1138
User Privileges : SeChangeNotifyPrivilege SeSecurityPrivilege SeBackupPrivilege SeRestorePrivilege SeSystemtimePrivilege SeShutdownPrivilege SeRemoteShutdownPrivilege SeTakeOwnershipPrivilege SeDebugPrivilege SeSystemEnvironmentPrivilege SeSystemProfilePrivilege SeProfileSingleProcessPrivilege SeIncreaseBasePriorityPrivilege SeLoadDriverPrivilege SeCreatePagefilePrivilege SeIncreaseQuotaPrivilege SeUndockPrivilege SeManageVolumePrivilege SeImpersonatePrivilege SeCreateGlobalPrivilege +-----------------------------------------------

Prev

Embed Size (px)

DESCRIPTION

u;

Citation preview

Page 1: Prev

User Privileges :

SeChangeNotifyPrivilege

SeSecurityPrivilege

SeBackupPrivilege

SeRestorePrivilege

SeSystemtimePrivilege

SeShutdownPrivilege

SeRemoteShutdownPrivilege

SeTakeOwnershipPrivilege

SeDebugPrivilege

SeSystemEnvironmentPrivilege

SeSystemProfilePrivilege

SeProfileSingleProcessPrivilege

SeIncreaseBasePriorityPrivilege

SeLoadDriverPrivilege

SeCreatePagefilePrivilege

SeIncreaseQuotaPrivilege

SeUndockPrivilege

SeManageVolumePrivilege

SeImpersonatePrivilege

SeCreateGlobalPrivilege

+-----------------------------------------------

|System Information

Page 2: Prev

+-----------------------------------------------

General Information:

Operating System : Microsoft Windows XP Family version 5.1 (Build 2600) Service Pack 3

Windows Folder : C:\WINDOWS

System Folder : C:\WINDOWS\system32

User Path : C:\Program Files\Real\RealPlayer;C:\Program Files\Real\RealPlayer\common\;C:\Program Files\Real\RealPlayer;C:\Program Files\Real\RealPlayer\common\;C:\Program Files\PC Connectivity Solution\;C:\Program Files\ThinkPad\Utilities;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\IBM\Infoprint Select;C:\Notes;C:\Program Files\XLView;C:\lotus\compnent;C:\Utilities;C:\Program Files\IBM\Personal Communications\;C:\Program Files\IBM\Trace Facility\;C:\WINDOWS\Downloaded Program Files;C:\Program Files\ThinkPad\ConnectUtilities;C:\Program Files\Intel\WiFi\bin\;c:\progra~1\VIAVOI~1;C:\Program Files\websm\bin

User TEMP : C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp

Memory Information:

Memory In Use : 49 Percent

Total Physical Mem (RAM): 2095468 KBytes

Free Physical Mem (RAM) : 1067340 KBytes

Total Virtual Mem : 2097024 KBytes

Free Virtual Mem : 2031764 KBytes

Total Paging File : 3500624 KBytes

Free Paging File : 2801660 KBytes

Processor Information:

Page 3: Prev

Processor Architecture : Intel(R) Pentium Model 14 Stepping 8

Number Of Processor : 2

Page Size : 4096

MAX Application Address : 0x7ffeffff

MIN Application Address : 0x10000

Drive Information:

C:\ Fixed Drive

D:\ CD-ROM Drive

Q:\ Fixed Drive

+-----------------------------------------------

|Network Shares

+-----------------------------------------------

Share Name : Q$

Share Type : Administrative

Current Uses : 0

Share Path : Q:\

Remarks : Default share

Share Name : IPC$

Share Type : IPC

Current Uses : 0

Page 4: Prev

Share Path :

Remarks : Remote IPC

Share Name : ADMIN$

Share Type : Administrative

Current Uses : 0

Share Path : C:\WINDOWS

Remarks : Remote Admin

Share Name : C$

Share Type : Administrative

Current Uses : 0

Share Path : C:\

Remarks : Default share

+-----------------------------------------------

|AutoStart Programs

+-----------------------------------------------

-= Registry Vectors =-

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

stgclean = [CHECK]c:\sdwork\w32maing.exe /cleanup

Tpam.exe = [CHECK]"C:\Program Files\IBM\Personal Communications\tpam.exe"

ccApp = [CHECK]"C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

Page 5: Prev

vptray = [CHECK]C:\PROGRA~1\SYMANT~2\SYMANT~2\VPTray.exe

IgfxTray = [CHECK]C:\WINDOWS\system32\igfxtray.exe

HotKeysCmds = [CHECK]C:\WINDOWS\system32\hkcmd.exe

Persistence = [CHECK]C:\WINDOWS\system32\igfxpers.exe

SoundMAXPnP = [CHECK]C:\Program Files\Analog Devices\Core\smax4pnp.exe

SynTPLpr = [CHECK]C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

SynTPEnh = [CHECK]C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

TPHOTKEY = [CHECK]C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe

PWRMGRTR = [CHECK]rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\PWRMGRTR.DLL,PwrMgrBkGndMonitor

BLOG = [CHECK]rundll32 C:\PROGRA~1\ThinkPad\UTILIT~1\BatLogEx.DLL,StartBattLog

(Default) =

TpShocks = [CHECK]TpShocks.exe

TP4EX = [CHECK]tp4ex.exe

TPKMAPHELPER = [CHECK]C:\Program Files\ThinkPad\Utilities\TpKmapAp.exe -helper

pmonmh = C:\Program Files\IBM\My Help\workspace\..\plugins\com.ibm.myhelp.common_1.3.14/pmonmh.exe

C4EBReg = [CHECK]"C:\Program Files\c4ebreg\c4ebreg.exe" /q

Isamtray = [CHECK]"C:\Program Files\c4ebreg\isamtray.exe"

ISSI Service = [CHECK]"c:\sdwork\issimsvc.exe"

LENOVO.TPFNF6R = [CHECK]C:\Program Files\Lenovo\HOTKEY\TPFNF6R.exe

ACTray = [CHECK]C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe

TkBellExe = [CHECK]"C:\Program Files\Real\RealPlayer\update\realsched.exe" -osboot

SODCPreLoad = [CHECK]C:\notes\framework\shared\eclipse\plugins\com.ibm.productivity.tools.base.app.win32_3.5.0.20090922-1655\preload.exe C:\notes\data\workspace\.sodc\

Page 6: Prev

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

ctfmon.exe = [CHECK]C:\WINDOWS\system32\ctfmon.exe

Friendly Clock = [CHECK]C:\Documents and Settings\Administrator\My Documents\Mohsin\downloads\FClock.exe

googletalk = [CHECK]"C:\Program Files\Google\Google Talk\googletalk.exe" /autostart

SODCPreLoad = [CHECK]C:\Program Files\IBM\Lotus\Symphony\framework\shared\eclipse\plugins\com.ibm.productivity.tools.base.app.win32_3.5.0.20090605-2002\preload.exe C:\DOCUME~1\ADMINI~1\IBM\Lotus\Symphony\.sodc\

-= Registry Shell Spawning =-

HKEY_CLASSES_ROOT\exefile\shell\open\command

(Default) = "%1" %*

HKEY_CLASSES_ROOT\batfile\shell\open\command

(Default) = "%1" %*

HKEY_CLASSES_ROOT\htafile\Shell\Open\Command

(Default) = [CHECK]C:\WINDOWS\system32\mshta.exe "%1" %*

HKEY_CLASSES_ROOT\piffile\shell\open\command

(Default) = "%1" %*

HKEY_LOCAL_MACHINE\Software\CLASSES\batfile\shell\open\command

(Default) = "%1" %*

HKEY_LOCAL_MACHINE\Software\CLASSES\comfile\shell\open\command

Page 7: Prev

(Default) = "%1" %*

HKEY_LOCAL_MACHINE\Software\CLASSES\exefile\shell\open\command

(Default) = "%1" %*

HKEY_LOCAL_MACHINE\Software\CLASSES\htafile\Shell\Open\Command

(Default) = [CACHE]C:\WINDOWS\system32\mshta.exe "%1" %*

HKEY_LOCAL_MACHINE\Software\CLASSES\piffile\shell\open\command

(Default) = "%1" %*

-= Application Initialization DLLs (AppInit_DLLs) =-

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

AppInit_DLLs =

-= Image File Execution Options =-

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\Your Image File Name Here without a path

Debugger = ntsd -d

-= ShellExecuteHooks =-

CLSIDs below are retrieved from:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks

Page 8: Prev

ClSID: {AEB6717E-7E19-11d0-97EE-00C04FD91972}

HKEY_CLASSES_ROOT\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}

(Default) = URL Exec Hook

HKEY_CLASSES_ROOT\CLSID\{AEB6717E-7E19-11d0-97EE-00C04FD91972}\InProcServer32

(Default) = [CHECK]shell32.dll

ThreadingModel = Apartment

-= Browser Helper Objects =-

CLSIDs below are retrieved from:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects

ClSID: {3049C3E9-B461-4BC5-8870-4C09146192CA}

HKEY_CLASSES_ROOT\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA}

(Default) = RealPlayer Download and Record Plugin for Internet Explorer

AppID = {333A04DC-E916-463C-9658-00CAF7A01728}

HKEY_CLASSES_ROOT\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA}\InprocServer32

(Default) = [CHECK]C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll

ThreadingModel = apartment

HKEY_CLASSES_ROOT\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA}\ProgID

Page 9: Prev

(Default) = rpbrowserrecordplugin.CRPRecordBrowse.1

HKEY_CLASSES_ROOT\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA}\TypeLib

(Default) = {333A04DC-E916-463C-9658-00CAF7A01728}

HKEY_CLASSES_ROOT\CLSID\{3049C3E9-B461-4BC5-8870-4C09146192CA}\VersionIndependentProgID

(Default) = rpbrowserrecordplugin.CRPRecordBrowserH

ClSID: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}

HKEY_CLASSES_ROOT\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}

(Default) = Java(tm) Plug-In SSV Helper

HKEY_CLASSES_ROOT\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\InprocServer32

(Default) = [CHECK]C:\Program Files\IBM\Java60\jre\bin\ssv.dll

ThreadingModel = Apartment

ClSID: {DBC80044-A445-435b-BC74-9C25C1C588A9}

HKEY_CLASSES_ROOT\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}

(Default) = Java(tm) Plug-In 2 SSV Helper

HKEY_CLASSES_ROOT\CLSID\{DBC80044-A445-435b-BC74-9C25C1C588A9}\InprocServer32

(Default) = [CHECK]C:\Program Files\IBM\Java60\jre\bin\jp2ssv.dll

ThreadingModel = Apartment

ClSID: {E7E6F031-17CE-4C07-BC86-EABFE594F69C}

Page 10: Prev

HKEY_CLASSES_ROOT\CLSID\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}

(Default) = JQSIEStartDetectorImpl Class

AppID = {E311BFF9-7280-40D3-AE0B-2D3651C37EC8}

HKEY_CLASSES_ROOT\CLSID\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}\InprocServer32

(Default) = [CHECK]C:\Program Files\IBM\Java60\jre\lib\deploy\jqs\ie\jqs_plugin.dll

ThreadingModel = Apartment

HKEY_CLASSES_ROOT\CLSID\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}\ProgID

(Default) = ieplugin.JQSIEStartDetectorImpl.1

HKEY_CLASSES_ROOT\CLSID\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}\TypeLib

(Default) = {D85100D8-894D-4F80-9697-C220AF4202EB}

HKEY_CLASSES_ROOT\CLSID\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}\VersionIndependentProgID

(Default) = ieplugin.JQSIEStartDetectorImpl

-= Shell Service Object Delay Load =-

CLSIDs below are retrieved from:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad

Object: PostBootReminder

ClSID: {7849596a-48ea-486e-8937-a2a3009f31a9}

Page 11: Prev

HKEY_CLASSES_ROOT\CLSID\{7849596a-48ea-486e-8937-a2a3009f31a9}

(Default) = PostBootReminder object

HKEY_CLASSES_ROOT\CLSID\{7849596a-48ea-486e-8937-a2a3009f31a9}\InProcServer32

(Default) = [CACHE]%SystemRoot%\system32\SHELL32.dll

ThreadingModel = Apartment

Object: CDBurn

ClSID: {fbeb8a05-beee-4442-804e-409d6c4515e9}

HKEY_CLASSES_ROOT\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}

(Default) = ShellFolder for CD Burning

HKEY_CLASSES_ROOT\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32

(Default) = [CACHE]%SystemRoot%\system32\SHELL32.dll

ThreadingModel = Apartment

HKEY_CLASSES_ROOT\CLSID\{fbeb8a05-beee-4442-804e-409d6c4515e9}\MergedFolder

Attributes = 0x0

AttributeMask = 0xffffffff

Location = @shell32.dll,-12589

ConflictOverlayIcon = [CACHE]%SystemRoot%\system32\SHELL32.dll,-232

Object: WebCheck

ClSID: {E6FB5E20-DE35-11CF-9C87-00AA005127ED}

HKEY_CLASSES_ROOT\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}

Page 12: Prev

(Default) = WebCheck

HKEY_CLASSES_ROOT\CLSID\{E6FB5E20-DE35-11CF-9C87-00AA005127ED}\InProcServer32

(Default) = [CHECK]C:\WINDOWS\system32\webcheck.dll

ThreadingModel = Apartment

Object: SysTray

ClSID: {35CEC8A3-2BE6-11D2-8773-92E220524153}

HKEY_CLASSES_ROOT\CLSID\{35CEC8A3-2BE6-11D2-8773-92E220524153}

(Default) = SysTray

HKEY_CLASSES_ROOT\CLSID\{35CEC8A3-2BE6-11D2-8773-92E220524153}\InprocServer32

(Default) = [CHECK]C:\WINDOWS\system32\stobject.dll

ThreadingModel = Both

-= Winlogon Notify =-

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent

DLLName = [CHECK]Ati2evxx.dll

Asynchronous = 0x00000000 (0)

Impersonate = 0x00000001 (1)

Lock = AtiLockEvent

Logoff = AtiLogoffEvent

Logon = AtiLogonEvent

Disconnect = AtiDisConnectEvent

Page 13: Prev

Reconnect = AtiReConnectEvent

Safe = 0x00000000 (0)

Shutdown = AtiShutdownEvent

StartScreenSaver = AtiStartScreenSaverEvent

StartShell = AtiStartShellEvent

Startup = AtiStartupEvent

StopScreenSaver = AtiStopScreenSaverEvent

Unlock = AtiUnLockEvent

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt32chain

Asynchronous = 0x00000000 (0)

Impersonate = 0x00000000 (0)

DllName = [CHECK]crypt32.dll

Logoff = ChainWlxLogoffEvent

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cryptnet

Asynchronous = 0x00000000 (0)

Impersonate = 0x00000000 (0)

DllName = [CHECK]cryptnet.dll

Logoff = CryptnetWlxLogoffEvent

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\cscdll

DLLName = [CHECK]cscdll.dll

Logon = WinlogonLogonEvent

Page 14: Prev

Logoff = WinlogonLogoffEvent

ScreenSaver = WinlogonScreenSaverEvent

Startup = WinlogonStartupEvent

Shutdown = WinlogonShutdownEvent

StartShell = WinlogonStartShellEvent

Impersonate = 0x00000000 (0)

Asynchronous = 0x00000001 (1)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\ScCertProp

DLLName = [CHECK]wlnotify.dll

Logon = SCardStartCertProp

Logoff = SCardStopCertProp

Lock = SCardSuspendCertProp

Unlock = SCardResumeCertProp

Enabled = 0x00000001 (1)

Impersonate = 0x00000001 (1)

Asynchronous = 0x00000001 (1)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Schedule

Asynchronous = 0x00000000 (0)

DllName = [CACHE]wlnotify.dll

Impersonate = 0x00000000 (0)

StartShell = SchedStartShell

Logoff = SchedEventLogOff

Page 15: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\sclgntfy

Logoff = WLEventLogoff

Impersonate = 0x00000000 (0)

Asynchronous = 0x00000001 (1)

DllName = [CHECK]sclgntfy.dll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\SensLogn

DLLName = [CACHE]WlNotify.dll

Lock = SensLockEvent

Logon = SensLogonEvent

Logoff = SensLogoffEvent

Safe = 0x00000001 (1)

MaxWait = 0x00000258 (600)

StartScreenSaver = SensStartScreenSaverEvent

StopScreenSaver = SensStopScreenSaverEvent

Startup = SensStartupEvent

Shutdown = SensShutdownEvent

StartShell = SensStartShellEvent

PostShell = SensPostShellEvent

Disconnect = SensDisconnectEvent

Reconnect = SensReconnectEvent

Unlock = SensUnlockEvent

Impersonate = 0x00000001 (1)

Page 16: Prev

Asynchronous = 0x00000001 (1)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\termsrv

Asynchronous = 0x00000000 (0)

DllName = [CACHE]wlnotify.dll

Impersonate = 0x00000000 (0)

Logoff = TSEventLogoff

Logon = TSEventLogon

PostShell = TSEventPostShell

Shutdown = TSEventShutdown

StartShell = TSEventStartShell

Startup = TSEventStartup

MaxWait = 0x00000258 (600)

Reconnect = TSEventReconnect

Disconnect = TSEventDisconnect

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tpfnf2

(Default) =

DllName = [CHECK]C:\Program Files\Lenovo\HOTKEY\notifyf2.dll

Asynchronous = 0x00000000 (0)

Impersonate = 0x00000000 (0)

Unlock = Unlock_Notify_fnf2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\wlballoon

Page 17: Prev

DLLName = [CACHE]wlnotify.dll

Logon = RegisterTicketExpiredNotificationEvent

Logoff = UnregisterTicketExpiredNotificationEvent

Impersonate = 0x00000001 (1)

Asynchronous = 0x00000001 (1)

-= Scrap Object Information =-

HKEY_LOCAL_MACHINE\Software\CLASSES\ShellScrap

(Default) = Scrap object

NeverShowExt =

FriendlyTypeName = [CHECK]@%SystemRoot%\system32\shscrap.dll,-258

HKEY_LOCAL_MACHINE\Software\CLASSES\ShellScrap\DefaultIcon

(Default) = [CACHE]%SystemRoot%\system32\shscrap.dll,-100

HKEY_LOCAL_MACHINE\Software\CLASSES\ShellScrap\shell\open\command

(Default) = [CACHE]rundll32 %SystemRoot%\system32\shscrap.dll,OpenScrap_RunDLL %1

HKEY_LOCAL_MACHINE\Software\CLASSES\ShellScrap\shellex\DataHandler

(Default) = {56117100-C0CD-101B-81E2-00AA004AE837}

-= Startup Folders=-

Folder: C:\Documents and Settings\Administrator\Start Menu\Programs\Startup

Page 18: Prev

Contents:

[ESKIP]desktop.ini

[CHECK]Stardock ObjectDock.lnk

Folder: C:\Documents and Settings\All Users\Start Menu\Programs\Startup

Contents:

[CHECK]Adobe Gamma Loader.lnk

[ESKIP]desktop.ini

[CHECK]WordWeb.lnk

-= SYSTEM.INI Configuration File =-

[boot]

shell=Explorer.exe

[FMISS]C:\WINDOWS\WININIT.INI

-= Explorer.exe Path =-

--[Windows NT based]--

The Windows Shell is the familiar desktop that's used for interacting with Windows.

During system startup, Windows NT 4.0 and Windows 2000 consult the "Shell" registry entry:

- "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell"

to determine the name of the executable that should be loaded as the Shell. By default,

this value specifies EXPLORER.EXE. If not found, it checks other registry entries in this order:

Page 19: Prev

- "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment\Path"

- "HKEY_CURRENT_USER\Environment\Path"

Registry Dump:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Shell = [CHECK]Explorer.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

Userinit = [CHECK]C:\WINDOWS\system32\userinit.exe,

-= ICQ Net Info =-

-= Active Setup Installed Components =-

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}

StubPath = [CHECK]C:\WINDOWS\system32\ieudinit.exe

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{26923b43-4d38-484f-9b9e-de460746276c}

StubPath = [CHECK]C:\WINDOWS\system32\ie4uinit.exe -UserIconConfig

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}

StubPath = RunDLL32 IEDKCS32.DLL,BrandIE4 SIGNUP

Page 20: Prev

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}

StubPath = [CHECK]%systemroot%\system32\shmgrate.exe OCInstallUserConfigOE

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}

StubPath =

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}

StubPath =

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}

StubPath = %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}

StubPath = [CHECK]"%ProgramFiles%\Outlook Express\setup50.exe" /APP:OE /CALLER:WINNT /user /install

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{44BBA842-CC51-11CF-AAFA-00AA00B6015B}

StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msnetmtg.inf,NetMtg.Install.PerUser.NT

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{5945c046-1e7d-11d1-bc44-00c04fd912be}

Page 21: Prev

StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\msmsgs.inf,BLC.QuietInstall.PerUser

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}

StubPath = rundll32.exe advpack.dll,LaunchINFSection C:\WINDOWS\INF\wmp11.inf,PerUserStub

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{73FA19D0-2D75-11D2-995D-00C04F98BBC9}

StubPath =

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{7790769C-0471-11d2-AF11-00C04FA35D02}

StubPath = [CACHE]"%ProgramFiles%\Outlook Express\setup50.exe" /APP:WAB /CALLER:WINNT /user /install

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}

StubPath = regsvr32.exe /s /n /i:U shell32.dll

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}

StubPath = [CACHE]C:\WINDOWS\system32\ie4uinit.exe -BaseSettings

HKEY_LOCAL_MACHINE\Software\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}

StubPath = c:\WINDOWS\system32\Rundll32.exe c:\WINDOWS\system32\mscories.dll,Install

Page 22: Prev

-= Safeboot Minimal Info =-

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmadmin

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmboot.sys

Page 23: Prev

(Default) = Driver

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmio.sys

(Default) = Driver

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmload.sys

(Default) = Driver

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmserver

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon

(Default) = Service

Page 24: Prev

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys

(Default) = Driver

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys

(Default) = FSFilter System Recovery

Page 25: Prev

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SRService

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender

(Default) = Driver Group

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vds

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys

(Default) = Driver

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys

(Default) = Driver

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys

(Default) = Driver

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt

(Default) = Service

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}

(Default) = Universal Serial Bus controllers

Page 26: Prev

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}

(Default) = CD-ROM Drive

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}

(Default) = DiskDrive

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}

(Default) = Standard floppy disk controller

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}

(Default) = Hdc

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}

(Default) = Keyboard

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}

(Default) = Mouse

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}

(Default) = PCMCIA Adapters

Page 27: Prev

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}

(Default) = SCSIAdapter

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}

(Default) = System

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}

(Default) = Floppy disk drive

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{533C5B84-EC70-11D2-9505-00C04F79DEAF}

(Default) = Volume shadow copy

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}

(Default) = Volume

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}

(Default) = Human Interface Devices

-= Registry Services =-

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\abp480n5

ImagePath = [CHECK]system32\DRIVERS\ABP480N5.SYS

Page 28: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ACPI

ImagePath = [CHECK]system32\DRIVERS\ACPI.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ACPIEC

ImagePath = [CHECK]system32\DRIVERS\ACPIEC.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AcPrfMgrSvc

ImagePath = [CHECK]C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\acs

ImagePath = [CHECK]system32\acs.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AcSvc

ImagePath = [CHECK]C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ADIHdAudAddService

ImagePath = [CHECK]system32\drivers\ADIHdAud.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\adpu160m

ImagePath = [CHECK]system32\DRIVERS\adpu160m.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AEAudioService

ImagePath = [CHECK]system32\drivers\AEAudio.sys

Page 29: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\aec

ImagePath = [CHECK]system32\drivers\aec.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AFD

ImagePath = [CHECK]\SystemRoot\System32\drivers\afd.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\agnfilt

ImagePath = [CHECK]system32\DRIVERS\agnfilt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\agnwifi

ImagePath = [CHECK]system32\DRIVERS\agnwifi.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\agp440

ImagePath = [CHECK]system32\DRIVERS\agp440.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\agpCPQ

ImagePath = [CHECK]system32\DRIVERS\agpCPQ.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Aha154x

ImagePath = [CHECK]system32\DRIVERS\aha154x.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\aic78u2

ImagePath = [CHECK]system32\DRIVERS\aic78u2.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\aic78xx

Page 30: Prev

ImagePath = [CHECK]system32\DRIVERS\aic78xx.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Alerter

ImagePath = [CHECK]%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Alerter\Parameters

ServiceDll = [CHECK]%SystemRoot%\system32\alrsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ALG

ImagePath = [CHECK]%SystemRoot%\System32\alg.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AliIde

ImagePath = [CHECK]system32\DRIVERS\aliide.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\alim1541

ImagePath = [CHECK]system32\DRIVERS\alim1541.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\amdagp

ImagePath = [CHECK]system32\DRIVERS\amdagp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\amsint

ImagePath = [CHECK]system32\DRIVERS\amsint.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ANC

ImagePath = [CHECK]System32\drivers\ANC.SYS

Page 31: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Anydlc

ImagePath = [CHECK]\SystemRoot\System32\drivers\anydlc.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppMgmt

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppMgmt\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\appmgmts.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Appn

ImagePath = [CHECK]\SystemRoot\System32\drivers\appn.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppnApi

ImagePath = [CHECK]\SystemRoot\System32\drivers\appnapi.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppnBase

ImagePath = [CHECK]\SystemRoot\System32\drivers\AppnBase.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppnNode

ImagePath = [CHECK]C:\WINDOWS\system32\Drivers\appnnode.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AR5211

ImagePath = [CHECK]system32\DRIVERS\ar5211.sys

Page 32: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\artour

ImagePath = [CHECK]system32\DRIVERS\artndint.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ArtourService

ImagePath = [CHECK]"C:\Program Files\IBM\Mobility Client\artsvc.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\artstartsvc

ImagePath = [CHECK]"C:\Program Files\IBM\Mobility Client\artstartsvc.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\asc

ImagePath = [CHECK]system32\DRIVERS\asc.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\asc3350p

ImagePath = [CHECK]system32\DRIVERS\asc3350p.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\asc3550

ImagePath = [CHECK]system32\DRIVERS\asc3550.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\aspnet_state

ImagePath = [CHECK]%SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AsyncMac

ImagePath = [CHECK]system32\DRIVERS\asyncmac.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\atapi

Page 33: Prev

ImagePath = [CHECK]system32\DRIVERS\atapi.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ati HotKey Poller

ImagePath = [CHECK]%SystemRoot%\system32\Ati2evxx.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ati2mtag

ImagePath = [CHECK]system32\DRIVERS\ati2mtag.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Atmarpc

ImagePath = [CHECK]system32\DRIVERS\atmarpc.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\atmeltpm

ImagePath = [CHECK]system32\DRIVERS\atmeltpm.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AudioSrv

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AudioSrv\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\audiosrv.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\audstub

ImagePath = [CHECK]system32\DRIVERS\audstub.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\avpnnic

ImagePath = [CHECK]system32\DRIVERS\avpnnic.sys

Page 34: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\b57w2k

ImagePath = [CHECK]system32\DRIVERS\b57xp32.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BITS

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BITS\Parameters

ServiceDll = [CHECK]C:\WINDOWS\system32\qmgr.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Browser

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Browser\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\browser.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BTDriver

ImagePath = [CHECK]system32\DRIVERS\btport.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BTKRNL

ImagePath = [CHECK]system32\DRIVERS\btkrnl.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\btwdins

ImagePath = [CHECK]C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe

Page 35: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BTWUSB

ImagePath = [CHECK]System32\Drivers\btwusb.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbidf

ImagePath = [CHECK]system32\DRIVERS\cbidf2k.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ccEvtMgr

ImagePath = [CHECK]"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ccProxy

ImagePath = [CHECK]"C:\Program Files\Common Files\Symantec Shared\ccProxy.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ccSetMgr

ImagePath = [CHECK]"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cd20xrnt

ImagePath = [CHECK]system32\DRIVERS\cd20xrnt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Cdrom

ImagePath = [CHECK]system32\DRIVERS\cdrom.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CiSvc

ImagePath = [CHECK]%SystemRoot%\system32\cisvc.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ClipSrv

Page 36: Prev

ImagePath = [CHECK]%SystemRoot%\system32\clipsrv.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\clr_optimization_v2.0.50727_32

ImagePath = [CHECK]C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CmBatt

ImagePath = [CHECK]system32\DRIVERS\CmBatt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CmdIde

ImagePath = [CHECK]system32\DRIVERS\cmdide.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Compbatt

ImagePath = [CHECK]system32\DRIVERS\compbatt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\COMSysApp

ImagePath = [CHECK]C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Cpqarray

ImagePath = [CHECK]system32\DRIVERS\cpqarray.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CryptSvc

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CryptSvc\Parameters

Page 37: Prev

ServiceDll = [CHECK]%SystemRoot%\System32\cryptsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cvhsvc

ImagePath = [CHECK]"C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dac2w2k

ImagePath = [CHECK]system32\DRIVERS\dac2w2k.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dac960nt

ImagePath = [CHECK]system32\DRIVERS\dac960nt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DCDClient-ISSI

ImagePath = [CHECK]C:\Program Files\IBM\tivoli\dcd\client\ISSI\cds\CDSWinSrv.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DcomLaunch

ImagePath = %SystemRoot%\system32\svchost -k DcomLaunch

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DcomLaunch\Parameters

ServiceDll = [CHECK]%SystemRoot%\system32\rpcss.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DefWatch

ImagePath = [CHECK]"C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp

Page 38: Prev

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\dhcpcsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Disk

ImagePath = [CHECK]system32\DRIVERS\disk.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmadmin

ImagePath = [CHECK]%SystemRoot%\System32\dmadmin.exe /com

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmboot

ImagePath = [CHECK]System32\drivers\dmboot.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmio

ImagePath = [CHECK]System32\drivers\dmio.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmload

ImagePath = [CHECK]System32\drivers\dmload.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmserver

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmserver\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\dmserver.dll

Page 39: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DMusic

ImagePath = [CHECK]system32\drivers\DMusic.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dnscache

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k NetworkService

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dnscache\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\dnsrslvr.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dot3svc

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k dot3svc

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dot3svc\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\dot3svc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dpti2o

ImagePath = [CHECK]system32\DRIVERS\dpti2o.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\drmkaud

ImagePath = [CHECK]system32\drivers\drmkaud.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\e1express

ImagePath = [CHECK]system32\DRIVERS\e1e5132.sys

Page 40: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EapHost

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k eapsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EapHost\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\eapsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\eeCtrl

ImagePath = [CHECK]\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EGATHDRV

ImagePath = [CHECK]\??\C:\WINDOWS\SYSTEM32\EGATHDRV.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EraserUtilRebootDrv

ImagePath = [CHECK]\??\C:\Program Files\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ERSvc

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ERSvc\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\ersvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eventlog

ImagePath = [CHECK]%SystemRoot%\system32\services.exe

Page 41: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventSystem

ImagePath = [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventSystem\Parameters

ServiceDll = [CHECK]C:\WINDOWS\system32\es.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EvtEng

