ialmnt5.sys" File version = 6.14.10.4410, File size = 1302812, File modification date = 19/10/2005  10:15, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |-659618172|0x5a8e05f1d5c36abd58cffa111eb325ea|
    ImagePath="c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe" <HKLM\System\ControlSet002\Services\IDriverT>
      "c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe" File version = 10.50.125, File size = 73728, File modification date = 21/10/2004  23:24, File description = IDriverT Module, Product Name = InstallShield (R), Product version = 10.50, Company name = Macrovision Corporation (Copyright (C) 2004 Macrovision Corporation) |590388687|0x3a2a3fddda054fc44463263cd1c0e90b|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet002\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  08:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=%systemroot%\system32\imapi.exe <HKLM\System\ControlSet002\Services\ImapiService>
      "C:\WINDOWS\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 18/08/2004  08:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet002\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  06:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet002\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet002\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  08:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet002\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  08:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet002\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet002\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet002\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  08:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet002\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  08:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\58480314.sys <HKLM\System\ControlSet002\Services\is-8EJH0drv>
      "c:\windows\system32\drivers\58480314.sys" File version = 7.0.0.312, File size = 148496, File modification date = 08/07/2008  11:54, File description = Klif Mini-Filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-503501263|0x0aa3ad071827118fcc8f37f7a6ab7aa1|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet002\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 19/10/2001  11:22, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet002\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\DRIVERS\kbdhid.sys <HKLM\System\ControlSet002\Services\kbdhid>
      "c:\windows\system32\drivers\kbdhid.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 17/08/2004  11:54, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |745085733|0xd0c2e1e0b67a4b0ba4f1c5240c892cb4|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet002\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet002\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  21:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet002\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 18/08/2004  08:00, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet002\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mouhid.sys <HKLM\System\ControlSet002\Services\mouhid>
      "c:\windows\system32\drivers\mouhid.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 19/10/2001  17:33, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1481140716|0xdcf669a6b5682768d3fcf2906453ea97|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet002\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  08:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet002\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet002\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 18/08/2004  08:00, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=%systemroot%\system32\msiexec.exe /V <HKLM\System\ControlSet002\Services\MSIServer>
      "c:\windows\system32\msiexec.exe" File version = 3.1.4000.1823, File size = 78848, File modification date = 03/05/2005  08:58, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.1823, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1201451646|0xf5f0146580e7023adb963879840777f8|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet002\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet002\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet002\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet002\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet002\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  08:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet002\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  08:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet002\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  08:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet002\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet002\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  08:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  08:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet002\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  08:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nic1394.sys <HKLM\System\ControlSet002\Services\NIC1394>
      "c:\windows\system32\drivers\nic1394.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61824, File modification date = 18/08/2004  08:00, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1582580385|0x5c5c53db4fef16cf87b9911c7e8c6fbc|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS <HKLM\System\ControlSet002\Services\NPDriver>
      "\\?\c:\windows\system32\drivers\npdriver.sys" File version = 16.00.0.22, File size = 34578, File modification date = 14/08/2002  03:03, File description = Norton Protection Driver, Product Name = Norton Utilities, Product version = 16.00.0.22, Company name = Symantec Corporation (Copyright (C) 2003 Symantec Corporation) |620453588|0x410ab482d8a1e1655a7158a7b5c72ce7|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet002\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  08:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet002\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  08:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath=system32\DRIVERS\ohci1394.sys <HKLM\System\ControlSet002\Services\ohci1394>
      "c:\windows\system32\drivers\ohci1394.sys" File version = 5.1.2600.2524 (xpsp.040919-1030), File size = 61056, File modification date = 27/09/2004  22:19, File description = 1394 OpenHCI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |964499203|0x197ddf60b254a84d8656850397b5f923|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet002\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  10:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet002\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=C:\WINDOWS\SMINST\PCAngel.exe <HKLM\System\ControlSet002\Services\PCA>
      "c:\windows\sminst\pcangel.exe" File version = 4, 0, 1, 17, File size = 294912, File modification date = 12/01/2006  09:22, File description = PC Angel Application, Product Name = PCAngel Application, Product version = 4, 0, 1, 17, Company name = SoftThinks (Copyright 2006 SoftThinks) |471102478|0x5eeb45f500e3e97153cb75723f8ca185|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet002\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 17/08/2004  06:46, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet002\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 19/10/2001  11:32, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=system32\DRIVERS\pcmcia.sys <HKLM\System\ControlSet002\Services\Pcmcia>
      "c:\windows\system32\drivers\pcmcia.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119936, File modification date = 18/08/2004  08:00, File description =   PCMCIA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1848810773|0x602f2a5226d92b948723a13b8b263dbb|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet002\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet002\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  08:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=\SystemRoot\System32\drivers\prodrv06.sys <HKLM\System\ControlSet002\Services\prodrv06>
      "C:\WINDOWS\system32\drivers\prodrv06.sys" File version = 6.45, File size = 79488, File modification date = 13/05/2004  11:19, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |1015908929|0xf2e3c8f1eb6ba0733e0a1f6373df7957|
    ImagePath=System32\drivers\prohlp02.sys <HKLM\System\ControlSet002\Services\prohlp02>
      "c:\windows\system32\drivers\prohlp02.sys" File version = 2.45, File size = 111808, File modification date = 13/05/2004  13:00, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |872832002|0x150307b52807d0c493c605ab913038ad|
    ImagePath=System32\drivers\prosync1.sys <HKLM\System\ControlSet002\Services\prosync1>
      "c:\windows\system32\drivers\prosync1.sys" File version = 1.5, File size = 6944, File modification date = 06/09/2003  12:22, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |-213977908|0xf3471e7971ee62420451d958da635064|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet002\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  08:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet002\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  08:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet002\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  08:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasirda.sys <HKLM\System\ControlSet002\Services\Rasirda>
      "c:\windows\system32\drivers\rasirda.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19584, File modification date = 17/08/2001  16:51, File description = IrDA WAN Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2137000575|0x0207d26ddf796a193ccd9f83047bb5fc|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet002\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  08:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet002\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  08:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet002\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  08:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet002\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet002\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  08:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet002\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 18/08/2004  08:00, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet002\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2858 (xpsp.060227-1425), File size = 58112, File modification date = 28/02/2006  02:18, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2858, Company name =   (  .   .) |-455279266|0xd2a544c09ca6b1af92627179a3eb262c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet002\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  08:00, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet002\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet002\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  08:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet002\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\SAVRT.SYS <HKLM\System\ControlSet002\Services\SAVRT>
      "\\?\c:\windows\system32\drivers\savrt.sys" File version = 9.0.1.35, File size = 235184, File modification date = 25/07/2002  19:28, File description = AutoProtect, Product Name = Symantec AntiVirus AutoProtect, Product version = 9.0, Company name = Symantec Corporation (Copyright (c) 2002 Symantec Corporation) |1539973378|0x97bd082cb7adc2167cb544bd7768e339|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\SAVRTPEL.SYS <HKLM\System\ControlSet002\Services\SAVRTPEL>
      "\\?\c:\windows\system32\drivers\savrtpel.sys" File version = 9.0.1.35, File size = 34992, File modification date = 25/07/2002  19:28, File description = SAVRTPEL, Product Name = Symantec AntiVirus AutoProtect, Product version = 9.0, Company name = Symantec Corporation (Copyright (c) 2002 Symantec Corporation) |-327010652|0xee05e06b3cf953339c0b90bcc46b9496|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet002\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  08:00, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\SE27bus.sys <HKLM\System\ControlSet002\Services\SE27bus>
      "c:\windows\system32\drivers\se27bus.sys" File version = V4.34, File size = 61600, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 Driver Driver, Product Name = Sony Ericsson Device 039 Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |38144385|0x59a9eb4073a39895af314780d0a032fa|
    ImagePath=system32\DRIVERS\SE27mdfl.sys <HKLM\System\ControlSet002\Services\SE27mdfl>
      "c:\windows\system32\drivers\se27mdfl.sys" File version = V4.34, File size = 9360, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product Name = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-12795651|0xd53e7e53107d1796825540129f8fe89f|
    ImagePath=system32\DRIVERS\SE27mdm.sys <HKLM\System\ControlSet002\Services\SE27mdm>
      "c:\windows\system32\drivers\se27mdm.sys" File version = V4.34, File size = 97184, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem WDM Driver, Product Name = Sony Ericsson Device 039 USB WMC Data Modem, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-1549162460|0x2afa2f65a6e91da5b5070e734769827e|
    ImagePath=system32\DRIVERS\SE27mgmt.sys <HKLM\System\ControlSet002\Services\SE27mgmt>
      "c:\windows\system32\drivers\se27mgmt.sys" File version = V4.34, File size = 88688, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Device Management Driver, Product Name = Sony Ericsson Device 039 USB WMC Device Management, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1239930657|0x5a33a8d7b44c7bd8abe248b4dcd1ff3c|
    ImagePath=system32\DRIVERS\se27nd5.sys <HKLM\System\ControlSet002\Services\se27nd5>
      "c:\windows\system32\drivers\se27nd5.sys" File version = V4.34, File size = 18704, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation (NDIS 5 Miniport), Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |912335448|0xbb30139683bbf3ee89ec931393d9335c|
    ImagePath=system32\DRIVERS\SE27obex.sys <HKLM\System\ControlSet002\Services\SE27obex>
      "c:\windows\system32\drivers\se27obex.sys" File version = V4.34, File size = 86560, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB WMC OBEX Interface Device Driver, Product Name = Sony Ericsson Device 039 USB WMC OBEX Interface, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1395277399|0x5da6ff71e94b9134ddd094ebb09f05e6|
    ImagePath=system32\DRIVERS\se27unic.sys <HKLM\System\ControlSet002\Services\se27unic>
      "c:\windows\system32\drivers\se27unic.sys" File version = V4.34, File size = 90800, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation, Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |2078164515|0x4d54a9d7c22157ab3d2442e8bcf5ecd2|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet002\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet002\Services\serenum>
      "c:\windows\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet002\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath=System32\drivers\sfdrv01.sys <HKLM\System\ControlSet002\Services\sfdrv01>
      "c:\windows\system32\drivers\sfdrv01.sys" File version = 1.37, File size = 50688, File modification date = 10/08/2005  12:44, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-1594913562|0x4c0d673281178cb496011a2e28571fc8|
    ImagePath=System32\drivers\sfhlp01.sys <HKLM\System\ControlSet002\Services\sfhlp01>
      "c:\windows\system32\drivers\sfhlp01.sys" File version = 1.5, File size = 4832, File modification date = 01/12/2003  15:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |1121420825|0x462aee0ea0481ea8bd45cac876a4ccc4|
    ImagePath=System32\drivers\sfhlp02.sys <HKLM\System\ControlSet002\Services\sfhlp02>
      "c:\windows\system32\drivers\sfhlp02.sys" File version = 2.3, File size = 6656, File modification date = 16/05/2005  13:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-565067900|0x15be2b5e4dc5b8623cf167720682abc9|
    ImagePath=System32\drivers\sfsync02.sys <HKLM\System\ControlSet002\Services\sfsync02>
      "c:\windows\system32\drivers\sfsync02.sys" File version = 2.12, File size = 19968, File modification date = 10/08/2005  14:06, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |1223380688|0xefebbc1d13fdb77a6af4eddfc7232edf|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\smcirda.sys <HKLM\System\ControlSet002\Services\SMCIRDA>
      "c:\windows\system32\drivers\smcirda.sys" File version = 5.1.2462.0, File size = 35913, File modification date = 19/10/2001  16:43, File description = SMC IrCC IrDA FIR NDIS 5.0  , Product Name =    , Product version = 5.1.2462.0, Company name = SMC (Copyright  SMC 1996-2001) |-89736589|0x27c56365d6f07347e4e0d0e17c4907cf|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet002\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet002\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet002\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet002\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet002\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet002\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 18/08/2004  08:00, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet002\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\SYMREDRV.SYS <HKLM\System\ControlSet002\Services\SYMREDRV>
      "\\?\c:\windows\system32\drivers\symredrv.sys" File version = 4.7.0.58, File size = 15640, File modification date = 15/08/2002  14:45, File description = Redirector Filter, Product Name = Symantec Security Drivers, Product version = 4.7, Company name = Symantec Corporation (Copyright (c) 2001 Symantec Corporation) |1788001501|0x792cd16e3a656b5c0ec060e9ca490178|
    ImagePath=system32\DRIVERS\SynTP.sys <HKLM\System\ControlSet002\Services\SynTP>
      "c:\windows\system32\drivers\syntp.sys" File version = 8.3.8 16Jun06, File size = 193120, File modification date = 16/06/2006  15:40, File description = Synaptics Touchpad Driver, Product Name = Synaptics Pointing Device Driver, Product version = 8.3.8 16Jun06, Company name = Synaptics, Inc. (Copyright (C) Synaptics, Inc. 1996-2006) |253350277|0x369d0626687a968182a9db40fe8a0905|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet002\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet002\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet002\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet002\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  07:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet002\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wdfmgr.exe <HKLM\System\ControlSet002\Services\UMWdf>
      "c:\windows\system32\wdfmgr.exe" File version = 5.2.3790.1230 built by: DNSRV(bld4act), File size = 38912, File modification date = 10/08/2004  18:05, File description = Windows User Mode Driver Manager, Product Name = Microsoft Windows Operating System, Product version = 5.2.3790.1230, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1075300549|0xc81b8635dee0d3ef5f64b3dd643023a5|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet002\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 209408, File modification date = 18/08/2004  08:00, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1865716387|0xaff2e5045961bbc0a602bb6f95eb1345|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet002\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  08:00, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet002\Services\usbccgp>
      "c:\windows\system32\drivers\usbccgp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  20:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet002\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 30080, File modification date = 19/04/2006  11:50, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-539531644|0xb0d7020386c7187ef9c5a9643f289cd3|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet002\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 18/08/2004  08:00, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
    ImagePath=system32\DRIVERS\usbprint.sys <HKLM\System\ControlSet002\Services\usbprint>
      "c:\windows\system32\drivers\usbprint.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  20:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet002\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  19:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet002\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  20:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet002\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 20608, File modification date = 19/04/2006  11:50, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450089368|0xff6e4fdeb82dc228efa490336409c6bd|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet002\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=system32\DRIVERS\viaide.sys <HKLM\System\ControlSet002\Services\ViaIde>
      "c:\windows\system32\drivers\viaide.sys" File version = 1.00.01.01, File size = 5376, File modification date = 03/08/2004  13:59, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft(R) Windows NT(R) Operating System, Product version = 5.00.1636.1, Company name = Microsoft Corporation (Copyright (C) VIA Technologies, Inc. 2000) |-48370474|0x59cb1338ad3654417bea49636457f65d|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet002\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 18/08/2004  08:00, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=system32\DRIVERS\w29n51.sys <HKLM\System\ControlSet002\Services\w29n51>
      "c:\windows\system32\drivers\w29n51.sys" File version = 9.0.4.17 Driver, File size = 2206720, File modification date = 17/07/2006  15:17, File description = Intel Wireless LAN Driver, Product Name = Intel Wireless LAN Adapter, Product version = (null), Company name = Intel Corporation (Copyright  Intel Corporation 2004-2006) |384020172|0x68eb5bc07781a36a63633541c11e1ad6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet002\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet002\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet002\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=c:\program files\windows media connect\mswmccds.exe <HKLM\System\ControlSet002\Services\WmcCds>
      "c:\program files\windows media connect\mswmccds.exe" File version = 5.1.2600.1 built by: DNSRV(bld4act), File size = 483328, File modification date = 10/08/2004  20:46, File description = Windows Media Connect, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.1, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25093542|0xb05d05da37fe4f60d95da89f856f74da|
    ImagePath=C:\Program Files\Windows Media Connect\mswmcls.exe <HKLM\System\ControlSet002\Services\WmcCdsLs>
      "c:\program files\windows media connect\mswmcls.exe" File version = 5.1.2600.1 built by: DNSRV(bld4act), File size = 28160, File modification date = 10/08/2004  17:50, File description = Windows Media Connect, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.1, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1373243116|0x28963bbcb4536ca89cbc37b8e2d36cb2|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wmiacpi.sys <HKLM\System\ControlSet002\Services\WmiAcpi>