ImagePath = [CHECK]C:\Program Files\Intel\WiFi\bin\EvtEng.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FastUserSwitchingCompatibility

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FastUserSwitchingCompatibility\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\shsvcs.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Fdc

ImagePath = [CHECK]system32\DRIVERS\fdc.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Flpydisk

ImagePath = [CHECK]system32\DRIVERS\flpydisk.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FltMgr

ImagePath = [CHECK]system32\drivers\fltmgr.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FontCache3.0.0.0

Page 42: Prev

ImagePath = [CHECK]c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ftdisk

ImagePath = [CHECK]system32\DRIVERS\ftdisk.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Gpc

ImagePath = [CHECK]system32\DRIVERS\msgpc.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HDAudBus

ImagePath = [CHECK]system32\DRIVERS\HDAudBus.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\helpsvc

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\helpsvc\Parameters

ServiceDll = [CHECK]%WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HidServ

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HidServ\Parameters

ServiceDll = %SystemRoot%\System32\hidserv.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HidUsb

ImagePath = [CHECK]system32\DRIVERS\hidusb.sys

Page 43: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hkmsvc

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hkmsvc\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\kmsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hpn

ImagePath = [CHECK]system32\DRIVERS\hpn.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HSF_DPV

ImagePath = [CHECK]system32\DRIVERS\hsx_dpv.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HSXHWAZL

ImagePath = [CHECK]system32\DRIVERS\hsxhwazl.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP

ImagePath = [CHECK]System32\Drivers\HTTP.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTPFilter

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k HTTPFilter

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTPFilter\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\w3ssl.dll

Page 44: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hwdatacard

ImagePath = [CHECK]system32\DRIVERS\ewusbmdm.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hwusbdev

ImagePath = [CHECK]system32\DRIVERS\ewusbdev.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\i2omp

ImagePath = [CHECK]system32\DRIVERS\i2omp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\i8042prt

ImagePath = [CHECK]system32\DRIVERS\i8042prt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ialm

ImagePath = [CHECK]system32\DRIVERS\igxpmp32.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iastor

ImagePath = [CHECK]System32\Drivers\iaStor.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IBMPMDRV

ImagePath = [CHECK]system32\DRIVERS\ibmpmdrv.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IBMPMSVC

ImagePath = [CHECK]%SystemRoot%\system32\ibmpmsvc.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IBMTPCHK

Page 45: Prev

ImagePath = [CHECK]\??\C:\WINDOWS\system32\Drivers\IBMBLDID.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IBM_LLC2

ImagePath = [CHECK]system32\DRIVERS\llc2.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IDriverT

ImagePath = [CHECK]"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\idsvc

ImagePath = [CHECK]"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Imapi

ImagePath = [CHECK]system32\DRIVERS\imapi.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ImapiService

ImagePath = [CHECK]C:\WINDOWS\system32\imapi.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ini910u

ImagePath = [CHECK]system32\DRIVERS\ini910u.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IntelIde

ImagePath = [CHECK]system32\DRIVERS\intelide.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\intelppm

Page 46: Prev

ImagePath = [CHECK]system32\DRIVERS\intelppm.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ip6Fw

ImagePath = [CHECK]system32\drivers\ip6fw.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IpFilterDriver

ImagePath = [CHECK]system32\DRIVERS\ipfltdrv.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IpInIp

ImagePath = [CHECK]system32\DRIVERS\ipinip.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IpNat

ImagePath = [CHECK]system32\DRIVERS\ipnat.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPSec

ImagePath = [CHECK]system32\DRIVERS\ipsec.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\irda

ImagePath = [CHECK]system32\DRIVERS\irda.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IRENUM

ImagePath = [CHECK]system32\DRIVERS\irenum.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Irmon

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

Page 47: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Irmon\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\irmon.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IsamFilter

ImagePath = [CHECK]system32\DRIVERS\isamfilter.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ISAMsmt

ImagePath = C:\Program Files\C4ebreg\isamsmt.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ISAMSvc

ImagePath = [CACHE]"C:\Program Files\c4ebreg\c4ebreg.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\isapnp

ImagePath = [CHECK]system32\DRIVERS\isapnp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ISSIMon

ImagePath = [CACHE]"c:\sdwork\issimsvc.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ISSVC

ImagePath = [CHECK]"C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\JavaQuickStarterService

ImagePath = [CHECK]"C:\Program Files\IBM\Java60\jre\bin\jqs.exe" -service -config "C:\Program Files\IBM\Java60\jre\lib\deploy\jqs\jqs.conf"

Page 48: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Kbdclass

ImagePath = [CHECK]system32\DRIVERS\kbdclass.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KLOGNT

ImagePath = [CHECK]\SystemRoot\System32\drivers\klognt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kmixer

ImagePath = [CHECK]system32\drivers\kmixer.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lanmanserver

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lanmanserver\parameters

ServiceDll = [CHECK]%SystemRoot%\System32\srvsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lanmanworkstation

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lanmanworkstation\parameters

ServiceDll = [CHECK]%SystemRoot%\System32\wkssvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ldlcserv

ImagePath = [CHECK]C:\WINDOWS\system32\Drivers\ldlcserv.exe

Page 49: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LENOVO.MICMUTE

ImagePath = [CHECK]C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LiveUpdate

ImagePath = [CHECK]"C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LmHosts

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LmHosts\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\lmhsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lotus Notes Diagnostics

ImagePath = [CHECK]c:\notes\nsd.exe -svcinvoke -ini "c:\notes\notes.ini"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mdmxsdk

ImagePath = [CHECK]system32\DRIVERS\mdmxsdk.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Messenger

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Messenger\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\msgsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mnmsrvc

Page 50: Prev

ImagePath = [CHECK]C:\WINDOWS\system32\mnmsrvc.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Mouclass

ImagePath = [CHECK]system32\DRIVERS\mouclass.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mouhid

ImagePath = [CHECK]system32\DRIVERS\mouhid.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mraid35x

ImagePath = [CHECK]system32\DRIVERS\mraid35x.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MRxDAV

ImagePath = [CHECK]system32\DRIVERS\mrxdav.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MRxSmb

ImagePath = [CHECK]system32\DRIVERS\mrxsmb.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSDTC

ImagePath = [CHECK]C:\WINDOWS\system32\msdtc.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSIServer

ImagePath = [CHECK]C:\WINDOWS\system32\msiexec.exe /V

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSKSSRV

ImagePath = [CHECK]system32\drivers\MSKSSRV.sys

Page 51: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSPCLOCK

ImagePath = [CHECK]system32\drivers\MSPCLOCK.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSPQM

ImagePath = [CHECK]system32\drivers\MSPQM.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mssmbios

ImagePath = [CHECK]system32\DRIVERS\mssmbios.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Multi-user Cleanup Service

ImagePath = [CHECK]c:\notes\ntmulti.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MyHelp

ImagePath = C:\Program Files\IBM\My Help\plugins\com.ibm.myhelp.installer\service\MyHelpService.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\napagent

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\napagent\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\qagentrt.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NAVENG

ImagePath = [CHECK]\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20110202.002\naveng.sys

Page 52: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NAVEX15

ImagePath = [CHECK]\??\C:\PROGRA~1\COMMON~1\SYMANT~1\VIRUSD~1\20110202.002\navex15.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisTapi

ImagePath = [CHECK]system32\DRIVERS\ndistapi.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ndisuio

ImagePath = [CHECK]system32\DRIVERS\ndisuio.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisWan

ImagePath = [CHECK]system32\DRIVERS\ndiswan.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBIOS

ImagePath = [CHECK]system32\DRIVERS\netbios.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT

ImagePath = [CHECK]system32\DRIVERS\netbt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetCfgSvr

ImagePath = [CHECK]C:\Program Files\AT&T Network Client\NetCfgSv.EXE

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetDDE

ImagePath = [CHECK]%SystemRoot%\system32\netdde.exe

Page 53: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetDDEdsdm

ImagePath = [CACHE]%SystemRoot%\system32\netdde.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon

ImagePath = [CHECK]%SystemRoot%\system32\lsass.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netman

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netman\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\netman.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetTcpPortSharing

ImagePath = [CHECK]"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NETw5x32

ImagePath = [CHECK]system32\DRIVERS\NETw5x32.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Nla

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Nla\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\mswsock.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nmwcd

Page 54: Prev

ImagePath = [CHECK]system32\drivers\ccdcmb.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nmwcdc

ImagePath = [CHECK]system32\drivers\ccdcmbo.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NPF

ImagePath = [CHECK]system32\drivers\npf.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NSCIRDA

ImagePath = [CHECK]system32\DRIVERS\nscirda.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NsTrcNT

ImagePath = [CHECK]\SystemRoot\System32\drivers\nstrcnt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtLmSsp

ImagePath = [CACHE]%SystemRoot%\system32\lsass.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtmsSvc

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NtmsSvc\Parameters

ServiceDll = [CHECK]%SystemRoot%\system32\ntmssvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NwlnkFlt

ImagePath = [CHECK]system32\DRIVERS\nwlnkflt.sys

Page 55: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NwlnkFwd

ImagePath = [CHECK]system32\DRIVERS\nwlnkfwd.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ose

ImagePath = [CHECK]"C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\osppsvc

ImagePath = [CHECK]"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Parport

ImagePath = [CHECK]system32\DRIVERS\parport.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pccsmcfd

ImagePath = [CHECK]system32\DRIVERS\pccsmcfd.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PCI

ImagePath = [CHECK]system32\DRIVERS\pci.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PCIIde

ImagePath = [CHECK]system32\DRIVERS\pciide.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Pcmcia

ImagePath = [CHECK]system32\DRIVERS\pcmcia.sys

Page 56: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnacom

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnacom.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnafac

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnafac.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnatcm

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnatcm.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnatdl

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnatdl.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlncbas

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlncbas.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlncfwk

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlncfwk.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnctdl

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnctdl.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlndint

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlndint.sys

Page 57: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlndldl

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlndldl.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlndlpb

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlndlpb.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlndoem

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlndoem.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlndqll

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlndqll.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlndsdl

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlndsdl.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlndtdl

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlndtdl.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnebas

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnebas.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnecfg

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnecfg.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnemap

Page 58: Prev

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnemap.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnemsg

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnemsg.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnepkt

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnepkt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnshay

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnshay.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnslea

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnslea.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnsv25

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnsv25.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdlnsx25

ImagePath = [CHECK]\SystemRoot\System32\drivers\pdlnsx25.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\perc2

ImagePath = [CHECK]system32\DRIVERS\perc2.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\perc2hib

ImagePath = [CHECK]system32\DRIVERS\perc2hib.sys

Page 59: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PlugPlay

ImagePath = [CACHE]%SystemRoot%\system32\services.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PMEM

ImagePath = [CHECK]\??\C:\WINDOWS\system32\drivers\PMEMNT.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PolicyAgent

ImagePath = [CACHE]%SystemRoot%\system32\lsass.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PptpMiniport

ImagePath = [CHECK]system32\DRIVERS\raspptp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ProtectedStorage

ImagePath = [CACHE]%SystemRoot%\system32\lsass.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\prwnys

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\prwnys\Parameters

ServiceDll = C:\WINDOWS\system32\jydit.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ptilink

ImagePath = [CHECK]system32\DRIVERS\ptilink.sys

Page 60: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PxHelp20

ImagePath = [CHECK]System32\Drivers\PxHelp20.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ql1080

ImagePath = [CHECK]system32\DRIVERS\ql1080.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ql10wnt

ImagePath = [CHECK]system32\DRIVERS\ql10wnt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ql12160

ImagePath = [CHECK]system32\DRIVERS\ql12160.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ql1240

ImagePath = [CHECK]system32\DRIVERS\ql1240.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ql1280

ImagePath = [CHECK]system32\DRIVERS\ql1280.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasAcd

ImagePath = [CHECK]system32\DRIVERS\rasacd.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasAuto

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasAuto\Parameters

Page 61: Prev

ServiceDll = [CHECK]%SystemRoot%\System32\rasauto.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasirda

ImagePath = [CHECK]system32\DRIVERS\rasirda.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasl2tp

ImagePath = [CHECK]system32\DRIVERS\rasl2tp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\rasmans.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasPppoe

ImagePath = [CHECK]system32\DRIVERS\raspppoe.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Raspti

ImagePath = [CHECK]system32\DRIVERS\raspti.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rdbss

ImagePath = [CHECK]system32\DRIVERS\rdbss.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RDPCDD

ImagePath = [CHECK]System32\DRIVERS\RDPCDD.sys

Page 62: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rdpdr

ImagePath = [CHECK]system32\DRIVERS\rdpdr.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RDSessMgr

ImagePath = [CHECK]C:\WINDOWS\system32\sessmgr.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\redbook

ImagePath = [CHECK]system32\DRIVERS\redbook.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RegSrvc

ImagePath = [CHECK]C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\mprdim.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteRegistry

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteRegistry\Parameters

ServiceDll = [CHECK]%SystemRoot%\system32\regsvc.dll

Page 63: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ROOTMODEM

ImagePath = [CHECK]System32\Drivers\RootMdm.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rpcapd

ImagePath = [CHECK]"%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RpcLocator

ImagePath = [CHECK]%SystemRoot%\system32\locator.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RpcSs

ImagePath = %SystemRoot%\system32\svchost -k rpcss

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RpcSs\Parameters

ServiceDll = [CACHE]%SystemRoot%\system32\rpcss.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RSVP

ImagePath = [CHECK]%SystemRoot%\system32\rsvp.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\S24EventMonitor

ImagePath = [CHECK]C:\Program Files\Intel\WiFi\bin\S24EvMon.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\s24trans

ImagePath = [CHECK]system32\DRIVERS\s24trans.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SamSs

Page 64: Prev

ImagePath = [CACHE]%SystemRoot%\system32\lsass.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SavRoam

ImagePath = [CHECK]"c:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SAVRT

ImagePath = [CHECK]\??\C:\Program Files\Symantec Client Security\Symantec AntiVirus\savrt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SAVRTPEL

ImagePath = [CHECK]\??\C:\Program Files\Symantec Client Security\Symantec AntiVirus\Savrtpel.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SCardSvr

ImagePath = [CHECK]%SystemRoot%\System32\SCardSvr.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Schedule

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Schedule\Parameters

ServiceDll = [CHECK]%SystemRoot%\system32\schedsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ScsiPort

ImagePath = [CHECK]%SystemRoot%\system32\drivers\scsiport.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Secdrv

Page 65: Prev

ImagePath = [CHECK]system32\DRIVERS\secdrv.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\seclogon

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\seclogon\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\seclogon.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SENS

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SENS\Parameters

ServiceDll = [CHECK]%SystemRoot%\system32\sens.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\serenum

ImagePath = [CHECK]system32\DRIVERS\serenum.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Serial

ImagePath = [CHECK]system32\DRIVERS\serial.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ServiceLayer

ImagePath = [CHECK]"C:\Program Files\PC Connectivity Solution\ServiceLayer.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Sftfs

ImagePath = [CHECK]system32\DRIVERS\Sftfsxp.sys

Page 66: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sftlist

ImagePath = [CHECK]"C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Sftplay

ImagePath = [CHECK]system32\DRIVERS\Sftplayxp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Sftredir

ImagePath = [CHECK]system32\DRIVERS\Sftredirxp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Sftvol

ImagePath = [CHECK]system32\DRIVERS\Sftvolxp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sftvsa

ImagePath = [CHECK]"C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\ipnathlp.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ShellHWDetection

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

Page 67: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ShellHWDetection\Parameters

ServiceDll = [CACHE]%SystemRoot%\System32\shsvcs.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Shockprf

ImagePath = [CHECK]System32\DRIVERS\Apsx86.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sisagp

ImagePath = [CHECK]system32\DRIVERS\sisagp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Smapint

ImagePath = [CHECK]System32\drivers\Smapint.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SNDSrvc

ImagePath = [CHECK]"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Sparrow

ImagePath = [CHECK]system32\DRIVERS\sparrow.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SPBBCDrv

ImagePath = [CHECK]\??\C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SPBBCSvc

ImagePath = [CHECK]"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"

Page 68: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\splitter

ImagePath = [CHECK]system32\drivers\splitter.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Spooler

ImagePath = [CHECK]%SystemRoot%\system32\spoolsv.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sr

ImagePath = [CHECK]system32\DRIVERS\sr.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\srservice

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\srservice\Parameters

ServiceDll = [CHECK]C:\WINDOWS\system32\srsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Srv

ImagePath = [CHECK]system32\DRIVERS\srv.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSDPSRV

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSDPSRV\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\ssdpsrv.dll

Page 69: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\stisvc

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k imgsvc

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\stisvc\Parameters

ServiceDll = [CHECK]%SystemRoot%\system32\wiaservc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\swenum

ImagePath = [CHECK]system32\DRIVERS\swenum.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\swmidi

ImagePath = [CHECK]system32\drivers\swmidi.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SwPrv

ImagePath = [CACHE]C:\WINDOWS\system32\dllhost.exe /Processid:{70BEF680-FB0F-4516-A343-97C83A5A78F6}

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Symantec AntiVirus

ImagePath = [CHECK]"C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\symc810

ImagePath = [CHECK]system32\DRIVERS\symc810.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\symc8xx

ImagePath = [CHECK]system32\DRIVERS\symc8xx.sys

Page 70: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SYMDNS

ImagePath = [CHECK]\SystemRoot\System32\Drivers\SYMDNS.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SymEvent

ImagePath = [CHECK]\??\C:\Program Files\Symantec\SYMEVENT.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SYMFW

ImagePath = [CHECK]\SystemRoot\System32\Drivers\SYMFW.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SYMIDS

ImagePath = [CHECK]\SystemRoot\System32\Drivers\SYMIDS.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SYMIDSCO

ImagePath = [CHECK]\??\C:\PROGRA~1\COMMON~1\SYMANT~1\SymcData\SCFIDS~1\20110126.001\symidsco.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SYMNDIS

ImagePath = [CHECK]\SystemRoot\System32\Drivers\SYMNDIS.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SYMREDRV

ImagePath = [CHECK]\SystemRoot\System32\Drivers\SYMREDRV.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SymSecurePort

ImagePath = [CHECK]"C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe"

Page 71: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SYMTDI

ImagePath = [CHECK]\SystemRoot\System32\Drivers\SYMTDI.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sym_hi

ImagePath = [CHECK]system32\DRIVERS\sym_hi.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sym_u3

ImagePath = [CHECK]system32\DRIVERS\sym_u3.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SynTP

ImagePath = [CHECK]system32\DRIVERS\SynTP.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sysaudio

ImagePath = [CHECK]system32\drivers\sysaudio.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SysmonLog

ImagePath = [CHECK]%SystemRoot%\system32\smlogsvc.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TapiSrv

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TapiSrv\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\tapisrv.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip

Page 72: Prev

ImagePath = [CHECK]system32\DRIVERS\tcpip.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TDSMAPI

ImagePath = [CHECK]System32\drivers\TDSMAPI.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TermDD

ImagePath = [CHECK]system32\DRIVERS\termdd.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TermService

ImagePath = %SystemRoot%\System32\svchost -k DComLaunch

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TermService\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\termsrv.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Themes

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Themes\Parameters

ServiceDll = [CACHE]%SystemRoot%\System32\shsvcs.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TlntSvr

ImagePath = [CHECK]C:\WINDOWS\system32\tlntsvr.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tmcomm

ImagePath = [CHECK]\??\C:\WINDOWS\system32\drivers\tmcomm.sys

Page 73: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TosIde

ImagePath = [CHECK]system32\DRIVERS\toside.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPDIGIMN

ImagePath = [CHECK]System32\DRIVERS\ApsHM86.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPHDEXLGSVC

ImagePath = [CHECK]System32\TPHDEXLG.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPHKDRV

ImagePath = [CHECK]system32\DRIVERS\TPHKDRV.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPHKSVC

ImagePath = [CHECK]C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TpKmpSVC

ImagePath = [CHECK]C:\WINDOWS\system32\TpKmpSVC.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPPWRIF

ImagePath = [CHECK]System32\drivers\Tppwrif.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TrcBoot

ImagePath = [CHECK]C:\WINDOWS\system32\Drivers\trcboot.exe

Page 74: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TrkWks

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TrkWks\Parameters

ServiceDll = [CHECK]%SystemRoot%\system32\trkwks.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TSMAPIP

ImagePath = [CHECK]System32\drivers\TSMAPIP.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ultra

ImagePath = [CHECK]system32\DRIVERS\ultra.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Update

ImagePath = [CHECK]system32\DRIVERS\update.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\upnphost

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\upnphost\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\upnphost.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\upperdev

ImagePath = [CHECK]system32\DRIVERS\usbser_lowerflt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UPS

Page 75: Prev

ImagePath = [CHECK]%SystemRoot%\System32\ups.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbccgp

ImagePath = [CHECK]system32\DRIVERS\usbccgp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbehci

ImagePath = [CHECK]system32\DRIVERS\usbehci.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbhub

ImagePath = [CHECK]system32\DRIVERS\usbhub.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbprint

ImagePath = [CHECK]system32\DRIVERS\usbprint.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbser

ImagePath = [CHECK]system32\drivers\usbser.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UsbserFilt

ImagePath = [CHECK]system32\DRIVERS\usbser_lowerfltj.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\USBSTOR

ImagePath = [CHECK]system32\DRIVERS\USBSTOR.SYS

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbuhci

ImagePath = [CHECK]system32\DRIVERS\usbuhci.sys

Page 76: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VgaSave

ImagePath = [CHECK]\SystemRoot\System32\drivers\vga.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\viaagp

ImagePath = [CHECK]system32\DRIVERS\viaagp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ViaIde

ImagePath = [CHECK]system32\DRIVERS\viaide.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VSS

ImagePath = [CHECK]%SystemRoot%\System32\vssvc.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32Time

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32Time\Parameters

ServiceDll = [CHECK]C:\WINDOWS\system32\w32time.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wanarp

ImagePath = [CHECK]system32\DRIVERS\wanarp.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wcndis

ImagePath = [CHECK]system32\DRIVERS\wcndis.sys

Page 77: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wdf01000

ImagePath = [CHECK]System32\Drivers\wdf01000.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wdmaud

ImagePath = [CHECK]system32\drivers\wdmaud.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WebClient

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k LocalService

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WebClient\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\webclnt.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\winachsf

ImagePath = [CHECK]system32\DRIVERS\hsx_cnxt.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\winmgmt

ImagePath = [CACHE]%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\winmgmt\Parameters

ServiceDll = [CHECK]%SystemRoot%\system32\wbem\WMIsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WmdmPmSN

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WmdmPmSN\Parameters

Page 78: Prev

ServiceDll = [CHECK]C:\WINDOWS\system32\MsPMSNSv.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wmi

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wmi\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\advapi32.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WmiApSrv

ImagePath = [CHECK]C:\WINDOWS\system32\wbem\wmiapsrv.exe

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WMPNetworkSvc

ImagePath = [CHECK]"C:\Program Files\Windows Media Player\WMPNetwk.exe"

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpdUsb

ImagePath = [CHECK]system32\DRIVERS\wpdusb.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wscsvc

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wscsvc\Parameters

ServiceDll = [CHECK]%SYSTEMROOT%\system32\wscsvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WSIMD

ImagePath = [CHECK]system32\DRIVERS\wsimd.sys

Page 79: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wuauserv

ImagePath = [CACHE]%systemroot%\system32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wuauserv\Parameters

ServiceDll = [CHECK]C:\WINDOWS\system32\wuauserv.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WudfPf

ImagePath = [CHECK]system32\DRIVERS\WudfPf.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WudfRd

ImagePath = [CHECK]system32\DRIVERS\wudfrd.sys

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WudfSvc

ImagePath = [CACHE]%SystemRoot%\system32\svchost.exe -k WudfServiceGroup

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WudfSvc\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\WUDFSvc.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WZCSVC

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WZCSVC\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\wzcsvc.dll

Page 80: Prev

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\xmlprov

ImagePath = [CACHE]%SystemRoot%\System32\svchost.exe -k netsvcs

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\xmlprov\Parameters

ServiceDll = [CHECK]%SystemRoot%\System32\xmlprov.dll

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ztemtusbser

ImagePath = system32\DRIVERS\CT_ZTEMT_U_USBSER.sys

-= Custom Registry Dump =-

[Coreflood Auto-Start entry]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\Offline Files

(Default) = {750fdf0e-2a26-11d1-a3ea-080036587f03}

[Terminal Server Service Autostart]

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run

(Default) =

[Driver32 Autostart]

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Drivers32

midimapper = [CHECK]midimap.dll

msacm.imaadpcm = imaadp32.acm

msacm.msadpcm = msadp32.acm

Page 81: Prev

msacm.msg711 = msg711.acm

msacm.msgsm610 = msgsm32.acm

msacm.trspch = tssoft32.acm

vidc.cvid = [CHECK]iccvid.dll

vidc.I420 = [CHECK]msh263.drv

vidc.iv31 = [CHECK]ir32_32.dll

vidc.iv32 = [CACHE]ir32_32.dll

vidc.iv41 = ir41_32.ax

vidc.iyuv = [CHECK]iyuv_32.dll

vidc.mrle = [CHECK]msrle32.dll

vidc.msvc = [CHECK]msvidc32.dll

vidc.uyvy = [CHECK]msyuv.dll

vidc.yuy2 = [CACHE]msyuv.dll

vidc.yvu9 = [CHECK]tsbyuv.dll

vidc.yvyu = [CACHE]msyuv.dll

wavemapper = [CHECK]msacm32.drv

msacm.msg723 = msg723.acm

vidc.M263 = [CACHE]msh263.drv

vidc.M261 = [CHECK]msh261.drv

msacm.msaudio1 = msaud32.acm

msacm.sl_anet = sl_anet.acm

msacm.iac2 = [ESKIP]C:\WINDOWS\system32\iac25_32.ax

vidc.iv50 = [CHECK]ir50_32.dll

msacm.l3acm = [ESKIP]C:\WINDOWS\system32\l3codeca.acm

wave = [CHECK]wdmaud.drv

Page 82: Prev

midi = [CACHE]wdmaud.drv

mixer = [CACHE]wdmaud.drv

aux = [CACHE]wdmaud.drv

vidc.tscc = [CHECK]C:\WINDOWS\system32\tsccvid.dll

[Windows NT\Winlogon Autostart]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

System =

VmApplet = rundll32 shell32,Control_RunDLL "sysdm.cpl"

[Standard Profile]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List

%windir%\system32\sessmgr.exe = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019

%windir%\Network Diagnostic\xpnetdiag.exe = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000

C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe = [CHECK]C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger

C:\Program Files\Google\Google Talk\googletalk.exe = [CACHE]C:\Program Files\Google\Google Talk\googletalk.exe:*:Enabled:Google Talk

C:\Program Files\Skype\Plugin Manager\skypePM.exe = [CHECK]C:\Program Files\Skype\Plugin Manager\skypePM.exe:*:Enabled:Skype Extras Manager

C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe = [CHECK]C:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Google Talk Plugin\googletalkplugin.exe:*:Enabled:Google Talk Plugin

C:\Program Files\Skype\Phone\Skype.exe = [CHECK]C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype

Page 83: Prev

[DomainProfile]

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List

%windir%\system32\sessmgr.exe = %windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019

%windir%\Network Diagnostic\xpnetdiag.exe = %windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000

+-----------------------------------------------

|Scheduled Tasks Information

+-----------------------------------------------

Task: RealUpgradeScheduledTaskS-1-5-21-189123497-2070932348-2804965741-500.job

Account Name : MOUMOHAM\administrator

Creator : administrator

Comment :

Exit Code : 0

Status : UNKNOWN

Idle Minutes : 10 minutes

Deadline Minutes : 60 minutes

Most Recent Run Time : 0/0/0 0:00

Next Run Time : 2/11/2011 12:28

Next RunTimes : 5 times

1 - 2/11/2011 12:28

2 - 2/18/2011 12:28

3 - 2/25/2011 12:28

4 - 3/4/2011 12:28

Page 84: Prev

5 - 3/11/2011 12:28

Task: RealUpgradeLogonTaskS-1-5-21-189123497-2070932348-2804965741-500.job

Account Name : MOUMOHAM\administrator

Creator : administrator

Comment :

Exit Code : 0

Status : SCHED_S_TASK_READY

Idle Minutes : 10 minutes

Deadline Minutes : 60 minutes

Most Recent Run Time : 2/4/2011 13:21

Next Run Time : 0/0/0 0:00

Next RunTimes : 0 times

Task: PMTask.job

Account Name :

Creator : Administrator

Comment :

Exit Code : 0

Status : UNKNOWN

Idle Minutes : 0 minutes

Deadline Minutes : 990 minutes

Most Recent Run Time : 10/17/2010 22:59

Next Run Time : 0/0/0 0:00

Next RunTimes : 0 times

Page 85: Prev

+-----------------------------------------------

|File Dump

+-----------------------------------------------

[FMISS]C:\WINDOWS\WINSTART.BAT

-= Local DNS HOSTS File =-

# Copyright (c) 1993-1999 Microsoft Corp.

#

# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.

#

# This file contains the mappings of IP addresses to host names. Each

# entry should be kept on an individual line. The IP address should

# be placed in the first column followed by the corresponding host name.

# The IP address and the host name should be separated by at least one

# space.

#

# Additionally, comments (such as these) may be inserted on individual

# lines or following the machine name denoted by a '#' symbol.

#

# For example:

#

# 102.54.94.97 rhino.acme.com # source server

# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

Page 86: Prev

+-----------------------------------------------

|Browser History Information

+-----------------------------------------------

-= Typed URLs =-

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TypedURLs

url1 = http://9.124.103.241/

url2 = http://9.184.66.100/

url3 = americanexpress.

url4 = https://americanexpress.com/

url5 = https://www99.americanexpress.com/myca/logon/japa/action?request_type=LogonHandler&DestPage=https%3A%2F%2Fwww99.americanexpress.com

url6 = americanexpress

url7 = hdfc

-= Internet Explorer History =-

Reference Date: 02-05-2011

Yesterday:

http://9.184.66.100

Yesterday:

Page 87: Prev

http://in.my.yahoo.com/p/1.html?_pckpartner=tatadial&_top=1

Yesterday:

http://9.124.103.241/private/remote_graphics.ssi

Yesterday:

http://9.124.103.241/private/welcome.ssi

Yesterday:

http://www.tataindicom.com/photonredirect

Yesterday:

http://w3.ibm.com/w3odw/spg/index_default.html

Yesterday:

http://9.124.103.241/private/hwvpd.ssi

Yesterday:

http://9.124.103.241/private/main.ssi

Yesterday:

http://w3.ibm.com

Yesterday:

http://w3.ibm.com/jct03001pt/wps/portal

Page 88: Prev

Yesterday:

http://www.tataindicom.com/EC1260

Yesterday:

http://9.124.103.241/private/terminate_and_start_new

Yesterday:

http://9.124.103.241/favicon.ico

2 Days ago:

http://9.184.66.100/private/terminate_and_start_new

2 Days ago:

http://9.184.66.100/private/save_remote_owner

2 Days ago:

http://9.184.66.100/favicon.ico

2 Days ago:

https://channel.skype.com/facebook/channel/?uiversion=5.1.0.104&language=en

2 Days ago:

http://9.184.66.100/private/remote_graphics4.ssi

Page 89: Prev

2 Days ago:

http://www.freeware995.com/promo/sponsor3.htm

2 Days ago:

http://9.184.66.100/private/remote_graphics.ssi

2 Days ago:

https://9.184.66.100/favicon.ico

2 Days ago:

http://9.184.66.100/private/saa_diff_client.ssi

2 Days ago:

https://9.184.66.100

2 Days ago:

https://www.regnow.com/softsell/nph-softsell.cgi?currency=USD&item=9059-1

2 Days ago:

https://channel.skype.com/facebook/channel/?uiversion=5.1.0.112&language=en

2 Days ago:

http://9.184.66.100/private/welcome.ssi

2 Days ago:

Page 90: Prev

http://9.184.66.100/private/main.ssi

3 Days ago:

https://www.google.com/accounts/ServiceLogin?service=mail&passive=true&rm=false&continue=http%3A%2F%2Fmail.google.com%2Fmail%2F%3Fui%3Dhtml%26zy%3Dl&bsv=llya694le36z&scc=1&ltmpl=default&ltmplcache=2

3 Days ago:

https://infinity.icicibank.co.in/favicon.ico

3 Days ago:

https://www.americanexpress.com/india/homepage.shtml

3 Days ago:

https://online.americanexpress.com/favicon.ico

3 Days ago:

https://www99.americanexpress.com/favicon.ico

3 Days ago:

http://www.hdfcbank.com/personal/default.htm

3 Days ago:

https://americanexpress.com

3 Days ago:

Page 91: Prev

http://www.bing.com/search?q=americanexpress.&src=IE-Address&format=rss

3 Days ago:

https://global.americanexpress.com/favicon.ico

3 Days ago:

https://sso.americanexpress.com/SSO/request?request_type=un_logon&ssolang=en_IN&ssobrand=INTERALERTS&TYPE=33554432&REALMOID=06-5e4c047a-bfa6-1002-9e00-80f7dddcfd44&GUID=&SMAUTHREASON=0&METHOD=GET&SMAGENTNAME=$SM$xouynl%2bXwy6ZwcZt%2fKhjp57lZZiRivl4nQ0BcVA3aE0TApn4CdNpCbtj6AHoHENT&TARGET=$SM$HTTPS%3a%2f%2fwww201%2eamericanexpress%2ecom%2fintlocc%2fauthreg%2fen_IN%2fcem_summary%2edo%3fFace%3den_IN

3 Days ago:

http://www.bing.com/search?q=americanexpress.&src=IE-Address

3 Days ago:

https://www99.americanexpress.com/myca/logon/japa/action?request_type=LogonHandler&DestPage=https%3A%2F%2Fwww99.americanexpress.com%2Fmyca%2Festatement%2Fjapa%2Faction%3Frequest_type%3Dauthreg_CardsList%26Face%3Den_IN%26india_nav%3DCTA_MycaLogoff_Login&Face=en_IN

3 Days ago:

https://infinity.icicibank.co.in/BANKAWAY;jsessionid=0000kywMB40uunm1A0pkF2xOmTU:156760do6?bwayparam=da0%2BCcRhcJfLjtYCXCZuARrnhMYei0G7D%2FyjdL1LXSFkUnut

3 Days ago:

Page 92: Prev

https://online.americanexpress.com/myca/logon/us/action?request_type=LogLogonHandler&location=us_pre1_cards

3 Days ago:

https://online.americanexpress.com/myca/acctsumm/us/action?request_type=authreg_acctAccountSummary&entry_point=lnk_homepage&aexp_nav=sc_checkbill&referrer=ushome&section=login

3 Days ago:

http://www.hdfcbank.com

3 Days ago:

https://www.billdesk.com/favicon.ico

3 Days ago:

https://www.billdesk.com/pgidsk/servlet/com.pgidsk.controller.PGIMerchantRequestHandler

3 Days ago:

https://infinity.icicibank.co.in/BANKAWAYTRAN;jsessionid=0000kywMB40uunm1A0pkF2xOmTU:156760do6?bwayparam=YKcvEf9gHtA%3D

3 Days ago:

https://www212.americanexpress.com/dsmlive/dsm/int/in/en/personal/creditknow-how.do?vgnextoid=8ed10a06f0274210VgnVCM200000d0faad94RCRD

3 Days ago:

Page 93: Prev

https://www.billdesk.com/pgidsk/servlet/PGICardPayHandler

3 Days ago:

https://www99.americanexpress.com/myca/logon/japa/action?request_type=LogLogoffHandler&Face=en_IN

3 Days ago:

https://netbanking.hdfcbank.com/netbanking/entry

3 Days ago:

https://www99.americanexpress.com/myca/estatement/japa/action?request_type=authreg_CardsList&Face=en_IN&india_nav=TEXTLINK_PersCards_Login

3 Days ago:

https://netbanking.hdfcbank.com/favicon.ico

3 Days ago:

http://www.americanexpress.com/links/myca/en_IN/?india_nav=CTA_MycaLogoff_Login

3 Days ago:

https://global.americanexpress.com/intlocc/authreg/en_IN/cem_summary.do?Face=en_IN

3 Days ago:

https://infinity.icicibank.co.in/BANKAWAY;jsessionid=0000kywMB40uunm1A0pkF2xOmTU:156760do6?

Page 94: Prev

bwayparam=Z6spFdlqDbHBjM88TiNtQRnvkckcgAiHW5KfMY5WSh9YVCv0P3cMyu%2BJ5DZbvVHfqMBh%2BXsqL8IA%0D%0AbodeBg%3D%3D

3 Days ago:

http://www.tataindicom.com/favicon.ico

3 Days ago:

https://infinity.icicibank.co.in/BANKAWAY?IWQRYTASKOBJNAME=bay_mc_login&BAY_BANKID=ICI

3 Days ago:

https://home.americanexpress.com/home/mt_personal_cm.shtml

3 Days ago:

http://www.bing.com/search?q=americanexpress&src=IE-Address

3 Days ago:

http://www.americanexpress.com/india/myaccount/logoff.shtml

3 Days ago:

https://www99.americanexpress.com/myca/logon/japa/action

3 Days ago:

https://sso.americanexpress.com/SSO/logon.fcc

3 Days ago:

Page 95: Prev

https://netbanking.hdfcbank.com/netbanking

3 Days ago:

http://www.bing.com/search?q=americanexpress&src=IE-Address&format=rss

3 Days ago:

https://netbanking.hdfcbank.com/netbanking/entry?selCard=4617862000866434&fldCodDrCr=B&firstSeqNo=00002&lastSeqNo=00011&fldCardNo=4617862000866434&fldInitialSwitch=I&fldLastTxnSeqNo=0&fldAppId=RS&fldTxnId=UNB&fldSessionId=128177436PMBNQZLFR&fldScrnSeqNbr=02

3 Days ago:

https://www.billdesk.com/pgmerc/amexcard/index.htm

3 Days ago:

https://www201.americanexpress.com/intlocc/authreg/en_IN/cem_summary.do?Face=en_IN

3 Days ago:

https://www.americanexpress.com/india/campaigns/pay_your_bill/payNow.htm

3 Days ago:

http://www.bing.com/search?q=hdfc&src=IE-Address

3 Days ago:

https://www99.americanexpress.com/myca/estatement/japa/action?

Page 96: Prev

3 Days ago:

https://www.americanexpress.com/india/campaigns/pay_your_bill/index.html

3 Days ago:

http://www.bing.com/search?q=hdfc&src=IE-Address&format=rss

3 Days ago:

https://www212.americanexpress.com/favicon.ico

3 Days ago:

https://global.americanexpress.com/intlocc/authreg/en_IN/cem_confirmDetails.do

3 Days ago:

https://www.billdesk.com/pgidsk/pgmerc/amexcard/amex_card.jsp

3 Days ago:

https://www.billdesk.com/pgidsk/pgmerc/amexcard/amex_cardResponse.jsp

3 Days ago:

https://infinity.icicibank.co.in/BANKAWAYTRAN;jsessionid=0000kywMB40uunm1A0pkF2xOmTU:156760do6?bwayparam=YKcvEf9gHtE%3D

3 Days ago:

https://apps.skype.com/skypehome/?uiversion=5.1.0.104

Page 97: Prev

3 Days ago:

https://sso.americanexpress.com/favicon.ico

3 Days ago:

https://netbanking.hdfcbank.com/netbanking/entry?selCard=4617862000866434&fldCardNo=4617862000866434&fldAppId=RS&fldTxnId=ACI&fldSessionId=218277813EWAHSIOVP&fldScrnSeqNbr=02

4 Days ago:

http://switchboard.real.com/player/downloader.html?cd=webmessage&PT=FREE&OS=WinNT%205.1.2600&LP=en%2DUS&OC=RN30DL&PV=12.0.1.609&PBR=393216&LI=en&PN=RealPlayer%20Downloader&DC=R61ENDF&DT=040111

4 Days ago:

http://client-software.real.com/free/windows/installer/infopanel/14_0/downloader_en_us.html

-= Temporary Internet Files =-

Temporary Internet Files folder : C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files

Folder: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files

Contents:

[ESKIP]desktop.ini

Folder: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5

Page 98: Prev

Contents:

[ESKIP]desktop.ini

[ESKIP]index.dat

Folder: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\3H9PQGV0

Contents:

[ESKIP]desktop.ini

[ESKIP]WMP12f6f321-92d3-443d-8129-a7baeb07a404[1]..jpg

[ESKIP]WMP2ae43d8b-4639-4d3d-94aa-d82ede275050[1]..jpg

[ESKIP]WMP364fd9f1-6880-4061-8353-a3b302a17648[1]..jpg

[ESKIP]WMP68ce304b-dc37-4139-98da-49615b385589[1]..jpg

[ESKIP]WMP86dfdf3a-01fb-499f-8ba7-bec5ec05feb0[1]..jpg

[ESKIP]WMPb17b7257-bc20-424b-a84a-e2e73453bc74[1]..jpg

[ESKIP]WMPbe1617e2-4b9a-4e02-a352-a9f2c024813e[1]..jpg

[ESKIP]WMPc640fa36-1c6f-4ff1-9ae1-7ec8aab518d2[1]..jpg

Folder: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\6HYDQQVE

Contents:

[ESKIP]desktop.ini

[ESKIP]SamiCaptioning[1]

[ESKIP]WMP1168584e-ab23-4086-a352-a625de0962f3[1]..jpg

[ESKIP]WMP2de58593-cfbd-403d-a1d4-decc844dbc8b[1]..jpg

[ESKIP]WMP6e2426fc-a6f2-48c0-aabb-9cf5493de6bf[1]..jpg

[ESKIP]WMP85857fea-123c-4607-be3b-208ee8b59072[1]..jpg

Page 99: Prev

[ESKIP]WMP85aa0450-0398-4ee3-a88f-57a4a058b030[1]..jpg

[ESKIP]WMPc8557b8b-67e3-44c4-bebd-c4c5d1586124[1]..jpg

[ESKIP]WMPcaa224fa-8c53-4098-87a6-574c5b2e0054[1]..jpg

[ESKIP]WMPd8534a06-90ac-462c-a8ff-af821e9c45b6[1]..jpg

[ESKIP]WMPfa77d2f0-b38b-4094-8c34-b20990e549fb[1]..jpg

Folder: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\88MRCTEV

Contents:

[ESKIP]desktop.ini

[ESKIP]WMP1206fd49-0e7e-4a18-a660-046713aa3b18[1]..jpg

[ESKIP]WMP280a6b99-e6fc-457f-9566-abd7f69e883d[1]..jpg

[ESKIP]WMP3565f36b-892d-49af-8128-36619782d9b9[1]..jpg

[ESKIP]WMP4a569b7c-8a7e-4632-93e9-b5570bf44d8f[1]..jpg

[ESKIP]WMP5a82be07-092f-472a-8ba5-1d414dff252b[1]..jpg

[ESKIP]WMP5dbfe1c4-804f-40bf-a6e9-945d86bff713[1]..jpg

[ESKIP]WMP8d212f28-0300-487b-b8b2-ad2df6c27f13[1]..jpg

[ESKIP]WMPd14a5f72-e60a-431e-ae4b-a7b7c1c9dc3a[1]..jpg

[ESKIP]WMPe2952ff7-106a-4352-ae51-3dab6d847035[1]..jpg

[ESKIP]WMPed2d896c-aa0c-4e5e-8044-d7d2f8644129[1]..jpg

Folder: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\PYASHUMF

Contents:

[ESKIP]desktop.ini

[ESKIP]WMP220759c9-2885-423d-b00b-9667afd23fd4[1]..jpg

Page 100: Prev

[ESKIP]WMPa2914ff7-7b9b-477b-9b4a-c73f47a5d67b[1]..jpg

[ESKIP]WMPbd926388-eca1-458e-b53e-c6ef944ad577[1]..jpg

[ESKIP]WMPd4044b73-0e41-4685-8d2e-1ebc3469b404[1]..jpg

[ESKIP]WMPdebb9ee3-8f6b-47b6-91db-23a8a6293026[1]..jpg

Folder: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.MSO

Contents:

[ESKIP]1064F1CB.emf

[ESKIP]18D6C489.emf

[ESKIP]1965819F.emf

[ESKIP]2E297148.wmf

[ESKIP]52A9384C.emf

[ESKIP]54F493A3.wmf

[ESKIP]5CB54BAA.wmf

[ESKIP]6453EF14.emf

[ESKIP]6ABE45FD.wmf

[ESKIP]733219B7.emf

[ESKIP]7DCD6A42.wmf

[ESKIP]8B65510D.wmf

[ESKIP]9C36B15B.emf

[ESKIP]9DEB0E96.wmf

[ESKIP]A2A15ED7.wmf

[ESKIP]B5443A0.emf

[ESKIP]C0D92F21.emf

[ESKIP]C8446B67.wmf

Page 101: Prev

[ESKIP]CED1B57E.wmf

[ESKIP]D0FA7AEC.wmf

[ESKIP]E2791C05.wmf

[ESKIP]EB4570A9.wmf

[ESKIP]EB537E3C.wmf

[ESKIP]EE078AAE.wmf

-= ActiveX Cache =-

Folder: C:\WINDOWS\Downloaded Program Files

Contents:

[CHECK]AvctActXLauncher.ocx

[CHECK]AvctDSView3InterfaceVieweru.dll

[CHECK]AvctDSViewAppTracker.dll

[CHECK]AvctInterfaceViewerImpl.dll

[CHECK]AvctInterfaceVieweru.dll

[CHECK]AvctKeyboard.dll

[CHECK]AvctPuttyTel.exe

[CHECK]avctRdpViewer.exe

[CHECK]avctRdpViewerJA.dll

[CHECK]avctRdpViewerKO.dll

[CHECK]avctRdpViewerZH.dll

[CHECK]AvctSerialViewer.exe

[CHECK]AvctSerialViewerJA.dll

[CHECK]AvctSerialViewerKO.dll

Page 102: Prev

[CHECK]AvctSerialViewerZH.dll

[CHECK]AvctVideoViewer.exe

[CHECK]AvctVideoViewerJA.dll

[CHECK]AvctVideoViewerKO.dll

[CHECK]AvctVideoViewerZH.dll

[CHECK]AvctVirtualMedia.exe

[CHECK]AvctVirtualMediaJA.dll

[CHECK]AvctVirtualMediaKO.dll

[CHECK]AvctVirtualMediaZH.dll

[CHECK]avctVncViewer.exe

[CHECK]avctVncViewerJA.dll

[CHECK]avctVncViewerZH.dll

[ESKIP]desktop.ini

[CHECK]DynHTTP.dll

[CHECK]erma.inf

[CHECK]gpwsx.INF

[CHECK]gpwsx.ocx

[CHECK]jinstall-1_4_2_19.inf

[CHECK]JuniperExt.exe

[CHECK]launchEXE.dll

[CHECK]LegitCheckControl.inf

[ESKIP]Microsoft XML Parser for Java.osd

[CHECK]ViewerLauncher.inf

[CHECK]vpclient.dll

[CHECK]vpclient.exe

Page 103: Prev

[CHECK]vpfilexfer.dll

+-----------------------------------------------

|LSP Chain Information

+-----------------------------------------------

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001

LibraryPath = [CACHE]%SystemRoot%\System32\mswsock.dll

DisplayString = Tcpip

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002

LibraryPath = [CHECK]%SystemRoot%\System32\winrnr.dll

DisplayString = NTDS

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003

LibraryPath = [CACHE]%SystemRoot%\System32\mswsock.dll

DisplayString = Network Location Awareness (NLA) Namespace

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002

Page 104: Prev

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004

PackedCatalogItem = [CHECK]%SystemRoot%\system32\rsvpsp.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005

PackedCatalogItem = [CACHE]%SystemRoot%\system32\rsvpsp.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009

Page 105: Prev

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000012

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000013

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000014

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000015

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000016

Page 106: Prev

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000017

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000018

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000019

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000020

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000021

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000022

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000023

Page 107: Prev

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000024

PackedCatalogItem = [CACHE]%SystemRoot%\system32\mswsock.dll

+-----------------------------------------------

|Network Status

+-----------------------------------------------

ARP Table

Internet Address Physical Address Type

[TCP] PSName: svchost.exe

PID: 1216

State: LISTENING

Local: moumoham:epmap

Remote: 0.0.0.0:39070

[TCP] PSName: [System]

PID: 4

State: LISTENING

Local: moumoham:microsoft-ds

Remote: 0.0.0.0:2208

[TCP] PSName: Rtvscan.exe

PID: 2776

State: LISTENING

Page 108: Prev

Local: moumoham:2967

Remote: 0.0.0.0:45228

[TCP] PSName: java.exe

PID: 1852

State: LISTENING

Local: moumoham:3802

Remote: 0.0.0.0:16567

[TCP] PSName: spoolsv.exe

PID: 676

State: LISTENING

Local: moumoham:6160

Remote: 0.0.0.0:20492

[TCP] PSName: java.exe

PID: 1852

State: LISTENING

Local: moumoham:21100

Remote: 0.0.0.0:37107

[TCP] PSName: ccProxy.exe

PID: 280

State: LISTENING

Local: moumoham:1025

Remote: 0.0.0.0:24637

[TCP] PSName: ccApp.exe

PID: 812

State: LISTENING

Page 109: Prev

Local: moumoham:1027

Remote: 0.0.0.0:8340

[TCP] PSName: alg.exe

PID: 4368

State: LISTENING

Local: moumoham:1041

Remote: 0.0.0.0:37000

[TCP] PSName: java.exe

PID: 1852

State: ESTABLISHED

Local: moumoham:3803

Remote: localhost:3804

[TCP] PSName: java.exe

PID: 1852

State: ESTABLISHED

Local: moumoham:3804

Remote: localhost:3803

[TCP] PSName: jqs.exe

PID: 2632

State: LISTENING

Local: moumoham:5152

Remote: 0.0.0.0:61596

[TCP] PSName: jqs.exe

PID: 2632

State: CLOSE_WAIT

Page 110: Prev

Local: moumoham:5152

Remote: localhost:3824

[TCP] PSName: java.exe

PID: 1852

State: LISTENING

Local: moumoham:21018

Remote: 0.0.0.0:30929

[TCP] PSName: java.exe

PID: 1852

State: LISTENING

Local: moumoham:21235

Remote: 0.0.0.0:12348

[TCP] PSName: [System]

PID: 4

State: LISTENING

Local: MOUMOHAM:netbios-ssn

Remote: 0.0.0.0:34922

[UDP] PSName: [System]

PID: 4

State:

Local: moumoham:microsoft-ds

Remote: *.*.*.*:*

[UDP] PSName: lsass.exe

PID: 920

State:

Page 111: Prev

Local: moumoham:isakmp

Remote: *.*.*.*:*

[UDP] PSName: spoolsv.exe

PID: 676

State:

Local: moumoham:1028

Remote: *.*.*.*:*

[UDP] PSName: svchost.exe

PID: 1308

State:

Local: moumoham:1043

Remote: *.*.*.*:*

[UDP] PSName: lsass.exe

PID: 920

State:

Local: moumoham:4500

Remote: *.*.*.*:*

[UDP] PSName: svchost.exe

PID: 1308

State:

Local: moumoham:ntp

Remote: *.*.*.*:*

[UDP] PSName: svchost.exe

PID: 1308

State:

Page 112: Prev

Local: moumoham:1044

Remote: *.*.*.*:*

[UDP] PSName: svchost.exe

PID: 1308

State:

Local: MOUMOHAM:ntp

Remote: *.*.*.*:*

[UDP] PSName: [System]

PID: 4

State:

Local: MOUMOHAM:netbios-ns

Remote: *.*.*.*:*

[UDP] PSName: [System]

PID: 4

State:

Local: MOUMOHAM:netbios-dgm

Remote: *.*.*.*:*

+-----------------------------------------------

|Rootkit Information

+-----------------------------------------------

Service Win32 API Hook List (01450250)

(0031) (80584d73-8a75e558) [ZwConnectPort] hooked by [].

Page 113: Prev

(0065) (805983a2-a8ead350) [ZwDeleteValueKey] hooked by [C:\Program Files\Symantec\SYMEVENT.SYS].

(0247) (8057fce0-a8ead580) [ZwSetValueKey] hooked by [C:\Program Files\Symantec\SYMEVENT.SYS].

Dump Hidden Driver

TrueAPI

No any hidden driver module found

Meanings of flags of hidden processes:

Flag: 0x00000020 --- NOT_FOUND_BY_TrueSystemInformationAPI

Flag: 0x00000010 --- NOT_FOUND_BY_SystemInformationAPI

Flag: 0x00010000 --- NOT_FOUND_BY_TraverseHandleTable

Flag: 0x00010000 --- NOT_FOUND_BY_TraverseHandleTable

Flag: 0x00000001 --- NOT_FOUND_BY_ToolHelp

Dump Hidden Process

Flag: 0x00000001, ProcessId: 0x00000004, ImageName: System, Filename:

+-----------------------------------------------

|Active Processes

+-----------------------------------------------

Process:PID

- Modules

SICWin.exe:1164

Page 114: Prev

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

wmpenc.exe:4800

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

Page 115: Prev

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\COMCTL32.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\setupapi.DLL

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\ws2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

POWERPNT.EXE:4412

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\MSVCRT.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

Page 116: Prev

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\Comctl32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\OLEAUT32.DLL

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

Page 117: Prev

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\System32\mswsock.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\System32\winrnr.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\System32\CSCDLL.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\MSVFW32.dll

-[CACHE]C:\WINDOWS\system32\AVIFIL32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\mlang.dll

-[CACHE]C:\WINDOWS\system32\quartz.dll

-[CACHE]C:\WINDOWS\system32\DDRAW.DLL

-[CACHE]C:\WINDOWS\system32\DCIMAN32.dll

-[CACHE]C:\WINDOWS\system32\devenum.dll

-[CACHE]C:\WINDOWS\system32\D3DIM700.DLL

-[CACHE]C:\WINDOWS\system32\wdmaud.drv

-[CACHE]C:\WINDOWS\system32\msacm32.drv

-[CACHE]C:\WINDOWS\system32\midimap.dll

-[CACHE]C:\WINDOWS\system32\MPR.dll

Page 118: Prev

-[CACHE]C:\WINDOWS\system32\WMVCore.DLL

-[CACHE]C:\WINDOWS\system32\WMASF.DLL

-[CACHE]C:\WINDOWS\system32\sti.dll

-[CACHE]C:\WINDOWS\system32\CFGMGR32.dll

-[CACHE]C:\WINDOWS\system32\urlmon.dll

wmplayer.exe:4892

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

Page 119: Prev

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\MSVFW32.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\MFPlat.DLL

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\wmvcore.dll

-[CACHE]C:\WINDOWS\system32\WMASF.DLL

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\mlang.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\quartz.dll

Page 120: Prev

-[CACHE]C:\WINDOWS\system32\msdmo.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\l3codeca.acm

-[CACHE]C:\WINDOWS\system32\devenum.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\wdmaud.drv

-[CACHE]C:\WINDOWS\system32\ieframe.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\msacm32.drv

-[CACHE]C:\WINDOWS\system32\midimap.dll

-[CACHE]C:\WINDOWS\system32\DSOUND.DLL

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\KsUser.dll

-[CACHE]C:\WINDOWS\system32\urlmon.dll

-[CACHE]C:\WINDOWS\system32\appHelp.dll

-[CACHE]C:\WINDOWS\system32\mshtml.dll

-[CACHE]C:\WINDOWS\system32\msls31.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

Page 121: Prev

-[CACHE]C:\WINDOWS\system32\MSIMG32.dll

-[CACHE]C:\WINDOWS\system32\wmpps.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\Program Files\Common Files\Nokia\Codecs\EmzAMRNBEnc.DLL

-[CACHE]C:\Program Files\Common Files\Nokia\Codecs\EmzAMRWBEnc.DLL

-[CACHE]C:\WINDOWS\system32\wmadmoe.dll

-[CACHE]C:\Program Files\Common Files\Nokia\Codecs\EmzMP3EncDMO.DLL

-[CACHE]C:\WINDOWS\system32\wmspdmoe.dll

-[CACHE]C:\WINDOWS\system32\imaadp32.acm

-[CACHE]C:\WINDOWS\system32\msadp32.acm

-[CACHE]C:\WINDOWS\system32\msg711.acm

-[CACHE]C:\WINDOWS\system32\msgsm32.acm

-[CACHE]C:\WINDOWS\system32\tssoft32.acm

-[CACHE]C:\WINDOWS\system32\tsd32.dll

-[CACHE]C:\WINDOWS\system32\msg723.acm

-[CACHE]C:\WINDOWS\system32\msaud32.acm

-[CACHE]C:\WINDOWS\system32\sl_anet.acm

-[CACHE]C:\WINDOWS\system32\iac25_32.ax

-[CACHE]C:\WINDOWS\system32\wmvdmoe.dll

-[CACHE]C:\WINDOWS\system32\WMVXENCD.dll

-[CACHE]C:\WINDOWS\system32\wmsdmoe.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\WMVSENCD.dll

-[CACHE]C:\WINDOWS\system32\WMVENCOD.dll

-[CACHE]C:\WINDOWS\system32\wmpencen.dll

Page 122: Prev

-[CACHE]C:\WINDOWS\system32\AVIFIL32.dll

java.exe:1852

-[CACHE]C:\Program Files\IBM\tivoli\dcd\client\ISSI\_jvm\jre\bin\java.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\MSVCRT.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\System32\mswsock.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\System32\winrnr.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

Page 123: Prev

-[CACHE]C:\WINDOWS\system32\rasadhlp.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

-[CACHE]C:\WINDOWS\system32\MFC42u.DLL

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\ATL.DLL

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

cmd.exe:2772

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

Page 124: Prev

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

SvcGuiHlpr.exe:6060

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSIMG32.dll

-[CACHE]C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\MPRAPI.dll

-[CACHE]C:\WINDOWS\system32\ACTIVEDS.dll

-[CACHE]C:\WINDOWS\system32\adsldpc.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\ATL.DLL

Page 125: Prev

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\RASAPI32.dll

-[CACHE]C:\WINDOWS\system32\rasman.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\TAPI32.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\CFGMGR32.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

AcSvc.exe:4616

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe

Page 126: Prev

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

Page 127: Prev

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\CFGMGR32.dll

-[CACHE]C:\WINDOWS\system32\setupapi.dll

-[CACHE]C:\WINDOWS\system32\RASAPI32.dll

-[CACHE]C:\WINDOWS\system32\rasman.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\TAPI32.dll

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACNewBiosHelper.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\tpwrpc.dll

Page 128: Prev

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\COMDLG32.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\OLEACC.dll

-[CACHE]C:\WINDOWS\system32\MSDART.DLL

-[CACHE]C:\Program Files\Common Files\System\Ole DB\oledb32.dll

-[CACHE]C:\Program Files\Common Files\System\Ole DB\OLEDB32R.DLL

-[CACHE]C:\WINDOWS\system32\ODBC32.dll

-[CACHE]C:\WINDOWS\system32\odbcint.dll

-[CACHE]C:\WINDOWS\system32\DHCPCSVC.DLL

igfxsrvc.exe:360

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

Page 129: Prev

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

Page 130: Prev

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\winspool.drv

AvaFind.EXE:5912

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\version.dll

-[CACHE]C:\WINDOWS\system32\shell32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\oleaut32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.DLL

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

Page 131: Prev

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\appHelp.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\System32\cscui.dll

-[CACHE]C:\WINDOWS\System32\CSCDLL.dll

-[CACHE]C:\WINDOWS\system32\LINKINFO.dll

-[CACHE]C:\WINDOWS\system32\ntshrui.dll

-[CACHE]C:\WINDOWS\system32\ATL.DLL

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\urlmon.dll

-[CACHE]C:\WINDOWS\system32\ieframe.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\Program Files\Lenovo\HOTKEY\hkvolkey.dll

-[CACHE]C:\WINDOWS\system32\SHDOCVW.dll

Page 132: Prev

-[CACHE]C:\WINDOWS\system32\CRYPTUI.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\ws2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\MPR.dll

-[CACHE]C:\WINDOWS\system32\MLANG.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\browseui.dll

-[CACHE]C:\WINDOWS\system32\shimgvw.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll

-[CACHE]C:\WINDOWS\system32\mscms.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

alg.exe:4368

-[CACHE]C:\WINDOWS\System32\alg.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\System32\ATL.DLL

-[CACHE]C:\WINDOWS\system32\USER32.dll

Page 133: Prev

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\System32\WSOCK32.dll

-[CACHE]C:\WINDOWS\System32\WS2_32.dll

-[CACHE]C:\WINDOWS\System32\WS2HELP.dll

-[CACHE]C:\WINDOWS\System32\MSWSOCK.DLL

-[CACHE]C:\WINDOWS\System32\ShimEng.dll

-[CACHE]C:\WINDOWS\System32\WINMM.dll

-[CACHE]C:\WINDOWS\System32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\System32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\System32\LPK.DLL

-[CACHE]C:\WINDOWS\System32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\System32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\System32\COMRes.dll

Page 134: Prev

-[CACHE]C:\WINDOWS\System32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

wmiprvse.exe:2160

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemcomn.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\wbem\FastProx.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\NTDSAPI.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

Page 135: Prev

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemsvc.dll

-[CACHE]C:\Program Files\Common Files\Intel\WirelessCommon\PsRegApi.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\Program Files\Common Files\Intel\WirelessCommon\TraceApi.dll

-[CACHE]C:\WINDOWS\system32\OLEACC.dll

-[CACHE]C:\WINDOWS\system32\MSDART.DLL

Page 136: Prev

-[CACHE]C:\Program Files\Common Files\System\Ole DB\oledb32.dll

-[CACHE]C:\Program Files\Common Files\System\Ole DB\OLEDB32R.DLL

-[CACHE]C:\WINDOWS\system32\odbcint.dll

-[CACHE]C:\WINDOWS\system32\odbccp32.dll

ldlcserv.exe:3828

-[CACHE]C:\WINDOWS\system32\Drivers\ldlcserv.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