      "C:\WINDOWS\system32\drivers\wmiacpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8832, File modification date = 03/08/2004  18:07, File description = Windows Management Interface for ACPI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1211174249|0xae2c8544e747c20062db27456ea2d67a|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet002\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 18/08/2004  08:00, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath=\SystemRoot\System32\drivers\ws2ifsl.sys <HKLM\System\ControlSet002\Services\WS2IFSL>
      "C:\WINDOWS\system32\drivers\ws2ifsl.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  08:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet002\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet003\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  08:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\DRIVERS\ACPIEC.sys <HKLM\System\ControlSet003\Services\ACPIEC>
      "c:\windows\system32\drivers\acpiec.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 11776, File modification date = 18/08/2004  08:00, File description =    ACPI, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-907087436|0xcea8d1da7696acbfc69a3823bcf1c738|
    ImagePath="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe" <HKLM\System\ControlSet003\Services\AddFiltr>
      "c:\program files\hewlett-packard\hp quick launch buttons\addfiltr.exe" File version = 1.0.0.1, File size = 126976, File modification date = 12/06/2006  09:27, File description = Add Filter For Usb, Product Name = HP Quick Launch Buttons, Product version = 6.0.8.1, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2006 Hewlett-Packard Development Company, L.P.) |342464659|0x127534fd27c18fe21ad05b4dc5ff5918|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet003\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet003\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  08:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet003\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  08:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath=system32\DRIVERS\aliide.sys <HKLM\System\ControlSet003\Services\AliIde>
      "c:\windows\system32\drivers\aliide.sys" File version = 1.20, File size = 5248, File modification date = 17/08/2001  12:51, File description = ALi mini IDE Driver, Product Name = ALi mini IDE Driver, Product version = 1.20, Company name = Acer Laboratories Inc. (Copyright (C) Acer Laboratories Inc.  2000 ) |1465498541|0x1140ab9938809700b46bb88e46d72a96|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\arp1394.sys <HKLM\System\ControlSet003\Services\Arp1394>
      "c:\windows\system32\drivers\arp1394.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 18/08/2004  08:00, File description = IP/1394 Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1866048193|0xf0d692b0bffb46e30eb3cea168bbc49f|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe <HKLM\System\ControlSet003\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v1.1.4322\aspnet_state.exe" File version = 1.1.4322.2032, File size = 32768, File modification date = 14/07/2004  21:49, File description = aspnet_state.exe, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.2032, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |1073067840|0xe1a1206a4fb19b675e947b29ccd25fba|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet003\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet003\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 03/08/2004  13:59, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet003\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  08:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet003\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  16:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\camc6aud.sys <HKLM\System\ControlSet003\Services\CAMCAUD>
      "c:\windows\system32\drivers\camc6aud.sys" File version = 6.14.10.0675, File size = 38144, File modification date = 21/08/2006  22:16, File description = Conexant WDM AC97 Audio Driver, Product Name = Conexant Audio Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |-2137843940|0x619fae09d910c78cc6aa4abdb5c42dcb|
    ImagePath=system32\drivers\camc6hal.sys <HKLM\System\ControlSet003\Services\CAMCHALA>
      "c:\windows\system32\drivers\camc6hal.sys" File version = 6.14.10.0675, File size = 530176, File modification date = 21/08/2006  22:16, File description = Conexant AmcHal Driver, Product Name = Conexant AmcHal Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |153275874|0x951a4bf4305cb16cf1014ebae9bf8113|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet003\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  08:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet003\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  08:00, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet003\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  08:00, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet003\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.42 (RTM.050727-4200), File size = 66240, File modification date = 23/09/2005  04:28, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2108567825|0x3c4d595e7f9b747325aef28b4adcaae5|
    ImagePath=system32\DRIVERS\CmBatt.sys <HKLM\System\ControlSet003\Services\CmBatt>
      "c:\windows\system32\drivers\cmbatt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14080, File modification date = 03/08/2004  18:07, File description = Control Method Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |992075117|0x4266be808f85826aedf3c64c1e240203|
    ImagePath=system32\DRIVERS\compbatt.sys <HKLM\System\ControlSet003\Services\Compbatt>
      "c:\windows\system32\drivers\compbatt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9344, File modification date = 17/08/2001  16:58, File description = Composite Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-703322978|0xdf1b1a24bf52d0ebc01ed4ece8979f50|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet003\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet003\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  08:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet003\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 18/08/2004  08:00, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet003\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  08:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet003\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  08:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet003\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  08:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet003\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet003\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet003\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=system32\DRIVERS\e100b325.sys <HKLM\System\ControlSet003\Services\E100B>
      "c:\windows\system32\drivers\e100b325.sys" File version = 8.0.27.0 built by: WinDDK, File size = 163328, File modification date = 22/08/2006  07:21, File description = Intel(R) PRO/100 Adapter NDIS 5.1 driver, Product Name = Intel(R) PRO/100 Adapter, Product version = 8.0.27.0, Company name = Intel Corporation (Copyright (C) 1995-2005 Intel Corporation.  All Rights Reserved.) |-767160625|0x83403675cab29e7a4b885b11e7c855d8|
    ImagePath=system32\DRIVERS\eabfiltr.sys <HKLM\System\ControlSet003\Services\eabfiltr>
      "c:\windows\system32\drivers\eabfiltr.sys" File version = 4.20.02.02, File size = 7808, File modification date = 19/09/2005  10:23, File description = QLB PS/2 Keyboard filter driver, Product Name = HPQuick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |538990764|0xb5cb3084046146fd2587d8c9b219feb4|
    ImagePath=system32\DRIVERS\eabusb.sys <HKLM\System\ControlSet003\Services\eabusb>
      "c:\windows\system32\drivers\eabusb.sys" File version = 4.20.02.02, File size = 5760, File modification date = 19/09/2005  10:24, File description = QLB USB Keyboard filter driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |1778506247|0x231f4547ae1e4b3e60eca66c3a96d218|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet003\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet003\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  08:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet003\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  08:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet003\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet003\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=System32\DRIVERS\gmer.sys <HKLM\System\ControlSet003\Services\gmer>
      "c:\windows\system32\drivers\gmer.sys" File version = 1, 0, 14, 4401, File size = 85969, File modification date = 25/10/2008  21:02, File description = GMER Driver http://www.gmer.net, Product Name = GMER, Product version = 1, 0, 14, 4401, Company name = GMER (Copyright (C) GMER 2003-2007) |-798487648|0xb56eb0a2210980e76390bd670bcb618b|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet003\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  08:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=system32\DRIVERS\cpqbttn.sys <HKLM\System\ControlSet003\Services\HBtnKey>
      "C:\WINDOWS\system32\drivers\cpqbttn.sys" File version = 4.20.02.02, File size = 9344, File modification date = 19/09/2005  10:24, File description = HP Tablet PC Key Button HID Driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2002-2005 Hewlett-Packard Development Company, L.P.) |1389021333|0x4d4d97671c63c3af869b3518e6054204|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet003\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  19:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
    ImagePath=C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe <HKLM\System\ControlSet003\Services\hpqwmiex>
      "c:\program files\hewlett-packard\shared\hpqwmiex.exe" File version = 2, 0, 1, 9, File size = 135168, File modification date = 02/05/2006  11:41, File description = hpqwmiex Module, Product Name = hpqwmiex Module, Product version = 2, 0, 1, 9, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2003-2006 Hewlett-Packard Development Company, L.P.) |-92200686|0x04c1dcbb226c6ae647b794833ce3ceb6|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet003\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet003\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet003\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  08:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath=system32\DRIVERS\ialmnt5.sys <HKLM\System\ControlSet003\Services\ialm>
      "c:\windows\system32\drivers\ialmnt5.sys" File version = 6.14.10.4410, File size = 1302812, File modification date = 19/10/2005  10:15, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |-659618172|0x5a8e05f1d5c36abd58cffa111eb325ea|
    ImagePath="c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe" <HKLM\System\ControlSet003\Services\IDriverT>
      "c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe" File version = 10.50.125, File size = 73728, File modification date = 21/10/2004  23:24, File description = IDriverT Module, Product Name = InstallShield (R), Product version = 10.50, Company name = Macrovision Corporation (Copyright (C) 2004 Macrovision Corporation) |590388687|0x3a2a3fddda054fc44463263cd1c0e90b|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet003\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  08:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=%systemroot%\system32\imapi.exe <HKLM\System\ControlSet003\Services\ImapiService>
      "C:\WINDOWS\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 18/08/2004  08:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet003\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  06:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet003\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet003\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  08:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet003\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  08:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet003\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet003\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet003\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  08:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet003\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  08:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\58480314.sys <HKLM\System\ControlSet003\Services\is-8EJH0drv>
      "c:\windows\system32\drivers\58480314.sys" File version = 7.0.0.312, File size = 148496, File modification date = 08/07/2008  11:54, File description = Klif Mini-Filter, Product Name = Kaspersky Anti-Virus, Product version = 1.0.0.0, Company name = Kaspersky Lab (Copyright  Kaspersky Lab 1996-2008.) |-503501263|0x0aa3ad071827118fcc8f37f7a6ab7aa1|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet003\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 19/10/2001  11:22, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet003\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\DRIVERS\kbdhid.sys <HKLM\System\ControlSet003\Services\kbdhid>
      "c:\windows\system32\drivers\kbdhid.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 17/08/2004  11:54, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |745085733|0xd0c2e1e0b67a4b0ba4f1c5240c892cb4|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet003\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet003\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  21:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet003\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 18/08/2004  08:00, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet003\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mouhid.sys <HKLM\System\ControlSet003\Services\mouhid>
      "c:\windows\system32\drivers\mouhid.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 19/10/2001  17:33, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1481140716|0xdcf669a6b5682768d3fcf2906453ea97|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet003\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  08:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet003\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet003\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 18/08/2004  08:00, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=%systemroot%\system32\msiexec.exe /V <HKLM\System\ControlSet003\Services\MSIServer>
      "c:\windows\system32\msiexec.exe" File version = 3.1.4000.1823, File size = 78848, File modification date = 03/05/2005  08:58, File description = Windows installer, Product Name = Windows Installer - Unicode, Product version = 3.1.4000.1823, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1201451646|0xf5f0146580e7023adb963879840777f8|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet003\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet003\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet003\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet003\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet003\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  08:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet003\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  08:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet003\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  08:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet003\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet003\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  08:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet003\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  08:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet003\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  08:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nic1394.sys <HKLM\System\ControlSet003\Services\NIC1394>
      "c:\windows\system32\drivers\nic1394.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61824, File modification date = 18/08/2004  08:00, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1582580385|0x5c5c53db4fef16cf87b9911c7e8c6fbc|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS <HKLM\System\ControlSet003\Services\NPDriver>
      "\\?\c:\windows\system32\drivers\npdriver.sys" File version = 16.00.0.22, File size = 34578, File modification date = 14/08/2002  03:03, File description = Norton Protection Driver, Product Name = Norton Utilities, Product version = 16.00.0.22, Company name = Symantec Corporation (Copyright (C) 2003 Symantec Corporation) |620453588|0x410ab482d8a1e1655a7158a7b5c72ce7|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet003\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  08:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet003\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  08:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath=system32\DRIVERS\ohci1394.sys <HKLM\System\ControlSet003\Services\ohci1394>
      "c:\windows\system32\drivers\ohci1394.sys" File version = 5.1.2600.2524 (xpsp.040919-1030), File size = 61056, File modification date = 27/09/2004  22:19, File description = 1394 OpenHCI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |964499203|0x197ddf60b254a84d8656850397b5f923|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet003\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  10:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet003\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=C:\WINDOWS\SMINST\PCAngel.exe <HKLM\System\ControlSet003\Services\PCA>
      "c:\windows\sminst\pcangel.exe" File version = 4, 0, 1, 17, File size = 294912, File modification date = 12/01/2006  09:22, File description = PC Angel Application, Product Name = PCAngel Application, Product version = 4, 0, 1, 17, Company name = SoftThinks (Copyright 2006 SoftThinks) |471102478|0x5eeb45f500e3e97153cb75723f8ca185|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet003\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 17/08/2004  06:46, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet003\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 19/10/2001  11:32, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=system32\DRIVERS\pcmcia.sys <HKLM\System\ControlSet003\Services\Pcmcia>
      "c:\windows\system32\drivers\pcmcia.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119936, File modification date = 18/08/2004  08:00, File description =   PCMCIA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1848810773|0x602f2a5226d92b948723a13b8b263dbb|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet003\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet003\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  08:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=\SystemRoot\System32\drivers\prodrv06.sys <HKLM\System\ControlSet003\Services\prodrv06>
      "C:\WINDOWS\system32\drivers\prodrv06.sys" File version = 6.45, File size = 79488, File modification date = 13/05/2004  11:19, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |1015908929|0xf2e3c8f1eb6ba0733e0a1f6373df7957|
    ImagePath=System32\drivers\prohlp02.sys <HKLM\System\ControlSet003\Services\prohlp02>
      "c:\windows\system32\drivers\prohlp02.sys" File version = 2.45, File size = 111808, File modification date = 13/05/2004  13:00, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |872832002|0x150307b52807d0c493c605ab913038ad|
    ImagePath=System32\drivers\prosync1.sys <HKLM\System\ControlSet003\Services\prosync1>
      "c:\windows\system32\drivers\prosync1.sys" File version = 1.5, File size = 6944, File modification date = 06/09/2003  12:22, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |-213977908|0xf3471e7971ee62420451d958da635064|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet003\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  08:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet003\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  08:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet003\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  08:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasirda.sys <HKLM\System\ControlSet003\Services\Rasirda>
      "c:\windows\system32\drivers\rasirda.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19584, File modification date = 17/08/2001  16:51, File description = IrDA WAN Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2137000575|0x0207d26ddf796a193ccd9f83047bb5fc|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet003\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  08:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet003\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  08:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet003\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  08:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet003\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet003\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  08:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet003\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 18/08/2004  08:00, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet003\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2858 (xpsp.060227-1425), File size = 58112, File modification date = 28/02/2006  02:18, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2858, Company name =   (  .   .) |-455279266|0xd2a544c09ca6b1af92627179a3eb262c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet003\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  08:00, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet003\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet003\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  08:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet003\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\SAVRT.SYS <HKLM\System\ControlSet003\Services\SAVRT>
      "\\?\c:\windows\system32\drivers\savrt.sys" File version = 9.0.1.35, File size = 235184, File modification date = 25/07/2002  19:28, File description = AutoProtect, Product Name = Symantec AntiVirus AutoProtect, Product version = 9.0, Company name = Symantec Corporation (Copyright (c) 2002 Symantec Corporation) |1539973378|0x97bd082cb7adc2167cb544bd7768e339|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\SAVRTPEL.SYS <HKLM\System\ControlSet003\Services\SAVRTPEL>
      "\\?\c:\windows\system32\drivers\savrtpel.sys" File version = 9.0.1.35, File size = 34992, File modification date = 25/07/2002  19:28, File description = SAVRTPEL, Product Name = Symantec AntiVirus AutoProtect, Product version = 9.0, Company name = Symantec Corporation (Copyright (c) 2002 Symantec Corporation) |-327010652|0xee05e06b3cf953339c0b90bcc46b9496|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet003\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  08:00, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\SE27bus.sys <HKLM\System\ControlSet003\Services\SE27bus>