TpKmpSVC.exe:1944

-[CACHE]C:\WINDOWS\system32\TpKmpSVC.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

Page 137: Prev

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

TPHDEXLG.exe:3008

-[CACHE]C:\WINDOWS\System32\TPHDEXLG.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\System32\LPK.DLL

-[CACHE]C:\WINDOWS\System32\USP10.dll

-[CACHE]C:\WINDOWS\System32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\System32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

SymSPort.exe:3004

-[CACHE]C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe

Page 138: Prev

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\Crypt32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

Page 139: Prev

-[CACHE]C:\WINDOWS\system32\WinTrust.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\wbem\wbemprox.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemcomn.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemsvc.dll

-[CACHE]C:\WINDOWS\system32\wbem\fastprox.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\NTDSAPI.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

Rtvscan.exe:2776

-[CACHE]C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe

Page 140: Prev

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\MSWSOCK.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\MPR.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\ACTIVEDS.dll

-[CACHE]C:\WINDOWS\system32\adsldpc.dll

Page 141: Prev

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\ATL.DLL

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\WTSAPI32.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccL40.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemprox.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemcomn.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemsvc.dll

-[CACHE]C:\WINDOWS\system32\wbem\fastprox.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\NTDSAPI.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

Page 142: Prev

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

-[CACHE]C:\WINDOWS\System32\winrnr.dll

-[CACHE]C:\WINDOWS\system32\rasadhlp.dll

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\RASAPI32.dll

-[CACHE]C:\WINDOWS\system32\rasman.dll

-[CACHE]C:\WINDOWS\system32\TAPI32.dll

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\sensapi.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

svchost.exe:2664

-[CACHE]C:\WINDOWS\system32\svchost.exe

Page 143: Prev

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]c:\windows\system32\wiaservc.dll

Page 144: Prev

-[CACHE]c:\windows\system32\CFGMGR32.dll

-[CACHE]c:\windows\system32\setupapi.DLL

-[CACHE]c:\windows\system32\mscms.dll

-[CACHE]c:\windows\system32\WINSPOOL.DRV

-[CACHE]c:\windows\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\sti.dll

sftvsa.exe:2564

-[CACHE]C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

Page 145: Prev

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

SavRoam.exe:356

-[CACHE]c:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

Page 146: Prev

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\CBA.DLL

-[CACHE]C:\WINDOWS\system32\MsgSys.dll

-[CACHE]C:\WINDOWS\system32\NTS.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\MSWSOCK.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\PDS.DLL

-[CACHE]C:\WINDOWS\system32\MPR.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\wininet.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]c:\program files\common files\symantec shared\ssc\ScsComms.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

Page 147: Prev

-[CACHE]C:\WINDOWS\System32\winrnr.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\rasadhlp.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

RegSrvc.exe:4032

-[CACHE]C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

Page 148: Prev

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

NetCfgSv.EXE:2468

-[CACHE]C:\Program Files\AT&T Network Client\NetCfgSv.EXE

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\CFGMGR32.dll

-[CACHE]C:\WINDOWS\system32\setupapi.dll

Page 149: Prev

-[CACHE]C:\WINDOWS\system32\RASAPI32.dll

-[CACHE]C:\WINDOWS\system32\rasman.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\TAPI32.dll

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHFOLDER.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\MFC71.DLL

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCP80.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

Page 150: Prev

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\MPRAPI.dll

-[CACHE]C:\WINDOWS\system32\ACTIVEDS.dll

-[CACHE]C:\WINDOWS\system32\adsldpc.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\ATL.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

nsd.exe:3096

-[CACHE]c:\notes\nsd.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\MPR.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

Page 151: Prev

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\psapi.dll

jqs.exe:2632

-[CACHE]C:\Program Files\IBM\Java60\jre\bin\jqs.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

Page 152: Prev

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\psapi.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\ODBC32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\odbcint.dll

-[CACHE]C:\WINDOWS\system32\mswsock.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

issimsvc.exe:2448

-[CACHE]c:\sdwork\issimsvc.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

Page 153: Prev

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\RASAPI32.dll

-[CACHE]C:\WINDOWS\system32\rasman.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\TAPI32.dll

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\wtsapi32.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

Page 154: Prev

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\System32\mswsock.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\System32\winrnr.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\rasadhlp.dll

DefWatch.exe:4088

-[CACHE]C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

Page 155: Prev

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccL40.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

CDSWinSrv.exe:4076

-[CACHE]C:\Program Files\IBM\tivoli\dcd\client\ISSI\cds\CDSWinSrv.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

Page 156: Prev

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\mswsock.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\System32\winrnr.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\rasadhlp.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

acs.exe:3964

Page 157: Prev

-[CACHE]C:\WINDOWS\system32\acs.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\CFGMGR32.dll

-[CACHE]C:\WINDOWS\system32\setupapi.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\MFC42u.DLL

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

Page 158: Prev

-[CACHE]C:\WINDOWS\system32\pdh.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\ODBC32.dll

-[CACHE]C:\WINDOWS\system32\odbcbcp.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\odbcint.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\MFC71U.DLL

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\WTSAPI32.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

AcPrfMgrSvc.exe:3880

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe

Page 159: Prev

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

Page 160: Prev

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\CFGMGR32.dll

-[CACHE]C:\WINDOWS\system32\setupapi.dll

-[CACHE]C:\WINDOWS\system32\RASAPI32.dll

-[CACHE]C:\WINDOWS\system32\rasman.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\TAPI32.dll

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACNewBiosHelper.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\tpwrpc.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll

Page 161: Prev

PCS_AGNT.EXE:3644

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\MSVCRT.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\MFC42.DLL

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\ole32.dll

Page 162: Prev

TPHKSVC.exe:3448

-[CACHE]C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\WTSAPI32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

Page 163: Prev

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

ObjectDock.exe:3384

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\ObjectDock.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

Page 164: Prev

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\appHelp.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\System32\cscui.dll

-[CACHE]C:\WINDOWS\System32\CSCDLL.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

-[CACHE]C:\WINDOWS\system32\mscms.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

Page 165: Prev

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\MsImg32.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\ntshrui.dll

-[CACHE]C:\WINDOWS\system32\ATL.DLL

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\psapi.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\imagehlp.dll

-[CACHE]C:\WINDOWS\system32\Wintrust.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\cryptnet.dll

-[CACHE]C:\WINDOWS\system32\SensApi.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll

wweb32.exe:3332

-[CACHE]C:\Program Files\WordWeb\wweb32.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\advapi32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\user32.dll

Page 166: Prev

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\oleaut32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\version.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\winspool.drv

-[CACHE]C:\WINDOWS\system32\shell32.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\winmm.dll

-[CACHE]C:\WINDOWS\system32\oleacc.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

Page 167: Prev

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\Program Files\Lenovo\HOTKEY\hkvolkey.dll

svchost.exe:3228

-[CACHE]C:\WINDOWS\system32\svchost.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

Page 168: Prev

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]c:\windows\system32\webclnt.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]c:\windows\system32\WS2_32.dll

-[CACHE]c:\windows\system32\WS2HELP.dll

FClock.exe:2816

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Mohsin\downloads\FClock.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\user32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\advapi32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

Page 169: Prev

-[CACHE]C:\WINDOWS\system32\oleaut32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\version.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\winspool.drv

-[CACHE]C:\WINDOWS\system32\shell32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

-[CACHE]C:\Program Files\Lenovo\HOTKEY\hkvolkey.dll

ctfmon.exe:2704

-[CACHE]C:\WINDOWS\system32\ctfmon.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

Page 170: Prev

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

Page 171: Prev

ACTray.exe:2544

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACTray.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACGUIHlpr.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MFC71U.DLL

-[CACHE]C:\WINDOWS\system32\MSIMG32.dll

-[CACHE]C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll

Page 172: Prev

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\Res\US\GUIHlprRes.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

isamtray.exe:2372

-[CACHE]C:\Program Files\c4ebreg\isamtray.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

Page 173: Prev

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\urlmon.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\wtsapi32.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\mshtml.dll

-[CACHE]C:\WINDOWS\system32\msls31.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

Page 174: Prev

-[CACHE]C:\WINDOWS\system32\msimtf.dll

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

pmonmh.exe:2288

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

TpScrex.exe:2224

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

Page 175: Prev

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\DDRAW.dll

-[CACHE]C:\WINDOWS\system32\DCIMAN32.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

Page 176: Prev

TpShocks.exe:2164

-[CACHE]C:\WINDOWS\system32\TpShocks.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

TPONSCR.exe:2168

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

Page 177: Prev

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

TPOSDSVC.exe:2080

-[CACHE]C:\Program Files\Lenovo\HOTKEY\TPOSDSVC.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

Page 178: Prev

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\IMM32.dll

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\wtsapi32.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\urlmon.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]C:\Program Files\Lenovo\HOTKEY\hkvolkey.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

Page 179: Prev

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\wdmaud.drv

-[CACHE]C:\WINDOWS\system32\msacm32.drv

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\midimap.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

SynTPEnh.exe:1960

-[CACHE]C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

Page 180: Prev

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\urlmon.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

SynTPLpr.exe:1604

-[CACHE]C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

Page 181: Prev

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

smax4pnp.exe:1592

-[CACHE]C:\Program Files\Analog Devices\Core\smax4pnp.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

Page 182: Prev

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\MFC42.DLL

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\DSound.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\wdmaud.drv

-[CACHE]C:\WINDOWS\system32\msacm32.drv

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\midimap.dll

-[CACHE]C:\WINDOWS\system32\KsUser.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

Page 183: Prev

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

VPTray.exe:1180

-[CACHE]C:\PROGRA~1\SYMANT~2\SYMANT~2\VPTray.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

Page 184: Prev

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccL40.dll

-[CACHE]C:\Program Files\Symantec Client Security\Symantec AntiVirus\SAVRT32.DLL

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\Crypt32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\WinTrust.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccProSub.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\MPR.dll

Page 185: Prev

-[CACHE]C:\WINDOWS\system32\shfolder.dll

-[CACHE]C:\Program Files\Symantec Client Security\Symantec AntiVirus\NAVNTUTL.DLL

-[CACHE]C:\WINDOWS\system32\SFC.DLL

-[CACHE]C:\WINDOWS\system32\sfc_os.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSet.dll

-[CACHE]C:\WINDOWS\system32\MSWSOCK.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

ccApp.exe:812

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccApp.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccL40.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

Page 186: Prev

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\DBGHELP.DLL

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\WinTrust.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSet.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

Page 187: Prev

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\MSWSOCK.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SymNeti.DLL

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccProSub.dll

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\System32\winrnr.dll

-[CACHE]C:\WINDOWS\system32\rasadhlp.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

tpam.exe:572

-[CACHE]C:\Program Files\IBM\Personal Communications\tpam.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

Page 188: Prev

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\MSVCRT.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

Explorer.EXE:1836

-[CACHE]C:\WINDOWS\Explorer.EXE

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\BROWSEUI.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

Page 189: Prev

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\SHDOCVW.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\CRYPTUI.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

Page 190: Prev

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\appHelp.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\System32\cscui.dll

-[CACHE]C:\WINDOWS\System32\CSCDLL.dll

-[CACHE]C:\WINDOWS\system32\MSIMG32.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\MPR.dll

-[CACHE]C:\WINDOWS\system32\LINKINFO.dll

-[CACHE]C:\WINDOWS\system32\ntshrui.dll

-[CACHE]C:\WINDOWS\system32\ATL.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\ieframe.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\urlmon.dll

-[CACHE]C:\WINDOWS\system32\mshtml.dll

-[CACHE]C:\WINDOWS\system32\msls31.dll

-[CACHE]C:\WINDOWS\system32\ws2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\MSCTF.dll

-[CACHE]C:\WINDOWS\system32\SynTPFcs.dll

Page 191: Prev

-[CACHE]C:\WINDOWS\system32\POWRPROF.DLL

-[CACHE]C:\WINDOWS\system32\MLANG.dll

-[CACHE]C:\WINDOWS\System32\drprov.dll

-[CACHE]C:\WINDOWS\System32\ntlanman.dll

-[CACHE]C:\WINDOWS\System32\NETUI0.dll

-[CACHE]C:\WINDOWS\System32\NETUI1.dll

-[CACHE]C:\WINDOWS\System32\NETRAP.dll

-[CACHE]C:\WINDOWS\System32\davclnt.dll

-[CACHE]C:\Documents and Settings\Administrator\My Documents\Official\ObjectDock\DockShellHook.dll

-[CACHE]C:\WINDOWS\system32\wdmaud.drv

-[CACHE]C:\WINDOWS\system32\msacm32.drv

-[CACHE]C:\WINDOWS\system32\midimap.dll

-[CACHE]C:\WINDOWS\system32\RASAPI32.dll

-[CACHE]C:\WINDOWS\system32\rasman.dll

-[CACHE]C:\WINDOWS\system32\TAPI32.dll

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\sensapi.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\webcheck.dll

-[CACHE]C:\WINDOWS\system32\stobject.dll

-[CACHE]C:\WINDOWS\system32\WTSAPI32.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

Page 192: Prev

-[CACHE]C:\WINDOWS\system32\msimtf.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\Program Files\Lenovo\HOTKEY\hkvolkey.dll

-[CACHE]C:\WINDOWS\system32\wmvcore.dll

-[CACHE]C:\WINDOWS\system32\WMASF.DLL

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll

-[CACHE]C:\WINDOWS\system32\mscms.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCR80.dll

-[CACHE]C:\WINDOWS\system32\igfxsrvc.dll

-[CACHE]C:\WINDOWS\system32\MSGINA.dll

-[CACHE]C:\WINDOWS\system32\ODBC32.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\odbcint.dll

-[CACHE]C:\WINDOWS\system32\wbtapi.dll

-[CACHE]C:\WINDOWS\system32\MFC42.DLL

-[CACHE]C:\WINDOWS\system32\btosif.dll

-[CACHE]C:\WINDOWS\system32\OLEPRO32.DLL

-[CACHE]C:\WINDOWS\system32\RICHED20.dll

-[CACHE]C:\WINDOWS\system32\DDRAW.dll

-[CACHE]C:\WINDOWS\system32\DCIMAN32.dll

-[CACHE]C:\WINDOWS\system32\jscript.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\MSVCP80.dll

Page 193: Prev

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\icm32.dll

-[CACHE]C:\WINDOWS\system32\wmp.dll

-[CACHE]C:\WINDOWS\system32\MSVFW32.dll

-[CACHE]C:\WINDOWS\system32\dbghelp.dll

-[CACHE]C:\WINDOWS\system32\wmploc.dll

-[CACHE]C:\WINDOWS\system32\wmpps.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCR90.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\MSVCP90.dll

-[CACHE]C:\Program Files\WinRAR\rarext.dll

-[CACHE]C:\Program Files\Notepad++\NppShell_01.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\SSC\vpshell2.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\DWRCSh32.DLL

-[CACHE]C:\WINDOWS\system32\actxprxy.dll

spoolsv.exe:676

-[CACHE]C:\WINDOWS\system32\spoolsv.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

Page 194: Prev

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\rasadhlp.dll

-[CACHE]C:\WINDOWS\system32\sfc_os.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

Page 195: Prev

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\winspool.drv

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\WINDOWS\system32\WidcommSdk.dll

-[CACHE]C:\WINDOWS\system32\wbtapi.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\MFC42.DLL

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\mswsock.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

-[CACHE]C:\WINDOWS\System32\winrnr.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\NETRAP.dll

-[CACHE]C:\WINDOWS\system32\NTDSAPI.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

Page 196: Prev

SNDSrvc.exe:464

-[CACHE]C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\RASAPI32.DLL

-[CACHE]C:\WINDOWS\system32\rasman.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

Page 197: Prev

-[CACHE]C:\WINDOWS\system32\TAPI32.dll

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\SymNeti.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\MPRAPI.dll

-[CACHE]C:\WINDOWS\system32\ACTIVEDS.dll

-[CACHE]C:\WINDOWS\system32\adsldpc.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\ATL.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

ISSVC.exe:320

Page 198: Prev

-[CACHE]C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\SymNeti.DLL

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccL40.dll

Page 199: Prev

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\DBGHELP.DLL

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\Crypt32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\WinTrust.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSet.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccProSub.dll

ccProxy.exe:280

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccProxy.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

Page 200: Prev

-[CACHE]C:\WINDOWS\system32\SYMREDIR.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\SymNeti.DLL

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccL40.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\DBGHELP.DLL

-[CACHE]C:\WINDOWS\system32\VERSION.dll

Page 201: Prev

-[CACHE]C:\WINDOWS\system32\mswsock.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\Crypt32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\WinTrust.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccProSub.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccPxyEvt.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccLogin.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll

ccEvtMgr.exe:2024

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe

Page 202: Prev

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccL40.dll

-[CACHE]C:\WINDOWS\system32\DBGHELP.DLL

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\Crypt32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\WinTrust.dll

Page 203: Prev

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSet.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\SymNeti.DLL

-[CACHE]C:\Program Files\Symantec Client Security\Symantec Client Firewall\NisEvt.dll

-[CACHE]C:\Program Files\Symantec Client Security\Symantec AntiVirus\Cliproxy.dll

-[CACHE]C:\WINDOWS\system32\MPR.dll

-[CACHE]C:\Program Files\Symantec Client Security\Symantec AntiVirus\NAVNTUTL.DLL

-[CACHE]c:\program files\common files\symantec shared\ssc\ScsComms.dll

-[CACHE]C:\WINDOWS\system32\nts.dll

-[CACHE]C:\WINDOWS\system32\MSWSOCK.dll

-[CACHE]C:\WINDOWS\system32\cba.dll

Page 204: Prev

-[CACHE]C:\WINDOWS\system32\MsgSys.dll

-[CACHE]C:\WINDOWS\system32\PDS.DLL

ccSetMgr.exe:1976

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccL40.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\DBGHELP.DLL

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccVrTrst.dll

Page 205: Prev

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\Crypt32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\WinTrust.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\netapi32.dll

-[CACHE]C:\Program Files\Common Files\Symantec Shared\ccSetEvt.dll

svchost.exe:1804

-[CACHE]C:\WINDOWS\system32\svchost.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

Page 206: Prev

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]c:\windows\system32\lmhsvc.dll

Page 207: Prev

-[CACHE]c:\windows\system32\iphlpapi.dll

-[CACHE]c:\windows\system32\WS2_32.dll

-[CACHE]c:\windows\system32\WS2HELP.dll

-[CACHE]c:\windows\system32\regsvc.dll

svchost.exe:1740

-[CACHE]C:\WINDOWS\system32\svchost.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

Page 208: Prev

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]c:\windows\system32\dnsrslvr.dll

-[CACHE]c:\windows\system32\DNSAPI.dll

-[CACHE]c:\windows\system32\WS2_32.dll

-[CACHE]c:\windows\system32\WS2HELP.dll

-[CACHE]c:\windows\system32\iphlpapi.dll

S24EvMon.exe:1700

-[CACHE]C:\Program Files\Intel\WiFi\bin\S24EvMon.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

Page 209: Prev

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\Program Files\Intel\WiFi\bin\IntStngs.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\Program Files\Intel\WiFi\bin\IWMSPROV.DLL

-[CACHE]C:\WINDOWS\system32\OLEACC.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\Program Files\Common Files\Intel\WirelessCommon\PsRegApi.dll

-[CACHE]C:\Program Files\Common Files\Intel\WirelessCommon\TraceApi.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

Page 210: Prev

-[CACHE]C:\WINDOWS\system32\wtsapi32.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\Program Files\Common Files\Intel\WirelessCommon\Libeay32.dll

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\CLUSAPI.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\WinSCard.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\Program Files\Common Files\System\ado\msado15.dll

-[CACHE]C:\WINDOWS\system32\MSDART.DLL

-[CACHE]C:\Program Files\Common Files\System\Ole DB\oledb32.dll

-[CACHE]C:\Program Files\Common Files\System\Ole DB\OLEDB32R.DLL

-[CACHE]C:\Program Files\Common Files\System\Ole DB\msdasql.dll

-[CACHE]C:\Program Files\Common Files\System\Ole DB\MSDATL3.dll

-[CACHE]C:\WINDOWS\system32\ODBC32.dll

-[CACHE]C:\WINDOWS\system32\odbcint.dll

-[CACHE]C:\Program Files\Common Files\System\Ole DB\MSDASQLR.DLL

-[CACHE]C:\WINDOWS\system32\comsvcs.dll

-[CACHE]C:\WINDOWS\system32\colbact.DLL

Page 211: Prev

-[CACHE]C:\WINDOWS\system32\MTXCLU.DLL

-[CACHE]C:\WINDOWS\system32\RESUTILS.DLL

-[CACHE]C:\WINDOWS\system32\odbcjt32.dll

-[CACHE]C:\WINDOWS\system32\msjet40.dll

-[CACHE]C:\WINDOWS\system32\mswstr10.dll

-[CACHE]C:\WINDOWS\system32\odbcji32.dll

-[CACHE]C:\WINDOWS\system32\msjter40.dll

-[CACHE]C:\WINDOWS\system32\MSJINT40.DLL

-[CACHE]C:\WINDOWS\system32\odbccp32.dll

-[CACHE]C:\Program Files\Common Files\System\msadc\msadce.dll

-[CACHE]C:\Program Files\Common Files\System\msadc\msadcer.dll

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\SXS.DLL

svchost.exe:1388

-[CACHE]C:\WINDOWS\system32\svchost.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

Page 212: Prev

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]c:\windows\system32\wudfsvc.dll

-[CACHE]c:\windows\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

Ati2evxx.exe:1380

Page 213: Prev

-[CACHE]C:\WINDOWS\system32\Ati2evxx.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\wtsapi32.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\powrprof.dll

-[CACHE]C:\WINDOWS\system32\psapi.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

Page 214: Prev

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\ati2evxx.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

btwdins.exe:1336

-[CACHE]C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

Page 215: Prev

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

svchost.exe:1308

-[CACHE]C:\WINDOWS\System32\svchost.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\System32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\System32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

Page 216: Prev

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\System32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\System32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\System32\LPK.DLL

-[CACHE]C:\WINDOWS\System32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\System32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\System32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\System32\xpsp2res.dll

-[CACHE]c:\windows\system32\shsvcs.dll

-[CACHE]C:\WINDOWS\System32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\System32\rsaenh.dll

-[CACHE]c:\windows\system32\dhcpcsvc.dll

-[CACHE]c:\windows\system32\DNSAPI.dll

-[CACHE]c:\windows\system32\WS2_32.dll

-[CACHE]c:\windows\system32\WS2HELP.dll

-[CACHE]c:\windows\system32\iphlpapi.dll

Page 217: Prev

-[CACHE]C:\WINDOWS\system32\mswsock.dll

-[CACHE]C:\WINDOWS\System32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

-[CACHE]c:\windows\system32\wzcsvc.dll

-[CACHE]c:\windows\system32\rtutils.dll

-[CACHE]c:\windows\system32\WMI.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]c:\windows\system32\ATL.DLL

-[CACHE]c:\windows\system32\MSVCP60.dll

-[CACHE]c:\windows\system32\dot3api.dll

-[CACHE]c:\windows\system32\WTSAPI32.dll

-[CACHE]c:\windows\system32\irmon.dll

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\System32\cryptdll.dll

-[CACHE]C:\WINDOWS\System32\wshirda.dll

-[CACHE]C:\WINDOWS\System32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\System32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\CRYPTUI.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\System32\MPRAPI.dll

Page 218: Prev

-[CACHE]C:\WINDOWS\System32\ACTIVEDS.dll

-[CACHE]C:\WINDOWS\System32\adsldpc.dll

-[CACHE]C:\WINDOWS\System32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\System32\RASAPI32.dll

-[CACHE]C:\WINDOWS\System32\rasman.dll

-[CACHE]C:\WINDOWS\System32\TAPI32.dll

-[CACHE]C:\WINDOWS\System32\WinSCard.dll

-[CACHE]C:\WINDOWS\System32\PSAPI.DLL

-[CACHE]c:\windows\system32\schedsvc.dll

-[CACHE]c:\windows\system32\NTDSAPI.dll

-[CACHE]c:\windows\system32\audiosrv.dll

-[CACHE]c:\windows\system32\wkssvc.dll

-[CACHE]c:\windows\system32\qmgr.dll

-[CACHE]C:\WINDOWS\system32\MPR.dll

-[CACHE]c:\windows\system32\SHFOLDER.dll

-[CACHE]c:\windows\system32\WINHTTP.dll

-[CACHE]c:\windows\system32\cryptsvc.dll

-[CACHE]c:\windows\system32\dmserver.dll

-[CACHE]c:\windows\system32\es.dll

-[CACHE]C:\WINDOWS\System32\netman.dll

-[CACHE]C:\WINDOWS\System32\netshell.dll

-[CACHE]C:\WINDOWS\System32\credui.dll

-[CACHE]C:\WINDOWS\System32\dot3dlg.dll

-[CACHE]C:\WINDOWS\System32\OneX.DLL

-[CACHE]C:\WINDOWS\System32\eappcfg.dll

Page 219: Prev

-[CACHE]C:\WINDOWS\System32\eappprxy.dll

-[CACHE]C:\WINDOWS\System32\WZCSAPI.DLL

-[CACHE]C:\WINDOWS\System32\rasmans.dll

-[CACHE]C:\WINDOWS\System32\Sens.dll

-[CACHE]C:\WINDOWS\System32\netcfgx.dll

-[CACHE]C:\WINDOWS\System32\CLUSAPI.dll

-[CACHE]c:\windows\pchealth\helpctr\binaries\pchsvc.dll

-[CACHE]c:\windows\system32\srvsvc.dll

-[CACHE]c:\windows\system32\seclogon.dll

-[CACHE]c:\windows\system32\srsvc.dll

-[CACHE]c:\windows\system32\POWRPROF.dll

-[CACHE]c:\windows\system32\trkwks.dll

-[CACHE]c:\windows\system32\w32time.dll

-[CACHE]c:\windows\system32\wuauserv.dll

-[CACHE]C:\WINDOWS\System32\WINSPOOL.DRV

-[CACHE]c:\windows\system32\browser.dll

-[CACHE]c:\windows\system32\wbem\wmisvc.dll

-[CACHE]C:\WINDOWS\System32\SXS.DLL

-[CACHE]C:\WINDOWS\system32\comsvcs.dll

-[CACHE]C:\WINDOWS\system32\colbact.DLL

-[CACHE]C:\WINDOWS\system32\MTXCLU.DLL

-[CACHE]C:\WINDOWS\system32\WSOCK32.dll

-[CACHE]C:\WINDOWS\System32\RESUTILS.DLL

-[CACHE]C:\WINDOWS\System32\sfc.dll

-[CACHE]C:\WINDOWS\System32\sfc_os.dll

Page 220: Prev

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]c:\windows\system32\ipnathlp.dll

-[CACHE]c:\windows\system32\wscsvc.dll

-[CACHE]c:\windows\system32\msi.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemcomn.dll

-[CACHE]C:\WINDOWS\System32\Wbem\esscli.dll

-[CACHE]C:\WINDOWS\System32\Wbem\FastProx.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemsvc.dll

-[CACHE]C:\WINDOWS\system32\wbem\wmiutils.dll

-[CACHE]C:\WINDOWS\system32\NCObjAPI.DLL

-[CACHE]c:\windows\system32\tapisrv.dll

-[CACHE]C:\WINDOWS\System32\rasadhlp.dll

-[CACHE]C:\WINDOWS\System32\HID.DLL

-[CACHE]C:\WINDOWS\System32\RASDLG.dll

svchost.exe:1216

-[CACHE]C:\WINDOWS\system32\svchost.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\USER32.dll

Page 221: Prev

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]c:\windows\system32\rpcss.dll

-[CACHE]c:\windows\system32\WS2_32.dll

-[CACHE]c:\windows\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\mswsock.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

Page 222: Prev

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\System32\winrnr.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\rasadhlp.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

svchost.exe:1136

-[CACHE]C:\WINDOWS\system32\svchost.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

Page 223: Prev

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]c:\windows\system32\rpcss.dll

-[CACHE]c:\windows\system32\WS2_32.dll

-[CACHE]c:\windows\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]c:\windows\system32\termsrv.dll

-[CACHE]c:\windows\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]c:\windows\system32\AUTHZ.dll

-[CACHE]c:\windows\system32\ACTIVEDS.dll

-[CACHE]c:\windows\system32\adsldpc.dll

Page 224: Prev

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]c:\windows\system32\ATL.DLL

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]C:\WINDOWS\system32\WTSAPI32.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\msi.dll

Ati2evxx.exe:1108

-[CACHE]C:\WINDOWS\system32\Ati2evxx.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

Page 225: Prev

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\wtsapi32.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\userenv.dll

-[CACHE]C:\WINDOWS\system32\powrprof.dll

-[CACHE]C:\WINDOWS\system32\psapi.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\Ati2edxx.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

ibmpmsvc.exe:1076

-[CACHE]C:\WINDOWS\system32\ibmpmsvc.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

Page 226: Prev

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

lsass.exe:920

-[CACHE]C:\WINDOWS\system32\lsass.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\MPR.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\NTDSAPI.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

Page 227: Prev

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\AppPatch\AcGenral.DLL

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\UxTheme.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\comctl32.dll

-[CACHE]C:\WINDOWS\system32\kerberos.dll

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\w32time.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\schannel.dll

Page 228: Prev

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\wdigest.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACHelper.dll

-[CACHE]C:\WINDOWS\system32\MSVCP71.dll

-[CACHE]C:\WINDOWS\system32\MSVCR71.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcSvcStub.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcLocSettings.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACON.dll

-[CACHE]C:\WINDOWS\system32\WININET.dll

-[CACHE]C:\WINDOWS\system32\Normaliz.dll

-[CACHE]C:\WINDOWS\system32\iertutil.dll

-[CACHE]C:\WINDOWS\system32\CFGMGR32.dll

-[CACHE]C:\WINDOWS\system32\RASAPI32.dll

-[CACHE]C:\WINDOWS\system32\rasman.dll

-[CACHE]C:\WINDOWS\system32\TAPI32.dll

-[CACHE]C:\WINDOWS\system32\rtutils.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgr.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcCryptHlpr.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACTurinSupport.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcSmBiosHelper.dll

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\ACNewBiosHelper.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

Page 229: Prev

-[CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcAdaptersInfo.dll

-[CACHE]C:\WINDOWS\system32\AUTHZ.dll

-[CACHE]C:\WINDOWS\system32\WINIPSEC.DLL

-[CACHE]C:\WINDOWS\system32\mswsock.dll

-[CACHE]C:\WINDOWS\system32\hnetcfg.dll

-[CACHE]C:\WINDOWS\System32\wshtcpip.dll

services.exe:908

-[CACHE]C:\WINDOWS\system32\services.exe

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\NCObjAPI.DLL

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\AUTHZ.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\ShimEng.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

Page 230: Prev

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\wtsapi32.dll

winlogon.exe:864

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\kernel32.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\AUTHZ.dll