      "c:\windows\system32\drivers\se27bus.sys" File version = V4.34, File size = 61600, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 Driver Driver, Product Name = Sony Ericsson Device 039 Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |38144385|0x59a9eb4073a39895af314780d0a032fa|
    ImagePath=system32\DRIVERS\SE27mdfl.sys <HKLM\System\ControlSet003\Services\SE27mdfl>
      "c:\windows\system32\drivers\se27mdfl.sys" File version = V4.34, File size = 9360, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product Name = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-12795651|0xd53e7e53107d1796825540129f8fe89f|
    ImagePath=system32\DRIVERS\SE27mdm.sys <HKLM\System\ControlSet003\Services\SE27mdm>
      "c:\windows\system32\drivers\se27mdm.sys" File version = V4.34, File size = 97184, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem WDM Driver, Product Name = Sony Ericsson Device 039 USB WMC Data Modem, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-1549162460|0x2afa2f65a6e91da5b5070e734769827e|
    ImagePath=system32\DRIVERS\SE27mgmt.sys <HKLM\System\ControlSet003\Services\SE27mgmt>
      "c:\windows\system32\drivers\se27mgmt.sys" File version = V4.34, File size = 88688, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Device Management Driver, Product Name = Sony Ericsson Device 039 USB WMC Device Management, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1239930657|0x5a33a8d7b44c7bd8abe248b4dcd1ff3c|
    ImagePath=system32\DRIVERS\se27nd5.sys <HKLM\System\ControlSet003\Services\se27nd5>
      "c:\windows\system32\drivers\se27nd5.sys" File version = V4.34, File size = 18704, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation (NDIS 5 Miniport), Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |912335448|0xbb30139683bbf3ee89ec931393d9335c|
    ImagePath=system32\DRIVERS\SE27obex.sys <HKLM\System\ControlSet003\Services\SE27obex>
      "c:\windows\system32\drivers\se27obex.sys" File version = V4.34, File size = 86560, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB WMC OBEX Interface Device Driver, Product Name = Sony Ericsson Device 039 USB WMC OBEX Interface, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1395277399|0x5da6ff71e94b9134ddd094ebb09f05e6|
    ImagePath=system32\DRIVERS\se27unic.sys <HKLM\System\ControlSet003\Services\se27unic>
      "c:\windows\system32\drivers\se27unic.sys" File version = V4.34, File size = 90800, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation, Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |2078164515|0x4d54a9d7c22157ab3d2442e8bcf5ecd2|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet003\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet003\Services\serenum>
      "c:\windows\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet003\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath=System32\drivers\sfdrv01.sys <HKLM\System\ControlSet003\Services\sfdrv01>
      "c:\windows\system32\drivers\sfdrv01.sys" File version = 1.37, File size = 50688, File modification date = 10/08/2005  12:44, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-1594913562|0x4c0d673281178cb496011a2e28571fc8|
    ImagePath=System32\drivers\sfhlp01.sys <HKLM\System\ControlSet003\Services\sfhlp01>
      "c:\windows\system32\drivers\sfhlp01.sys" File version = 1.5, File size = 4832, File modification date = 01/12/2003  15:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |1121420825|0x462aee0ea0481ea8bd45cac876a4ccc4|
    ImagePath=System32\drivers\sfhlp02.sys <HKLM\System\ControlSet003\Services\sfhlp02>
      "c:\windows\system32\drivers\sfhlp02.sys" File version = 2.3, File size = 6656, File modification date = 16/05/2005  13:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-565067900|0x15be2b5e4dc5b8623cf167720682abc9|
    ImagePath=System32\drivers\sfsync02.sys <HKLM\System\ControlSet003\Services\sfsync02>
      "c:\windows\system32\drivers\sfsync02.sys" File version = 2.12, File size = 19968, File modification date = 10/08/2005  14:06, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |1223380688|0xefebbc1d13fdb77a6af4eddfc7232edf|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\smcirda.sys <HKLM\System\ControlSet003\Services\SMCIRDA>
      "c:\windows\system32\drivers\smcirda.sys" File version = 5.1.2462.0, File size = 35913, File modification date = 19/10/2001  16:43, File description = SMC IrCC IrDA FIR NDIS 5.0  , Product Name =    , Product version = 5.1.2462.0, Company name = SMC (Copyright  SMC 1996-2001) |-89736589|0x27c56365d6f07347e4e0d0e17c4907cf|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet003\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet003\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet003\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet003\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet003\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet003\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 18/08/2004  08:00, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet003\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\SYMREDRV.SYS <HKLM\System\ControlSet003\Services\SYMREDRV>
      "\\?\c:\windows\system32\drivers\symredrv.sys" File version = 4.7.0.58, File size = 15640, File modification date = 15/08/2002  14:45, File description = Redirector Filter, Product Name = Symantec Security Drivers, Product version = 4.7, Company name = Symantec Corporation (Copyright (c) 2001 Symantec Corporation) |1788001501|0x792cd16e3a656b5c0ec060e9ca490178|
    ImagePath=system32\DRIVERS\SynTP.sys <HKLM\System\ControlSet003\Services\SynTP>
      "c:\windows\system32\drivers\syntp.sys" File version = 8.3.8 16Jun06, File size = 193120, File modification date = 16/06/2006  15:40, File description = Synaptics Touchpad Driver, Product Name = Synaptics Pointing Device Driver, Product version = 8.3.8 16Jun06, Company name = Synaptics, Inc. (Copyright (C) Synaptics, Inc. 1996-2006) |253350277|0x369d0626687a968182a9db40fe8a0905|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet003\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet003\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet003\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet003\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  07:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet003\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wdfmgr.exe <HKLM\System\ControlSet003\Services\UMWdf>
      "c:\windows\system32\wdfmgr.exe" File version = 5.2.3790.1230 built by: DNSRV(bld4act), File size = 38912, File modification date = 10/08/2004  18:05, File description = Windows User Mode Driver Manager, Product Name = Microsoft Windows Operating System, Product version = 5.2.3790.1230, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1075300549|0xc81b8635dee0d3ef5f64b3dd643023a5|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet003\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 209408, File modification date = 18/08/2004  08:00, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1865716387|0xaff2e5045961bbc0a602bb6f95eb1345|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet003\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  08:00, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet003\Services\usbccgp>
      "c:\windows\system32\drivers\usbccgp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  20:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet003\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 30080, File modification date = 19/04/2006  11:50, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-539531644|0xb0d7020386c7187ef9c5a9643f289cd3|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet003\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 18/08/2004  08:00, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
    ImagePath=system32\DRIVERS\usbprint.sys <HKLM\System\ControlSet003\Services\usbprint>
      "c:\windows\system32\drivers\usbprint.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  20:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet003\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  19:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet003\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  20:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet003\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 20608, File modification date = 19/04/2006  11:50, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450089368|0xff6e4fdeb82dc228efa490336409c6bd|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet003\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=system32\DRIVERS\viaide.sys <HKLM\System\ControlSet003\Services\ViaIde>
      "c:\windows\system32\drivers\viaide.sys" File version = 1.00.01.01, File size = 5376, File modification date = 03/08/2004  13:59, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft(R) Windows NT(R) Operating System, Product version = 5.00.1636.1, Company name = Microsoft Corporation (Copyright (C) VIA Technologies, Inc. 2000) |-48370474|0x59cb1338ad3654417bea49636457f65d|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet003\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 18/08/2004  08:00, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=system32\DRIVERS\w29n51.sys <HKLM\System\ControlSet003\Services\w29n51>
      "c:\windows\system32\drivers\w29n51.sys" File version = 9.0.4.17 Driver, File size = 2206720, File modification date = 17/07/2006  15:17, File description = Intel Wireless LAN Driver, Product Name = Intel Wireless LAN Adapter, Product version = (null), Company name = Intel Corporation (Copyright  Intel Corporation 2004-2006) |384020172|0x68eb5bc07781a36a63633541c11e1ad6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet003\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet003\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet003\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=c:\program files\windows media connect\mswmccds.exe <HKLM\System\ControlSet003\Services\WmcCds>
      "c:\program files\windows media connect\mswmccds.exe" File version = 5.1.2600.1 built by: DNSRV(bld4act), File size = 483328, File modification date = 10/08/2004  20:46, File description = Windows Media Connect, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.1, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25093542|0xb05d05da37fe4f60d95da89f856f74da|
    ImagePath=C:\Program Files\Windows Media Connect\mswmcls.exe <HKLM\System\ControlSet003\Services\WmcCdsLs>
      "c:\program files\windows media connect\mswmcls.exe" File version = 5.1.2600.1 built by: DNSRV(bld4act), File size = 28160, File modification date = 10/08/2004  17:50, File description = Windows Media Connect, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.1, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1373243116|0x28963bbcb4536ca89cbc37b8e2d36cb2|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wmiacpi.sys <HKLM\System\ControlSet003\Services\WmiAcpi>
      "C:\WINDOWS\system32\drivers\wmiacpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8832, File modification date = 03/08/2004  18:07, File description = Windows Management Interface for ACPI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1211174249|0xae2c8544e747c20062db27456ea2d67a|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet003\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 18/08/2004  08:00, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath=\SystemRoot\System32\drivers\ws2ifsl.sys <HKLM\System\ControlSet003\Services\WS2IFSL>
      "C:\WINDOWS\system32\drivers\ws2ifsl.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  08:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet003\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\ACPI.sys <HKLM\System\ControlSet005\Services\ACPI>
      "c:\windows\system32\drivers\acpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 188288, File modification date = 18/08/2004  08:00, File description = ACPI   NT, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-178263995|0x080a8e2a0877bab616a1f6aa6024cc7c|
    ImagePath=system32\DRIVERS\ACPIEC.sys <HKLM\System\ControlSet005\Services\ACPIEC>
      "c:\windows\system32\drivers\acpiec.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 11776, File modification date = 18/08/2004  08:00, File description =    ACPI, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-907087436|0xcea8d1da7696acbfc69a3823bcf1c738|
    ImagePath="C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe" <HKLM\System\ControlSet005\Services\AddFiltr>
      "c:\program files\hewlett-packard\hp quick launch buttons\addfiltr.exe" File version = 1.0.0.1, File size = 126976, File modification date = 12/06/2006  09:27, File description = Add Filter For Usb, Product Name = HP Quick Launch Buttons, Product version = 6.0.8.1, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2006 Hewlett-Packard Development Company, L.P.) |342464659|0x127534fd27c18fe21ad05b4dc5ff5918|
    ImagePath=system32\drivers\aec.sys <HKLM\System\ControlSet005\Services\aec>
      "c:\windows\system32\drivers\aec.sys" File version = 5.1.2601.2180, File size = 142464, File modification date = 15/02/2006  00:22, File description = Microsoft Acoustic Echo Canceller, Product Name = Microsoft Windows Operating System, Product version = 5.1.2601.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-404786700|0x1ee7b434ba961ef845de136224c30fec|
    ImagePath=\SystemRoot\System32\drivers\afd.sys <HKLM\System\ControlSet005\Services\AFD>
      "C:\WINDOWS\system32\drivers\afd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 138496, File modification date = 18/08/2004  08:00, File description = Ancillary Function Driver for WinSock, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-877682539|0x5ac495f4cb807b2b98ad2ad591e6d92e|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet005\Services\Alerter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\alg.exe <HKLM\System\ControlSet005\Services\ALG>
      "C:\WINDOWS\system32\alg.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 44544, File modification date = 18/08/2004  08:00, File description = Application Layer Gateway Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |824998242|0xa85db1ac1cc5dc6a7589b49d31137696|
    ImagePath=system32\DRIVERS\aliide.sys <HKLM\System\ControlSet005\Services\AliIde>
      "c:\windows\system32\drivers\aliide.sys" File version = 1.20, File size = 5248, File modification date = 17/08/2001  12:51, File description = ALi mini IDE Driver, Product Name = ALi mini IDE Driver, Product version = 1.20, Company name = Acer Laboratories Inc. (Copyright (C) Acer Laboratories Inc.  2000 ) |1465498541|0x1140ab9938809700b46bb88e46d72a96|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\AppMgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\arp1394.sys <HKLM\System\ControlSet005\Services\Arp1394>
      "c:\windows\system32\drivers\arp1394.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 18/08/2004  08:00, File description = IP/1394 Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1866048193|0xf0d692b0bffb46e30eb3cea168bbc49f|
    ImagePath=%SystemRoot%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe <HKLM\System\ControlSet005\Services\aspnet_state>
      "C:\WINDOWS\microsoft.net\framework\v1.1.4322\aspnet_state.exe" File version = 1.1.4322.2032, File size = 32768, File modification date = 14/07/2004  21:49, File description = aspnet_state.exe, Product Name = Microsoft (R) .NET Framework, Product version = 1.1.4322.2032, Company name = Microsoft Corporation (Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.) |1073067840|0xe1a1206a4fb19b675e947b29ccd25fba|
    ImagePath=system32\DRIVERS\asyncmac.sys <HKLM\System\ControlSet005\Services\AsyncMac>
      "c:\windows\system32\drivers\asyncmac.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = MS Remote Access serial network driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2010232658|0x02000abf34af4c218c35d257024807d6|
    ImagePath=system32\DRIVERS\atapi.sys <HKLM\System\ControlSet005\Services\atapi>
      "c:\windows\system32\drivers\atapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 95360, File modification date = 03/08/2004  13:59, File description = IDE/ATAPI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-860662352|0xcdfe4411a69c224bd1d11b2da92dac51|
    ImagePath=system32\DRIVERS\atmarpc.sys <HKLM\System\ControlSet005\Services\Atmarpc>
      "c:\windows\system32\drivers\atmarpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 59904, File modification date = 18/08/2004  08:00, File description = IP/ATM Arp Client, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-535154941|0xec88da854ab7d7752ec8be11a741bb7f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\AudioSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\audstub.sys <HKLM\System\ControlSet005\Services\audstub>
      "C:\WINDOWS\system32\drivers\audstub.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3072, File modification date = 17/08/2001  16:59, File description = AudStub Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |573187298|0xd9f724aa26c010a217c97606b160ed68|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\BITS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\Browser>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\camc6aud.sys <HKLM\System\ControlSet005\Services\CAMCAUD>
      "c:\windows\system32\drivers\camc6aud.sys" File version = 6.14.10.0675, File size = 38144, File modification date = 21/08/2006  22:16, File description = Conexant WDM AC97 Audio Driver, Product Name = Conexant Audio Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |-2137843940|0x619fae09d910c78cc6aa4abdb5c42dcb|
    ImagePath=system32\drivers\camc6hal.sys <HKLM\System\ControlSet005\Services\CAMCHALA>
      "c:\windows\system32\drivers\camc6hal.sys" File version = 6.14.10.0675, File size = 530176, File modification date = 21/08/2006  22:16, File description = Conexant AmcHal Driver, Product Name = Conexant AmcHal Driver, Product version = 6.14.10.0675, Company name = Conexant Systems Inc. (Copyright (C) Conexant Systems Inc.1998-2005) |153275874|0x951a4bf4305cb16cf1014ebae9bf8113|
    ImagePath=system32\DRIVERS\cdrom.sys <HKLM\System\ControlSet005\Services\Cdrom>
      "c:\windows\system32\drivers\cdrom.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 49536, File modification date = 18/08/2004  08:00, File description = SCSI CD-ROM Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-638809301|0xaf9c19b3100fe010496b1a27181fbf72|
    ImagePath=%SystemRoot%\system32\cisvc.exe <HKLM\System\ControlSet005\Services\CiSvc>
      "C:\WINDOWS\system32\cisvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5632, File modification date = 18/08/2004  08:00, File description = Content Index service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-819638063|0x25893e02dc436111c5d4701069eb862d|
    ImagePath=%SystemRoot%\system32\clipsrv.exe <HKLM\System\ControlSet005\Services\ClipSrv>
      "C:\WINDOWS\system32\clipsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  08:00, File description = Windows NT DDE Server, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1468437075|0xb91bf0b16aef266d900f044d0e9856b9|
    ImagePath=C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe <HKLM\System\ControlSet005\Services\clr_optimization_v2.0.50727_32>
      "c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe" File version = 2.0.50727.42 (RTM.050727-4200), File size = 66240, File modification date = 23/09/2005  04:28, File description = .NET Runtime Optimization Service, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |2108567825|0x3c4d595e7f9b747325aef28b4adcaae5|
    ImagePath=system32\DRIVERS\CmBatt.sys <HKLM\System\ControlSet005\Services\CmBatt>
      "c:\windows\system32\drivers\cmbatt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14080, File modification date = 03/08/2004  18:07, File description = Control Method Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |992075117|0x4266be808f85826aedf3c64c1e240203|
    ImagePath=system32\DRIVERS\compbatt.sys <HKLM\System\ControlSet005\Services\Compbatt>
      "c:\windows\system32\drivers\compbatt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9344, File modification date = 17/08/2001  16:58, File description = Composite Battery Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-703322978|0xdf1b1a24bf52d0ebc01ed4ece8979f50|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\CryptSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost -k DcomLaunch <HKLM\System\ControlSet005\Services\DcomLaunch>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\Dhcp>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\disk.sys <HKLM\System\ControlSet005\Services\Disk>
      "c:\windows\system32\drivers\disk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 36352, File modification date = 18/08/2004  08:00, File description = PnP Disk Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1592272948|0x00ca44e4534865f8a3b64f7c0984bff0|
    ImagePath=%SystemRoot%\System32\dmadmin.exe /com <HKLM\System\ControlSet005\Services\dmadmin>
      "C:\WINDOWS\system32\dmadmin.exe" File version = 2600.2180.503.0, File size = 224768, File modification date = 18/08/2004  08:00, File description =    , Product Name =     Windows NT, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-2024846492|0x038d179db0f656155d58d066ef9725cd|
    ImagePath=System32\drivers\dmboot.sys <HKLM\System\ControlSet005\Services\dmboot>
      "c:\windows\system32\drivers\dmboot.sys" File version = 2600.2180.503.0, File size = 799872, File modification date = 18/08/2004  08:00, File description =     NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |-1657840181|0xf691bdd60914d96f11f1c7255c941a11|
    ImagePath=System32\drivers\dmio.sys <HKLM\System\ControlSet005\Services\dmio>
      "c:\windows\system32\drivers\dmio.sys" File version = 2600.2180.503.0, File size = 153600, File modification date = 18/08/2004  08:00, File description =  /   NT, Product Name =   NT VERITAS, Product version = 1.0, Company name =  Microsoft  VERITAS Software (  , 1985-2000.   .    Veritas Software, 1997-2000.   .) |831216945|0x7b6f12d72b08f2479536bc2bcfcbbc2c|
    ImagePath=System32\drivers\dmload.sys <HKLM\System\ControlSet005\Services\dmload>
      "c:\windows\system32\drivers\dmload.sys" File version = 2600.0.503.0, File size = 5888, File modification date = 18/08/2004  08:00, File description = NT Disk Manager Startup Driver, Product Name = Logical Disk Manager for Windows NT, Product version = 1.0, Company name = Microsoft Corp., Veritas Software. (Copyright 1985-2000 Microsoft Corporation.  All rights reserved.  Portions Copyright  1997-2000 Veritas Software.  All rights reserved.) |-1400014670|0xe9317282a63ca4d188c0df5e09c6ac5f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\dmserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\DMusic.sys <HKLM\System\ControlSet005\Services\DMusic>