-[CACHE]C:\WINDOWS\system32\msvcrt.dll

-[CACHE]C:\WINDOWS\system32\CRYPT32.dll

-[CACHE]C:\WINDOWS\system32\MSASN1.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\NETAPI32.dll

-[CACHE]C:\WINDOWS\system32\USERENV.dll

-[CACHE]C:\WINDOWS\system32\PSAPI.DLL

-[CACHE]C:\WINDOWS\system32\REGAPI.dll

Page 231: Prev

-[CACHE]C:\WINDOWS\system32\SETUPAPI.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

-[CACHE]C:\WINDOWS\system32\WINSTA.dll

-[CACHE]C:\WINDOWS\system32\WINTRUST.dll

-[CACHE]C:\WINDOWS\system32\IMAGEHLP.dll

-[CACHE]C:\WINDOWS\system32\WS2_32.dll

-[CACHE]C:\WINDOWS\system32\WS2HELP.dll

-[CACHE]C:\WINDOWS\system32\IMM32.DLL

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\MSGINA.dll

-[CACHE]C:\WINDOWS\system32\COMCTL32.dll

-[CACHE]C:\WINDOWS\system32\ODBC32.dll

-[CACHE]C:\WINDOWS\system32\comdlg32.dll

-[CACHE]C:\WINDOWS\system32\SHELL32.dll

-[CACHE]C:\WINDOWS\system32\SHLWAPI.dll

-[CACHE]C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

-[CACHE]C:\WINDOWS\system32\odbcint.dll

-[CACHE]C:\WINDOWS\system32\SHSVCS.dll

-[CACHE]C:\WINDOWS\system32\sfc.dll

-[CACHE]C:\WINDOWS\system32\sfc_os.dll

-[CACHE]C:\WINDOWS\system32\ole32.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]C:\WINDOWS\system32\msctfime.ime

-[CACHE]C:\WINDOWS\system32\WINSCARD.DLL

Page 232: Prev

-[CACHE]C:\WINDOWS\system32\WTSAPI32.dll

-[CACHE]C:\WINDOWS\system32\sxs.dll

-[CACHE]C:\WINDOWS\system32\WINMM.dll

-[CACHE]C:\WINDOWS\system32\uxtheme.dll

-[CACHE]C:\WINDOWS\system32\Ati2evxx.dll

-[CACHE]C:\WINDOWS\system32\cscdll.dll

-[CACHE]C:\WINDOWS\system32\rsaenh.dll

-[CACHE]C:\WINDOWS\system32\WlNotify.dll

-[CACHE]C:\WINDOWS\system32\MPR.dll

-[CACHE]C:\WINDOWS\system32\WINSPOOL.DRV

-[CACHE]C:\WINDOWS\system32\msv1_0.dll

-[CACHE]C:\WINDOWS\system32\cryptdll.dll

-[CACHE]C:\WINDOWS\system32\iphlpapi.dll

-[CACHE]C:\WINDOWS\system32\SAMLIB.dll

-[CACHE]C:\WINDOWS\system32\cscui.dll

-[CACHE]C:\WINDOWS\system32\xpsp2res.dll

-[CACHE]C:\WINDOWS\system32\NTMARTA.DLL

-[CACHE]C:\WINDOWS\system32\WLDAP32.dll

-[CACHE]C:\WINDOWS\system32\wdmaud.drv

-[CACHE]C:\WINDOWS\system32\msacm32.drv

-[CACHE]C:\WINDOWS\system32\MSACM32.dll

-[CACHE]C:\WINDOWS\system32\midimap.dll

-[CACHE]C:\WINDOWS\system32\COMRes.dll

-[CACHE]C:\WINDOWS\system32\OLEAUT32.dll

-[CACHE]C:\WINDOWS\system32\CLBCATQ.DLL

Page 233: Prev

-[CACHE]C:\Program Files\Lenovo\HOTKEY\notifyf2.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemprox.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemcomn.dll

-[CACHE]C:\WINDOWS\system32\wbem\wbemsvc.dll

-[CACHE]C:\WINDOWS\system32\wbem\fastprox.dll

-[CACHE]C:\WINDOWS\system32\MSVCP60.dll

-[CACHE]C:\WINDOWS\system32\NTDSAPI.dll

-[CACHE]C:\WINDOWS\system32\DNSAPI.dll

csrss.exe:836

-[CACHE]C:\WINDOWS\system32\ntdll.dll

-[CACHE]C:\WINDOWS\system32\GDI32.dll

-[CACHE]C:\WINDOWS\system32\KERNEL32.dll

-[CACHE]C:\WINDOWS\system32\USER32.dll

-[CACHE]C:\WINDOWS\system32\LPK.DLL

-[CACHE]C:\WINDOWS\system32\USP10.dll

-[CACHE]C:\WINDOWS\system32\ADVAPI32.dll

-[CACHE]C:\WINDOWS\system32\RPCRT4.dll

-[CACHE]C:\WINDOWS\system32\Secur32.dll

-[CACHE]C:\WINDOWS\system32\sxs.dll

-[CACHE]C:\WINDOWS\system32\Apphelp.dll

-[CACHE]C:\WINDOWS\system32\VERSION.dll

smss.exe:780

-[CACHE]C:\WINDOWS\system32\ntdll.dll

Page 234: Prev

-------Process Tree--------

(4)System

(780)smss.exe

(836)csrss.exe

(864)winlogon.exe

(908)services.exe

(1076)ibmpmsvc.exe

(1108)ati2evxx.exe

(1136)svchost.exe

(2160)wmiprvse.exe

(360)igfxsrvc.exe

(4800)wmpenc.exe

(1216)svchost.exe

(1308)svchost.exe

(1336)btwdins.exe

(1388)svchost.exe

(1700)S24EvMon.exe

(1740)svchost.exe

(1804)svchost.exe

(1976)ccSetMgr.exe

(2024)ccEvtMgr.exe

(280)ccProxy.exe

(320)ISSVC.exe

(464)SNDSrvc.exe

(676)spoolsv.exe

Page 235: Prev

(3228)svchost.exe

(3448)TPHKSVC.exe

(3880)AcPrfMgrSvc.exe

(3964)acs.exe

(4076)CDSWinSrv.exe

(2772)cmd.exe

(1852)java.exe

(4088)DefWatch.exe

(2448)issimsvc.exe

(2632)jqs.exe

(3096)nsd.exe

(2468)NetCfgSv.EXE

(4032)RegSrvc.exe

(356)SavRoam.exe

(2564)sftvsa.exe

(2664)svchost.exe

(2776)Rtvscan.exe

(3004)SymSPort.exe

(3008)TPHDEXLG.exe

(1944)TpKmpSvc.exe

(3828)ldlcserv.exe

(4368)alg.exe

(4616)AcSvc.exe

(6060)SvcGuiHlpr.exe

(920)lsass.exe

Page 236: Prev

(1380)ati2evxx.exe

(1836)explorer.exe

(572)tpam.exe

(812)ccApp.exe

(1180)VPTray.exe

(1592)smax4pnp.exe

(1604)SynTPLpr.exe

(1960)SynTPEnh.exe

(2080)TPOSDSVC.exe

(2168)TPONSCR.exe

(2224)TpScrex.exe

(2164)TpShocks.exe

(2288)pmonmh.exe

(2372)isamtray.exe

(2544)ACTray.exe

(2704)ctfmon.exe

(2816)FClock.exe

(3332)wweb32.exe

(3384)ObjectDock.exe

(5912)AvaFind.EXE

(4892)wmplayer.exe

(4412)POWERPNT.EXE

(1164)SICWin.exe

(5736)Sep_SupportTool.exe

(2812)ST_Gui.exe

Page 237: Prev

(3644)PCS_AGNT.EXE

+-----------------------------------------------

|Windows Services

+-----------------------------------------------

Service Name Display Name State Startup Type Command Line

AcPrfMgrSvc Ac Profile Manager Service RUNNING AUTOMATIC [CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcPrfMgrSvc.exe

acs ACU Configuration Service RUNNING AUTOMATIC [FLOCK]system32\acs.exe

AcSvc Access Connections Main Service RUNNING AUTOMATIC [CACHE]C:\Program Files\ThinkPad\ConnectUtilities\AcSvc.exe

Alerter Alerter STOPPED DISABLED [CACHE]C:\WINDOWS\system32\svchost.exe -k LocalService

ALG Application Layer Gateway Service RUNNING DEMAND_START [CACHE]C:\WINDOWS\System32\alg.exe

AppMgmt Application Management STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

AppnNode AppnNode STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\Drivers\appnnode.exe

ArtourService Mobility Client STOPPED DEMAND_START [CACHE]"C:\Program Files\IBM\Mobility Client\artsvc.exe"

artstartsvc Mobility Client Administration Service STOPPED AUTOMATIC [CACHE]"C:\Program Files\IBM\Mobility Client\artstartsvc.exe"

aspnet_state ASP.NET State Service STOPPED DEMAND_START [CACHE]C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe

Ati HotKey Poller Ati HotKey Poller RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\Ati2evxx.exe

Page 238: Prev

AudioSrv Windows Audio RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

BITS Background Intelligent Transfer Service RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

Browser Computer Browser RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

btwdins Bluetooth Service RUNNING AUTOMATIC [CACHE]C:\Program Files\ThinkPad\Bluetooth Software\bin\btwdins.exe

ccEvtMgr Symantec Event Manager RUNNING AUTOMATIC [CACHE]"C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe"

ccProxy Symantec Network Proxy RUNNING AUTOMATIC [CACHE]"C:\Program Files\Common Files\Symantec Shared\ccProxy.exe"

ccSetMgr Symantec Settings Manager RUNNING AUTOMATIC [CACHE]"C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe"

CiSvc Indexing Service STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\cisvc.exe

ClipSrv ClipBook STOPPED DISABLED [CACHE]C:\WINDOWS\system32\clipsrv.exe

clr_optimization_v2.0.50727_32 .NET Runtime Optimization Service v2.0.50727_X86 STOPPED DEMAND_START [CACHE]C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

COMSysApp COM+ System Application STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}

CryptSvc Cryptographic Services RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

cvhsvc Client Virtualization Handler STOPPED AUTOMATIC [CACHE]"C:\Program Files\Common Files\Microsoft Shared\Virtualization Handler\CVHSVC.EXE"

DCDClient-ISSI IBM DCD Standard Client (DCDClient-ISSI) RUNNING AUTOMATIC [CACHE]C:\Program Files\IBM\tivoli\dcd\client\ISSI\cds\CDSWinSrv.exe

DcomLaunch DCOM Server Process Launcher RUNNING AUTOMATIC C:\WINDOWS\system32\svchost -k DcomLaunch

Page 239: Prev

DefWatch Symantec AntiVirus Definition Watcher RUNNING AUTOMATIC [CACHE]"C:\Program Files\Symantec Client Security\Symantec AntiVirus\DefWatch.exe"

Dhcp DHCP Client RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

dmadmin Logical Disk Manager Administrative Service STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\dmadmin.exe /com

dmserver Logical Disk Manager RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

Dnscache DNS Client RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k NetworkService

Dot3svc Wired AutoConfig STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k dot3svc

EapHost Extensible Authentication Protocol Service STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k eapsvcs

ERSvc Error Reporting Service STOPPED DISABLED [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

Eventlog Event Log RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\services.exe

EventSystem COM+ Event System RUNNING DEMAND_START [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

EvtEng Intel(R) PROSet/Wireless Event Log STOPPED AUTOMATIC [CACHE]C:\Program Files\Intel\WiFi\bin\EvtEng.exe

FastUserSwitchingCompatibility Fast User Switching Compatibility STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

FontCache3.0.0.0 Windows Presentation Foundation Font Cache 3.0.0.0 STOPPED DEMAND_START [CACHE]c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe

helpsvc Help and Support RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

HidServ Human Interface Device Access STOPPED DISABLED [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

Page 240: Prev

hkmsvc Health Key and Certificate Management Service STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

HTTPFilter HTTP SSL STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k HTTPFilter

IBMPMSVC ThinkPad PM Service RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\ibmpmsvc.exe

IDriverT InstallDriver Table Manager STOPPED DEMAND_START [CACHE]"C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"

idsvc Windows CardSpace STOPPED DEMAND_START [CACHE]"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"

ImapiService IMAPI CD-Burning COM Service STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\imapi.exe

Irmon Infrared Monitor RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

ISAMsmt ISAM SMT Service STOPPED AUTOMATIC [FMISS]C:\Program Files\C4ebreg\isamsmt.exe

ISAMSvc IBM Standard Asset Manager Service STOPPED AUTOMATIC [CACHE]"C:\Program Files\c4ebreg\c4ebreg.exe"

ISSIMon ISSI RUNNING AUTOMATIC [CACHE]"c:\sdwork\issimsvc.exe"

ISSVC IS Service RUNNING AUTOMATIC [CACHE]"C:\Program Files\Symantec Client Security\Symantec Client Firewall\ISSVC.exe"

JavaQuickStarterService Java Quick Starter RUNNING AUTOMATIC [CACHE]"C:\Program Files\IBM\Java60\jre\bin\jqs.exe" -service -config "C:\Program Files\IBM\Java60\jre\lib\deploy\jqs\jqs.conf"

lanmanserver Server RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

lanmanworkstation Workstation RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

ldlcserv IBM Enterprise Extender RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\Drivers\ldlcserv.exe

Page 241: Prev

LENOVO.MICMUTE Lenovo Microphone Mute STOPPED AUTOMATIC [CACHE]C:\Program Files\LENOVO\HOTKEY\MICMUTE.exe

LiveUpdate LiveUpdate STOPPED DEMAND_START [CACHE]"C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"

LmHosts TCP/IP NetBIOS Helper RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k LocalService

Lotus Notes Diagnostics Lotus Notes Diagnostics RUNNING AUTOMATIC [CACHE]c:\notes\nsd.exe -svcinvoke -ini "c:\notes\notes.ini"

Messenger Messenger STOPPED DISABLED [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

mnmsrvc NetMeeting Remote Desktop Sharing STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\mnmsrvc.exe

MSDTC Distributed Transaction Coordinator STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\msdtc.exe

MSIServer Windows Installer STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\msiexec.exe /V

Multi-user Cleanup Service Multi-user Cleanup Service STOPPED AUTOMATIC [CACHE]c:\notes\ntmulti.exe

MyHelp My Help STOPPED AUTOMATIC [FLOCK]C:\Program Files\IBM\My Help\plugins\com.ibm.myhelp.installer\service\MyHelpService.exe

napagent Network Access Protection Agent STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

NetCfgSvr Network Configuration Service RUNNING AUTOMATIC [CACHE]C:\Program Files\AT&T Network Client\NetCfgSv.EXE

NetDDE Network DDE STOPPED DISABLED [CACHE]C:\WINDOWS\system32\netdde.exe

NetDDEdsdm Network DDE DSDM STOPPED DISABLED [CACHE]C:\WINDOWS\system32\netdde.exe

Netlogon Net Logon STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\lsass.exe

Netman Network Connections RUNNING DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

Page 242: Prev

NetTcpPortSharing Net.Tcp Port Sharing Service STOPPED DISABLED [CACHE]"C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"

Nla Network Location Awareness (NLA) RUNNING DEMAND_START [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

NtLmSsp NT LM Security Support Provider STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\lsass.exe

NtmsSvc Removable Storage STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

ose Office Source Engine STOPPED DEMAND_START [CACHE]"C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"

osppsvc Office Software Protection Platform STOPPED DEMAND_START [CACHE]"C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE"

PlugPlay Plug and Play RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\services.exe

PolicyAgent IPSEC Services RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\lsass.exe

ProtectedStorage Protected Storage RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\lsass.exe

prwnys Shell Universal STOPPED AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

RasAuto Remote Access Auto Connection Manager STOPPED DISABLED [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

RasMan Remote Access Connection Manager RUNNING DEMAND_START [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

RDSessMgr Remote Desktop Help Session Manager STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\sessmgr.exe

RegSrvc Intel(R) PROSet/Wireless Registry Service RUNNING AUTOMATIC [CACHE]C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe

RemoteAccess Routing and Remote Access STOPPED DISABLED [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

Page 243: Prev

RemoteRegistry Remote Registry RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k LocalService

rpcapd Remote Packet Capture Protocol v.0 (experimental) STOPPED DEMAND_START [CACHE]"C:\Program Files\WinPcap\rpcapd.exe" -d -f "C:\Program Files\WinPcap\rpcapd.ini"

RpcLocator Remote Procedure Call (RPC) Locator STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\locator.exe

RpcSs Remote Procedure Call (RPC) RUNNING AUTOMATIC C:\WINDOWS\system32\svchost -k rpcss

RSVP QoS RSVP STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\rsvp.exe

S24EventMonitor Intel(R) PROSet/Wireless WiFi Service RUNNING AUTOMATIC [CACHE]C:\Program Files\Intel\WiFi\bin\S24EvMon.exe

SamSs Security Accounts Manager RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\lsass.exe

SavRoam SavRoam RUNNING AUTOMATIC [CACHE]"c:\Program Files\Symantec Client Security\Symantec AntiVirus\SavRoam.exe"

SCardSvr Smart Card STOPPED DISABLED [CACHE]C:\WINDOWS\System32\SCardSvr.exe

Schedule Task Scheduler RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

seclogon Secondary Logon RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

SENS System Event Notification RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

ServiceLayer ServiceLayer STOPPED DEMAND_START [CACHE]"C:\Program Files\PC Connectivity Solution\ServiceLayer.exe"

sftlist Application Virtualization Client STOPPED AUTOMATIC [CACHE]"C:\Program Files\Microsoft Application Virtualization Client\sftlist.exe"

sftvsa Application Virtualization Service Agent RUNNING DEMAND_START [CACHE]"C:\Program Files\Microsoft Application Virtualization Client\sftvsa.exe"

Page 244: Prev

SharedAccess Windows Firewall/Internet Connection Sharing (ICS) RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

ShellHWDetection Shell Hardware Detection RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

SNDSrvc Symantec Network Drivers Service RUNNING AUTOMATIC [CACHE]"C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe"

SPBBCSvc Symantec SPBBCSvc STOPPED DEMAND_START [CACHE]"C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe"

Spooler Print Spooler RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\spoolsv.exe

srservice System Restore Service RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

SSDPSRV SSDP Discovery Service STOPPED DISABLED [CACHE]C:\WINDOWS\system32\svchost.exe -k LocalService

stisvc Windows Image Acquisition (WIA) RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k imgsvc

SwPrv MS Software Shadow Copy Provider STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\dllhost.exe /Processid:{70BEF680-FB0F-4516-A343-97C83A5A78F6}

Symantec AntiVirus Symantec AntiVirus RUNNING AUTOMATIC [CACHE]"C:\Program Files\Symantec Client Security\Symantec AntiVirus\Rtvscan.exe"

SymSecurePort Symantec SecurePort RUNNING AUTOMATIC [CACHE]"C:\Program Files\Symantec Client Security\Symantec Client Firewall\SymSPort.exe"

SysmonLog Performance Logs and Alerts STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\smlogsvc.exe

TapiSrv Telephony RUNNING DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

TermService Terminal Services RUNNING DEMAND_START C:\WINDOWS\System32\svchost -k DComLaunch

Themes Themes RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

Page 245: Prev

TlntSvr Telnet STOPPED DISABLED [CACHE]C:\WINDOWS\system32\tlntsvr.exe

TPHDEXLGSVC ThinkPad HDD APS Logging Service RUNNING AUTOMATIC [FLOCK]System32\TPHDEXLG.exe

TPHKSVC On Screen Display RUNNING AUTOMATIC [CACHE]C:\Program Files\LENOVO\HOTKEY\TPHKSVC.exe

TpKmpSVC IBM KCU Service RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\TpKmpSVC.exe

TrcBoot IBM Trace Facility STOPPED AUTOMATIC [CACHE]C:\WINDOWS\system32\Drivers\trcboot.exe

TrkWks Distributed Link Tracking Client RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

upnphost Universal Plug and Play Device Host STOPPED DISABLED [CACHE]C:\WINDOWS\system32\svchost.exe -k LocalService

UPS Uninterruptible Power Supply STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\ups.exe

VSS Volume Shadow Copy STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\vssvc.exe

W32Time Windows Time RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

WebClient WebClient RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k LocalService

winmgmt Windows Management Instrumentation RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

WmdmPmSN Portable Media Serial Number Service STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

Wmi Windows Management Instrumentation Driver Extensions STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

WmiApSrv WMI Performance Adapter STOPPED DEMAND_START [CACHE]C:\WINDOWS\system32\wbem\wmiapsrv.exe

WMPNetworkSvc Windows Media Player Network Sharing Service STOPPED DEMAND_START [CACHE]"C:\Program Files\Windows Media Player\WMPNetwk.exe"

Page 246: Prev

wscsvc Security Center RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

wuauserv Automatic Updates RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k netsvcs

WudfSvc Windows Driver Foundation - User-mode Driver Framework RUNNING AUTOMATIC [CACHE]C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup

WZCSVC Wireless Zero Configuration RUNNING AUTOMATIC [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

xmlprov Network Provisioning Service STOPPED DEMAND_START [CACHE]C:\WINDOWS\System32\svchost.exe -k netsvcs

+-----------------------------------------------

|Application Uninstall Information

+-----------------------------------------------

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\504244733D18C8F63FF584AEB290E3904E791693

UninstallString = [CHECK]C:\PROGRA~1\DIFX\B4723E9A0713E5B1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\pccsmcfd_A3B3916E5D8138F59EE218321B27B044D3B18294\pccsmcfd.inf

DisplayName = Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)

DisplayVersion = 08/22/2008 7.0.0.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX

DisplayName = Adobe Flash Player 10 ActiveX

DisplayVersion = 10.1.102.64

UninstallString = [CHECK]C:\WINDOWS\system32\Macromed\Flash\FlashUtil10l_ActiveX.exe -maintain activex

Page 247: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player Plugin

DisplayName = Adobe Flash Player 10 Plugin

DisplayVersion = 10.1.102.64

UninstallString = [CHECK]C:\WINDOWS\system32\Macromed\Flash\FlashUtil10l_Plugin.exe -maintain plugin

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Photoshop 7.0

UninstallString = C:\WINDOWS\ISUNINST.EXE -f"C:\Program Files\Adobe\Photoshop 7.0\Uninst.isu" -c"C:\Program Files\Adobe\Photoshop 7.0\Uninst.dll"

DisplayName = Adobe Photoshop 7.0

DisplayVersion = 7.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ARTourCLI

UninstallString = [CHECK]C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{73F1BDB7-11E1-11D5-9DC6-00C04F2FC33B} /l1033 AnyText

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ATI Display Driver

DisplayName = ATI Display Driver

UninstallString = [CHECK]rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean

DisplayVersion = 8.293.1-060913a-036475C-Lenovo

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CiscoSecure Authentication Agent

Page 248: Prev

UninstallString = [CHECK]C:\WINDOWS\aaremove.exe

DisplayName = CiscoSecure Authentication Agent

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10140588

DisplayName = ThinkPad Modem

UninstallString = [CHECK]C:\Program Files\CONEXANT\CNXT_MODEM_HDAUDIO_VEN_14F1&DEV_2BFA&SUBSYS_10140588\HXFSETUP.EXE -U -ITkp0588p.inf

DisplayVersion = 7.39.00.50

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Convert Excel to HTML_is1

DisplayName = Convert Excel to HTML V1.21

UninstallString = [CHECK]"C:\Program Files\Convert Excel to HTML\unins000.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\dbd22105c7f7ea1354d4a7606bd7cfdf

DisplayName = Web-based System Manager Remote Client

UninstallString = [CHECK]C:\Program Files\websm\_uninst\uninstall.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\E8A6D621B6D3FC5D43C68C549D959DE76EEF5D84

UninstallString = [CHECK]C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokia_blue_C08496D7A0050438DFE13C55799AE2D4157A8E7A\nokia_bluetooth.inf

DisplayName = Windows Driver Package - Nokia Modem (06/01/2009 4.1)

DisplayVersion = 06/01/2009 4.1

Page 249: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\F779F5541ABD99C95C03B0FD5E3C058B22DA0FF7

UninstallString = [CACHE]C:\PROGRA~1\DIFX\270581355A767BF1\dpinst.exe /u C:\WINDOWS\system32\DRVSTORE\nokbtmdm_9C48E34C57B7D4AAE5FFF5FB9B476B538394FD30\nokbtmdm.inf

DisplayName = Windows Driver Package - Nokia Modem (06/01/2009 7.01.0.3)

DisplayVersion = 06/01/2009 7.01.0.3

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\fe29d7d6aaf324b1964e31be6d7ce1981815068445

DisplayName = IBM Dynamic Content Delivery (DCDClient-ISSI)

UninstallString = [CHECK]C:\Program Files\IBM\tivoli\dcd\client\ISSI\_uninst\uninstaller.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FileZilla Client

UninstallString = [CHECK]C:\Program Files\FileZilla FTP Client\uninstall.exe

DisplayName = FileZilla Client 3.3.4.1

DisplayVersion = 3.3.4.1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HDMI

DisplayName = Intel(R) Graphics Media Accelerator Driver

UninstallString = [CHECK]C:\WINDOWS\system32\igxpun.exe -uninstall

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Huawei Access Manager

DisplayName = Huawei Access Manager

UninstallString = [CHECK]C:\Program Files\Huawei Access Manager\uninst.exe

Page 250: Prev

DisplayVersion = UTPS_HWEC1260DT05

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IDNMitigationAPIs

DisplayName = Microsoft Internationalized Domain Names Mitigation APIs

UninstallString = [CHECK]"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"

InstallDate = 20101006

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ie7

DisplayName = Windows Internet Explorer 7

UninstallString = [CHECK]"C:\WINDOWS\ie7\spuninst\spuninst.exe"

InstallDate = 20101006

DisplayVersion = 20070813.185237

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{4F3AFB85-B972-4621-AEB6-6C22317E145B}

UninstallString = [CHECK]C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4F3AFB85-B972-4621-AEB6-6C22317E145B} /l1033

DisplayName = IBM 32-bit Runtime Environment for Java 2, v5.0

DisplayVersion = 5.0

InstallDate = 20070222

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{73F1BDB7-11E1-11D5-9DC6-00C04F2FC33B}

UninstallString = [CACHE]C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{73F1BDB7-11E1-11D5-9DC6-00C04F2FC33B} /l1033 AnyText

DisplayName = IBM Mobility Client

Page 251: Prev

InstallDate = 20101213

DisplayVersion = 6.1.10103

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{75E7FEE8-16B1-4B1D-82B4-9594A38EDF76}

UninstallString = [CHECK]"C:\Program Files\InstallShield Installation Information\{75E7FEE8-16B1-4B1D-82B4-9594A38EDF76}\setup.exe" -runfromtemp -l0x0409 -removeonly

DisplayName = IBM 32-bit Runtime Environment for Java v6

DisplayVersion = 6

InstallDate = 20101209

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{E922961C-6DB6-41DE-9FEA-426DF3E9F81C}

UninstallString = [CHECK]C:\PROGRA~1\COMMON~1\INSTAL~1\Driver\7\INTEL3~1\IDriver.exe /M{E922961C-6DB6-41DE-9FEA-426DF3E9F81C} /l1033

DisplayName = IBM 32-bit Runtime Environment for Java 2, v1.4.2

DisplayVersion = 1.4.2

InstallDate = 20101110

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ISSI

DisplayName = IBM Standard Software Installer

UninstallString = [ESKIP]C:\WINDOWS\issiunin.bat

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2079403

DisplayName = Security Update for Windows XP (KB2079403)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe"

Page 252: Prev

InstallDate = 20100902

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2115168

DisplayName = Security Update for Windows XP (KB2115168)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2115168$\spuninst\spuninst.exe"

InstallDate = 20100902

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2121546

DisplayName = Security Update for Windows XP (KB2121546)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2141007

DisplayName = Update for Windows XP (KB2141007)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2141007$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2158563

DisplayName = Hotfix for Windows XP (KB2158563)

Page 253: Prev

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2158563$\spuninst\spuninst.exe"

InstallDate = 20101103

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2160329

DisplayName = Security Update for Windows XP (KB2160329)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2160329$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2183461

DisplayName = Security Update for Windows XP (KB2183461)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2183461$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2183461-IE7

DisplayName = Security Update for Windows Internet Explorer 7 (KB2183461)

UninstallString = [CHECK]"C:\WINDOWS\ie7updates\KB2183461-IE7\spuninst\spuninst.exe"

InstallDate = 20101006

DisplayVersion = 1

Page 254: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2229593

DisplayName = Security Update for Windows XP (KB2229593)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2229593$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2259922

DisplayName = Security Update for Windows XP (KB2259922)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2259922$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2279986

DisplayName = Security Update for Windows XP (KB2279986)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2279986$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2286198

DisplayName = Security Update for Windows XP (KB2286198)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2286198$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

Page 255: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2296011

DisplayName = Security Update for Windows XP (KB2296011)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2296011$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2296199

DisplayName = Security Update for Windows XP (KB2296199)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2296199$\spuninst\spuninst.exe"

InstallDate = 20101215

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2345886

DisplayName = Update for Windows XP (KB2345886)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2345886$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2347290

DisplayName = Security Update for Windows XP (KB2347290)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2347290$\spuninst\spuninst.exe"

InstallDate = 20100924

Page 256: Prev

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2360131-IE7

DisplayName = Security Update for Windows Internet Explorer 7 (KB2360131)

UninstallString = [CHECK]"C:\WINDOWS\ie7updates\KB2360131-IE7\spuninst\spuninst.exe"

InstallDate = 20101017

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2360937

DisplayName = Security Update for Windows XP (KB2360937)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2360937$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2378111_WM9

DisplayName = Security Update for Windows Media Player (KB2378111)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2378111_WM9$\spuninst\spuninst.exe"

InstallDate = 20101104

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2387149

DisplayName = Security Update for Windows XP (KB2387149)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2387149$\spuninst\spuninst.exe"

Page 257: Prev

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2416400-IE7

DisplayName = Security Update for Windows Internet Explorer 7 (KB2416400)

UninstallString = [CHECK]"C:\WINDOWS\ie7updates\KB2416400-IE7\spuninst\spuninst.exe"

InstallDate = 20101215

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2419632

DisplayName = Security Update for Windows XP (KB2419632)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2419632$\spuninst\spuninst.exe"

InstallDate = 20110113

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2423089

DisplayName = Security Update for Windows XP (KB2423089)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2423089$\spuninst\spuninst.exe"

InstallDate = 20101215

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2436673

DisplayName = Security Update for Windows XP (KB2436673)

Page 258: Prev

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2436673$\spuninst\spuninst.exe"

InstallDate = 20101215

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2440591

DisplayName = Security Update for Windows XP (KB2440591)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2440591$\spuninst\spuninst.exe"

InstallDate = 20101215

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2443105

DisplayName = Security Update for Windows XP (KB2443105)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2443105$\spuninst\spuninst.exe"

InstallDate = 20101215

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2443685

DisplayName = Hotfix for Windows XP (KB2443685)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2443685$\spuninst\spuninst.exe"