      "c:\windows\system32\drivers\dmusic.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 52864, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DLS Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1792888132|0xa6f881284ac1150e37d9ae47ff601267|
    ImagePath=%SystemRoot%\system32\svchost.exe -k NetworkService <HKLM\System\ControlSet005\Services\Dnscache>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\drivers\drmkaud.sys <HKLM\System\ControlSet005\Services\drmkaud>
      "c:\windows\system32\drivers\drmkaud.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 2944, File modification date = 03/08/2004  19:07, File description = Microsoft Kernel DRM Audio Descrambler Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1208245848|0x1ed4dbbae9f5d558dbba4cc450e3eb2e|
    ImagePath=system32\DRIVERS\e100b325.sys <HKLM\System\ControlSet005\Services\E100B>
      "c:\windows\system32\drivers\e100b325.sys" File version = 8.0.27.0 built by: WinDDK, File size = 163328, File modification date = 22/08/2006  07:21, File description = Intel(R) PRO/100 Adapter NDIS 5.1 driver, Product Name = Intel(R) PRO/100 Adapter, Product version = 8.0.27.0, Company name = Intel Corporation (Copyright (C) 1995-2005 Intel Corporation.  All Rights Reserved.) |-767160625|0x83403675cab29e7a4b885b11e7c855d8|
    ImagePath=system32\DRIVERS\eabfiltr.sys <HKLM\System\ControlSet005\Services\eabfiltr>
      "c:\windows\system32\drivers\eabfiltr.sys" File version = 4.20.02.02, File size = 7808, File modification date = 19/09/2005  10:23, File description = QLB PS/2 Keyboard filter driver, Product Name = HPQuick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |538990764|0xb5cb3084046146fd2587d8c9b219feb4|
    ImagePath=system32\DRIVERS\eabusb.sys <HKLM\System\ControlSet005\Services\eabusb>
      "c:\windows\system32\drivers\eabusb.sys" File version = 4.20.02.02, File size = 5760, File modification date = 19/09/2005  10:24, File description = QLB USB Keyboard filter driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2001-2005 Hewlett-Packard Development Company, L.P.) |1778506247|0x231f4547ae1e4b3e60eca66c3a96d218|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\ERSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet005\Services\Eventlog>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\FastUserSwitchingCompatibility>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\fdc.sys <HKLM\System\ControlSet005\Services\Fdc>
      "c:\windows\system32\drivers\fdc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27392, File modification date = 18/08/2004  08:00, File description = Floppy Disk Controller Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1722417023|0xced2e8396a8838e59d8fd529c680e02c|
    ImagePath=system32\DRIVERS\flpydisk.sys <HKLM\System\ControlSet005\Services\Flpydisk>
      "c:\windows\system32\drivers\flpydisk.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20480, File modification date = 18/08/2004  08:00, File description = Floppy Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-410632913|0x0dd1de43115b93f4d85e889d7a86f548|
    ImagePath=system32\DRIVERS\fltMgr.sys <HKLM\System\ControlSet005\Services\FltMgr>
      "c:\windows\system32\drivers\fltmgr.sys" File version = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039), File size = 128896, File modification date = 21/08/2006  09:14, File description = Microsoft Filesystem Filter Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2978, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1604428629|0x3d234fb6d6ee875eb009864a299bea29|
    ImagePath=system32\DRIVERS\ftdisk.sys <HKLM\System\ControlSet005\Services\Ftdisk>
      "c:\windows\system32\drivers\ftdisk.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 125440, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-2029713798|0xfdd9e4cf0c558f64a58115cb2fc197ac|
    ImagePath=system32\DRIVERS\msgpc.sys <HKLM\System\ControlSet005\Services\Gpc>
      "c:\windows\system32\drivers\msgpc.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 35072, File modification date = 18/08/2004  08:00, File description = MS General Packet Classifier, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2000962340|0xc0f1d4a21de5a415df8170616703debf|
    ImagePath=system32\DRIVERS\cpqbttn.sys <HKLM\System\ControlSet005\Services\HBtnKey>
      "C:\WINDOWS\system32\drivers\cpqbttn.sys" File version = 4.20.02.02, File size = 9344, File modification date = 19/09/2005  10:24, File description = HP Tablet PC Key Button HID Driver, Product Name = HP Quick Launch Buttons, Product version = 4.20.02.02, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2002-2005 Hewlett-Packard Development Company, L.P.) |1389021333|0x4d4d97671c63c3af869b3518e6054204|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\helpsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\HidServ>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\hidusb.sys <HKLM\System\ControlSet005\Services\HidUsb>
      "c:\windows\system32\drivers\hidusb.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 9600, File modification date = 17/08/2001  19:02, File description = USB Miniport Driver for Input Devices, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-274505967|0x1de6783b918f540149aa69943bdfeba8|
    ImagePath=C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe <HKLM\System\ControlSet005\Services\hpqwmiex>
      "c:\program files\hewlett-packard\shared\hpqwmiex.exe" File version = 2, 0, 1, 9, File size = 135168, File modification date = 02/05/2006  11:41, File description = hpqwmiex Module, Product Name = hpqwmiex Module, Product version = 2, 0, 1, 9, Company name = Hewlett-Packard Development Company, L.P. ( Copyright 2003-2006 Hewlett-Packard Development Company, L.P.) |-92200686|0x04c1dcbb226c6ae647b794833ce3ceb6|
    ImagePath=System32\Drivers\HTTP.sys <HKLM\System\ControlSet005\Services\HTTP>
      "c:\windows\system32\drivers\http.sys" File version = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512), File size = 262784, File modification date = 17/03/2006  00:33, File description = HTTP Protocol Stack, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2869, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-397551174|0xcb77bb47e67e84deb17ba29632501730|
    ImagePath=%SystemRoot%\System32\svchost.exe -k HTTPFilter <HKLM\System\ControlSet005\Services\HTTPFilter>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\i8042prt.sys <HKLM\System\ControlSet005\Services\i8042prt>
      "c:\windows\system32\drivers\i8042prt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 53376, File modification date = 18/08/2004  08:00, File description =   i8042, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2076277352|0xc916cb4b99075080dd1f1b9926a911f8|
    ImagePath=system32\DRIVERS\ialmnt5.sys <HKLM\System\ControlSet005\Services\ialm>
      "c:\windows\system32\drivers\ialmnt5.sys" File version = 6.14.10.4410, File size = 1302812, File modification date = 19/10/2005  10:15, File description = Intel Graphics Miniport Driver, Product Name = Intel Graphics Accelerator Drivers for Windows NT(R), Product version = 6.14.10.4410, Company name = Intel Corporation (Copyright (c) 1998-2004 Intel Corporation.) |-659618172|0x5a8e05f1d5c36abd58cffa111eb325ea|
    ImagePath="c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe" <HKLM\System\ControlSet005\Services\IDriverT>
      "c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe" File version = 10.50.125, File size = 73728, File modification date = 21/10/2004  23:24, File description = IDriverT Module, Product Name = InstallShield (R), Product version = 10.50, Company name = Macrovision Corporation (Copyright (C) 2004 Macrovision Corporation) |590388687|0x3a2a3fddda054fc44463263cd1c0e90b|
    ImagePath=system32\DRIVERS\imapi.sys <HKLM\System\ControlSet005\Services\Imapi>
      "c:\windows\system32\drivers\imapi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41856, File modification date = 18/08/2004  08:00, File description = IMAPI Kernel Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1643155798|0xf8aa320c6a0409c0380e5d8a99d76ec6|
    ImagePath=C:\WINDOWS\system32\imapi.exe <HKLM\System\ControlSet005\Services\ImapiService>
      "c:\windows\system32\imapi.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 150016, File modification date = 18/08/2004  08:00, File description = API  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-570717125|0x2006c5ed2f32826aaea9a3618c956905|
    ImagePath=system32\DRIVERS\intelide.sys <HKLM\System\ControlSet005\Services\IntelIde>
      "c:\windows\system32\drivers\intelide.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5504, File modification date = 17/08/2004  06:53, File description =  Intel PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-420228428|0x9c248ab47320067ed0c359f6fc5ce137|
    ImagePath=system32\DRIVERS\intelppm.sys <HKLM\System\ControlSet005\Services\intelppm>
      "c:\windows\system32\drivers\intelppm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-341201043|0xaa064bd00500b06cf5abbe2c917ba650|
    ImagePath=system32\DRIVERS\Ip6Fw.sys <HKLM\System\ControlSet005\Services\Ip6Fw>
      "c:\windows\system32\drivers\ip6fw.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 29056, File modification date = 18/08/2004  08:00, File description = IPv6 Windows Firewall Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |297779162|0x4448006b6bc60e6c027932cfc38d6855|
    ImagePath=system32\DRIVERS\ipfltdrv.sys <HKLM\System\ControlSet005\Services\IpFilterDriver>
      "c:\windows\system32\drivers\ipfltdrv.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32896, File modification date = 18/08/2004  08:00, File description = IP FILTER DRIVER, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-29657591|0x731f22ba402ee4b62748adaf6363c182|
    ImagePath=system32\DRIVERS\ipinip.sys <HKLM\System\ControlSet005\Services\IpInIp>
      "c:\windows\system32\drivers\ipinip.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = IP in IP Encapsulation Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |937293986|0xe1ec7f5da720b640cd8fb8424f1b14bb|
    ImagePath=system32\DRIVERS\ipnat.sys <HKLM\System\ControlSet005\Services\IpNat>
      "c:\windows\system32\drivers\ipnat.sys" File version = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056), File size = 134912, File modification date = 29/09/2004  22:28, File description = IP Network Address Translator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1847019817|0xe2168cbc7098ffe963c6f23f472a3593|
    ImagePath=system32\DRIVERS\ipsec.sys <HKLM\System\ControlSet005\Services\IPSec>
      "c:\windows\system32\drivers\ipsec.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 74752, File modification date = 18/08/2004  08:00, File description = IPSec Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |363987355|0x64537aa5c003a6afeee1df819062d0d1|
    ImagePath=system32\DRIVERS\irenum.sys <HKLM\System\ControlSet005\Services\IRENUM>
      "c:\windows\system32\drivers\irenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  08:00, File description = Infra-Red Bus Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1677945049|0x50708daa1b1cbb7d6ac1cf8f56a24410|
    ImagePath=system32\DRIVERS\isapnp.sys <HKLM\System\ControlSet005\Services\isapnp>
      "c:\windows\system32\drivers\isapnp.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 36096, File modification date = 19/10/2001  11:22, File description =   PNP ISA, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1192614526|0xbaae568063295d7955375fd2cb7a5ce1|
    ImagePath=system32\DRIVERS\kbdclass.sys <HKLM\System\ControlSet005\Services\Kbdclass>
      "c:\windows\system32\drivers\kbdclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 24832, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-443963387|0x84c85813ddb595f97a9f95da3edbf81b|
    ImagePath=system32\DRIVERS\kbdhid.sys <HKLM\System\ControlSet005\Services\kbdhid>
      "c:\windows\system32\drivers\kbdhid.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 17/08/2004  11:54, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |745085733|0xd0c2e1e0b67a4b0ba4f1c5240c892cb4|
    ImagePath=system32\drivers\kmixer.sys <HKLM\System\ControlSet005\Services\kmixer>
      "c:\windows\system32\drivers\kmixer.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 172416, File modification date = 14/06/2006  08:47, File description = Kernel Mode Audio Mixer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1442386742|0xba5deda4d934e6288c2f66caf58d2562|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\lanmanserver>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\lanmanworkstation>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet005\Services\LmHosts>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" <HKLM\System\ControlSet005\Services\MDM>
      "c:\program files\common files\microsoft shared\vs7debug\mdm.exe" File version = 7.00.9466, File size = 322120, File modification date = 19/06/2003  21:25, File description = Machine Debug Manager, Product Name = Microsoft Visual Studio .NET, Product version = 7.00.9466, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1982951129|0x11f714f85530a2bd134074dc30e99fca|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\Messenger>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\mnmsrvc.exe <HKLM\System\ControlSet005\Services\mnmsrvc>
      "c:\windows\system32\mnmsrvc.exe" File version = 5.1.2600.2180, File size = 32768, File modification date = 18/08/2004  08:00, File description = NetMeeting Remote Desktop Sharing, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  , 1996-2001) |1074094196|0x6632a60d6a0f84ba40918f921494c0aa|
    ImagePath=system32\DRIVERS\mouclass.sys <HKLM\System\ControlSet005\Services\Mouclass>
      "c:\windows\system32\drivers\mouclass.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23296, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1477282195|0xe1f783c65ca1b0af0cb48ba20debf338|
    ImagePath=system32\DRIVERS\mouhid.sys <HKLM\System\ControlSet005\Services\mouhid>
      "c:\windows\system32\drivers\mouhid.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 12160, File modification date = 19/10/2001  17:33, File description =    HID, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1481140716|0xdcf669a6b5682768d3fcf2906453ea97|
    ImagePath=system32\DRIVERS\mrxdav.sys <HKLM\System\ControlSet005\Services\MRxDAV>
      "c:\windows\system32\drivers\mrxdav.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 181248, File modification date = 18/08/2004  08:00, File description = Windows NT WebDav Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |608997827|0x46edcc8f2db2f322c24f48785cb46366|
    ImagePath=system32\DRIVERS\mrxsmb.sys <HKLM\System\ControlSet005\Services\MRxSmb>
      "c:\windows\system32\drivers\mrxsmb.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 453120, File modification date = 05/05/2006  09:41, File description = Windows NT SMB Minirdr, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1106113486|0x025af03ce51645c62f3b6907a7e2be5e|
    ImagePath=C:\WINDOWS\system32\msdtc.exe <HKLM\System\ControlSet005\Services\MSDTC>
      "c:\windows\system32\msdtc.exe" File version = 2001.12.4414.258, File size = 6144, File modification date = 18/08/2004  08:00, File description = MS DTC console program, Product Name = Microsoft Distributed Transaction Coordinator, Product version = 03.01.00.4414, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1995-1998) |-124493703|0x41c4e246047089bc523cd9adb3d5d312|
    ImagePath=system32\drivers\MSKSSRV.sys <HKLM\System\ControlSet005\Services\MSKSSRV>
      "c:\windows\system32\drivers\mskssrv.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 7552, File modification date = 03/08/2004  18:58, File description = MS KS Server, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |739428076|0xae431a8dd3c1d0d0610cdbac16057ad0|
    ImagePath=system32\drivers\MSPCLOCK.sys <HKLM\System\ControlSet005\Services\MSPCLOCK>
      "c:\windows\system32\drivers\mspclock.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 5376, File modification date = 03/08/2004  18:58, File description = MS Proxy Clock, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1663050309|0x13e75fef9dfeb08eeded9d0246e1f448|
    ImagePath=system32\drivers\MSPQM.sys <HKLM\System\ControlSet005\Services\MSPQM>
      "c:\windows\system32\drivers\mspqm.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4992, File modification date = 03/08/2004  18:58, File description = MS Proxy Quality Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |879297618|0x1988a33ff19242576c3d0ef9ce785da7|
    ImagePath=system32\DRIVERS\mssmbios.sys <HKLM\System\ControlSet005\Services\mssmbios>
      "c:\windows\system32\drivers\mssmbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = System Management BIOS Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1493310399|0x469541f8bfd2b32659d5d463a6714bce|
    ImagePath=system32\DRIVERS\ndistapi.sys <HKLM\System\ControlSet005\Services\NdisTapi>
      "c:\windows\system32\drivers\ndistapi.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9600, File modification date = 18/08/2004  08:00, File description = NDIS 3.0 connection wrapper driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-908384129|0x08d43bbdacdf23f34d79e44ed35c1b4c|
    ImagePath=system32\DRIVERS\ndisuio.sys <HKLM\System\ControlSet005\Services\Ndisuio>
      "c:\windows\system32\drivers\ndisuio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12928, File modification date = 18/08/2004  08:00, File description = NDIS User mode I/O Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |897342069|0x34d6cd56409da9a7ed573e1c90a308bf|
    ImagePath=system32\DRIVERS\ndiswan.sys <HKLM\System\ControlSet005\Services\NdisWan>
      "c:\windows\system32\drivers\ndiswan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91776, File modification date = 18/08/2004  08:00, File description = MS PPP Framing Driver (Strong Encryption), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1355719625|0x0b90e255a9490166ab368cd55a529893|
    ImagePath=system32\DRIVERS\netbios.sys <HKLM\System\ControlSet005\Services\NetBIOS>
      "c:\windows\system32\drivers\netbios.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = NetBIOS interface driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |848815196|0x3a2aca8fc1d7786902ca434998d7ceb4|
    ImagePath=system32\DRIVERS\netbt.sys <HKLM\System\ControlSet005\Services\NetBT>
      "c:\windows\system32\drivers\netbt.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 162816, File modification date = 18/08/2004  08:00, File description = MBT Transport driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-659266086|0x0c80e410cd2f47134407ee7dd19cc86b|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet005\Services\NetDDE>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  08:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\netdde.exe <HKLM\System\ControlSet005\Services\NetDDEdsdm>
      "C:\WINDOWS\system32\netdde.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113664, File modification date = 18/08/2004  08:00, File description =    DDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1645133326|0x85ad6b772d13eb50ae373ebe3158daee|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet005\Services\Netlogon>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\Netman>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nic1394.sys <HKLM\System\ControlSet005\Services\NIC1394>
      "c:\windows\system32\drivers\nic1394.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 61824, File modification date = 18/08/2004  08:00, File description = IEEE1394 Ndis Miniport and Call Manager, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1582580385|0x5c5c53db4fef16cf87b9911c7e8c6fbc|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\Nla>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS <HKLM\System\ControlSet005\Services\NPDriver>
      "\\?\c:\windows\system32\drivers\npdriver.sys" File version = 16.00.0.22, File size = 34578, File modification date = 14/08/2002  03:03, File description = Norton Protection Driver, Product Name = Norton Utilities, Product version = 16.00.0.22, Company name = Symantec Corporation (Copyright (C) 2003 Symantec Corporation) |620453588|0x410ab482d8a1e1655a7158a7b5c72ce7|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet005\Services\NtLmSsp>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\NtmsSvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\nwlnkflt.sys <HKLM\System\ControlSet005\Services\NwlnkFlt>
      "c:\windows\system32\drivers\nwlnkflt.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12416, File modification date = 18/08/2004  08:00, File description = NWLINK2 Traffic Filter Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-648744816|0xb305f3fad35083837ef46a0bbce2fc57|
    ImagePath=system32\DRIVERS\nwlnkfwd.sys <HKLM\System\ControlSet005\Services\NwlnkFwd>
      "c:\windows\system32\drivers\nwlnkfwd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 32512, File modification date = 18/08/2004  08:00, File description = NWLINK2 Forwarder Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-333389975|0xc99b3415198d1aab7227f2c88fd664b9|
    ImagePath=system32\DRIVERS\ohci1394.sys <HKLM\System\ControlSet005\Services\ohci1394>
      "c:\windows\system32\drivers\ohci1394.sys" File version = 5.1.2600.2524 (xpsp.040919-1030), File size = 61056, File modification date = 27/09/2004  22:19, File description = 1394 OpenHCI Port Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2524, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |964499203|0x197ddf60b254a84d8656850397b5f923|
    ImagePath="C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" <HKLM\System\ControlSet005\Services\ose>
      "c:\program files\common files\microsoft shared\source engine\ose.exe" File version = 11.0.5525, File size = 89136, File modification date = 28/07/2003  10:28, File description = Office Source Engine, Product Name = Office Source Engine, Product version = 11.0.5525, Company name = Microsoft Corporation (Copyright  2002-2003 Microsoft Corporation.  All rights reserved.) |1474957311|0x7a56cf3e3f12e8af599963b16f50fb6a|
    ImagePath=system32\DRIVERS\parport.sys <HKLM\System\ControlSet005\Services\Parport>
      "C:\WINDOWS\system32\drivers\parport.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 80128, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   . ) |-1224892700|0x2dc437ef71903b5dab0b509b0514d2f9|
    ImagePath=C:\WINDOWS\SMINST\PCAngel.exe <HKLM\System\ControlSet005\Services\PCA>
      "c:\windows\sminst\pcangel.exe" File version = 4, 0, 1, 17, File size = 294912, File modification date = 12/01/2006  09:22, File description = PC Angel Application, Product Name = PCAngel Application, Product version = 4, 0, 1, 17, Company name = SoftThinks (Copyright 2006 SoftThinks) |471102478|0x5eeb45f500e3e97153cb75723f8ca185|
    ImagePath=system32\DRIVERS\pci.sys <HKLM\System\ControlSet005\Services\PCI>
      "c:\windows\system32\drivers\pci.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 68480, File modification date = 17/08/2004  06:46, File description = NT Plug and Play PCI-, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |983314118|0x41ee4966e85777d83e4384f5ea3c8590|
    ImagePath=system32\DRIVERS\pciide.sys <HKLM\System\ControlSet005\Services\PCIIde>
      "c:\windows\system32\drivers\pciide.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 3328, File modification date = 19/10/2001  11:32, File description =    PCI IDE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-733581354|0x0d5ea82e0b16fa4c162635fa78e2ddc3|
    ImagePath=system32\DRIVERS\pcmcia.sys <HKLM\System\ControlSet005\Services\Pcmcia>
      "c:\windows\system32\drivers\pcmcia.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 119936, File modification date = 18/08/2004  08:00, File description =   PCMCIA, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1848810773|0x602f2a5226d92b948723a13b8b263dbb|
    ImagePath=%SystemRoot%\system32\services.exe <HKLM\System\ControlSet005\Services\PlugPlay>
      "C:\WINDOWS\system32\services.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 108544, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1984894692|0x394be1d5b35b031a94ae51c6f05e3967|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet005\Services\PolicyAgent>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\raspptp.sys <HKLM\System\ControlSet005\Services\PptpMiniport>
      "C:\WINDOWS\system32\drivers\raspptp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48384, File modification date = 18/08/2004  08:00, File description = Peer-to-Peer Tunneling Protocol, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1199848284|0x1c5cc65aac0783c344f16353e60b72ac|
    ImagePath=\SystemRoot\System32\drivers\prodrv06.sys <HKLM\System\ControlSet005\Services\prodrv06>
      "C:\WINDOWS\system32\drivers\prodrv06.sys" File version = 6.45, File size = 79488, File modification date = 13/05/2004  11:19, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |1015908929|0xf2e3c8f1eb6ba0733e0a1f6373df7957|
    ImagePath=System32\drivers\prohlp02.sys <HKLM\System\ControlSet005\Services\prohlp02>
      "c:\windows\system32\drivers\prohlp02.sys" File version = 2.45, File size = 111808, File modification date = 13/05/2004  13:00, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2004) |872832002|0x150307b52807d0c493c605ab913038ad|
    ImagePath=System32\drivers\prosync1.sys <HKLM\System\ControlSet005\Services\prosync1>
      "c:\windows\system32\drivers\prosync1.sys" File version = 1.5, File size = 6944, File modification date = 06/09/2003  12:22, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |-213977908|0xf3471e7971ee62420451d958da635064|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet005\Services\ProtectedStorage>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=system32\DRIVERS\psched.sys <HKLM\System\ControlSet005\Services\PSched>
      "c:\windows\system32\drivers\psched.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 69120, File modification date = 18/08/2004  08:00, File description = MS QoS Packet Scheduler, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |382145767|0x48671f327553dcf1d27f6197f622a668|
    ImagePath=system32\DRIVERS\ptilink.sys <HKLM\System\ControlSet005\Services\Ptilink>
      "C:\WINDOWS\system32\drivers\ptilink.sys" File version = 1.10 (XPClient.010817-1148), File size = 17792, File modification date = 18/08/2004  08:00, File description = Parallel Technologies DirectParallel IO Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Parallel Technologies, Inc. (Copyright (C) Parallel Technologies 1995-1997) |-1511820162|0x80d317bd1c3dbc5d4fe7b1678c60cadd|
    ImagePath=system32\DRIVERS\rasacd.sys <HKLM\System\ControlSet005\Services\RasAcd>
      "c:\windows\system32\drivers\rasacd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 8832, File modification date = 18/08/2004  08:00, File description = RAS Automatic Connection Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1458701829|0xfe0d99d6f31e4fad8159f690d68ded9c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\RasAuto>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\rasirda.sys <HKLM\System\ControlSet005\Services\Rasirda>
      "c:\windows\system32\drivers\rasirda.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19584, File modification date = 17/08/2001  16:51, File description = IrDA WAN Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-2137000575|0x0207d26ddf796a193ccd9f83047bb5fc|
    ImagePath=system32\DRIVERS\rasl2tp.sys <HKLM\System\ControlSet005\Services\Rasl2tp>
      "C:\WINDOWS\system32\drivers\rasl2tp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51328, File modification date = 18/08/2004  08:00, File description = RAS L2TP mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1392089970|0x98faeb4a4dcf812ba1c6fca4aa3e115c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\RasMan>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\raspppoe.sys <HKLM\System\ControlSet005\Services\RasPppoe>
      "c:\windows\system32\drivers\raspppoe.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 41472, File modification date = 18/08/2004  08:00, File description = RAS PPPoE mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |312872443|0x7306eeed8895454cbed4669be9f79faa|
    ImagePath=system32\DRIVERS\raspti.sys <HKLM\System\ControlSet005\Services\Raspti>
      "c:\windows\system32\drivers\raspti.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 16512, File modification date = 18/08/2004  08:00, File description = PTI DirectParallel(R) mini-port/call-manager driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2079207492|0xfdbb1d60066fcfbb7452fd8f9829b242|
    ImagePath=system32\DRIVERS\rdbss.sys <HKLM\System\ControlSet005\Services\Rdbss>
      "c:\windows\system32\drivers\rdbss.sys" File version = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036), File size = 174592, File modification date = 05/05/2006  09:47, File description = Redirected Drive Buffering SubSystem Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2902, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1908954063|0x03b965b1ca47f6ef60eb5e51cb50e0af|
    ImagePath=System32\DRIVERS\RDPCDD.sys <HKLM\System\ControlSet005\Services\RDPCDD>
      "c:\windows\system32\drivers\rdpcdd.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 4224, File modification date = 18/08/2004  08:00, File description = RDP Miniport, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1195321852|0x4912d5b403614ce99c28420f75353332|
    ImagePath=C:\WINDOWS\system32\sessmgr.exe <HKLM\System\ControlSet005\Services\RDSessMgr>
      "c:\windows\system32\sessmgr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 141312, File modification date = 18/08/2004  08:00, File description =       , Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-21958088|0x6b5ff0ee4d7b1399607e879ade8ee33e|
    ImagePath=system32\DRIVERS\redbook.sys <HKLM\System\ControlSet005\Services\redbook>
      "C:\WINDOWS\system32\drivers\redbook.sys" File version = 5.1.2600.2858 (xpsp.060227-1425), File size = 58112, File modification date = 28/02/2006  02:18, File description =    " ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2858, Company name =   (  .   .) |-455279266|0xd2a544c09ca6b1af92627179a3eb262c|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\RemoteAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\locator.exe <HKLM\System\ControlSet005\Services\RpcLocator>
      "C:\WINDOWS\system32\locator.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 75264, File modification date = 18/08/2004  08:00, File description = Rpc Locator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |2003492506|0x494f40c7b3fa27676750d2291ef7b441|
    ImagePath=%SystemRoot%\system32\svchost -k rpcss <HKLM\System\ControlSet005\Services\RpcSs>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
      "c:\windows\system32\rpcss.dll" File version = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528), File size = 397824, File modification date = 26/07/2005  04:42, File description = Distributed COM Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2726, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1216998182|0x214a1e1c6bf22abcbdb0a693364ddccf|
    ImagePath=%SystemRoot%\system32\rsvp.exe <HKLM\System\ControlSet005\Services\RSVP>
      "C:\WINDOWS\system32\rsvp.exe" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 132608, File modification date = 18/08/2004  08:00, File description = Microsoft RSVP, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1949630665|0x5b7cb4cc88a53a90c6f56d92ed5d55ce|
    ImagePath=%SystemRoot%\system32\lsass.exe <HKLM\System\ControlSet005\Services\SamSs>
      "C:\WINDOWS\system32\lsass.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 13312, File modification date = 18/08/2004  08:00, File description = LSA Shell (Export Version), Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1031951505|0x1952ddc36e60c313cd6acbd07d4548d6|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\SAVRT.SYS <HKLM\System\ControlSet005\Services\SAVRT>
      "\\?\c:\windows\system32\drivers\savrt.sys" File version = 9.0.1.35, File size = 235184, File modification date = 25/07/2002  19:28, File description = AutoProtect, Product Name = Symantec AntiVirus AutoProtect, Product version = 9.0, Company name = Symantec Corporation (Copyright (c) 2002 Symantec Corporation) |1539973378|0x97bd082cb7adc2167cb544bd7768e339|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\SAVRTPEL.SYS <HKLM\System\ControlSet005\Services\SAVRTPEL>
      "\\?\c:\windows\system32\drivers\savrtpel.sys" File version = 9.0.1.35, File size = 34992, File modification date = 25/07/2002  19:28, File description = SAVRTPEL, Product Name = Symantec AntiVirus AutoProtect, Product version = 9.0, Company name = Symantec Corporation (Copyright (c) 2002 Symantec Corporation) |-327010652|0xee05e06b3cf953339c0b90bcc46b9496|
    ImagePath=%SystemRoot%\System32\SCardSvr.exe <HKLM\System\ControlSet005\Services\SCardSvr>
      "C:\WINDOWS\system32\scardsvr.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 96768, File modification date = 18/08/2004  08:00, File description =    -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1312006463|0xbdb72b6b3cf6eb2dc5f9fb57f91fa185|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\Schedule>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\SE27bus.sys <HKLM\System\ControlSet005\Services\SE27bus>
      "c:\windows\system32\drivers\se27bus.sys" File version = V4.34, File size = 61600, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 Driver Driver, Product Name = Sony Ericsson Device 039 Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |38144385|0x59a9eb4073a39895af314780d0a032fa|
    ImagePath=system32\DRIVERS\SE27mdfl.sys <HKLM\System\ControlSet005\Services\SE27mdfl>
      "c:\windows\system32\drivers\se27mdfl.sys" File version = V4.34, File size = 9360, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product Name = Sony Ericsson Device 039 USB WMC Modem Filter Driver, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-12795651|0xd53e7e53107d1796825540129f8fe89f|
    ImagePath=system32\DRIVERS\SE27mdm.sys <HKLM\System\ControlSet005\Services\SE27mdm>
      "c:\windows\system32\drivers\se27mdm.sys" File version = V4.34, File size = 97184, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Modem WDM Driver, Product Name = Sony Ericsson Device 039 USB WMC Data Modem, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |-1549162460|0x2afa2f65a6e91da5b5070e734769827e|
    ImagePath=system32\DRIVERS\SE27mgmt.sys <HKLM\System\ControlSet005\Services\SE27mgmt>
      "c:\windows\system32\drivers\se27mgmt.sys" File version = V4.34, File size = 88688, File modification date = 18/09/2006  12:58, File description = Sony Ericsson Device 039 USB WMC Device Management Driver, Product Name = Sony Ericsson Device 039 USB WMC Device Management, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1239930657|0x5a33a8d7b44c7bd8abe248b4dcd1ff3c|
    ImagePath=system32\DRIVERS\se27nd5.sys <HKLM\System\ControlSet005\Services\se27nd5>
      "c:\windows\system32\drivers\se27nd5.sys" File version = V4.34, File size = 18704, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation (NDIS 5 Miniport), Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |912335448|0xbb30139683bbf3ee89ec931393d9335c|
    ImagePath=system32\DRIVERS\SE27obex.sys <HKLM\System\ControlSet005\Services\SE27obex>
      "c:\windows\system32\drivers\se27obex.sys" File version = V4.34, File size = 86560, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB WMC OBEX Interface Device Driver, Product Name = Sony Ericsson Device 039 USB WMC OBEX Interface, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |1395277399|0x5da6ff71e94b9134ddd094ebb09f05e6|
    ImagePath=system32\DRIVERS\se27unic.sys <HKLM\System\ControlSet005\Services\se27unic>
      "c:\windows\system32\drivers\se27unic.sys" File version = V4.34, File size = 90800, File modification date = 18/09/2006  12:59, File description = Sony Ericsson Device 039 USB Ethernet Emulation, Product Name = Sony Ericsson Device 039 USB Ethernet Emulation, Product version = V4.34, Company name = MCCI (Copyright (c) MCCI 1997-2005) |2078164515|0x4d54a9d7c22157ab3d2442e8bcf5ecd2|
    ImagePath=system32\DRIVERS\secdrv.sys <HKLM\System\ControlSet005\Services\Secdrv>
      "c:\windows\system32\drivers\secdrv.sys" File version = (null), File size = 27440, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1745084424|0xd26e26ea516450af9d072635c60387f4|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\seclogon>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\SENS>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\serenum.sys <HKLM\System\ControlSet005\Services\serenum>
      "c:\windows\system32\drivers\serenum.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15488, File modification date = 18/08/2004  08:00, File description = Serial Port Enumerator, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1254725935|0xa2d868aeeff612e70e213c451a70cafb|
    ImagePath=system32\DRIVERS\serial.sys <HKLM\System\ControlSet005\Services\Serial>
      "c:\windows\system32\drivers\serial.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 65408, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-2068405576|0xc0db3f763cf56313de32ea6f1dfe8534|
    ImagePath=System32\drivers\sfdrv01.sys <HKLM\System\ControlSet005\Services\sfdrv01>
      "c:\windows\system32\drivers\sfdrv01.sys" File version = 1.37, File size = 50688, File modification date = 10/08/2005  12:44, File description = StarForce Protection Environment Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-1594913562|0x4c0d673281178cb496011a2e28571fc8|
    ImagePath=System32\drivers\sfhlp01.sys <HKLM\System\ControlSet005\Services\sfhlp01>
      "c:\windows\system32\drivers\sfhlp01.sys" File version = 1.5, File size = 4832, File modification date = 01/12/2003  15:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.3, Company name = Protection Technology ((c) Protection Technology, 2000-2003) |1121420825|0x462aee0ea0481ea8bd45cac876a4ccc4|
    ImagePath=System32\drivers\sfhlp02.sys <HKLM\System\ControlSet005\Services\sfhlp02>
      "c:\windows\system32\drivers\sfhlp02.sys" File version = 2.3, File size = 6656, File modification date = 16/05/2005  13:20, File description = StarForce Protection Helper Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |-565067900|0x15be2b5e4dc5b8623cf167720682abc9|
    ImagePath=System32\drivers\sfsync02.sys <HKLM\System\ControlSet005\Services\sfsync02>
      "c:\windows\system32\drivers\sfsync02.sys" File version = 2.12, File size = 19968, File modification date = 10/08/2005  14:06, File description = StarForce Protection Synchronization Driver, Product Name = StarForce Protection System, Product version = 3.4, Company name = Protection Technology ((c) Protection Technology, 2000-2005) |1223380688|0xefebbc1d13fdb77a6af4eddfc7232edf|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\SharedAccess>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\ShellHWDetection>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\smcirda.sys <HKLM\System\ControlSet005\Services\SMCIRDA>
      "c:\windows\system32\drivers\smcirda.sys" File version = 5.1.2462.0, File size = 35913, File modification date = 19/10/2001  16:43, File description = SMC IrCC IrDA FIR NDIS 5.0  , Product Name =    , Product version = 5.1.2462.0, Company name = SMC (Copyright  SMC 1996-2001) |-89736589|0x27c56365d6f07347e4e0d0e17c4907cf|
    ImagePath=system32\drivers\splitter.sys <HKLM\System\ControlSet005\Services\splitter>
      "c:\windows\system32\drivers\splitter.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 6400, File modification date = 14/06/2006  08:47, File description = Microsoft Kernel Audio Splitter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1760326855|0x0ce218578fff5f4f7e4201539c45c78f|
    ImagePath=%SystemRoot%\system32\spoolsv.exe <HKLM\System\ControlSet005\Services\Spooler>
      "c:\windows\system32\spoolsv.exe" File version = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519), File size = 57856, File modification date = 10/06/2005  23:53, File description = Spooler SubSystem App, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2696, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1443528303|0xda81ec57acd4cdc3d4c51cf3d409af9f|
    ImagePath=system32\DRIVERS\sr.sys <HKLM\System\ControlSet005\Services\sr>
      "c:\windows\system32\drivers\sr.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 73472, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-277205571|0x5b52de4b4ae20e8c697b58bd827101e0|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\srservice>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\srv.sys <HKLM\System\ControlSet005\Services\Srv>
      "c:\windows\system32\drivers\srv.sys" File version = 5.1.2600.2974 (xpsp_sp2_gdr.060814-0101), File size = 332928, File modification date = 14/08/2006  10:34, File description = Server driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2974, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |725189275|0xea554a3ffc3f536fe8320eb38f5e4843|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet005\Services\SSDPSRV>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k imgsvc <HKLM\System\ControlSet005\Services\stisvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\swenum.sys <HKLM\System\ControlSet005\Services\swenum>
      "c:\windows\system32\drivers\swenum.sys" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 4352, File modification date = 18/08/2004  08:00, File description = Plug and Play Software Device Enumerator, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |578912181|0x03c1bae4766e2450219d20b993d6e046|
    ImagePath=system32\drivers\swmidi.sys <HKLM\System\ControlSet005\Services\swmidi>
      "c:\windows\system32\drivers\swmidi.sys" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 54272, File modification date = 17/08/2001  18:00, File description = Microsoft GS Wavetable Synthesizer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |983295529|0x94abc808fc4b6d7d2bbf42b85e25bb4d|
    ImagePath=\??\C:\WINDOWS\system32\Drivers\SYMREDRV.SYS <HKLM\System\ControlSet005\Services\SYMREDRV>
      "\\?\c:\windows\system32\drivers\symredrv.sys" File version = 4.7.0.58, File size = 15640, File modification date = 15/08/2002  14:45, File description = Redirector Filter, Product Name = Symantec Security Drivers, Product version = 4.7, Company name = Symantec Corporation (Copyright (c) 2001 Symantec Corporation) |1788001501|0x792cd16e3a656b5c0ec060e9ca490178|
    ImagePath=system32\DRIVERS\SynTP.sys <HKLM\System\ControlSet005\Services\SynTP>
      "c:\windows\system32\drivers\syntp.sys" File version = 8.3.8 16Jun06, File size = 193120, File modification date = 16/06/2006  15:40, File description = Synaptics Touchpad Driver, Product Name = Synaptics Pointing Device Driver, Product version = 8.3.8 16Jun06, Company name = Synaptics, Inc. (Copyright (C) Synaptics, Inc. 1996-2006) |253350277|0x369d0626687a968182a9db40fe8a0905|
    ImagePath=system32\drivers\sysaudio.sys <HKLM\System\ControlSet005\Services\sysaudio>
      "c:\windows\system32\drivers\sysaudio.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60800, File modification date = 03/08/2004  19:15, File description = System Audio WDM Filter, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-200468949|0x650ad082d46bac0e64c9c0e0928492fd|
    ImagePath=%SystemRoot%\system32\smlogsvc.exe <HKLM\System\ControlSet005\Services\SysmonLog>
      "C:\WINDOWS\system32\smlogsvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 91648, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-168883054|0x0122a6025e708fd8c60bf041dffd933f|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\TapiSrv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\tcpip.sys <HKLM\System\ControlSet005\Services\Tcpip>
      "c:\windows\system32\drivers\tcpip.sys" File version = 5.1.2600.2892 (xpsp_sp2_gdr.060420-0254), File size = 359808, File modification date = 20/04/2006  11:51, File description = TCP/IP Protocol Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2892, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1096478843|0x1dbf125862891817f374f407626967f4|
    ImagePath=system32\DRIVERS\termdd.sys <HKLM\System\ControlSet005\Services\TermDD>
      "c:\windows\system32\drivers\termdd.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40840, File modification date = 17/08/2004  07:05, File description = Terminal Server Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1755977943|0xa540a99c281d933f3d69d55e48727f47|
    ImagePath=%SystemRoot%\System32\svchost -k DComLaunch <HKLM\System\ControlSet005\Services\TermService>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\Themes>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\TrkWks>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=C:\WINDOWS\system32\wdfmgr.exe <HKLM\System\ControlSet005\Services\UMWdf>
      "c:\windows\system32\wdfmgr.exe" File version = 5.2.3790.1230 built by: DNSRV(bld4act), File size = 38912, File modification date = 10/08/2004  18:05, File description = Windows User Mode Driver Manager, Product Name = Microsoft Windows Operating System, Product version = 5.2.3790.1230, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1075300549|0xc81b8635dee0d3ef5f64b3dd643023a5|
    ImagePath=system32\DRIVERS\update.sys <HKLM\System\ControlSet005\Services\Update>
      "c:\windows\system32\drivers\update.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 209408, File modification date = 18/08/2004  08:00, File description = Update Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1865716387|0xaff2e5045961bbc0a602bb6f95eb1345|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet005\Services\upnphost>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\ups.exe <HKLM\System\ControlSet005\Services\UPS>
      "C:\WINDOWS\system32\ups.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18432, File modification date = 18/08/2004  08:00, File description = UPS Service, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1193009128|0xa980e4ff6a17abf0aa9b57b7aac6604f|