InstallDate = 20101215

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB2467659

Page 259: Prev

DisplayName = Update for Windows XP (KB2467659)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB2467659$\spuninst\spuninst.exe"

InstallDate = 20101215

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB892130

DisplayName = Windows Genuine Advantage Validation Tool (KB892130)

UninstallString =

InstallDate = 20070906

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB911564

DisplayName = Security Update for Windows Media Player (KB911564)

InstallDate = 20060222

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB923561

DisplayName = Security Update for Windows XP (KB923561)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB923689

DisplayName = Security Update for Windows XP (KB923689)

InstallDate = 20070220

Page 260: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB925398_WMP64

DisplayName = Security Update for Windows Media Player 6.4 (KB925398)

InstallDate = 20070220

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB931906

DisplayName = Security Update for CAPICOM (KB931906)

DisplayVersion = 2.1.0.2

UninstallString = [CACHE]MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB932471.T301_380ToU433_380

UninstallString = [CACHE]C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {ECD292A0-0347-4244-8C24-5DBCE990FB40} /package {BAF78226-3200-4DB4-BE33-4D922A799840}

DisplayVersion = 1

DisplayName = Hotfix for Microsoft .NET Framework 3.0 (KB932471)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB936782_WMP9

DisplayName = Security Update for Windows Media Player 9 (KB936782)

InstallDate = 20070905

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB938127-v2-IE7

DisplayName = Security Update for Windows Internet Explorer 7 (KB938127-v2)

UninstallString = [CHECK]"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"

InstallDate = 20101104

Page 261: Prev

DisplayVersion = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB938464

DisplayName = Security Update for Windows XP (KB938464)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB946648

DisplayName = Security Update for Windows XP (KB946648)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB950759

DisplayName = Security Update for Windows XP (KB950759)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB950762

DisplayName = Security Update for Windows XP (KB950762)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"

Page 262: Prev

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB950974

DisplayName = Security Update for Windows XP (KB950974)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB951072-v2

DisplayName = Update for Windows XP (KB951072-v2)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"

InstallDate = 20090505

DisplayVersion = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB951376-v2

DisplayName = Security Update for Windows XP (KB951376-v2)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB951698

Page 263: Prev

DisplayName = Security Update for Windows XP (KB951698)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB951748

DisplayName = Security Update for Windows XP (KB951748)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB951978

DisplayName = Update for Windows XP (KB951978)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB952004

DisplayName = Security Update for Windows XP (KB952004)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

Page 264: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB952011

DisplayName = Windows Feature Pack for Storage (32-bit) - IMAPI update for Blu-Ray

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB952011$\spuninst\spuninst.exe"

InstallDate = 20101117

DisplayVersion = 1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB952069_WM9

DisplayName = Security Update for Windows Media Player (KB952069)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"

InstallDate = 20090505

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB952287

DisplayName = Hotfix for Windows XP (KB952287)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB952954

DisplayName = Security Update for Windows XP (KB952954)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

Page 265: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB953838

DisplayName = Security Update for Windows XP (KB953838)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB954155_WM9

DisplayName = Security Update for Windows Media Player (KB954155)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB954155_WM9$\spuninst\spuninst.exe"

InstallDate = 20100823

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB954459

DisplayName = Security Update for Windows XP (KB954459)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB954550-v5

DisplayName = Hotfix for Windows XP (KB954550-v5)

UninstallString =

InstallDate = 20101106

Page 266: Prev

DisplayVersion = 5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB954600

DisplayName = Security Update for Windows XP (KB954600)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB955069

DisplayName = Security Update for Windows XP (KB955069)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB955759

DisplayName = Update for Windows XP (KB955759)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB955759$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB955839

DisplayName = Update for Windows XP (KB955839)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"

Page 267: Prev

InstallDate = 20090513

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB956390

DisplayName = Security Update for Windows XP (KB956390)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB956390$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB956572

DisplayName = Security Update for Windows XP (KB956572)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB956744

DisplayName = Security Update for Windows XP (KB956744)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB956744$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB956802

DisplayName = Security Update for Windows XP (KB956802)

Page 268: Prev

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB956803

DisplayName = Security Update for Windows XP (KB956803)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB956844

DisplayName = Security Update for Windows XP (KB956844)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB956844$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB958215

DisplayName = Security Update for Windows XP (KB958215)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB958215$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB958644

Page 269: Prev

DisplayName = Security Update for Windows XP (KB958644)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB958687

DisplayName = Security Update for Windows XP (KB958687)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB958690

DisplayName = Security Update for Windows XP (KB958690)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB958869

DisplayName = Security Update for Windows XP (KB958869)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB958869$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

Page 270: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB959426

DisplayName = Security Update for Windows XP (KB959426)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB960714

DisplayName = Security Update for Windows XP (KB960714)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB960714$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB960803

DisplayName = Security Update for Windows XP (KB960803)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB960859

DisplayName = Security Update for Windows XP (KB960859)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB960859$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

Page 271: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB961118

DisplayName = Hotfix for Windows XP (KB961118)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB961118$\spuninst\spuninst.exe"

InstallDate = 20101111

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB961373

DisplayName = Security Update for Windows XP (KB961373)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB961501

DisplayName = Security Update for Windows XP (KB961501)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB961501$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB963027

DisplayName = Security Update for Windows XP (KB963027)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB963027$\spuninst\spuninst.exe"

InstallDate = 20100818

Page 272: Prev

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB967715

DisplayName = Update for Windows XP (KB967715)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB968389

DisplayName = Update for Windows XP (KB968389)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB968389$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB968816_WM9

DisplayName = Security Update for Windows Media Player (KB968816)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB968816_WM9$\spuninst\spuninst.exe"

InstallDate = 20100823

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB969059

DisplayName = Security Update for Windows XP (KB969059)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB969059$\spuninst\spuninst.exe"

Page 273: Prev

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB969947

DisplayName = Security Update for Windows XP (KB969947)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB969947$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB970430

DisplayName = Security Update for Windows XP (KB970430)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB970430$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB971468

DisplayName = Security Update for Windows XP (KB971468)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB971468$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB971557

DisplayName = Security Update for Windows XP (KB971557)

Page 274: Prev

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB971557$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB971657

DisplayName = Security Update for Windows XP (KB971657)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB971657$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB971737

DisplayName = Update for Windows XP (KB971737)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB971737$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB971961

DisplayName = Security Update for Windows XP (KB971961)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB971961$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB972270

Page 275: Prev

DisplayName = Security Update for Windows XP (KB972270)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB972270$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB973354

DisplayName = Security Update for Windows XP (KB973354)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB973354$\spuninst\spuninst.exe"

InstallDate = 20100902

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB973507

DisplayName = Security Update for Windows XP (KB973507)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB973525

DisplayName = Security Update for Windows XP (KB973525)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB973525$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

Page 276: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB973540_WM9

DisplayName = Security Update for Windows Media Player (KB973540)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe"

InstallDate = 20100823

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB973687

DisplayName = Update for Windows XP (KB973687)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB973687$\spuninst\spuninst.exe"

InstallDate = 20101215

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB973815

DisplayName = Update for Windows XP (KB973815)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB973815$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB973869

DisplayName = Security Update for Windows XP (KB973869)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB973869$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

Page 277: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB973904

DisplayName = Security Update for Windows XP (KB973904)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB973904$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB974112

DisplayName = Security Update for Windows XP (KB974112)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB974112$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB974318

DisplayName = Security Update for Windows XP (KB974318)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB974318$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB974392

DisplayName = Security Update for Windows XP (KB974392)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB974392$\spuninst\spuninst.exe"

InstallDate = 20100924

Page 278: Prev

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB974455

DisplayName = Security Update for Windows XP (KB974455)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB974455$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB974571

DisplayName = Security Update for Windows XP (KB974571)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB974571$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB975025

DisplayName = Security Update for Windows XP (KB975025)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB975025$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB975467

DisplayName = Security Update for Windows XP (KB975467)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB975467$\spuninst\spuninst.exe"

Page 279: Prev

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB975558_WM8

DisplayName = Security Update for Windows Media Player (KB975558)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB975558_WM8$\spuninst\spuninst.exe"

InstallDate = 20100924

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB975560

DisplayName = Security Update for Windows XP (KB975560)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB975560$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB975561

DisplayName = Security Update for Windows XP (KB975561)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB975561$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB975562

DisplayName = Security Update for Windows XP (KB975562)

Page 280: Prev

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB975562$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB975713

DisplayName = Security Update for Windows XP (KB975713)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB975713$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB976098-v2

DisplayName = Hotfix for Windows XP (KB976098-v2)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB976098-v2$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB976325

DisplayName = Security Update for Windows XP (KB976325)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB976325$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

Page 281: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB977816

DisplayName = Security Update for Windows XP (KB977816)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB977816$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB977914

DisplayName = Security Update for Windows XP (KB977914)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB977914$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB978037

DisplayName = Security Update for Windows XP (KB978037)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB978037$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB978207

DisplayName = Update for Windows XP (KB978207)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB978207$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

Page 282: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB978251

DisplayName = Security Update for Windows XP (KB978251)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB978251$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB978262

DisplayName = Security Update for Windows XP (KB978262)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB978262$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB978338

DisplayName = Security Update for Windows XP (KB978338)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB978338$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB978542

DisplayName = Security Update for Windows XP (KB978542)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB978542$\spuninst\spuninst.exe"

InstallDate = 20100903

Page 283: Prev

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB978601

DisplayName = Security Update for Windows XP (KB978601)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB978601$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB978695_WM9

DisplayName = Security Update for Windows Media Player (KB978695)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB978695_WM9$\spuninst\spuninst.exe"

InstallDate = 20100823

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB978706

DisplayName = Security Update for Windows XP (KB978706)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB978706$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB979309

DisplayName = Security Update for Windows XP (KB979309)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB979309$\spuninst\spuninst.exe"

Page 284: Prev

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB979402_WM9

DisplayName = Security Update for Windows Media Player (KB979402)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB979402_WM9$\spuninst\spuninst.exe"

InstallDate = 20100823

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB979482

DisplayName = Security Update for Windows XP (KB979482)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB979482$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB979687

DisplayName = Security Update for Windows XP (KB979687)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB979687$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB980182

DisplayName = Update for Windows XP (KB980182)

Page 285: Prev

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB980182$\spuninst\spuninst.exe"

InstallDate = 20100818

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB980195

DisplayName = Security Update for Windows XP (KB980195)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB980195$\spuninst\spuninst.exe"

InstallDate = 20100824

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB980218

DisplayName = Security Update for Windows XP (KB980218)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB980218$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB980232

DisplayName = Security Update for Windows XP (KB980232)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB980232$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB980436

Page 286: Prev

DisplayName = Security Update for Windows XP (KB980436)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB980436$\spuninst\spuninst.exe"

InstallDate = 20100902

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB981322

DisplayName = Security Update for Windows XP (KB981322)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB981322$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB981349

DisplayName = Security Update for Windows XP (KB981349)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB981349$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB981793

DisplayName = Hotfix for Windows XP (KB981793)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB981793$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

Page 287: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB981852

DisplayName = Security Update for Windows XP (KB981852)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB981852$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB981957

DisplayName = Security Update for Windows XP (KB981957)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB981957$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB981997

DisplayName = Security Update for Windows XP (KB981997)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB981997$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB982132

DisplayName = Security Update for Windows XP (KB982132)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB982132$\spuninst\spuninst.exe"

InstallDate = 20101104

DisplayVersion = 1

Page 288: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB982214

DisplayName = Security Update for Windows XP (KB982214)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB982214$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB982381

DisplayName = Security Update for Windows XP (KB982381)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB982381$\spuninst\spuninst.exe"

InstallDate = 20100823

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB982381-IE7

DisplayName = Security Update for Windows Internet Explorer 7 (KB982381)

UninstallString = [CHECK]"C:\WINDOWS\ie7updates\KB982381-IE7\spuninst\spuninst.exe"

InstallDate = 20101006

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB982665

DisplayName = Security Update for Windows XP (KB982665)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB982665$\spuninst\spuninst.exe"

Page 289: Prev

InstallDate = 20100902

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\KB982802

DisplayName = Security Update for Windows XP (KB982802)

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallKB982802$\spuninst\spuninst.exe"

InstallDate = 20100924

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LiveUpdate

UninstallString = [CHECK]"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U

DisplayName = LiveUpdate 3.1 (Symantec Corporation)

DisplayVersion = 3.1.0.90

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\M2416447

DisplayName = Microsoft .NET Framework 1.1 Security Update (KB2416447)

UninstallString = [CHECK]"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M2416447\M2416447Uninstall.msp"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\M979906

DisplayName = Microsoft .NET Framework 1.1 Security Update (KB979906)

UninstallString = [CACHE]"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M979906\M979906Uninstall.msp"

Page 290: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft .NET Framework 1.1 (1033)

UninstallString = [CACHE]msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

DisplayName = Microsoft .NET Framework 1.1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft .NET Framework 3.5 SP1

DisplayName = Microsoft .NET Framework 3.5 SP1

UninstallString = [CHECK]C:\WINDOWS\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Visual J# 2.0 Redistributable Package - SE

DisplayName = Microsoft Visual J# 2.0 Redistributable Package - SE

UninstallString = [CHECK]C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft Visual J# 2.0 Redistributable Package - SE\install.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Mozilla Firefox (3.6.13)

DisplayName = Mozilla Firefox (3.6.13)

DisplayVersion = 3.6.13 (en-US)

UninstallString = [CHECK]C:\Program Files\Mozilla Firefox\uninstall\helper.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MSCompPackV1

DisplayName = Microsoft Compression Client Pack 1.0 for Windows XP

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"

InstallDate = 20101017

Page 291: Prev

DisplayVersion = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\nbi-glassfish-mod-sun-3.0.0.74.2

DisplayName = Sun GlassFish Enterprise Server v3

UninstallString = [CHECK]"C:\Program Files\sges-v3\uninstall.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\nbi-nb-base-6.8.0.0.0

DisplayName = NetBeans IDE 6.8

UninstallString = [CHECK]"C:\Program Files\NetBeans 6.8\uninstall.exe"

DisplayVersion = 6.8

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NLSDownlevelMapping

DisplayName = Microsoft National Language Support Downlevel APIs

UninstallString = [CHECK]"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"

InstallDate = 20101006

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nokia PC Internet Access

UninstallString = [CHECK]C:\Documents and Settings\All Users\Application Data\Installations\{653A52D8-127C-476D-BAD9-27117A3A4959}\Installer.exe

DisplayName = Nokia PC Internet Access

DisplayVersion = 2.0.1.3

Page 292: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Nokia PC Suite

UninstallString = [CHECK]C:\Documents and Settings\All Users\Application Data\Installations\{55495E65-7C5B-48E4-BC7D-DE54F3DE5ED6}\Nokia_PC_Suite_7_1_30_8_ALL.exe

DisplayName = Nokia PC Suite

DisplayVersion = 7.1.30.8

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Notepad++

DisplayName = Notepad++

UninstallString = [CHECK]C:\Program Files\Notepad++\uninstall.exe

DisplayVersion = 5.6.4

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Office14.Click2Run

DisplayName = Microsoft Office Click-to-Run 2010

DisplayVersion = 14.0.4763.1000

UninstallString = [CHECK]"C:\PROGRA~1\COMMON~1\MICROS~1\VIRTUA~1\CVHBS.EXE" /removeall

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OnScreenDisplay

DisplayName = On Screen Display

UninstallString = [CHECK]rundll32.exe "C:\Program Files\Lenovo\HOTKEY\cleanup.dll",InfUninstall DefaultUninstall.XP 132 C:\Program Files\Lenovo\HOTKEY\tphk_tp.inf

DisplayVersion = 5.32.00

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\P2P GUI

DisplayName = IBM ISMA Peer-To-Peer

Page 293: Prev

UninstallString = rundll32.exe syssetup.dll,SetupInfObjectInstallAction DefaultUninstall 132 C:\WINDOWS\inf\p2pgui.inf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCHealth

UninstallString = rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Pdf995

DisplayName = Pdf995

UninstallString = [CHECK]c:\pdf995\setup.exe uninstall

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Power Management Driver

DisplayName = ThinkPad Power Management Driver

DisplayVersion = 1.60.0.4

UninstallString = RunDll32.exe tpinspm.dll,Uninstall

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Presentation Director

UninstallString = C:\WINDOWS\IsUninst.exe -fC:\PROGRA~1\ThinkPad\UTILIT~1\UNNPDR.isu -c"C:\Program Files\ThinkPad\Utilities\Tpinsnpd.dll"

DisplayVersion = 2.57

DisplayName = ThinkPad Presentation Director

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RealPlayer 12.0

UninstallString = [CHECK]C:\Program Files\Real\RealPlayer\Update\r1puninst.exe RealNetworks|RealPlayer|12.0

Page 294: Prev

DisplayName = RealPlayer

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RecordNow.exe

UninstallString = C:\WINDOWS\system32\\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Snapshot Viewer

DisplayName = Snapshot Viewer

UninstallString = [CHECK]C:\Program Files\Snapshot Viewer\Setup\Setup.exe /T snap90.stf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SynTPDeinstKey

UninstallString = [CHECK]rundll32.exe "C:\Program Files\Synaptics\SynTP\SynISDLL.dll",standAloneUninstall

DisplayVersion = 7.5.17.25

DisplayName = ThinkPad UltraNav Driver

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Tata Photon+

DisplayName = Tata Photon+

UninstallString = [CHECK]C:\Program Files\Tata Photon+\Huawei\uninst.exe

DisplayVersion = 11.030.01.09.628

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ThinkPad FullScreen Magnifier

DisplayVersion = 2.10

Page 295: Prev

DisplayName = ThinkPad FullScreen Magnifier

UninstallString = [CHECK]rundll32.exe "C:\Program Files\Lenovo\ZOOM\cleanup.dll",InfUninstall DefaultUninstall 132 C:\Program Files\Lenovo\Zoom\TpScrex.inf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\VLC media player

DisplayName = VLC media player 1.1.5

UninstallString = [CHECK]C:\Program Files\VideoLAN\VLC\uninstall.exe

DisplayVersion = 1.1.5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wdf01007

DisplayName = Microsoft Kernel-Mode Driver Framework Feature Pack 1.7

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallWdf01007$\spuninst\spuninst.exe"

InstallDate = 20101201

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WGA

DisplayName = Windows Genuine Advantage Validation Tool (KB892130)

UninstallString =

InstallDate = 20060322

DisplayVersion = 1.7.0059.1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WgaNotify

DisplayName = Windows Genuine Advantage Notifications (KB905474)

UninstallString =

InstallDate = 20100925

DisplayVersion = 1.9.0040.0

Page 296: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Media Format Runtime

DisplayName = Windows Media Format 11 runtime

UninstallString = [CHECK]"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows Media Player

DisplayName = Windows Media Player 11

UninstallString = [CHECK]"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Windows XP Service Pack

DisplayName = Windows XP Service Pack 3

UninstallString =

InstallDate = 20100818

DisplayVersion = 20080414.031525

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinPcapInst

DisplayName = WinPcap 4.1.2

UninstallString = [CHECK]C:\Program Files\WinPcap\uninstall.exe

DisplayVersion = 4.1.0.2001

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WinRAR archiver

DisplayName = WinRAR archiver

Page 297: Prev

UninstallString = [CHECK]C:\Program Files\WinRAR\uninstall.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WMFDist11

DisplayName = Windows Media Format 11 runtime

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"

InstallDate = 20101017

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wmp11

DisplayName = Windows Media Player 11

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"

InstallDate = 20101017

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WordWeb

UninstallString = [CHECK]C:\Program Files\WordWeb\uninst.exe

DisplayName = WordWeb

DisplayVersion = 5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Workstation Security Tool_is1

DisplayName = Workstation Security Tool 2.5

UninstallString = [CHECK]"C:\Program Files\wst\unins000.exe"

InstallDate = 20101223

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Wudf01007

DisplayName = Microsoft User-Mode Driver Framework Feature Pack 1.7

Page 298: Prev

UninstallString = [CHECK]"C:\WINDOWS\$NtUninstallWudf01007$\spuninst\spuninst.exe"

InstallDate = 20101201

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\XpsEPSC

DisplayName = XML Paper Specification Shared Components Pack 1.0

UninstallString =

InstallDate = 20070220

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Yahoo! Messenger

DisplayName = Yahoo! Messenger

UninstallString = [CHECK]C:\PROGRA~1\Yahoo!\MESSEN~1\UNWISE.EXE /U C:\PROGRA~1\Yahoo!\MESSEN~1\INSTALL.LOG

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}

DisplayVersion = 10.5.3.0

InstallDate = 20101228

UninstallString = [CACHE]MsiExec.exe /X{00BA866C-F2A2-4BB9-A308-3DFA695B6F7C}

DisplayName = Java DB 10.5.3.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0698CECB-9072-47B1-AEA1-94CA350989B8}

DisplayVersion = 10.1.5000.5

InstallDate = 20070305

UninstallString = [CACHE]MsiExec.exe /I{0698CECB-9072-47B1-AEA1-94CA350989B8}

Page 299: Prev

DisplayName = Symantec Client Security

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0C973594-7DDF-4BD0-84ED-3517F7622037}

DisplayVersion = 9.23.3.0

InstallDate = 20101201

UninstallString = [CACHE]MsiExec.exe /I{0C973594-7DDF-4BD0-84ED-3517F7622037}

DisplayName = PC Connectivity Solution

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

DisplayVersion = 2.1.0.2

InstallDate = 20070905

UninstallString = [CACHE]MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}

DisplayName = Security Update for CAPICOM (KB931906)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}

DisplayVersion = 6.20.1099.0

InstallDate = 20090505

UninstallString = [CACHE]MsiExec.exe /I{1A528690-6A2D-4BC5-B143-8C4AE8D19D96}

DisplayName = MSXML 6 Service Pack 2 (KB954459)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2111B23F-7FDA-4A41-8309-E5A1663CA296}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2111B23F-7FDA-4A41-8309-E5A1663CA296}\setup.exe" -l0x9 anything

Page 300: Prev

DisplayName = ThinkPad Keyboard Customizer Utility

DisplayVersion = 1.3.53.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{212748BB-0DA5-46DE-82A1-403736DC9F27}

DisplayVersion = 1.0.1.0

InstallDate = 20101201

UninstallString = [CACHE]MsiExec.exe /I{212748BB-0DA5-46DE-82A1-403736DC9F27}

DisplayName = MSVC80_x86

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{226b64e8-dc75-4eea-a6c8-abcb496320f2}-Google Talk

DisplayName = Google Talk (remove only)

UninstallString = [CHECK]"C:\Program Files\Google\Google Talk\uninstall.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F83216020FF}

DisplayVersion = 6.0.200

InstallDate = 20100901

UninstallString = [CACHE]MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F83216020FF}

DisplayName = Java(TM) 6 Update 20

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}

DisplayVersion = 1.1.0

InstallDate = 20110104

UninstallString = [CACHE]MsiExec.exe /I{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}

Page 301: Prev

DisplayName = RealUpgrade 1.1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2E21CBDA-1EDF-4C18-A561-DB53D683229F}

DisplayVersion = 6.9.0.3006

InstallDate = 20080725

UninstallString = [CACHE]MsiExec.exe /I{2E21CBDA-1EDF-4C18-A561-DB53D683229F}

DisplayName = AT&T Network Client

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{32A3A4F4-B792-11D6-A78A-00B0D0160180}

DisplayVersion = 1.6.0.180

InstallDate = 20101228

UninstallString = [CACHE]MsiExec.exe /I{32A3A4F4-B792-11D6-A78A-00B0D0160180}

DisplayName = Java(TM) SE Development Kit 6 Update 18

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}

DisplayVersion = 9.50.7523

InstallDate = 20050404

DisplayName = WebFldrs XP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}

DisplayVersion = 4.20.9841.0

InstallDate = 20070905

UninstallString = [CACHE]MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}

Page 302: Prev

DisplayName = MSXML 4.0 SP2 (KB927978)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{37C22E24-B794-4265-A38E-711BBF1C637A}

DisplayVersion = 5.7.0400

InstallDate = 20060718

UninstallString = [CACHE]MsiExec.exe /I{37C22E24-B794-4265-A38E-711BBF1C637A}

DisplayName = IBM Personal Communications

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{43507E5B-94A0-4E56-9C7B-FAAAFBDB5904}

DisplayVersion = 13.00.0000

InstallDate = 20100907

DisplayName = Intel(R) PROSet/Wireless WiFi Software

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{43DCF766-6838-4F9A-8C91-D92DA586DFA7}

DisplayVersion = 1.5.2315.3

InstallDate = 20050404

UninstallString = [CACHE]MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}

DisplayName = Microsoft Windows Journal Viewer

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{46A84694-59EC-48F0-964C-7E76E9F8A2ED}

DisplayVersion = 1.54

InstallDate = 20080725

UninstallString = [CACHE]MsiExec.exe /X{46A84694-59EC-48F0-964C-7E76E9F8A2ED}

Page 303: Prev

DisplayName = ThinkVantage Active Protection System

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{48FCFD2C-C07D-4820-9F20-85F7F188A784}

DisplayVersion = 3.8.1.76

InstallDate = 20101004

UninstallString = [CACHE]MsiExec.exe /X{48FCFD2C-C07D-4820-9F20-85F7F188A784}

DisplayName = Avocent Viewer Plugin v3.8.1.76

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{49471DB8-7F3C-42DB-89C2-AC50FA0C5290}

DisplayVersion = 7.1.0

InstallDate = 20101216

UninstallString = [CACHE]MsiExec.exe /I{49471DB8-7F3C-42DB-89C2-AC50FA0C5290}

DisplayName = Camtasia Studio 7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4A03706F-666A-4037-7777-5F2748764D10}

DisplayVersion = 2.0.2.1

InstallDate = 20100901

DisplayName = Java Auto Updater

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4E381AF8-4B14-46C7-941E-8BA5FFA804CF}

DisplayVersion = 1.2.0000

InstallDate = 20101110

UninstallString = [CACHE]MsiExec.exe /I{4E381AF8-4B14-46C7-941E-8BA5FFA804CF}

Page 304: Prev

DisplayName = IBM Accessibility Speech Interface v1.2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4F3AFB85-B972-4621-AEB6-6C22317E145B}

DisplayVersion = 5.0

InstallDate = 20070222

DisplayName = IBM 32-bit Runtime Environment for Java 2, v5.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{52D02A2B-03D2-4E34-A358-DC5D951FD296}

DisplayVersion = 7.1.17.0

InstallDate = 20101201

UninstallString = [CACHE]MsiExec.exe /I{52D02A2B-03D2-4E34-A358-DC5D951FD296}

DisplayName = Nokia Connectivity Cable Driver

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{536D6172-7453-7569-7465-392E38300409}

DisplayVersion = 9.8.0

InstallDate = 20050405

UninstallString = [CACHE]MsiExec.exe /I{536D6172-7453-7569-7465-392E38300409}

DisplayName = Lotus SmartSuite - English

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{53A93780-6073-4207-A729-A99A30AFDE40}

DisplayVersion = 1.58

InstallDate = 20050405

UninstallString = [CACHE]MsiExec.exe /X{53A93780-6073-4207-A729-A99A30AFDE40}

Page 305: Prev

DisplayName = AFP Workbench for Windows

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{55495E65-7C5B-48E4-BC7D-DE54F3DE5ED6}

DisplayVersion = 7.1.30.8

InstallDate = 20101201

UninstallString = [CACHE]MsiExec.exe /I{55495E65-7C5B-48E4-BC7D-DE54F3DE5ED6}

DisplayName = Nokia PC Suite

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{57F1AB5A-0B9A-4229-B231-B1516A33DCD4}

DisplayVersion = 2.5.0.64227

InstallDate = 20101220

DisplayName = VMware Infrastructure Client 2.5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{58F58158-8DFE-31DA-AC1F-7E5D89A0F74F}

DisplayVersion = 1.5.1.0

InstallDate = 20101013

UninstallString = [CACHE]MsiExec.exe /I{58F58158-8DFE-31DA-AC1F-7E5D89A0F74F}

DisplayName = Google Talk Plugin

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{5B26747A-DE21-4FE9-9E59-27114F1938E5}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5B26747A-DE21-4FE9-9E59-27114F1938E5}\Setup.exe" -l0x9

DisplayName = SeaCOM

Page 306: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}

DisplayVersion = 1.3.0254.0

InstallDate = 20050818

UninstallString = [CACHE]MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}

DisplayName = Windows Genuine Advantage v1.3.0254.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{653A52D8-127C-476D-BAD9-27117A3A4959}

DisplayVersion = 2.0.1.3

InstallDate = 20101215

UninstallString = [CACHE]MsiExec.exe /I{653A52D8-127C-476D-BAD9-27117A3A4959}

DisplayName = Nokia PC Internet Access

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142030}

DisplayVersion = 1.4.2_03

InstallDate = 20080729

UninstallString = [CACHE]MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142030}

DisplayName = Java 2 Runtime Environment, SE v1.4.2_03

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7148F0A8-6813-11D6-A77B-00B0D0142190}

DisplayVersion = 1.4.2_19

InstallDate = 20110120

UninstallString = [CACHE]MsiExec.exe /I{7148F0A8-6813-11D6-A77B-00B0D0142190}

Page 307: Prev

DisplayName = Java 2 Runtime Environment, SE v1.4.2_19

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{73F1BDB7-11E1-11D5-9DC6-00C04F2FC33B}

DisplayVersion = 6.1.10103

InstallDate = 20101213

DisplayName = Mobility Client

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{757debef-635e-4076-b82b-dac22feb3c9c}

DisplayVersion = 1.3.09157

InstallDate = 20100823

UninstallString = [CACHE]MsiExec.exe /X{757debef-635e-4076-b82b-dac22feb3c9c}

DisplayName = IBM Lotus Symphony

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{75E7FEE8-16B1-4B1D-82B4-9594A38EDF76}

DisplayVersion = 6

InstallDate = 20101209

UninstallString = [CACHE]MsiExec.exe /X{75E7FEE8-16B1-4B1D-82B4-9594A38EDF76}

DisplayName = IBM 32-bit Runtime Environment for Java v6

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}

DisplayVersion = 9.0

InstallDate = 20110104

UninstallString = [CACHE]MsiExec.exe /X{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}

Page 308: Prev

DisplayName = RealNetworks - Microsoft Visual C++ 2008 Runtime

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7D968F83-A23F-40F7-937C-A3B5A0C44048}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7D968F83-A23F-40F7-937C-A3B5A0C44048}\setup.exe" -l0x9 -removeonly

DisplayName = My Help - Workstation Setup Wizard

InstallDate = 20080725

DisplayVersion = 1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7EB114D8-207F-45AE-BABD-1669715F2630}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{7EB114D8-207F-45AE-BABD-1669715F2630}\Setup.exe" -l0x9 anything

DisplayName = ThinkVantage Access Connections

DisplayVersion = 5.50

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7F87DF1C-6B8F-49F4-8EEF-7600128D99AE}