    ImagePath=system32\DRIVERS\usbccgp.sys <HKLM\System\ControlSet005\Services\usbccgp>
      "c:\windows\system32\drivers\usbccgp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 31616, File modification date = 03/08/2004  20:08, File description = USB Common Class Generic Parent Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1471695688|0xbffd9f120cc63bcbaa3d840f3eef9f79|
    ImagePath=system32\DRIVERS\usbehci.sys <HKLM\System\ControlSet005\Services\usbehci>
      "C:\WINDOWS\system32\drivers\usbehci.sys" File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 30080, File modification date = 19/04/2006  11:50, File description = EHCI eUSB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-539531644|0xb0d7020386c7187ef9c5a9643f289cd3|
    ImagePath=system32\DRIVERS\usbhub.sys <HKLM\System\ControlSet005\Services\usbhub>
      "c:\windows\system32\drivers\usbhub.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 57600, File modification date = 18/08/2004  08:00, File description = Default Hub Driver for USB, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-794068232|0xc72f40947f92cea56a8fb532edf025f1|
    ImagePath=system32\DRIVERS\usbprint.sys <HKLM\System\ControlSet005\Services\usbprint>
      "c:\windows\system32\drivers\usbprint.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25856, File modification date = 03/08/2004  20:01, File description = USB Printer driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1452370578|0xa42369b7cd8886cd7c70f33da6fcbcf5|
    ImagePath=system32\DRIVERS\usbscan.sys <HKLM\System\ControlSet005\Services\usbscan>
      "c:\windows\system32\drivers\usbscan.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 15104, File modification date = 03/08/2004  19:58, File description = USB Scanner Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1455440447|0xa6bc71402f4f7dd5b77fd7f4a8ddba85|
    ImagePath=system32\DRIVERS\USBSTOR.SYS <HKLM\System\ControlSet005\Services\USBSTOR>
      "c:\windows\system32\drivers\usbstor.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 26496, File modification date = 03/08/2004  20:08, File description = USB Mass Storage Class Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-991755877|0x6cd7b22193718f1d17a47a1cd6d37e75|
    ImagePath=system32\DRIVERS\usbuhci.sys <HKLM\System\ControlSet005\Services\usbuhci>
      "C:\WINDOWS\system32\drivers\usbuhci.sys" File version = 5.1.2600.2891 (xpsp.060419-0254), File size = 20608, File modification date = 19/04/2006  11:50, File description = UHCI USB Miniport Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2891, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1450089368|0xff6e4fdeb82dc228efa490336409c6bd|
    ImagePath=\SystemRoot\System32\drivers\vga.sys <HKLM\System\ControlSet005\Services\VgaSave>
      "C:\WINDOWS\system32\drivers\vga.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 20992, File modification date = 18/08/2004  08:00, File description = VGA/Super VGA Video Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1257874530|0x8a60edd72b4ea5aea8202daf0e427925|
    ImagePath=system32\DRIVERS\viaide.sys <HKLM\System\ControlSet005\Services\ViaIde>
      "c:\windows\system32\drivers\viaide.sys" File version = 1.00.01.01, File size = 5376, File modification date = 03/08/2004  13:59, File description = Generic PCI IDE Bus Driver, Product Name = Microsoft(R) Windows NT(R) Operating System, Product version = 5.00.1636.1, Company name = Microsoft Corporation (Copyright (C) VIA Technologies, Inc. 2000) |-48370474|0x59cb1338ad3654417bea49636457f65d|
    ImagePath=%SystemRoot%\System32\vssvc.exe <HKLM\System\ControlSet005\Services\VSS>
      "C:\WINDOWS\system32\vssvc.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 290304, File modification date = 18/08/2004  08:00, File description = Microsoft Volume Shadow Copy Service, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1836611832|0xa2a2f4f799e1156662e1e0ae36619e8f|
    ImagePath=system32\DRIVERS\w29n51.sys <HKLM\System\ControlSet005\Services\w29n51>
      "c:\windows\system32\drivers\w29n51.sys" File version = 9.0.4.17 Driver, File size = 2206720, File modification date = 17/07/2006  15:17, File description = Intel Wireless LAN Driver, Product Name = Intel Wireless LAN Adapter, Product version = (null), Company name = Intel Corporation (Copyright  Intel Corporation 2004-2006) |384020172|0x68eb5bc07781a36a63633541c11e1ad6|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\W32Time>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wanarp.sys <HKLM\System\ControlSet005\Services\Wanarp>
      "c:\windows\system32\drivers\wanarp.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 34560, File modification date = 18/08/2004  08:00, File description = MS Remote Access and Routing ARP Driver, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1295838718|0x984ef0b9788abf89974cfed4bfbaacbc|
    ImagePath=system32\drivers\wdmaud.sys <HKLM\System\ControlSet005\Services\wdmaud>
      "c:\windows\system32\drivers\wdmaud.sys" File version = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359), File size = 82944, File modification date = 14/06/2006  09:00, File description = MMSYSTEM Wave/Midi API mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2929, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-494542293|0xefd235ca22b57c81118c1aeb4798f1c1|
    ImagePath=%SystemRoot%\system32\svchost.exe -k LocalService <HKLM\System\ControlSet005\Services\WebClient>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\winmgmt>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=c:\program files\windows media connect\mswmccds.exe <HKLM\System\ControlSet005\Services\WmcCds>
      "c:\program files\windows media connect\mswmccds.exe" File version = 5.1.2600.1 built by: DNSRV(bld4act), File size = 483328, File modification date = 10/08/2004  20:46, File description = Windows Media Connect, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.1, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-25093542|0xb05d05da37fe4f60d95da89f856f74da|
    ImagePath=C:\Program Files\Windows Media Connect\mswmcls.exe <HKLM\System\ControlSet005\Services\WmcCdsLs>
      "c:\program files\windows media connect\mswmcls.exe" File version = 5.1.2600.1 built by: DNSRV(bld4act), File size = 28160, File modification date = 10/08/2004  17:50, File description = Windows Media Connect, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.1, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1373243116|0x28963bbcb4536ca89cbc37b8e2d36cb2|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\WmdmPmSN>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=system32\DRIVERS\wmiacpi.sys <HKLM\System\ControlSet005\Services\WmiAcpi>
      "C:\WINDOWS\system32\drivers\wmiacpi.sys" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 8832, File modification date = 03/08/2004  18:07, File description = Windows Management Interface for ACPI, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1211174249|0xae2c8544e747c20062db27456ea2d67a|
    ImagePath=C:\WINDOWS\system32\wbem\wmiapsrv.exe <HKLM\System\ControlSet005\Services\WmiApSrv>
      "c:\windows\system32\wbem\wmiapsrv.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 126464, File modification date = 18/08/2004  08:00, File description =    WMI, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1710877972|0xab7ce55fe6d3de13f366f9fa58b5f55c|
    ImagePath=\SystemRoot\System32\drivers\ws2ifsl.sys <HKLM\System\ControlSet005\Services\WS2IFSL>
      "C:\WINDOWS\system32\drivers\ws2ifsl.sys" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 12032, File modification date = 18/08/2004  08:00, File description = Winsock2 IFS Layer, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1168443836|0x6abe6e225adb5a751622a9cc3bc19ce8|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\wscsvc>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%systemroot%\system32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\wuauserv>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\WZCSVC>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
    ImagePath=%SystemRoot%\System32\svchost.exe -k netsvcs <HKLM\System\ControlSet005\Services\xmlprov>
      "C:\WINDOWS\system32\svchost.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14336, File modification date = 18/08/2004  08:00, File description = Generic Host Process for Win32 Services, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1102814673|0x5db0ae95bf08d5a63c167648f1314c07|
  HKLM\system\controlset???\control\Session Manager
    BootExecute=autocheck autochk * <HKLM\system\ControlSet002\control\Session Manager>
      "c:\windows\system32\autochk.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 588800, File modification date = 18/08/2004  08:00, File description = Auto Check Utility, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1621887782|0xaf9d1526cb0fbc34e00dcbf47a88c7eb|
  HKLM\Software\Microsoft\Active Setup\Installed Components\*
    StubPath=C:\WINDOWS\system32\ieudinit.exe <HKLM\Software\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}>
      "c:\windows\system32\ieudinit.exe" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 13824, File modification date = 08/01/2007  16:08, File description = IE Per User Active Setup Uninstall Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1009624360|0xab65ba9f072f62b4e23d19b2eb84127c|
    StubPath=C:\WINDOWS\inf\unregmp2.exe /ShowWMP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}>
      "c:\windows\inf\unregmp2.exe" File version = 10.00.00.3646, File size = 196608, File modification date = 08/09/2004  05:35, File description =    Windows Media (Microsoft), Product Name =  Windows Media (Microsoft(R)), Product version = 10.00.00.3646, Company name = Microsoft Corporation ((C)  .   .) |1656281686|0x2bf3d54a672f6d87ec1b65392dd72768|
    StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigIE <HKLM\Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}>
      "C:\WINDOWS\system32\shmgrate.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  08:00, File description = Windows NT User Data Migration Tool, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522851836|0xbccd6ca557fd89e4833a89e5a9ec90b6|
    StubPath=RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP <HKLM\Software\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}MICROS>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  13:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\iedkcs32.dll" File version = 17.00.6000.16414 (vista_gdr.070108-1520), File size = 384000, File modification date = 08/01/2007  17:02, File description = IEAK branding, Product Name = Windows Internet Explorer, Product version = 17.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1383507883|0xb13a674ad203a1f9b967dc28aca2a85c|
    StubPath=%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE <HKLM\Software\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}>
      "C:\WINDOWS\system32\shmgrate.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 42496, File modification date = 18/08/2004  08:00, File description = Windows NT User Data Migration Tool, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |522851836|0xbccd6ca557fd89e4833a89e5a9ec90b6|
    StubPath=%SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}>
      "C:\WINDOWS\system32\regsvr32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  08:00, File description =  , (C) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1798016058|0x3c5d6ffd2378543406a9fee2178e35b5|
      "C:\WINDOWS\system32\themeui.dll" File version = 6.00.2900.2801 (xpsp.051122-1543), File size = 386560, File modification date = 23/11/2005  05:41, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2801, Company name =   (  .   .) |-546128471|0x6c97e4207c4a08acccc91513213e6bcd|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 73728, File modification date = 18/08/2004  08:00, File description =     Outlook Express, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-937516386|0x6f3379c7f5f83ef0bd0a1d41ce67e8b5|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |231921953|0xc9392a06ff9768b4795ae93f37f86efe|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT <HKLM\Software\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  13:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 124928, File modification date = 08/01/2007  17:00, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611276918|0xb867be16eb572154a9b59959b88d7956|
      "c:\windows\inf\msnetmtg.inf" File version = (null), File size = 92618, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-42523716|0x79170533b362ee6e5725c97683c865ff|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser <HKLM\Software\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  13:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 124928, File modification date = 08/01/2007  17:00, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611276918|0xb867be16eb572154a9b59959b88d7956|
      "c:\windows\inf\msmsgs.inf" File version = (null), File size = 96432, File modification date = 18/08/2004  08:00, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-292250166|0xb7768a8d50c246048f9b5b1d17e6b665|
    StubPath=rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp10.inf,PerUserStub <HKLM\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  13:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\advpack.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 124928, File modification date = 08/01/2007  17:00, File description = ADVPACK, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1611276918|0xb867be16eb572154a9b59959b88d7956|
      "c:\windows\inf\wmp10.inf" File version = (null), File size = 34867, File modification date = 08/09/2004  05:35, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1698537681|0x7edd6600c872911a601fa0fb28b0c332|
    StubPath="%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install <HKLM\Software\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}>
      "C:\Program Files\outlook express\setup50.exe" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 73728, File modification date = 18/08/2004  08:00, File description =     Outlook Express, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-937516386|0x6f3379c7f5f83ef0bd0a1d41ce67e8b5|
      "c:\windows\system32\user.exe" File version = 3.10, File size = 47872, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |231921953|0xc9392a06ff9768b4795ae93f37f86efe|
    StubPath=regsvr32.exe /s /n /i:U shell32.dll <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}>
      "c:\windows\system32\regsvr32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 12288, File modification date = 18/08/2004  08:00, File description =  , (C) Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1798016058|0x3c5d6ffd2378543406a9fee2178e35b5|
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
    StubPath=%SystemRoot%\system32\ie4uinit.exe <HKLM\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}>
      "C:\WINDOWS\system32\ie4uinit.exe" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 56832, File modification date = 08/01/2007  16:08, File description = IE Per-User Initialization Utility, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |851750845|0xbfb67bb56643e9b022faa34f07a2d552|
    StubPath=C:\WINDOWS\system32\Rundll32.exe C:\WINDOWS\system32\mscories.dll,Install <HKLM\Software\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}>
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  13:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "c:\windows\system32\mscories.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 74240, File modification date = 23/09/2005  04:28, File description = Microsoft .NET IE SECURITY REGISTRATION, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1383650402|0x46e55aea48bad9297df685c722619bd6|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT
    comm.drv=comm.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\comm.drv" File version = 3.10, File size = 10544, File modification date = 18/08/2004  08:00, File description = Windows COMM Driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2048850131|0x01b656374912d7ccf7465a3893f18982|
    display.drv=vga.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\vga.drv" File version = 3.10, File size = 2176, File modification date = 18/08/2004  08:00, File description = WOW Display Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |1154556118|0x9c86bbb80450af95b6a4ea8ebda93d76|
    drivers=mmsystem.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mmsystem.dll" File version = 3.10, File size = 69120, File modification date = 18/08/2004  08:00, File description =  API  , Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |937249001|0xf708fce5338bfaf52cb28b0dffa00190|
    keyboard.drv=keyboard.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\keyboard.drv" File version = 3.10, File size = 2000, File modification date = 18/08/2004  08:00, File description = WOW Keyboard Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |297157625|0xed4bf709aad8b665075de06a0945b030|
    mouse.drv=mouse.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\mouse.drv" File version = 3.10, File size = 2032, File modification date = 18/08/2004  08:00, File description = WOW MOUSE Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-124025146|0x7d29780ac88bb7292cdcff71ba67433d|
    network.drv=wfwnet.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\wfwnet.drv" File version = 3.10, File size = 13600, File modification date = 18/08/2004  08:00, File description = Windows for Workgroups network driver, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |819115660|0x5302ada9b0793c84151fc463dd65d7bf|
    shell=progman.exe <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system32\progman.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 109568, File modification date = 18/08/2004  08:00, File description =  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1241159835|0x8923105d90451a754c9365ae9392dff3|
    sound.drv=sound.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\sound.drv" File version = 3.10, File size = 1744, File modification date = 18/08/2004  08:00, File description = WOW SOUND Driver Module, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |2008615310|0x028a1f74926dc3df2d9629edc9aebafb|
    system.drv=system.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\WOW\BOOT>
      "c:\windows\system\system.drv" File version = 3.10, File size = 3360, File modification date = 18/08/2004  08:00, File description = Windows System Driver core component, Product Name = Microsoft Windows(TM) Operating System, Product version = 3.10, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 1981-1996) |-635574434|0x4a00d59ae6d75bdfc2c8e5182c4b1376|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers
    timer=timer.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers>
      "c:\windows\system\timer.drv" File version = 3.10, File size = 4064, File modification date = 18/08/2004  08:00, File description =    PC- , Product Name =   Microsoft Windows(TM), Product version = 3.10, Company name =   (  Microsoft, 1981-1996) |-1391970634|0x13b3e8097afc3c12814770621f3487fc|
  HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
    midimapper=midimap.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\midimap.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 18944, File modification date = 18/08/2004  08:00, File description =   MIDI Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1157073747|0x375de9a38356ee68110e576f9e4f32a6|
    msacm.imaadpcm=imaadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\imaadp32.acm" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16384, File modification date = 18/08/2004  08:00, File description =   IMA ADPCM  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1638053536|0xb45c691988afab9c9bd93ba187ca2474|
    msacm.msadpcm=msadp32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msadp32.acm" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 14848, File modification date = 18/08/2004  08:00, File description =   ADPCM  MSACM Microsoft, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1995141393|0x0bae796a3b96f0e48e11e413d5747b4c|
    msacm.msg711=msg711.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg711.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 9216, File modification date = 18/08/2004  08:00, File description =  Microsoft CCITT G.711 (A-Law / u-Law)  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1854403983|0xe065a3c00733efcf1c69d415a87a5068|
    msacm.msgsm610=msgsm32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msgsm32.acm" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 19968, File modification date = 18/08/2004  08:00, File description =    GSM 6.10  MSACM, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1918754933|0xaa2760236496ff786daef9f14014d66d|
    msacm.trspch=tssoft32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tssoft32.acm" File version = 1.01, File size = 8192, File modification date = 18/08/2004  08:00, File description =    DSP Group TrueSpeech  MSACM V3.50, Product Name = DSP GROUP Windows NT TrueSpeech CODEC, Product version = 1.01, Company name = DSP GROUP, INC. ( DSP Group, Inc. 1993-1996) |-594300875|0xa0f3e55689268941af7e1c19c4d4b2f3|
    vidc.cvid=iccvid.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iccvid.dll" File version = 1.10.0.11, File size = 80384, File modification date = 18/08/2004  08:00, File description = Cinepak Codec, Product Name = Cinepak for Windows 32, Product version = 1.10.0.0, Company name = Radius Inc. (Copyright  1992-1995 Radius Inc., All Rights Reserved) |-1194508810|0x16e6c32c0d05cf16e6b0b73beb2bb970|
    vidc.I420=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.2180, File size = 294912, File modification date = 18/08/2004  08:00, File description =  Microsoft H.263 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-874728242|0xcf91400a97fff1fe16df098da85efff2|
    vidc.iv31=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 18/08/2004  08:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-236959363|0xb8fe8e877e14a78fb326309d4da91a0a|
    vidc.iv32=ir32_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir32_32.dll" File version = (null), File size = 199168, File modification date = 18/08/2004  08:00, File description = (null), Product Name = Intel Indeo(R) Video R3.2 32-bit Driver, Product version = Version 3.24.15.03, Company name = Intel(R) Corporation (Copyright Intel Corporation 1992-1995) |-236959363|0xb8fe8e877e14a78fb326309d4da91a0a|
    vidc.iv41=ir41_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir41_32.ax" File version = 4.51.16.03, File size = 848384, File modification date = 18/08/2004  08:00, File description = Intel Indeo Video 4.5, Product Name = Intel Indeo Video 4.5, Product version = 4.51.16.03, Company name = Intel Corporation (Copyright Intel Corporation 1994-1998) |-1887696561|0xb3af437917f7cc0b1ff4b52d7079cd17|
    vidc.iyuv=iyuv_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iyuv_32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 47616, File modification date = 18/08/2004  08:00, File description = Intel Indeo(R) Video YUV Codec, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  Intel, 1992-1997) |557179088|0xac314e854bb60b75e45d7a541705ed26|
    vidc.mrle=msrle32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msrle32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 11264, File modification date = 18/08/2004  08:00, File description =   Microsoft RLE, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1062918381|0x83949714f70084e2dc25184215ed2d40|
    vidc.msvc=msvidc32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msvidc32.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 25600, File modification date = 18/08/2004  08:00, File description =   Microsoft Video 1, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1998454945|0xc3d62768e82a887f0b8bc3c45fb89acb|
    vidc.uyvy=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  08:00, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    vidc.yuy2=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  08:00, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    vidc.yvu9=tsbyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tsbyuv.dll" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 8192, File modification date = 18/08/2004  08:00, File description = Toshiba Video Codec, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation (Copyright (C) Toshiba Corp. 1997) |-1265855821|0x1622231279c17eab9c4d37e3d2aa5fea|
    vidc.yvyu=msyuv.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msyuv.dll" File version = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 17408, File modification date = 18/08/2004  08:00, File description = Microsoft UYVY Video Decompressor, Product Name = Microsoft(R) Windows(R) Operating System, Product version = 5.3.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1973984750|0x3529c79f5142680c7d965e775a0882bf|
    wavemapper=msacm32.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msacm32.drv" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 20992, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |944500882|0x7db9054357f01992c8929e460ee0c289|
    msacm.msg723=msg723.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msg723.acm" File version = 4.4.3400, File size = 118784, File modification date = 18/08/2004  08:00, File description = Microsoft G.723.1 CODEC  MSACM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-559110528|0x93091b2a7a3cf80b53046601717d1a2b|
    vidc.M263=msh263.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh263.drv" File version = 5.1.2600.2180, File size = 294912, File modification date = 18/08/2004  08:00, File description =  Microsoft H.263 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-874728242|0xcf91400a97fff1fe16df098da85efff2|
    vidc.M261=msh261.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msh261.drv" File version = 5.1.2600.2180, File size = 188416, File modification date = 18/08/2004  08:00, File description =  Microsoft H.261 ICM, Product Name = Windows NetMeeting, Product version = 3.01, Company name =   (  Intel   Microsoft, 1995-1999) |-1117483247|0x01b48472269ebe39f1c52c4696d5ffbb|
    msacm.msaudio1=msaud32.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\msaud32.acm" File version = 8.00.00.4487, File size = 294912, File modification date = 18/08/2004  08:00, File description = Windows Media Audio, Product Name = Windows Media Audio, Product version = 8.00.00.4487, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1999-2001) |323994253|0xed90974278c0376327838d47adc4173f|
    msacm.sl_anet=sl_anet.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\sl_anet.acm" File version = 3.02, File size = 86016, File modification date = 18/08/2004  08:00, File description = Audio codec for MS ACM, Product Name = ACELP.net Audio Codec, Product version = 3.02, Company name = Sipro Lab Telecom Inc. (Copyright  Sipro Lab Telecom Inc. 1998-99) |271167773|0x39724c2030902f3211103e10399b5701|
    msacm.iac2=C:\WINDOWS\system32\iac25_32.ax <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\iac25_32.ax" File version = 2.05.53, File size = 199680, File modification date = 18/08/2004  08:00, File description = Indeo audio software, Product Name = Indeo audio software, Product version = 2.05.53, Company name = Intel Corporation (Copyright  Intel Corp. 1997) |-940912838|0x415fa906fbc834b06b3aec74bd2e75af|
    vidc.iv50=ir50_32.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\ir50_32.dll" File version = R.5.10.15.2.55, File size = 755200, File modification date = 18/08/2004  08:00, File description = Intel Indeo video 5.10, Product Name = Intel Indeo video 5.10, Product version = R.5.10.15.2.55, Company name = Intel Corporation (Copyright  1994-1998 Intel Corp.) |1329995150|0x7fdaa916871c74eda01463132902526b|
    msacm.l3acm=C:\WINDOWS\system32\l3codeca.acm <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\l3codeca.acm" File version = 1, 9, 0, 0305, File size = 290816, File modification date = 18/08/2004  08:00, File description = MPEG Layer-3 Audio Codec for MSACM, Product Name = MPEG Layer-3 Audio Codec for MSACM, Product version = 1, 0, 0, 0, Company name = Fraunhofer Institut Integrierte Schaltungen IIS (Copyright  1996-1999 Fraunhofer Institut Integrierte Schaltungen IIS) |-340337155|0xa519ab541c3da214265fe481a19c0dd2|
    wave=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 18/08/2004  08:00, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    midi=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 18/08/2004  08:00, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    mixer=wdmaud.drv <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\wdmaud.drv" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 23552, File modification date = 18/08/2004  08:00, File description = WDM Audio driver mapper, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-400773507|0xf0174afb9d6316bc45c2f6d938fb9964|
    vidc.tscc=tsccvid.dll <HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32>
      "c:\windows\system32\tsccvid.dll" File version = 2.0.3, File size = 110592, File modification date = 02/04/2003  10:45, File description = TechSmith Screen Capture Codec, Product Name = TechSmith Screen Capture Codec, Product version = 2.0.3, Company name = TechSmith Corporation (Copyright  1999-2002 TechSmith Corp. All rights reserved.) |1155166897|0x53b89f89cfbc30263c222c1deb335949|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad
    PostBootReminder={7849596a-48ea-486e-8937-a2a3009f31a9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
    CDBurn={fbeb8a05-beee-4442-804e-409d6c4515e9} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
    WebCheck={E6FB5E20-DE35-11CF-9C87-00AA005127ED} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    SysTray={35CEC8A3-2BE6-11D2-8773-92E220524153} <HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad>
      "C:\WINDOWS\system32\stobject.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 122368, File modification date = 18/08/2004  08:00, File description =    Systray, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |21103765|0xbf777cb6f3c4a86d811505582769010b|
  *\Control Panel\Desktop
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\.DEFAULT\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  13:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-19\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  13:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=%SystemRoot%\System32\logon.scr <HKEY_USERS\S-1-5-20\Control Panel\Desktop>
      "C:\WINDOWS\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  13:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
    SCRNSAVE.EXE=logon.scr <HKEY_USERS\S-1-5-18\Control Panel\Desktop>
      "c:\windows\system32\logon.scr" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 220672, File modification date = 18/08/2004  13:00, File description =  "  ", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-963041029|0x8324446fc63cc1c9e2d859634ba11515|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
  *\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
    {AEB6717E-7E19-11d0-97EE-00C04FD91972}
      "c:\windows\system32\shell32.dll" File version = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316), File size = 8471040, File modification date = 19/12/2006  21:50, File description =    Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.3051, Company name =   (  .   .) |-148089523|0xa1279c571dd86ec43d234a1b9b588f6f|
  HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
    {00022613-0000-0000-C000-000000000046}
      "c:\windows\system32\mmsys.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 620032, File modification date = 18/08/2004  08:00, File description =   -  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1029054611|0x234237964c059728b21a334ff0d55fbd|
    {176d6597-26d3-11d1-b350-080036a75b03}
      "c:\windows\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {1F2E5C40-9550-11CE-99D2-00AA006E086C}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1280505977|0x128f435bbafba67a3f37a0ee087a0184|
    {3EA48300-8CF6-101B-84FB-666CCB9BCD32}
      "c:\windows\system32\docprop.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 46080, File modification date = 18/08/2004  08:00, File description =   OLE, Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-797951335|0x992fb236cfe085aeb93d6e8372c9eee9|
    {40dd6e20-7c17-11ce-a804-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
    {41E300E0-78B6-11ce-849B-444553540000}
      "C:\WINDOWS\system32\themeui.dll" File version = 6.00.2900.2801 (xpsp.051122-1543), File size = 386560, File modification date = 23/11/2005  05:41, File description = API   Windows, Product Name =   Microsoft Windows, Product version = 6.00.2900.2801, Company name =   (  .   .) |-546128471|0x6c97e4207c4a08acccc91513213e6bcd|
    {42071712-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskadp.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |-879404280|0x1ef3747e65cf364f870b891a5bf139aa|
    {42071713-76d4-11d1-8b24-00a0c9068ff3}
      "c:\windows\system32\deskmon.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 16896, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |1757095939|0x6070a9b3048a175a6b75e6e243186b2c|
    {4E40F770-369C-11d0-8922-00A024AB2DBB}
      "c:\windows\system32\dssec.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 51712, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |326965962|0x44a2a3005d504834935896e96016e66d|
    {513D916F-2A8E-4F51-AEAB-0CBC76FB1AF8}
      "c:\windows\system32\slayerxp.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 25088, File modification date = 18/08/2004  08:00, File description =     "", Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name = Microsoft Corporation (  .   .) |-54810607|0xf1b3e5fd6e8a09ec3ba37089cc861caf|
    {56117100-C0CD-101B-81E2-00AA004AE837}
      "c:\windows\system32\shscrap.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 27648, File modification date = 18/08/2004  08:00, File description =  -, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-26443466|0xcc6aef6ae92cc25ebe9e11a0100cabdf|
    {59099400-57FF-11CE-BD94-0020AF85B590}
      "c:\windows\system32\diskcopy.dll" File version = 6.00.2600.0000 (xpclient.010817-1148), File size = 1501696, File modification date = 18/08/2004  08:00, File description = Windows DiskCopy, Product Name =   Microsoft Windows, Product version = 6.00.2600.0000, Company name =   (  .   .) |-1768062996|0xa525c37757a1da8ae5acb10feec1ac28|
    {59be4990-f85c-11ce-aff7-00aa003ca9f6}
      "c:\windows\system32\ntlanui2.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 14848, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |1755583219|0xf6fa816cbe46749b8d5c875aa0a0226a|
    {5DB2625A-54DF-11D0-B6C4-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {675F097E-4C4D-11D0-B6C1-0800091AA605}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {77597368-7b15-11d0-a0c2-080036af3f03}
      "c:\windows\system32\printui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 565248, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-486691064|0x44fa764e4bea139f5b1b2ac5686b6b65|
    {7988B573-EC89-11cf-9C00-00AA00A14F56}
      "c:\windows\system32\dskquoui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 146432, File modification date = 18/08/2004  08:00, File description =  DLL   , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-1193260270|0xf48c6edf98e56bdee91f4d523f24d5c3|
    {85BBD920-42A0-1069-A2E4-08002B30309D}
      "c:\windows\system32\syncui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 190464, File modification date = 18/08/2004  08:00, File description =  Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |224525855|0xb5aa35d0c14683a66b283f91441c5163|
    {88895560-9AA2-1069-930E-00AA0030EBC8}
      "c:\windows\system32\hticons.dll" File version = 5.1.2600.0, File size = 44544, File modification date = 18/08/2004  08:00, File description = HyperTerminal Applet Library, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Hilgraeve, Inc. (Copyright  Hilgraeve, Inc. 2001) |-554862870|0x2fb8d5af59fadc2eaea0ee56cc8fded7|
    {BD84B380-8CA2-1069-AB1D-08000948F534}
      "c:\windows\system32\fontext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 382976, File modification date = 18/08/2004  08:00, File description =   Windows, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1630719410|0xc53427e90013d85c6b2559e79f2748b1|
    {DBCE2480-C732-101B-BE72-BA78E9AD5B27}
      "C:\WINDOWS\system32\icmui.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 54784, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-193925979|0x39d84deddbce6b95799a2967efc22a1d|
    {F37C5810-4D3F-11d0-B4BF-00AA00BBB723}
      "c:\windows\system32\rshx32.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 40448, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1280505977|0x128f435bbafba67a3f37a0ee087a0184|
    {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}
      "c:\windows\system32\ntshrui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 144384, File modification date = 18/08/2004  08:00, File description =  ,    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1867948725|0x447db26e6621e11c4f551db89e3f409c|
    {f92e8c40-3d33-11d2-b1aa-080036a75b03}
      "c:\windows\system32\deskperf.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 18432, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.0, Company name =   (  .   .) |-1306393081|0xd805d2a6f2fcf780a3c2c21e9b1907d1|
    {7444C717-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 54272, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-1829071292|0x7ccca7c0f5636d3a65cde91ac9fd8e9a|
    {7444C719-39BF-11D1-8CD9-00C04FC29D45}
      "c:\windows\system32\cryptext.dll" File version = 5.131.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 54272, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.131.2600.2180, Company name =   (  .   .) |-1829071292|0x7ccca7c0f5636d3a65cde91ac9fd8e9a|
    {7007ACC7-3202-11D1-AAD2-00805FC1270E}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
    {992CFFA0-F557-101A-88EC-00DD010CCC48}
      "c:\windows\system32\netshell.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 1711616, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-342621306|0x40da81c763a3816238a1fb21c5cc22ec|
    {E211B736-43FD-11D1-9EFB-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  08:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {FB0C9C8A-6C50-11D1-9F1D-0000F8757FCD}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  08:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {905667aa-acd6-11d2-8080-00805f6596d2}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  08:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {3F953603-1008-4f6e-A73A-04AAC7A992F1}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  08:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {83bbcbf3-b28a-4919-a5aa-73027445d672}
      "c:\windows\system32\wiashext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 590848, File modification date = 18/08/2004  08:00, File description =        , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-235062892|0x164e61537289388699ca7b82c9e176cf|
    {F0152790-D56E-4445-850E-4F3117DB740C}
      "c:\windows\system32\remotepg.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 60928, File modification date = 18/08/2004  08:00, File description = CPL-  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1054669753|0x3900fdcd2de579aeca9fd731b6faa716|
    {60254CA5-953B-11CF-8C96-00AA00B8708C}
      "c:\windows\system32\wshext.dll" File version = 5.6.0.8820, File size = 65536, File modification date = 18/08/2004  08:00, File description = Microsoft (r) Shell Extension for Windows Script Host, Product Name = Microsoft (r) Windows Script Host, Product version = 5.6.0.8820, Company name = Microsoft Corporation (Copyright  Microsoft Corp. 2002) |-237520076|0x1c905d00411c5df8f9db4bb2a295da5c|
    {2206CDB2-19C1-11D1-89E0-00C04FD7A829}
      "c:\program files\common files\system\ole db\oledb32.dll" File version = 2.81.1117.0 (xpsp_sp2_rtm.040803-2158), File size = 487424, File modification date = 18/08/2004  08:00, File description = Microsoft Data Access - OLE DB Core Services, Product Name = Microsoft Data Access Components, Product version = 2.81.1117.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1082205812|0x6bcbbfe858ecf0ede5aa6abc95ce3ba7|
    {DD2110F0-9EEF-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {797F1E90-9EDD-11cf-8D8E-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {D6277990-4C6A-11CF-8D87-00AA0060F5BF}
      "c:\windows\system32\mstask.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 277504, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |2075916310|0xff49e81aea4a59e1f99875cce3cfa3d1|
    {2559a1f7-21d7-11d4-bdaf-00c04f60b9f0}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {5F327514-6C5E-4d60-8F16-D07FA08A78ED}
      "c:\windows\system32\wuaucpl.cpl" File version = 5.8.0.2469 built by: lab01_n(wmbla), File size = 174360, File modification date = 26/05/2005  02:16, File description =    , Product Name =   Microsoft Windows, Product version = 5.8.0.2469, Company name =   (  .   .) |-789503770|0xa5982ebdf6dd1f12902d117e04285a7a|
    {2559a1f0-21d7-11d4-bdaf-00c04f60b9f0}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f1-21d7-11d4-bdaf-00c04f60b9f0}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f2-21d7-11d4-bdaf-00c04f60b9f0}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f4-21d7-11d4-bdaf-00c04f60b9f0}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {2559a1f5-21d7-11d4-bdaf-00c04f60b9f0}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {D20EA4E1-3957-11d2-A40B-0C5020524152}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {D20EA4E1-3957-11d2-A40B-0C5020524153}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {596AB062-B4D2-4215-9F74-E9109B0A8153}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  08:00, File description = :  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name = Microsoft Corporation (  .   .) |-1079143813|0xc43dece53297216c81f1926fa7714192|
    {9DB7A13C-F208-4981-8353-73CC61AE2783}
      "C:\WINDOWS\system32\twext.dll" File version = 6.00.3800.2180 (xpsp_sp2_rtm.040803-2158), File size = 44032, File modification date = 18/08/2004  08:00, File description = :  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name = Microsoft Corporation (  .   .) |-1079143813|0xc43dece53297216c81f1926fa7714192|
    {875CB1A1-0F29-45de-A1AE-CFB4950D0B78}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  08:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {40C3D757-D6E4-4b49-BB41-0E5BBEA28817}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  08:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {E4B29F9D-D390-480b-92FD-7DDB47101D71}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  08:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {87D62D94-71B3-4b9a-9489-5FE6850DC73E}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  08:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {A6FD9E45-6E44-43f9-8644-08598F5A74D9}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  08:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {c5a40261-cd64-4ccf-84cb-c394da41d590}
      "C:\WINDOWS\system32\shmedia.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 152576, File modification date = 18/08/2004  08:00, File description =   -, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-117345592|0xa1a04e33b756650be01fd029a3803df4|
    {5E6AB780-7743-11CF-A12B-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {22BF0C20-6DA7-11D0-B373-00A0C9034938}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {91EA3F8B-C99B-11d0-9815-00C04FD91972}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {6413BA2C-B461-11d1-A18A-080036B11A03}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {F61FFEC1-754F-11d0-80CA-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {7BA4C742-9E81-11CF-99D3-00AA004AE837}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {30D02401-6A81-11d0-8274-00C04FD5AE38}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {169A0691-8DF9-11d1-A1C4-00C04FD75D13}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {07798131-AF23-11d1-9111-00A0C98BA67D}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {AF4F6510-F982-11d0-8595-00AA004CD6D8}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {01E04581-4EEE-11d0-BFE9-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {A08C11D2-A228-11d0-825B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {00BB2763-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {7376D660-C583-11d0-A3A5-00C04FD706EC}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {6756A641-DE71-11d0-831B-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {6935DB93-21E8-4ccc-BEB9-9FE3C77A297A}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {7e653215-fa25-46bd-a339-34a2790f3cb7}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {acf35015-526e-4230-9596-becbe19f0ac9}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {00BB2764-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {03C036F1-A186-11D0-824A-00AA005B4383}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {00BB2765-6A77-11D0-A535-00C04FD7D062}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {ECD4FC4E-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {3CCF8A41-5C85-11d0-9796-00AA00B90ADF}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {ECD4FC4C-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {ECD4FC4D-521C-11D0-B792-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {DD313E04-FEFF-11d1-8ECD-0000F87A470C}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {EF8AD2D1-AE36-11D1-B2D2-006097DF8C11}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {EFA24E61-B078-11d0-89E4-00C04FC9E26E}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {0A89A860-D7B1-11CE-8350-444553540000}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {E7E4BC40-E76A-11CE-A9BB-00AA004AE837}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {A5E46E3A-8849-11D1-9D8C-00C04FC99D61}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {FBF23B40-E3F0-101B-8488-00AA003E56F8}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {3C374A40-BAE4-11CF-BF7D-00AA006946EE}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {FF393560-C2A7-11CF-BFF4-444553540000}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {7BD29E00-76C1-11CF-9DD0-00A0C9034933}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {7BD29E01-76C1-11CF-9DD0-00A0C9034933}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {CFBFAE00-17A6-11D0-99CB-00C04FD64497}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {A2B0DD40-CC59-11d0-A3A5-00C04FD706EC}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {67EA19A0-CCEF-11d0-8024-00C04FD75D13}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {131A6951-7F78-11D0-A979-00C04FD705A2}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {9461b922-3c5a-11d2-bf8b-00c04fb93661}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {3DC7A020-0ACD-11CF-A9BB-00AA004AE837}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {871C5380-42A0-1069-A2EA-08002B30309D}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {EFA24E64-B078-11d0-89E4-00C04FC9E26E}
      "C:\WINDOWS\system32\shdocvw.dll" File version = 6.00.2900.2987 (xpsp.060901-0211), File size = 1497088, File modification date = 23/09/2006  10:13, File description =       , Product Name =   Microsoft Windows, Product version = 6.00.2900.2987, Company name =   (  .   .) |-2127325554|0x1fa8877dfd360b0557aee2c4e84d8440|
    {9E56BE60-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 55296, File modification date = 18/08/2004  08:00, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-1729376145|0xbab3e9b7d02cbed589d26ae06dc78384|
    {9E56BE61-C50F-11CF-9A2C-00A0C90A90CE}
      "c:\windows\system32\sendmail.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 55296, File modification date = 18/08/2004  08:00, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |-1729376145|0xbab3e9b7d02cbed589d26ae06dc78384|
    {88C6C381-2E85-11D0-94DE-444553540000}
      "C:\WINDOWS\system32\occache.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 102400, File modification date = 08/01/2007  17:04, File description = Object Control Viewer, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-676004690|0x1707ae6f670ad372cdb30e7475e5979f|
    {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {ABBE31D0-6DAE-11D0-BECA-00C04FD940BE}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {F5175861-2688-11d0-9C5E-00AA00A45957}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {08165EA0-E946-11CF-9C87-00AA005127ED}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {E3A8BDE6-ABCE-11d0-BC4B-00C04FD929DB}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {E8BB6DC0-6B4E-11d0-92DB-00A0C90C2BD7}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {7D559C10-9FE9-11d0-93F7-00AA0059CE02}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {E6CC6978-6B6E-11D0-BECA-00C04FD940BE}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {D8BD2030-6FC9-11D0-864F-00AA006809D9}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {7FC0B86E-5FA7-11d1-BC7C-00C04FD929DB}
      "C:\WINDOWS\system32\webcheck.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 232960, File modification date = 12/01/2007  07:27, File description = Web Site Monitor, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1608200617|0xc2be813dac66fde7dfaab23583464609|
    {352EC2B7-8B9A-11D1-B8AE-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {0B124F8F-91F0-11D1-B8B5-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {CFCCC7A0-A282-11D1-9082-006008059382}
      "C:\WINDOWS\system32\appwiz.cpl" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 551424, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |254982741|0x3dc7ae0b966eb1e48fa7bab6b1e4bbf5|
    {e84fda7c-1d6a-45f6-b725-cb260c236066}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  13:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {66e4e4fb-f385-4dd0-8d74-a2efd1bc6178}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  13:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {00E7B358-F65B-4dcf-83DF-CD026B94BFD4}
      "c:\windows\system32\rundll32.exe" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 33280, File modification date = 18/08/2004  13:00, File description =   DLL  , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |907884026|0x4e95e199cd4702006dbe7bfeea9a4a8a|
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  13:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {3F30C968-480A-4C6C-862D-EFC0897BB84B}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  13:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {9DBD2C50-62AD-11d0-B806-00C04FD706EC}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  13:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {EAB841A0-9550-11cf-8C16-00805F1408F3}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  13:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {eb9b1153-3b57-4e68-959a-a3266bc3d7fe}
      "C:\WINDOWS\system32\shimgvw.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 439808, File modification date = 18/08/2004  13:00, File description =     , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1991415044|0xf591df470e41332bae1725066f72552c|
    {CC6EEFFB-43F6-46c5-9619-51D571967F7D}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {add36aa8-751a-4579-a266-d66f5202ccbb}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {6b33163c-76a5-4b6c-bf21-45de9cd503a1}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {58f1f272-9240-4f51-b6d4-fd63d1618591}
      "C:\WINDOWS\system32\netplwiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 877056, File modification date = 18/08/2004  08:00, File description =      , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |811761144|0x66ec263a4e0b12cba3d5fc5bd75672ac|
    {E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}
      "C:\WINDOWS\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  08:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {BD472F60-27FA-11cf-B8B4-444553540000}
      "C:\WINDOWS\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  08:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {888DCA60-FC0A-11CF-8F0F-00C04FD7D062}
      "C:\WINDOWS\system32\zipfldr.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 336896, File modification date = 18/08/2004  08:00, File description =  ZIP-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1096137888|0x0f977fa890a632242c942233f0ab0231|
    {692F0339-CBAA-47e6-B5B5-3B84DB604E87}
      "C:\WINDOWS\system32\extmgr.dll" File version = 7.00.6000.16414 (vista_gdr.070108-1520), File size = 132608, File modification date = 12/01/2007  07:27, File description = Extensions Manager, Product Name = Windows Internet Explorer, Product version = 7.00.6000.16414, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-448095644|0x8e92a78f60acf94becb988b0fe79ca36|
    {63da6ec0-2e98-11cf-8d82-444553540000}
      "c:\windows\system32\msieftp.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 249344, File modification date = 18/08/2004  08:00, File description =   FTP Microsoft Internet Explorer FTP, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1626139983|0xe989f6f58a3b0677ac0107c2eee449c4|
    {883373C3-BF89-11D1-BE35-080036B11A03}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  08:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {A9CF0EAE-901A-4739-A481-E35B73E47F6D}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  08:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {8EE97210-FD1F-4B19-91DA-67914005F020}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  08:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {0EEA25CC-4362-4A12-850B-86EE61B0D3EB}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  08:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {6A205B57-2567-4A2C-B881-F787FAB579A3}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  08:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {28F8A4AC-BBB3-4D9B-B177-82BFC914FA33}
      "c:\windows\system32\docprop2.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 48128, File modification date = 18/08/2004  08:00, File description =   DocProp, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1947267017|0x1c6ffa487001f3f39c00d1c440b1bbf5|
    {8A23E65E-31C2-11d0-891C-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {9E51E0D0-6E0F-11d2-9601-00C04FA31A86}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {163FDC20-2ABC-11d0-88F0-00A024AB2DBB}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {F020E586-5264-11d1-A532-0000F8757D7E}
      "C:\WINDOWS\system32\dsquery.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 239104, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-123161735|0x051bbaa482d782812a41006ea967db32|
    {0D45D530-764B-11d0-A1CA-00AA00C16E65}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113152, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1530730649|0x03f505f2bac60f808b0525b847b21bea|
    {62AE1F9A-126A-11D0-A14B-0800361B1103}
      "C:\WINDOWS\system32\dsuiext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 113152, File modification date = 18/08/2004  08:00, File description =    , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1530730649|0x03f505f2bac60f808b0525b847b21bea|
    {ECF03A33-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  08:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {ECF03A32-103D-11d2-854D-006008059367}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  08:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {4a7ded0a-ad25-11d0-98a8-0800361b1103}
      "C:\WINDOWS\system32\mydocs.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 91136, File modification date = 18/08/2004  08:00, File description =    " ", Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1528824736|0x3ffe7e8ad5abe56585517b3f8a0afc49|
    {750fdf0e-2a26-11d1-a3ea-080036587f03}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {10CFC467-4392-11d2-8DB4-00C04FA31A66}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {AFDB1F70-2A4C-11d2-9039-00C04F8EEB3E}
      "C:\WINDOWS\system32\cscui.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 330752, File modification date = 18/08/2004  08:00, File description =     , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-1701832645|0x4bf62187055a0c536eda8ef879f7a12a|
    {143A62C8-C33B-11D1-84FE-00C04FA34A14}
      "c:\windows\msagent\agentpsh.dll" File version = 2.00.0.3422, File size = 24064, File modification date = 18/08/2004  08:00, File description = Microsoft Agent Property Sheet Handler, Product Name = Microsoft Agent Property Sheet Handler, Product version = 2.00.0.3422, Company name = Microsoft Corporation (Copyright (C) Microsoft Corp. 1997-98) |-1739972169|0x77bd91b6b34a661789c57f873cfacebe|
    {ECCDF543-45CC-11CE-B9BF-0080C87CDBA6}
      "c:\windows\system32\dfsshlex.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 28672, File modification date = 18/08/2004  08:00, File description =      DFS, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1748421650|0xe2651ee9dd124f91a8ba547d4a09f33a|
    {60fd46de-f830-4894-a628-6fa81bc0190d}
      "C:\WINDOWS\system32\photowiz.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 172032, File modification date = 18/08/2004  08:00, File description =   , Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |-988848672|0x8a2e3ff220444dce8005bd42c896ff99|
    {7A80E4A8-8005-11D2-BCF8-00C04F72C717}
      "C:\WINDOWS\system32\mmcshext.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 50688, File modification date = 18/08/2004  08:00, File description = MMC Shell Extension DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1016997120|0x3f74336f9999d7a303ce8a31fa33118a|
    {0CD7A5C0-9F37-11CE-AE65-08002B2E1262}
      "c:\windows\system32\cabview.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 84992, File modification date = 18/08/2004  08:00, File description =    CAB-, Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |1306264757|0xbfe9fba0aea4f8f67e4d3c3fee5eece2|
    {32714800-2E5F-11d0-8B85-00AA0044F941}
      "c:\program files\outlook express\wabfind.dll" File version = 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158), File size = 32768, File modification date = 18/08/2004  08:00, File description =  , Product Name =   Microsoft Windows, Product version = 6.00.2900.2180, Company name =   (  .   .) |837743628|0x1a694b3159d8a4bba2f1cfb8222c5302|
    {8DD448E6-C188-4aed-AF92-44956194EB1F}
      "c:\windows\system32\wmpshell.dll" File version = 10.00.00.3646, File size = 86016, File modification date = 08/09/2004  05:35, File description =    Windows Media, Product Name =  Windows Media (Microsoft(R)), Product version = 10.00.00.3646, Company name = Microsoft Corporation ((C)  .   .) |512891189|0x5c3f9f25a53cde14bec78a441f48b3f6|
    {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}
      "c:\windows\system32\wmpshell.dll" File version = 10.00.00.3646, File size = 86016, File modification date = 08/09/2004  05:35, File description =    Windows Media, Product Name =  Windows Media (Microsoft(R)), Product version = 10.00.00.3646, Company name = Microsoft Corporation ((C)  .   .) |512891189|0x5c3f9f25a53cde14bec78a441f48b3f6|
    {F1B9284F-E9DC-4e68-9D7E-42362A59F0FD}
      "c:\windows\system32\wmpshell.dll" File version = 10.00.00.3646, File size = 86016, File modification date = 08/09/2004  05:35, File description =    Windows Media, Product Name =  Windows Media (Microsoft(R)), Product version = 10.00.00.3646, Company name = Microsoft Corporation ((C)  .   .) |512891189|0x5c3f9f25a53cde14bec78a441f48b3f6|
    {1D2680C9-0E2A-469d-B787-065558BC7D43}
      "c:\windows\system32\mscoree.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 270848, File modification date = 23/09/2005  04:28, File description = Microsoft .NET Runtime Execution Engine, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |1225657921|0x5d19358256b8351a91059a3602d1b940|
    {2F603045-309F-11CF-9774-0020AFD0CFF6}
      "c:\program files\synaptics\syntp\syntpcpl.dll" File version = 8.3.8 16Jun06, File size = 6139993, File modification date = 16/06/2006  16:03, File description = TouchPad Control Panel Extensions, Product Name = Synaptics Pointing Device Driver, Product version = 8.3.8 16Jun06, Company name = Synaptics, Inc. (Copyright (C) Synaptics, Inc. 1996-2006) |-883087741|0x9560f8ad5b6fa2c6c519e140e0f0c90c|
    {640167b4-59b0-47a6-b335-a6b3c0695aea}
      "C:\WINDOWS\system32\audiodev.dll" File version = 5.2.3790.3646 built by: DNSRV(bld4act), File size = 480768, File modification date = 08/09/2004  05:35, File description =      , Product Name =   Microsoft Windows, Product version = 5.2.3790.3646, Company name = Microsoft Corporation ((c)   (Microsoft Corp.)   .) |-1297299583|0x67f877d8ad88b48fe903193efa751abb|
    {cc86590a-b60a-48e6-996b-41d25ed39a1e}
      "C:\WINDOWS\system32\audiodev.dll" File version = 5.2.3790.3646 built by: DNSRV(bld4act), File size = 480768, File modification date = 08/09/2004  05:35, File description =      , Product Name =   Microsoft Windows, Product version = 5.2.3790.3646, Company name = Microsoft Corporation ((c)   (Microsoft Corp.)   .) |-1297299583|0x67f877d8ad88b48fe903193efa751abb|
    {21569614-B795-46b1-85F4-E737A8DC09AD}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {7F67036B-66F1-411A-AD85-759FB9C5B0DB}
      "c:\windows\system32\shellvrtf.dll" File version = 1, 0, 0, 1, File size = 122880, File modification date = 20/09/2002  17:42, File description = ShellvRTF, Product Name = XSS ShellvRTF, Product version = 1, 0, 0, 1, Company name = XSS (Copyright  2002) |-1365307351|0x8305e5132173a9e9ce591cad4eb5c9b4|
    {B41DB860-8EE4-11D2-9906-E49FADC173CA}
      "c:\program files\winrar\rarext.dll" File version = (null), File size = 126464, File modification date = 07/12/2006  01:06, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |1914019644|0xb72bc5f3032d364857bbea18642dda44|
    {BDEADF00-C265-11D0-BCED-00A0C90AB50F}
      "c:\program files\common files\microsoft shared\web folders\msonsext.dll" File version = 11.0.5510.0, File size = 1292872, File modification date = 11/07/2003  00:15, File description = Microsoft Web Folders, Product Name = SharePoint Portal Server, Product version = 11.0.5510.0, Company name = Microsoft Corporation (Copyright (c) 2001-2003 Microsoft Corporation.  All rights reserved.) |1833844665|0xbdbf48d13c5343cced93e675effdb72c|
    {e82a2d71-5b2f-43a0-97b8-81be15854de8}
      "c:\windows\system32\dfshim.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 83456, File modification date = 23/09/2005  04:28, File description = Application Deployment Support Library, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1760645834|0xb3511383c8be3a8c5b88a78971fc1141|
    {E37E2028-CE1A-4f42-AF05-6CEABC4E5D75}
      "c:\windows\system32\dfshim.dll" File version = 2.0.50727.42 (RTM.050727-4200), File size = 83456, File modification date = 23/09/2005  04:28, File description = Application Deployment Support Library, Product Name = Microsoft .NET Framework, Product version = 2.0.50727.42, Company name = Microsoft Corporation ( Microsoft Corporation.  All rights reserved.) |-1760645834|0xb3511383c8be3a8c5b88a78971fc1141|
    {f39a0dc0-9cc8-11d0-a599-00c04fd64433}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.2823 (xpsp_sp2_gdr.060106-1520), File size = 151552, File modification date = 09/01/2006  18:08, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2823, Company name =   (  .   .) |1633059122|0x7a9a0f9a02cd84168aff9aad4cfc4d75|
    {f3aa0dc0-9cc8-11d0-a599-00c04fd64434}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.2823 (xpsp_sp2_gdr.060106-1520), File size = 151552, File modification date = 09/01/2006  18:08, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2823, Company name =   (  .   .) |1633059122|0x7a9a0f9a02cd84168aff9aad4cfc4d75|
    {f3ba0dc0-9cc8-11d0-a599-00c04fd64435}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.2823 (xpsp_sp2_gdr.060106-1520), File size = 151552, File modification date = 09/01/2006  18:08, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2823, Company name =   (  .   .) |1633059122|0x7a9a0f9a02cd84168aff9aad4cfc4d75|
    {f3da0dc0-9cc8-11d0-a599-00c04fd64437}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.2823 (xpsp_sp2_gdr.060106-1520), File size = 151552, File modification date = 09/01/2006  18:08, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2823, Company name =   (  .   .) |1633059122|0x7a9a0f9a02cd84168aff9aad4cfc4d75|
    {f3ea0dc0-9cc8-11d0-a599-00c04fd64438}
      "C:\WINDOWS\system32\cdfview.dll" File version = 6.00.2900.2823 (xpsp_sp2_gdr.060106-1520), File size = 151552, File modification date = 09/01/2006  18:08, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2823, Company name =   (  .   .) |1633059122|0x7a9a0f9a02cd84168aff9aad4cfc4d75|
  HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\*
    Debugger=ntsd -d <HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path>
      "c:\windows\system32\ntsd.exe" File version = 5.1.2600.0 (XPClient.010817-1148), File size = 31744, File modification date = 18/08/2004  08:00, File description = Symbolic Debugger for Windows 2000, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1899670254|0x5abd005f6749e724f88acc5d96efb921|
  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
    {438755C2-A8BA-11D1-B96B-00A0C90312E1}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
    {8C7461EF-2B13-11d2-BE35-3078302C2030}
      "C:\WINDOWS\system32\browseui.dll" File version = 6.00.2900.2995 (xpsp.060913-0019), File size = 1022976, File modification date = 23/09/2006  10:13, File description =    , Product Name =   Microsoft Windows, Product version = 6.00.2900.2995, Company name =   (  .   .) |785831539|0x47aaddbc705eb2ace885238bbf198db5|
LSP
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\* <value = PackedCatalogItem>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  08:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  08:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  08:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  08:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  08:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  08:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  08:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "C:\WINDOWS\system32\rsvpsp.dll" File version = 5.1.2600.0 (xpclient.010817-1148), File size = 90112, File modification date = 18/08/2004  08:00, File description = Microsoft Windows Rsvp 1.0 Service Provider, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.0, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |1223592855|0x07078a8814e6dd87c27bb0d8a2163d23|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
  HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\* <value = LibraryPath>
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  08:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  08:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  08:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
      "C:\WINDOWS\system32\winrnr.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 16896, File modification date = 18/08/2004  08:00, File description = LDAP RnR Provider DLL, Product Name = Microsoft Windows Operating System, Product version = 5.1.2600.2180, Company name = Microsoft Corporation ( Microsoft Corporation. All rights reserved.) |-1243004135|0x852e8d4f6b83caf662d199e79d5557ea|
      "c:\windows\system32\mswsock.dll" File version = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158), File size = 247296, File modification date = 18/08/2004  08:00, File description =    API Microsoft Windows Sockets 2.0, Product Name =   Microsoft Windows, Product version = 5.1.2600.2180, Company name =   (  .   .) |1850807738|0x25569f8a60b11208233b86d707765fad|
HOSTS
  C:\WINDOWS\System32\drivers\etc\hosts
      127.0.0.1 localhost
STARTUP MENU
  C:\Documents and Settings\All Users\ \\
      "C:\Documents and Settings\All Users\ \\\desktop.ini" File version = (null), File size = 84, File modification date = 08/09/2004  08:11, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
  C:\WINDOWS\system32\config\systemprofile\ \\
      "C:\WINDOWS\system32\config\systemprofile\ \\\desktop.ini" File version = (null), File size = 84, File modification date = 08/09/2004  08:11, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
  C:\Documents and Settings\viktor\ \\
      "C:\Documents and Settings\viktor\ \\\desktop.ini" File version = (null), File size = 84, File modification date = 08/09/2004  08:11, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
  C:\WINDOWS\system32\config\systemprofile\ \\
      "C:\WINDOWS\system32\config\systemprofile\ \\\desktop.ini" File version = (null), File size = 84, File modification date = 08/09/2004  08:11, File description = (null), Product Name = (null), Product version = (null), Company name = (null) |-1407361612|0xd6a6856702e3f0953e7246a9b4a9fe35|