DisplayVersion = 05.02.0210

InstallDate = 20050405

UninstallString = [CACHE]MsiExec.exe /I{7F87DF1C-6B8F-49F4-8EEF-7600128D99AE}

DisplayName = IBM Tivoli Storage Manager Client

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{82512BC9-BD5D-4C50-BE4D-B98E7DF78687}

Page 309: Prev

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{82512BC9-BD5D-4C50-BE4D-B98E7DF78687}\setup.exe" -l0x9 UNINSTALL

DisplayName = ThinkPad UltraNav Wizard

DisplayVersion = 3.05

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{836670E9-61EB-4D47-9EF8-CFE936C3FE32}

DisplayVersion = 8.51.9271

InstallDate = 20100823

UninstallString = [CACHE]MsiExec.exe /X{836670E9-61EB-4D47-9EF8-CFE936C3FE32}

DisplayName = Lotus Notes 8.5.1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}

DisplayVersion = 8.0.59193

InstallDate = 20100821

UninstallString = [CACHE]MsiExec.exe /X{837b34e3-7c30-493c-8f6a-2b0f04e2912c}

DisplayName = Microsoft Visual C++ 2005 Redistributable

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{84814E6B-2581-46EC-926A-823BD1C670F6}

DisplayVersion = 5.1.0.4700

InstallDate = 20080725

UninstallString = [CACHE]MsiExec.exe /X{84814E6B-2581-46EC-926A-823BD1C670F6}

DisplayName = ThinkPad Bluetooth with Enhanced Data Rate Software

Page 310: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

DisplayVersion = 4.20.9870.0

InstallDate = 20090505

UninstallString = [CACHE]MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}

DisplayName = MSXML 4.0 SP2 (KB954430)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{8C8ADD9C-1F30-4B1A-927E-B72CC4AADB91}

DisplayName = IBM Lotus Sametime Connect 7.5.1

UninstallString = [CACHE]MsiExec.exe /X{8C8ADD9C-1F30-4B1A-927E-B72CC4AADB91}

InstallDate = 20070905

DisplayVersion = 7.5.70413

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-001C-0409-0000-0000000FF1CE}

DisplayVersion = 12.0.6425.1000

InstallDate = 20110108

UninstallString = [CACHE]MsiExec.exe /X{90120000-001C-0409-0000-0000000FF1CE}

DisplayName = Microsoft Office Access Runtime (English) 2007

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90120000-0020-0409-0000-0000000FF1CE}

DisplayVersion = 12.0.6514.5001

InstallDate = 20101111

UninstallString = [CACHE]MsiExec.exe /X{90120000-0020-0409-0000-0000000FF1CE}

DisplayName = Compatibility Pack for the 2007 Office system

Page 311: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90120409-6000-11D3-8CFE-0150048383C9}

DisplayVersion = 11.0.8173.0

InstallDate = 20101216

UninstallString = [CACHE]MsiExec.exe /I{90120409-6000-11D3-8CFE-0150048383C9}

DisplayName = Microsoft Office Standard Edition 2003

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90140000-006D-0409-0000-0000000FF1CE}

DisplayVersion = 14.0.4763.1000

InstallDate = 20101104

UninstallString = [CACHE]MsiExec.exe /I{90140000-006D-0409-0000-0000000FF1CE}

DisplayName = Microsoft Office Click-to-Run 2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90840409-6000-11D3-8CFE-0150048383C9}

DisplayVersion = 11.0.8173.0

InstallDate = 20101111

UninstallString = [CACHE]MsiExec.exe /I{90840409-6000-11D3-8CFE-0150048383C9}

DisplayName = Microsoft Office Excel Viewer 2003

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{90850409-6000-11D3-8CFE-0150048383C9}

DisplayVersion = 11.0.8173.0

InstallDate = 20101111

UninstallString = [CACHE]MsiExec.exe /I{90850409-6000-11D3-8CFE-0150048383C9}

Page 312: Prev

DisplayName = Microsoft Office Word Viewer 2003

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{927A7821-FC01-4719-A86B-258C033D0C76}

DisplayVersion = 1.5.0000

InstallDate = 20100826

UninstallString = [CACHE]MsiExec.exe /X{927A7821-FC01-4719-A86B-258C033D0C76}

DisplayName = VMware Remote Console

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{95120000-0052-0409-0000-0000000FF1CE}

DisplayVersion = 12.0.6425.1000

InstallDate = 20100925

UninstallString = [CACHE]MsiExec.exe /I{95120000-0052-0409-0000-0000000FF1CE}

DisplayName = Microsoft Office Visio Viewer 2007

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{95120000-00AF-0409-0000-0000000FF1CE}

DisplayVersion = 12.0.6425.1000

InstallDate = 20101111

UninstallString = [CACHE]MsiExec.exe /X{95120000-00AF-0409-0000-0000000FF1CE}

DisplayName = Microsoft Office PowerPoint Viewer 2007 (English)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9541FED0-327F-4DF0-8B96-EF57EF622F19}

DisplayVersion = 7.22

InstallDate = 20080725

Page 313: Prev

UninstallString = [CACHE]MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}

DisplayName = IBM RecordNow!

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9BC51C0F-DA8E-4370-9997-899B3435A647}

DisplayVersion = 4.0.0.7797

InstallDate = 20100826

UninstallString = [CACHE]MsiExec.exe /X{9BC51C0F-DA8E-4370-9997-899B3435A647}

DisplayName = VMware vSphere Host Update Utility 4.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{9FAC9E5C-0D20-4DBF-AFE5-2E09C52A95A2}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{9FAC9E5C-0D20-4DBF-AFE5-2E09C52A95A2}\setup.dll" -l0x9 UNINSTALLFROMSYS

DisplayName = ThinkPad Wireless LAN Adapters Software (11a/b, 11b/g, 11a/b/g)

DisplayVersion = 5.0.100.112d

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A0E64EBA-8BF0-49FB-90C0-BB3D781A2016}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A0E64EBA-8BF0-49FB-90C0-BB3D781A2016}\setup.exe" -l0x9 -AddRemove

DisplayName = ThinkPad Power Manager

DisplayVersion = 1.30b

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

DisplayVersion = 3.2.30729

Page 314: Prev

InstallDate = 20101111

UninstallString = [CACHE]MsiExec.exe /I{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}

DisplayName = Microsoft .NET Framework 3.0 Service Pack 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AA36483F-5D79-4EFD-ACA7-161EE2474E17}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{AA36483F-5D79-4EFD-ACA7-161EE2474E17}\Setup.exe" -l0x9

DisplayName = IBM Infoprint Select

DisplayVersion = 4.1.0.100

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AC76BA86-7AD7-1033-7B44-A82000000003}

DisplayVersion = 8.2.5

InstallDate = 20101008

UninstallString = [CACHE]MsiExec.exe /I{AC76BA86-7AD7-1033-7B44-A82000000003}

DisplayName = Adobe Reader 8.2.5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B2544A03-10D0-4E5E-BA69-0362FFC20D18}

DisplayVersion = 2.0.0048.0

InstallDate = 20101103

UninstallString = [CACHE]MsiExec.exe /I{B2544A03-10D0-4E5E-BA69-0362FFC20D18}

DisplayName = OGA Notifier 2.0.0048.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{BAF78226-3200-4DB4-BE33-4D922A799840}

Page 315: Prev

DisplayVersion = 3.0.6920.0

InstallDate = 20070905

UninstallString = [CACHE]MsiExec.exe /X{BAF78226-3200-4DB4-BE33-4D922A799840}

DisplayName = Windows Presentation Foundation

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C04E32E0-0416-434D-AFB9-6969D703A9EF}

DisplayVersion = 4.20.9848.0

InstallDate = 20070905

UninstallString = [CACHE]MsiExec.exe /I{C04E32E0-0416-434D-AFB9-6969D703A9EF}

DisplayName = MSXML 4.0 SP2 (KB936181)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

DisplayVersion = 2.2.30729

InstallDate = 20101111

UninstallString = [CACHE]MsiExec.exe /I{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}

DisplayName = Microsoft .NET Framework 2.0 Service Pack 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C1A6B23C-438E-4D08-B508-4E830CA8F335}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C1A6B23C-438E-4D08-B508-4E830CA8F335}\Setup.exe" xxxanything

DisplayName = IBM ViaVoice TTS Runtime v6.740 - US English

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C40698F9-A861-4531-9F8C-FA7F8961375B}

Page 316: Prev

DisplayVersion = 4.0.0.7797

InstallDate = 20100826

UninstallString = [CACHE]MsiExec.exe /X{C40698F9-A861-4531-9F8C-FA7F8961375B}

DisplayName = VMware vSphere Client 4.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{C7134CDC-2000-1967-A00D-0244A64A998F}

DisplayVersion = 2.0.1.40644

InstallDate = 20101101

UninstallString = [CACHE]MsiExec.exe /X{C7134CDC-2000-1967-A00D-0244A64A998F}

DisplayName = VMware Virtual Infrastructure Client 2.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CA96F3A1-F350-11D3-B354-002035C150E4}

UninstallString = [CHECK]"C:\Program Files\InstallShield Installation Information\{CA96F3A1-F350-11D3-B354-002035C150E4}\setup.exe" -runfromtemp -l0x0009 -removeonly

DisplayName = ILC

InstallDate = 20090522

DisplayVersion = 1.04.0000

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

DisplayVersion = 1.1.4322

InstallDate = 20101103

UninstallString = [CACHE]MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}

DisplayName = Microsoft .NET Framework 1.1

Page 317: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

DisplayVersion = 3.5.30729

InstallDate = 20101113

UninstallString = [CACHE]MsiExec.exe /I{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}

DisplayName = Microsoft .NET Framework 3.5 SP1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB2416473

DisplayName = Security Update for Microsoft .NET Framework 3.5 SP1 (KB2416473)

DisplayVersion = 1

UninstallString = [CACHE]C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A8894F19-59C8-38D2-8A75-36C0CCE56A5B} /qb+ REBOOTPROMPT=""

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB953595

DisplayName = Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)

DisplayVersion = 1

UninstallString = [CACHE]C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall /qb+ REBOOTPROMPT=""

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB958484

DisplayName = Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)

DisplayVersion = 1

UninstallString = [CACHE]C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {A7EEA2F2-BFCD-4A54-A575-7B81A786E658} /qb+ REBOOTPROMPT=""

Page 318: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}.KB963707

UninstallString = [CACHE]C:\WINDOWS\system32\msiexec.exe /package {CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9} /uninstall {B2AE9C82-DC7B-3641-BFC8-87275C4F3607} /qb+ REBOOTPROMPT=""

DisplayVersion = 1

DisplayName = Update for Microsoft .NET Framework 3.5 SP1 (KB963707)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{CEB43064-B69D-4205-B18B-E0509803ADDA}

DisplayVersion = 8.5.091101

InstallDate = 20100909

UninstallString = [CACHE]MsiExec.exe /X{CEB43064-B69D-4205-B18B-E0509803ADDA}

DisplayName = IBM Lotus Sametime Connect 8.5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{D93B70D2-4DA4-4F6F-9DC8-72D08F74A386}

DisplayVersion = 2.5.0.64227

InstallDate = 20101213

UninstallString = [CACHE]MsiExec.exe /X{D93B70D2-4DA4-4F6F-9DC8-72D08F74A386}

DisplayName = VMware Infrastructure Update

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DFAA3D2B-7087-464E-823B-738A23C29C27}

DisplayVersion = 2.0.50728

InstallDate = 20100826

DisplayName = Microsoft Visual J# 2.0 Redistributable Package - SE

Page 319: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{DFF415AC-3883-4338-9365-DDCB74A0CFBA}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{DFF415AC-3883-4338-9365-DDCB74A0CFBA}\setup.exe" -l0x9 -removeonly

DisplayName = IBM My Help

InstallDate = 20080414

DisplayVersion = 1.3.18

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}

DisplayVersion = 5.1.112

InstallDate = 20110203

UninstallString = [CACHE]MsiExec.exe /X{E633D396-5188-4E9D-8F6B-BFB8BF3467E8}

DisplayName = Skype™ 5.1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{E922961C-6DB6-41DE-9FEA-426DF3E9F81C}

DisplayVersion = 1.4.2

InstallDate = 20101110

DisplayName = IBM 32-bit Runtime Environment for Java 2, v1.4.2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EA664480-3844-11D5-8C25-444553540000}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EA664480-3844-11D5-8C25-444553540000}\setup.exe"

DisplayName = TrackPoint Accessibility Features

Page 320: Prev

DisplayVersion = 1.11.0.0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{EC6AF20D-4376-4070-BEE4-D3A0DFF7E140}

DisplayVersion = 4.52

InstallDate = 20080725

UninstallString = [CACHE]MsiExec.exe /X{EC6AF20D-4376-4070-BEE4-D3A0DFF7E140}

DisplayName = Access IBM

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

DisplayVersion = 4.20.9876.0

InstallDate = 20100925

UninstallString = [CACHE]MsiExec.exe /I{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}

DisplayName = MSXML 4.0 SP2 (KB973688)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FC081D4D-DF1B-4CF1-B530-027E4118D846}

UninstallString = RunDll32 C:\PROGRA~1\COMMON~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{FC081D4D-DF1B-4CF1-B530-027E4118D846}\setup.exe" -l0x9 -AddRemove

DisplayName = ThinkPad Configuration

DisplayVersion = 1.54

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}

DisplayVersion = 1.1.1905.1

InstallDate = 20050404

Page 321: Prev

UninstallString = [CACHE]MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}

DisplayName = HighMAT Extension to Microsoft Windows XP CD Writing Wizard

+-----------------------------------------------

|Microsoft Patches Information

+-----------------------------------------------

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\.NETFramework\1.1\M2416447

InstalledDate = 11/3/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\.NETFramework\1.1\M979906

InstalledDate = 9/25/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\.NETFramework\1.1\S867460

InstalledDate = 4/4/2005

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\KB946503

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\KB946644

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\KB946927

InstalledDate = 12/12/2010

Page 322: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\KB947148

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\KB948815

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB946102

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB946457

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB946573

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB947317

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB948233

InstalledDate = 12/12/2010

Page 323: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB948233v2

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB948646

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB949226

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB949777

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB950230

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB950986

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB951113

InstalledDate = 12/12/2010

Page 324: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB952324

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB952346

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP1\KB952883

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP2\KB2418241

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP2\KB958481

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP2\KB976576

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP2\KB979909

InstalledDate = 12/12/2010

Page 325: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP2\KB980773

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 2.0 Service Pack 2\SP2\KB983583

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 3.0 Service Pack 2\SP2\KB958483

InstalledDate = 11/10/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 3.0 Service Pack 2\SP2\KB976769v2

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 3.0 Service Pack 2\SP2\KB977354v2

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 3.5 SP1\KB953595

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 3.5 SP1\SP1\KB2416473

InstalledDate = 12/12/2010

Page 326: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 3.5 SP1\SP1\KB958484

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Microsoft .NET Framework 3.5 SP1\SP1\KB963707

InstalledDate = 12/12/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\MSXML4SP2\Q927978

InstalledDate = 9/5/2007

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\MSXML4SP2\Q936181

InstalledDate = 9/5/2007

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\MSXML4SP2\Q954430

InstalledDate = 5/5/2009

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\MSXML4SP2\Q973688

InstalledDate = 9/25/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\WGA\SP0\KB892130

InstalledDate = 9/6/2007

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\WGA\SP0\WGA

InstalledDate = 3/22/2006

Page 327: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\WgaNotify\SP0\WgaNotify

InstalledDate = 9/25/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows\SP1\IDNMitigationAPIs

InstalledDate = 10/6/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows\SP1\NLSDownlevelMapping

InstalledDate = 10/6/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Format 11 runtime\SP0\WMFDist11

InstalledDate = 10/17/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\SP0\KB2378111_WM9

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\SP0\KB911564

InstalledDate = 2/22/2006

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\SP0\KB952069_WM9

InstalledDate = 5/5/2009

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\SP0\KB954155_WM9

Page 328: Prev

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\SP0\KB968816_WM9

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\SP0\KB973540_WM9

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\SP0\KB975558_WM8

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\SP0\KB978695_WM9

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player\SP0\KB979402_WM9

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player 11\SP0\wmp11

InstalledDate = 10/17/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player 6.4\SP0\KB925398_WMP64

InstalledDate = 2/20/2007

Page 329: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player 9\SP0\KB911565

InstalledDate = 2/22/2006

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player 9\SP0\KB917734_WMP9

InstalledDate = 7/17/2006

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Media Player 9\SP2\KB936782_WMP9

InstalledDate = 9/5/2007

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows Presentation Foundation\KB932471

InstalledDate = 9/5/2007

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\ie7

InstalledDate = 10/6/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2183461-IE7

InstalledDate = 10/6/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2360131-IE7

InstalledDate = 10/17/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB2416400-IE7

Page 330: Prev

InstalledDate = 12/15/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB923689

InstalledDate = 2/20/2007

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB938127-v2-IE7

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB941569

InstalledDate = 3/13/2008

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP0\KB982381-IE7

InstalledDate = 10/6/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP1\Wdf01007

InstalledDate = 12/1/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP10\MSCompPackV1

InstalledDate = 10/17/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP2\Wudf01000

InstalledDate = 10/17/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP2\Wudf01007

InstalledDate = 12/1/2010

Page 331: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB888111WXPSP2

InstalledDate = 7/17/2006

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB936929

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\KB952011

InstalledDate = 11/17/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP3\WIC

InstalledDate = 2/20/2007

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2079403

InstalledDate = 9/2/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2115168

InstalledDate = 9/2/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2121546

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2141007

InstalledDate = 11/4/2010

Page 332: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2158563

InstalledDate = 11/3/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2160329

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2183461

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2229593

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2259922

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2279986

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2286198

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2296011

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2296199

Page 333: Prev

InstalledDate = 12/15/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2345886

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2347290

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2360937

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2387149

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2419632

InstalledDate = 1/13/2011

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2423089

InstalledDate = 12/15/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2436673

InstalledDate = 12/15/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2440591

InstalledDate = 12/15/2010

Page 334: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2443105

InstalledDate = 12/15/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2443685

InstalledDate = 12/15/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB2467659

InstalledDate = 12/15/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB923561

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB938464

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB946648

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB950759

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB950762

InstalledDate = 9/24/2010

Page 335: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB950974

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB951072-v2

InstalledDate = 5/5/2009

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB951376-v2

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB951698

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB951748

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB951978

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB952004

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB952287

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB952954

Page 336: Prev

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB953838

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB954459

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB954550-v5

InstalledDate = 11/6/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB954600

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB955069

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB955759

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB955839

InstalledDate = 5/13/2009

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB956390

InstalledDate = 8/18/2010

Page 337: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB956572

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB956744

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB956802

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB956803

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB956844

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB958215

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB958644

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB958687

InstalledDate = 8/18/2010

Page 338: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB958690

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB958869

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB959426

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB960714

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB960803

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB960859

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB961118

InstalledDate = 11/11/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB961373

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB961501

Page 339: Prev

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB963027

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB967715

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB968389

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB969059

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB969947

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB970430

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB971468

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB971557

InstalledDate = 8/18/2010

Page 340: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB971657

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB971737

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB971961

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB972270

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB973354

InstalledDate = 9/2/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB973507

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB973525

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB973687

InstalledDate = 12/15/2010

Page 341: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB973815

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB973869

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB973904

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB974112

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB974318

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB974392

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB974455

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB974571

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB975025

Page 342: Prev

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB975467

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB975560

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB975561

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB975562

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB975713

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB976098-v2

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB976325

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB977816

InstalledDate = 8/18/2010

Page 343: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB977914

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB978037

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB978207

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB978251

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB978262

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB978338

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB978542

InstalledDate = 9/3/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB978601

InstalledDate = 8/18/2010

Page 344: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB978706

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB979309

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB979482

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB979687

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB980182

InstalledDate = 8/18/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB980195

InstalledDate = 8/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB980218

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB980232

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB980436

Page 345: Prev

InstalledDate = 9/2/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB981322

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB981349

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB981793

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB981852

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB981957

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB981997

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB982132

InstalledDate = 11/4/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB982214

InstalledDate = 8/23/2010

Page 346: Prev

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB982381

InstalledDate = 8/23/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB982665

InstalledDate = 9/2/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\Windows XP\SP4\KB982802

InstalledDate = 9/24/2010

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Updates\XML Paper Specification Shared Components Pack 1.0\SP0\XpsEPSC

InstalledDate = 2/20/2007

+-----------------------------------------------

|File Versions

+-----------------------------------------------

File: c:\documents and settings\administrator\local settings\application data\google\google talk plugin\googletalkplugin.exe

Product: Google Talk Plugin

Product Version: 1.0.0.0

Company: Google

Description: Google Talk Plugin

Original FileName: googletalkplugin.exe

File Version Label: 1.0.0.0

Page 347: Prev

File Version Number: 1.0.0.0

SHA-1 Digest: 0x31B643A9A29D126565EB025C4B53BD3F8DA9956C

MD5 Digest: 0xCEC56AD97AD37558BD9D5BC08911C409

CRC32 Digest: 0xC31B115B

Rootkit Property: Normal

File Size: 83440 bytes

File: c:\documents and settings\administrator\my documents\ebooks\certifications\virus guides\imp virus books\virus removal tools\sic\sicwin.exe

Product: Trend Micro Common Client

Product Version: 5.5

Company: Trend Micro Inc.

Description: System Information Collector

Original FileName: sicwin.exe

File Version Label: 5.5.0.1017

File Version Number: 5.5.0.1017

SHA-1 Digest: 0xC34C820A584ACE1CD5D31E490CA30B450ADDFFA1

MD5 Digest: 0x4E4CD6445CDBE44683A4B578355699D6

CRC32 Digest: 0x2D26872A

Rootkit Property: Normal

File Size: 2110728 bytes

File: c:\documents and settings\administrator\my documents\ebooks\certifications\virus guides\imp virus books\virus removal tools\sic\tmengdrv.dll

Product: Trend Micro AEGIS

Product Version: 2.80

Page 348: Prev

Company: Trend Micro Inc.

Description: TrendMicro Engine Driver Management DLL

Original FileName: TmEngDrv.dll

File Version Label: 2.80.0.1078

File Version Number: 2.80.0.1078

SHA-1 Digest: 0x3A4A3C8282420771F10E82E50BC47D8F16F1E390

MD5 Digest: 0x72486990BEB1F58C520E6D8541D90495

CRC32 Digest: 0xBFAFB4BE

Rootkit Property: Normal

File Size: 263432 bytes

File: c:\documents and settings\administrator\my documents\ebooks\certifications\virus guides\imp virus books\virus removal tools\sic\tmufeng.dll

Product: Trend Micro URL Filtering Engine

Product Version: 1.5

Company: Trend Micro Inc.

Description: Trend Micro URL Filter Engine

Original FileName: tmufeng.dll

File Version Label: 1.5.0.1022

File Version Number: 1.5.0.1022

SHA-1 Digest: 0x33613795453B615E1C6A88191740F6B9615A084D

MD5 Digest: 0xAE42E3D04F9DF4111D26FE145904030E

CRC32 Digest: 0xCC890422

Rootkit Property: Normal

File Size: 341592 bytes

Page 349: Prev

File: c:\documents and settings\administrator\my documents\mohsin\downloads\fclock.exe

Product: Friendly Clock

Product Version: 1.8

Company: A.Kilievich & Co.

Description:

Original FileName:

File Version Label: 1.8.0.0

File Version Number: 1.8.0.0

SHA-1 Digest: 0xDDA56071FAE42088ABB3B60B16C3B800FECA551B

MD5 Digest: 0x8E18073E2AA2CF2C4A1D4033E2565FFE

CRC32 Digest: 0xA02FDA1B

Rootkit Property: Normal

File Size: 201216 bytes

File: c:\documents and settings\administrator\my documents\mohsin\my tools\running tools\avafind\avafind.exe

Product: Ava Find

Product Version: 1.5.0.218

Company: Think Less Do More Services

Description: Ava Find

Original FileName: AVAFIND.EXE

File Version Label: 1.5.0.218

File Version Number: 1.5.0.218

SHA-1 Digest: 0x5CB1977F9FBFBDDB3B19CE8781FE505DE112A30B

MD5 Digest: 0xE7A2A5D5F5345364AC59ED81EDE6E713

CRC32 Digest: 0xC7160546

Page 350: Prev

Rootkit Property: Normal

File Size: 295936 bytes

File: c:\documents and settings\administrator\my documents\mohsin\my tools\running tools\avafind\dbghelp.dll

Product: Debugging Tools for Windows(R)

Product Version: 6.2.0013.1

Company: Microsoft Corporation

Description: Windows Image Helper

Original FileName: DBGHELP.DLL

File Version Label: 6.2.0013.1 (DbgBuild.030619-2209)

File Version Number: 6.2.13.1

SHA-1 Digest: 0x5AD9F84181FADFA71E4C19013D6899CAB39C7469

MD5 Digest: 0x3B5F0BF4125688A531FA21C823EA6193

CRC32 Digest: 0x3EDA5BE5

Rootkit Property: Normal

File Size: 813568 bytes

File: c:\documents and settings\administrator\my documents\mohsin\my tools\running tools\avafind\msvcp70.dll

Product: Microsoft® Visual Studio .NET

Product Version: 7.00.9466.0

Company: Microsoft Corporation

Description: Microsoft® C++ Runtime Library

Original FileName: MSVCP70.DLL

File Version Label: 7.00.9466.0

Page 351: Prev

File Version Number: 7.0.9466.0

SHA-1 Digest: 0x2F0C431BE7DA7F359BB75B9BA319D6F3DEA08919

MD5 Digest: 0xD04F7AACA2319A3BCDB2C5D5DD6F6026

CRC32 Digest: 0x4F125705

Rootkit Property: Normal

File Size: 487424 bytes

File: c:\documents and settings\administrator\my documents\mohsin\my tools\running tools\avafind\msvcr70.dll

Product: Microsoft® Visual Studio .NET

Product Version: 7.00.9466.0

Company: Microsoft Corporation

Description: Microsoft® C Runtime Library

Original FileName: MSVCR70.DLL

File Version Label: 7.00.9466.0

File Version Number: 7.0.9466.0

SHA-1 Digest: 0x61B8F573DB448AE6351AE3475C2E7C482D81533C

MD5 Digest: 0x9972A6ED4F2388DBFA8E0A96F6F3FDF1

CRC32 Digest: 0x516C28BC

Rootkit Property: Normal

File Size: 344064 bytes

File: c:\documents and settings\administrator\my documents\official\objectdock\crashrpt.dll

Product: Crash Report Module

Product Version: 3.0.2.2

Company:

Page 352: Prev

Description: Crash Report Module

Original FileName: CrashRpt.exe

File Version Label: 3.0.2.2

File Version Number: 3.0.2.2

SHA-1 Digest: 0x9222AAE2E59400EDCB50931B2D43CB2DB8DA5AE6

MD5 Digest: 0xEB2E5161CB51D9693D2293A62360F85C

CRC32 Digest: 0xD4F762A5

Rootkit Property: Normal

File Size: 95944 bytes

File: c:\documents and settings\administrator\my documents\official\objectdock\dbghelp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.1106

Company: Microsoft Corporation

Description: Windows Image Helper

Original FileName: DBGHELP.DLL

File Version Label: 5.1.2600.1106 (xpsp1.020828-1920)

File Version Number: 5.1.2600.1106

SHA-1 Digest: 0xCD24CCEC2493B64904CF3C139CD8D58D28D5993B

MD5 Digest: 0xE458D88C71990F545EF941CD16080BAD

CRC32 Digest: 0x91C52E51

Rootkit Property: Normal

File Size: 489984 bytes

File: c:\documents and settings\administrator\my documents\official\objectdock\docklets\calendar\calendar.dll

Page 353: Prev

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x7C26CEB856F5E3B2A952CB5C41BE7E228BBC4C8B

MD5 Digest: 0xEAA174D7DF489CD515D4B968271ECECA

CRC32 Digest: 0xA239CB6B

Rootkit Property: Normal

File Size: 26392 bytes

File: c:\documents and settings\administrator\my documents\official\objectdock\docklets\clock\clock.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xC8E67F814DEC1DEEDEA58222B963A66208137466

MD5 Digest: 0x9038E4179464283E41F0E17E2288B16D

CRC32 Digest: 0x4D492FC0

Rootkit Property: Normal

Page 354: Prev

File Size: 94208 bytes

File: c:\documents and settings\administrator\my documents\official\objectdock\docklets\search\searchdocklet.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x81B4F8E5989C1758610918248600A781AED032FF

MD5 Digest: 0x886E98A8122A15C1FDBD63F96BE55DA8

CRC32 Digest: 0x2777841F

Rootkit Property: Normal

File Size: 214800 bytes

File: c:\documents and settings\administrator\my documents\official\objectdock\dockshellhook.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

Page 355: Prev

SHA-1 Digest: 0x12FC9F9B7AD1CA94C06E81A17C8276385BB323B8

MD5 Digest: 0x4195B4D91CFA41F3368A2BE3E1530160

CRC32 Digest: 0x13A46ABD

Rootkit Property: Normal

File Size: 112400 bytes

File: c:\documents and settings\administrator\my documents\official\objectdock\objectdock.exe

Product: Stardock ObjectDock

Product Version: v1.90.536u

Company: Stardock

Description: ObjectDock

Original FileName: ObjectDock.exe

File Version Label: v1.90.536u

File Version Number: 1.9.0.536

SHA-1 Digest: 0xD92961380D1E9A1F59D6C28E64A778E7B1413CBF

MD5 Digest: 0x670FCAD3345904BF3BC477EA0FB2D093

CRC32 Digest: 0xD9EB920A

Rootkit Property: Normal

File Size: 3450608 bytes

File: c:\documents and settings\administrator\my documents\official\objectdock\odimg.dll

Product:

Product Version:

Company:

Description:

Page 356: Prev

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x5359B0F6F342C36B586B555E0C2CA65DD7715508

MD5 Digest: 0x92756208FE9138D360F2BEB68D5CA349

CRC32 Digest: 0x21AE1DCA

Rootkit Property: Normal

File Size: 118784 bytes

File: c:\documents and settings\administrator\my documents\official\objectdock\zlib.dll

Product: ZLib.DLL

Product Version:

Company:

Description: zlib data compression library

Original FileName: zlib.dll

File Version Label: 1.1.3

File Version Number: 1.1.3.0

SHA-1 Digest: 0x75C6BF583576E83E84F35123D6A890B903AEF04D

MD5 Digest: 0xD44597ECC2B2550E022A762321D1686B

CRC32 Digest: 0x7ECACE4B

Rootkit Property: Normal

File Size: 59592 bytes

File: c:\documents and settings\all users\application data\installations\{55495e65-7c5b-48e4-bc7d-de54f3de5ed6}\nokia_pc_suite_7_1_30_8_all.exe

Product: Installer Application

Page 357: Prev

Product Version: 2, 2, 0, 0

Company:

Description: Installer Application

Original FileName: Installer.exe

File Version Label: 2, 2, 25, 0

File Version Number: 2.2.25.0

SHA-1 Digest: 0x48643FA69EE0038B057782D817C927FBE08162D3

MD5 Digest: 0xAF8715E31ADD1B381BD7BA37361B7D78

CRC32 Digest: 0xAD9E4EFE

Rootkit Property: Normal

File Size: 62923117 bytes

File: c:\documents and settings\all users\application data\installations\{653a52d8-127c-476d-bad9-27117a3a4959}\installer.exe

Product: Installe Application

Product Version: 2, 0, 0, 0

Company:

Description: Installer Application

Original FileName: Installer.exe

File Version Label: 6, 85, 14, 0

File Version Number: 6.85.14.0

SHA-1 Digest: 0x053BB1F3BF9B7229E8D5ED6BC3D79E29521C754E

MD5 Digest: 0xCAB286A79C7EB049DC43CF9A45BA36C9

CRC32 Digest: 0x93481D57

Rootkit Property: Normal

File Size: 7435659 bytes

Page 358: Prev

File: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll

Product:

Product Version: 12.0.1.609

Company: RealPlayer

Description: RealPlayer Download and Record Plugin

Original FileName: rpbrowserrecordplugin.dll

File Version Label: 12.0.1.609

File Version Number: 12.0.1.609

SHA-1 Digest: 0x569A43F0338899154D21DE0DC67985A407CF9DA2

MD5 Digest: 0xB1689A8E86F0798450C2BB4F9BD9E49C

CRC32 Digest: 0x35CD7FE5

Rootkit Property: Normal

File Size: 382720 bytes

File: c:\notes\dbghelp_x86_v6.8.40.dll

Product: Debugging Tools for Windows(R)

Product Version: 6.8.0004.0

Company: Microsoft Corporation

Description: Windows Image Helper

Original FileName: DBGHELP.DLL

File Version Label: 6.8.0004.0 (debuggers(dbg).070515-1751)

File Version Number: 6.8.4.0

SHA-1 Digest: 0x16B5D948ED7843576781DC4F2A391607AC0120A4

MD5 Digest: 0x74EDBB03DE3291FCF2094AF1FB363F1D

Page 359: Prev

CRC32 Digest: 0x457874F9

Rootkit Property: Normal

File Size: 1045128 bytes

File: c:\notes\framework\rcp\brokerbridge\officeaddin.dll

Product: IBM Lotus Sametime

Product Version: 8.0.1

Company: IBM

Description: Sametime Toolbar Addin for Word/Excel/PPT

Original FileName: AddIn.dll

File Version Label: 8.0.1.20080703

File Version Number: 8.0.1.3

SHA-1 Digest: 0x6D4531E6F867D975739139648EDFD816356FBE5C

MD5 Digest: 0x7BE115AA5BB208DFBA2F858AA9AB0FEF

CRC32 Digest: 0x112CE66D

Rootkit Property: Normal

File Size: 327680 bytes

File: c:\notes\framework\rcp\brokerbridge\sthelper.dll

Product: IBM Lotus Sametime

Product Version: 8.0.1

Company: IBM

Description: ISametimeHelper Utility

Original FileName: STHelper.dll

File Version Label: 8.0.1.20080730

Page 360: Prev

File Version Number: 8.0.1.3

SHA-1 Digest: 0x80F2F0F27AF796CED74F6C481A1D49A06DE8611F

MD5 Digest: 0xD417C8E9710262E4641C47CF6A075AC6

CRC32 Digest: 0x50CBE992

Rootkit Property: Normal

File Size: 282624 bytes

File: c:\notes\framework\rcp\brokerbridge\wmqtt.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x24116C5FF1A90CA4AABBE1A1444B94AF31E2A03A

MD5 Digest: 0x1BC23792925E72AEA2122C3607F95AC3

CRC32 Digest: 0xA2C5EBE1

Rootkit Property: Normal

File Size: 32256 bytes

File: c:\notes\framework\shared\eclipse\plugins\com.ibm.productivity.tools.base.app.win32_3.5.0.20090922-1655\preload.exe

Product:

Product Version:

Company:

Page 361: Prev

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x00AA9B84ABCEA6F67A71D635ACFF1588065472F4

MD5 Digest: 0xB174494940CAC9D412BEA3B98D38B371

CRC32 Digest: 0xFF188496

Rootkit Property: Normal

File Size: 40960 bytes

File: c:\notes\nsd.exe

Product: IBM Lotus Notes/Domino

Product Version: 8.5.15.10315

Company: IBM Corp

Description: IBM Lotus Notes/Domino

Original FileName:

File Version Label: 8.5.15.10315

File Version Number: 8.5.15.10315

SHA-1 Digest: 0xA4C40D94DD7187D2E4F4CFDB3B64355B41B14462

MD5 Digest: 0x1173F18F8327E4FCBC6E3FB722D69B3F

CRC32 Digest: 0xA7A3F23B

Rootkit Property: Normal

File Size: 3399680 bytes

File: c:\notes\ntmulti.exe

Page 362: Prev

Product: IBM Lotus Notes/Domino

Product Version: 8.5.10.9271

Company: IBM Corp

Description: IBM Lotus Notes/Domino

Original FileName:

File Version Label: 8.5.10.9271

File Version Number: 8.5.10.9271

SHA-1 Digest: 0xC307F64B3B4769F72783059B4BCD2873BD4150A2

MD5 Digest: 0x218D58976C01C60657818ED0EAC81602

CRC32 Digest: 0x96E0B5FD

Rootkit Property: Normal

File Size: 58760 bytes

File: c:\pdf995\setup.exe

Product: setup Application

Product Version: 1, 0, 0, 1

Company:

Description: pdf995 Setup

Original FileName: setup.EXE

File Version Label: 1, 0, 0, 1

File Version Number: 1.0.0.1

SHA-1 Digest: 0xE2142DDF9FF855E5DED3F2A091B6FBF8C49CB2BE

MD5 Digest: 0xCB5DA8C6A365FC71AABA37CC6A585A81

CRC32 Digest: 0x3341E074

Rootkit Property: Normal

Page 363: Prev

File Size: 385024 bytes

File: c:\program files\adobe\reader 8.0\reader\viewerps.dll

Product: Acrobat Viewer ProxyStub Library

Product Version: 8.2.5.241

Company:

Description: Acrobat Viewer ProxyStub Library

Original FileName: ViewerPS.dll

File Version Label: 8.2.5.241

File Version Number: 8.2.5.241

SHA-1 Digest: 0xBDC79452A1B387AAA8C563C3F4C29A7793423F6D

MD5 Digest: 0x8B795B8B7BEB9F55C1B8B6FD80032979

CRC32 Digest: 0x9962835B

Rootkit Property: Normal

File Size: 16832 bytes

File: c:\program files\analog devices\core\smax4pnp.exe

Product: SMax4PNP Application

Product Version: 6, 0, 0, 20

Company: Analog Devices, Inc.

Description: SMax4PNP

Original FileName: SMax4PNP.exe

File Version Label: 6, 0, 0, 20

File Version Number: 6.0.0.20

SHA-1 Digest: 0x33DADC2328200108B4C6B3149E96D1498F0914D6

Page 364: Prev

MD5 Digest: 0x115332A83AC2726FA974D30DB4BFD8DE

CRC32 Digest: 0x9B26DFEC

Rootkit Property: Normal

File Size: 925696 bytes

File: c:\program files\analog devices\core\smwdmif.dll

Product: Audio Driver Interface Module

Product Version: 6, 0, 4200, 014

Company: Analog Devices, Inc.

Description: SMWDM Interface DLL

Original FileName: SMWDMIF.DLL

File Version Label: 6, 0, 4200, 014

File Version Number: 6.0.4200.14

SHA-1 Digest: 0xB0E868C5A84451C3F2BC86D4F63B39586E704142

MD5 Digest: 0xC0EFACEB546D818616FF5B74DF74BB99

CRC32 Digest: 0x5E2E7C25

Rootkit Property: Normal

File Size: 290816 bytes

File: c:\program files\at&t network client\diagnostic.dll

Product: SDK

Product Version: 2.50.05.0

Company: PCTEL Inc.

Description: PCTEL SDK Diagnostic Log

Original FileName: Diagnostic.dll

Page 365: Prev

File Version Label: 2.50.05.0

File Version Number: 2.50.5.0

SHA-1 Digest: 0xB75B44856ACEEE46F029F72559870A59D977A836

MD5 Digest: 0xA4853968BB9402114DE2ED82F4682A82

CRC32 Digest: 0x145A13A5

Rootkit Property: Normal

File Size: 32768 bytes

File: c:\program files\at&t network client\netcfgsv.exe

Product: NetCfgSvr Module

Product Version: 6.9.0.3006

Company: AT&T

Description: Network configuration service

Original FileName: NetCfgSvr.EXE

File Version Label: 6.9.0.3006

File Version Number: 6.9.0.3006

SHA-1 Digest: 0x44A91F519D28567DBB5FA39DDD4C0BFF85F1FCA8

MD5 Digest: 0xF174743A4D669FA66FA1F9AE18653F48

CRC32 Digest: 0x02CE172E

Rootkit Property: Normal

File Size: 323584 bytes

File: c:\program files\at&t network client\toolbx.dll

Product: SDK

Product Version: 2.50.05.0

Page 366: Prev

Company: PCTEL Inc.

Description: PCTEL SDK Toolbox

Original FileName: ToolBx.dll

File Version Label: 2.50.05.0

File Version Number: 2.50.5.0

SHA-1 Digest: 0xD722650ECFBE44BF33F7B7974030F1AC8A8FFA7D

MD5 Digest: 0xC3208827F6627056B64EFCC45F821B54

CRC32 Digest: 0x5565D35A

Rootkit Property: Normal

File Size: 327680 bytes

File: c:\program files\at&t network client\wwancore.dll

Product: WWAN SDK

Product Version: 2.50.05.0

Company: PCTEL Inc.

Description: PCTEL WWAN SDK

Original FileName: WwanCore.dll

File Version Label: 2.50.05.0

File Version Number: 2.50.5.0

SHA-1 Digest: 0x766FEB25EA3B3BC737318EEF5A23A9E4018603ED

MD5 Digest: 0x8FA669DE0B834886C54FEE16BB85543D

CRC32 Digest: 0xA244DCC4

Rootkit Property: Normal

File Size: 999424 bytes

Page 367: Prev

File: c:\program files\c4ebreg\c4ebreg.exe

Product:

Product Version: 7.34

Company: IBM Corp.

Description: IBM Standard Asset Manager Service

Original FileName:

File Version Label: 7.34

File Version Number: 7.34.0.4

SHA-1 Digest: 0x694BB26BA516EB7DFCDBDA918C8CE8BE6D9771AB

MD5 Digest: 0x67064FA49DB4032A64CDA94ECAD8E827

CRC32 Digest: 0xFB0638C5

Rootkit Property: Normal

File Size: 490776 bytes

File: c:\program files\c4ebreg\isamtray.exe

Product:

Product Version: 7.34

Company: IBM Corp.

Description: IBM Standard Asset Manager GUI

Original FileName:

File Version Label: 7.34

File Version Number: 7.34.0.4

SHA-1 Digest: 0x8C546AA857877F3D7A325CE64A378E0E644C0621

MD5 Digest: 0x8D8F55B4821822DE3CF9EE342C3280A6

CRC32 Digest: 0xC4C18362

Page 368: Prev

Rootkit Property: Normal

File Size: 294168 bytes

File: c:\program files\common files\adobe\acrobat\activex\pdfshell.dll

Product: Adobe PDF Shell Extension

Product Version: 8.2.5.241

Company: Adobe Systems, Inc.

Description: PDF Shell Extension

Original FileName: PDFShell.dll

File Version Label: 8.2.5.241

File Version Number: 8.2.5.241

SHA-1 Digest: 0x1EDFD12FAE609887FC9980986ADE245E0FE1343F

MD5 Digest: 0x69C15016E0894A627F191C7DA0047DFA

CRC32 Digest: 0xC575EAA4

Rootkit Property: Normal

File Size: 372736 bytes

File: c:\program files\common files\adobe\calibration\adobe gamma loader.exe

Product: Adobe Systems, Inc. Adobe Gamma Loader

Product Version: 1, 0, 0, 1

Company: Adobe Systems, Inc.

Description: Adobe Gamma Loader

Original FileName: Adobe Gamma Loader.exe

File Version Label: 1, 0, 0, 1

File Version Number: 1.0.0.1

Page 369: Prev

SHA-1 Digest: 0xC5B97DCD1EF1DD4A0FB5D7CE13E85FE1820CEF47

MD5 Digest: 0xC2FF17734176CD15221C10044EF0BA1A

CRC32 Digest: 0x5997AF64

Rootkit Property: Normal

File Size: 113664 bytes

File: c:\program files\common files\adobe\shell\psicon.dll

Product: Adobe Photoshop

Product Version: 7.0

Company: Adobe Systems, Incorporated

Description: Icons for Adobe Photoshop

Original FileName: psicon.dll

File Version Label: 7.0

File Version Number: 6.6.64.53

SHA-1 Digest: 0x9641148607668A47DF5605BB80159122C417B82A

MD5 Digest: 0x3CEC41DD5502C0602FD14D577A74118D

CRC32 Digest: 0xDC601E6C

Rootkit Property: Normal

File Size: 139264 bytes

File: c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe

Product: InstallShield (R)

Product Version: 10.50

Company: Macrovision Corporation

Description: IDriverT Module

Page 370: Prev

Original FileName: IDriverT.exe

File Version Label: 10.50.125

File Version Number: 10.50.0.125

SHA-1 Digest: 0xEB71CC37C45AEFAD9E23C23C775ED63D098D5B23

MD5 Digest: 0x6F95324909B502E2651442C1548AB12F

CRC32 Digest: 0x36990342

Rootkit Property: Normal

File Size: 73728 bytes

File: c:\program files\common files\intel\wirelesscommon\libeay32.dll

Product: The OpenSSL Toolkit

Product Version: 0.9.8k

Company: The OpenSSL Project, http://www.openssl.org/

Description: OpenSSL Shared Library

Original FileName: libeay32.dll

File Version Label: 0.9.8k

File Version Number: 0.9.8.11

SHA-1 Digest: 0xAE0164FFE2DEFF941F08D2B42B7E5A9C04B1D60F

MD5 Digest: 0xC56EE8C650CBB70A20A3B2E3DF3FE996

CRC32 Digest: 0x37148571

Rootkit Property: Normal

File Size: 1122304 bytes

File: c:\program files\common files\intel\wirelesscommon\psregapi.dll

Product: Intel(R) PROSet/Wireless

Page 371: Prev

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless Registry API Module

Original FileName: PsRegApi.dll

File Version Label: 13, 0, 0, 0

File Version Number: 13.0.0.0

SHA-1 Digest: 0xAE044FE14F9E29B9B16C594E8E40A8FA1E5180D3

MD5 Digest: 0xD0F8F60E70E7656F3C398EF08DA714B5

CRC32 Digest: 0x5D0770FC

Rootkit Property: Normal

File Size: 655360 bytes

File: c:\program files\common files\intel\wirelesscommon\regsrvc.exe

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless Registry Service

Original FileName: RegSrvc.EXE

File Version Label: 13, 0, 0, 0

File Version Number: 13.0.0.0

SHA-1 Digest: 0xEE1AE105A8F6BBE047AFC51D0285A28C680EEAFD

MD5 Digest: 0xA171029D6B6C2D93C22861A347F43C2A

CRC32 Digest: 0xF967C2B6

Rootkit Property: Normal

File Size: 473360 bytes

Page 372: Prev

File: c:\program files\common files\intel\wirelesscommon\traceapi.dll

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless Trace API Module

Original FileName: TraceAPI.DLL

File Version Label: 13, 0, 0, 2

File Version Number: 13.0.0.2

SHA-1 Digest: 0x6F72302D286CA7BB5E8A93186733916EBD30B0FA

MD5 Digest: 0x35BDEAAE8C73AD13045D16A58A5D712B

CRC32 Digest: 0x1FF3A6F9

Rootkit Property: Normal

File Size: 622592 bytes

File: c:\program files\common files\microsoft shared\office11\mso.dll

Product: Microsoft Office 2003

Product Version: 11.0.8329

Company: Microsoft Corporation

Description: Microsoft Office 2003 component

Original FileName: MSO.DLL

File Version Label: 11.0.8329

File Version Number: 11.0.8329.0

SHA-1 Digest: 0x25A82FFCA7B00A11E7AC95F1AD1B817C38248CD7

MD5 Digest: 0x3C2154AD1A6EC5E5F0634209B24E2AFB

Page 373: Prev

CRC32 Digest: 0x1F2C47EC

Rootkit Property: Normal

File Size: 12278608 bytes

File: c:\program files\common files\microsoft shared\office11\msoxev.dll

Product: Microsoft Office InfoPath

Product Version: 11.0.8161

Company: Microsoft Corporation

Description: XEV

Original FileName: msoxev.dll

File Version Label: 11.0.8161

File Version Number: 11.0.8161.0

SHA-1 Digest: 0x9DD6423B12177B80AC70E4758549258A1D7AD06F

MD5 Digest: 0x47E426BA8119476A9FAF50826CDCE17E

CRC32 Digest: 0x617AAFFC

Rootkit Property: Normal

File Size: 45408 bytes

File: c:\program files\common files\microsoft shared\office11\riched20.dll

Product: Microsoft RichEdit Control, version 5.0

Product Version: 5.0

Company: Microsoft Corporation

Description: Rich Text Edit Control, v5.0

Original FileName: MsftEdit.dll

File Version Label: 5.50.99.2050

Page 374: Prev

File Version Number: 5.50.99.2050

SHA-1 Digest: 0x6812CAE360D1DB8865EF5AEEEF73811822B4B7AA

MD5 Digest: 0xCCD29FA246D747847029FC31D77E8DAC

CRC32 Digest: 0xE65353D2

Rootkit Property: Normal

File Size: 1103280 bytes

File: c:\program files\common files\microsoft shared\office11\usp10.dll

Product: Microsoft(R) Uniscribe Unicode script processor

Product Version: 1.0626.6000.21258

Company: Microsoft Corporation

Description: Uniscribe Unicode script processor

Original FileName: Uniscribe

File Version Label: 1.0626.6000.21258 (vista_ldr.100416-0345)

File Version Number: 1.626.6000.21258

SHA-1 Digest: 0x946C1E9ACA7FFE40739497D97F2555E509C9F0E2

MD5 Digest: 0x25F871603C32AA61BBE5B292521F5772

CRC32 Digest: 0xAEFFBB4F

Rootkit Property: Normal

File Size: 503296 bytes

File: c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppsvc.exe

Product: Microsoft® Office

Product Version: 14.0.0370.400

Company: Microsoft Corporation

Page 375: Prev

Description: Microsoft Office Software Protection Platform Service

Original FileName: osppsvc.exe

File Version Label: 14.0.0370.400 (longhorn(wmbla).090811-1833)

File Version Number: 14.0.370.400

SHA-1 Digest: 0x8CEAFDC6BCE33112C297702B06874CBBC2AD58F4

MD5 Digest: 0x928C8060A555F0622CC4CAC672B08573

CRC32 Digest: 0x9E199207

Rootkit Property: Normal

File Size: 4639136 bytes

File: c:\program files\common files\microsoft shared\proof\msspell3.dll

Product: Natural Language Components

Product Version: 3.1.3801

Company: Microsoft Corporation

Description: Microsoft Speller

Original FileName: MSSpell3.dll

File Version Label: 1.1.6215

File Version Number: 1.1.0.6215

SHA-1 Digest: 0xC76A0A70B47087487A1D1EBBFDC7FD4196D56C84

MD5 Digest: 0xF29A80F607703CA1FC5D25993CC7FEDA

CRC32 Digest: 0x0584FF55

Rootkit Property: Normal

File Size: 86016 bytes

File: c:\program files\common files\microsoft shared\source engine\ose.exe

Page 376: Prev

Product: Office Source Engine

Product Version: 14.0.4730.1010

Company: Microsoft Corporation

Description: Office Source Engine

Original FileName: ose.exe

File Version Label: 14.0.4730.1010

File Version Number: 14.0.4730.1010

SHA-1 Digest: 0x835E982347DB919A681BA12F3891F62152E50F0D

MD5 Digest: 0x9D10F99A6712E28F8ACD5641E3A7EA6B

CRC32 Digest: 0x8D3DAEF9

Rootkit Property: Normal

File Size: 149352 bytes

File: c:\program files\common files\microsoft shared\virtualization handler\cvhsvc.exe

Product: Microsoft Office 2010

Product Version: 14.0.4750.1000

Company: Microsoft Corporation

Description: Microsoft Office Client Virtualization Service

Original FileName: CVHSVC.exe

File Version Label: 14.0.4750.1000

File Version Number: 14.0.4750.1000

SHA-1 Digest: 0xFD36381C80DB84389716ADA419101B8F6AA1A301

MD5 Digest: 0x61A86809B62769643892BC0812B204AA

CRC32 Digest: 0x6EEA99AD

Rootkit Property: Normal

Page 377: Prev

File Size: 821664 bytes

File: c:\program files\common files\microsoft shared\web folders\msonsext.dll

Product: Web folders and Rosebud Windows Redistributable Package

Product Version: 14.0.4514.1004

Company: Microsoft Corporation

Description: Windows executable

Original FileName: msonsext.dll

File Version Label: 14.0.4514.1004

File Version Number: 14.0.4514.1004

SHA-1 Digest: 0x829677F3F2F02FF530857053E4112A2FF0BBE793

MD5 Digest: 0x94C9DE12DA11A5B919C2A8546ECCD2D7

CRC32 Digest: 0xDED3B2C6

Rootkit Property: Normal

File Size: 987488 bytes

File: c:\program files\common files\nokia\codecs\emzamrnbenc.dll

Product: HipMedia Suite

Product Version: 2.9.0.0000

Company: Emuzed Inc.

Description: Emuzed GSM AMR-NB Encoder DMO

Original FileName: EmzAMRNBEnc.DLL

File Version Label: 2.9.0.000

File Version Number: 2.9.0.0

SHA-1 Digest: 0x42E834C6913FDA510947C70AAF2EAA02831E93D6

Page 378: Prev

MD5 Digest: 0xD7AB577FA5F8847DDE1912B238699100

CRC32 Digest: 0x3EBA0942

Rootkit Property: Normal

File Size: 258048 bytes

File: c:\program files\common files\nokia\codecs\emzamrwbenc.dll

Product: HipMedia Suite

Product Version: 2.9.0.0000

Company: Emuzed Inc.

Description: Emuzed GSM AMR-WB Encoder DMO

Original FileName: EmzAMRWBEnc.DLL

File Version Label: 2.9.0.0000

File Version Number: 2.9.0.0

SHA-1 Digest: 0x95BE4C43E4427BC9DF455026F03F324B1A555BFF

MD5 Digest: 0x357F1556FA3A6CA1AC99CBEB20ED3BEA

CRC32 Digest: 0xDD8D4278

Rootkit Property: Normal

File Size: 266240 bytes

File: c:\program files\common files\nokia\codecs\emzmp3encdmo.dll

Product: HipMedia Suite

Product Version: 2.9.0.0000

Company: Emuzed Inc.

Description: Emuzed MP3 Encoder DMO

Original FileName: EmzMP3EncDMO.DLL

Page 379: Prev

File Version Label: 2.9.0.0000

File Version Number: 2.9.0.0

SHA-1 Digest: 0x55F66F44EC1B62BE86738FA51F3B9BC28EDBF587

MD5 Digest: 0x7B0E9A7D793601A4DBDD89390BC5FE54

CRC32 Digest: 0xC078958B

Rootkit Property: Normal

File Size: 245760 bytes

File: c:\program files\common files\symantec shared\ccalert.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Alert and Notification

Original FileName: CCALERT.DLL

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x19B438DAFCCA2707CC1550B2A55AF0EBE159E795

MD5 Digest: 0xAC3DA10512F2455FF95F659EF364A4E2

CRC32 Digest: 0x732E6BA3

Rootkit Property: Normal

File Size: 222880 bytes

File: c:\program files\common files\symantec shared\ccapp.exe

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Page 380: Prev

Company: Symantec Corporation

Description: Symantec User Session

Original FileName: ccApp.exe

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xF610DCDA5E19EFB616FAA9A4B9DBAC6BFB0FB76D

MD5 Digest: 0x1918A1D8E67A6452720797919FA520C9

CRC32 Digest: 0xB223AABD

Rootkit Property: Normal

File Size: 52896 bytes

File: c:\program files\common files\symantec shared\ccdec.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Decomposer Engine

Original FileName: ccDec.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xE7C0AA065B51CB4B7F9826F7885A8B43324DB4BE

MD5 Digest: 0x1F97862E333CA88C0FA70532B8C835D0

CRC32 Digest: 0x94C72EEB

Rootkit Property: Normal

File Size: 67232 bytes

Page 381: Prev

File: c:\program files\common files\symantec shared\ccevtmgr.exe

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Event Manager Service

Original FileName: ccEvtMgr.exe

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xD42A19BA7D3AE3EE0A080F290F50CBCF066B9E45

MD5 Digest: 0x0A6786C95A6F8715AA4285E3C27F201F

CRC32 Digest: 0xE49ECA08

Rootkit Property: Normal

File Size: 192160 bytes

File: c:\program files\common files\symantec shared\ccl40.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Library

Original FileName: ccL40.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xAC7BB86247643B56CFD7BAC8107F28B7284A2440

MD5 Digest: 0x15ADFF075EEF6329A2A1DF2315CAEBEE

CRC32 Digest: 0xB60C41CC

Page 382: Prev

Rootkit Property: Normal

File Size: 378016 bytes

File: c:\program files\common files\symantec shared\cclogin.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Login Manager

Original FileName: ccLogin.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x1428CEAF76EB47A046E858BDDAC0090929249927

MD5 Digest: 0x44AC9B733A263379A7FAB41744EE5B77

CRC32 Digest: 0xAE7F8E36

Rootkit Property: Normal

File Size: 112288 bytes

File: c:\program files\common files\symantec shared\ccprosub.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Proxy Factory

Original FileName: ccProSub.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

Page 383: Prev

SHA-1 Digest: 0xAF2F6EBAEB36F682EADBDDBD06071D704393B221

MD5 Digest: 0x96238323FF5130263DE6E559533E776E

CRC32 Digest: 0x5D58CFDD

Rootkit Property: Normal

File Size: 67232 bytes

File: c:\program files\common files\symantec shared\ccproxy.exe

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Network Proxy Service

Original FileName: ccProxy.exe

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xBA749ECE2339A642B1501DEF03ABFE6B5E11674A

MD5 Digest: 0xF4CBCA2089A8419BF3397A1BC248C54D

CRC32 Digest: 0xCA1FEE57

Rootkit Property: Normal

File Size: 202400 bytes

File: c:\program files\common files\symantec shared\ccpxyevt.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Proxy Event Factory

Page 384: Prev

Original FileName: ccPxyEvt.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xE66A119DF7DF4B8F09B91590B887201A93AE6A36

MD5 Digest: 0xACF90909394ED33B8B9E85C22AEDD3D5

CRC32 Digest: 0xA5947986

Rootkit Property: Normal

File Size: 276128 bytes

File: c:\program files\common files\symantec shared\ccscan.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Scan Engine

Original FileName: CCSCAN.DLL

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x44934B49B955D8E53F72AAD2E8BFDE6698B24FAC

MD5 Digest: 0x6CE722265DC331133812AEBB5A38825B

CRC32 Digest: 0xE14A2335

Rootkit Property: Normal

File Size: 211104 bytes

File: c:\program files\common files\symantec shared\ccset.dll

Product: Client and Host Security Platform

Page 385: Prev

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Settings Manager Engine

Original FileName: ccSet.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xAEE5DD4E97E66909DB78CB80F2315A9B800C4655

MD5 Digest: 0x151EE08397049423EBCECC2100008E45

CRC32 Digest: 0xE0BF0FA2

Rootkit Property: Normal

File Size: 91808 bytes

File: c:\program files\common files\symantec shared\ccsetevt.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Settings Manager Event Factory

Original FileName: ccSetEvt.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x753D856FDDC7FFE02373DBC1050A83C317B1A8FB

MD5 Digest: 0xDC9D956BF7551FF77FC91F6A5B05BC5F

CRC32 Digest: 0xF7F943D4

Rootkit Property: Normal

File Size: 87712 bytes

Page 386: Prev

File: c:\program files\common files\symantec shared\ccsetmgr.exe

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Settings Manager Service

Original FileName: ccSetMgr.exe

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xCBD6E6FA9D35C07DB7AFC6027573516DC3E5CA97

MD5 Digest: 0x3B4898CF051BB04FB76E94361E336A83

CRC32 Digest: 0xF66A9AA7

Rootkit Property: Normal

File Size: 169632 bytes

File: c:\program files\common files\symantec shared\ccvrtrst.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Trust Validation Engine

Original FileName: ccVrTrst.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xA1AA11DB38BF0AB3C9EE3BEAD2EB7A3C2D373677

MD5 Digest: 0xBA24A4B808DCAC8BA6261844748B817C

Page 387: Prev

CRC32 Digest: 0xA8F44473

Rootkit Property: Normal

File Size: 100000 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0x8A81582E0D013E6F67FDB375360D26CFBFE3580D

MD5 Digest: 0x700D2D7A780364F9EA961E1C7E2EB72E

CRC32 Digest: 0x2D1F5DA0

Rootkit Property: Normal

File Size: 75368 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2amg.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2AMG.DLL

File Version Label: 3.15.3

Page 388: Prev

File Version Number: 3.15.3.0

SHA-1 Digest: 0x8F39CBFE679C059F979CFE9721031BEEFCC0DCB3

MD5 Digest: 0x6805108E44B0F2F1A03053BD54D6C7F5

CRC32 Digest: 0xDBDA8AD5

Rootkit Property: Normal

File Size: 104040 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2arj.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2ARJ.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0xBB31AAD818E68233FC3EA3E842D4A43E70FA72EC

MD5 Digest: 0xEE7476A2BB96F533A51E39B12703C1F0

CRC32 Digest: 0x011B229F

Rootkit Property: Normal

File Size: 63080 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2cab.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Page 389: Prev

Description: File Decomposer Component

Original FileName: DEC2CAB.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0xEA3DD3A8E56F63E8DF2629B1BF0816A8C0321ABA

MD5 Digest: 0x6DAF1E7A742ACE53A5D692D161779BDA

CRC32 Digest: 0x655BEE49

Rootkit Property: Normal

File Size: 79464 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2gzip.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2GZIP.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0x69B41A04F508881ACCB0D373F6E8FB6B1419A537

MD5 Digest: 0x00335ABCAEAC9555719EFDF0CBB89AB5

CRC32 Digest: 0xEA485084

Rootkit Property: Normal

File Size: 95848 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2id.dll

Page 390: Prev

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2ID.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0xCE049311F499353C0FEA6D6D50CD400B190B7C3C

MD5 Digest: 0xCED7DC454023A2A7B245498FAEACAE58

CRC32 Digest: 0x33B8DE13

Rootkit Property: Normal

File Size: 54888 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2lha.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2LHA.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0x1135C619F229DFE489EE36C74917868254BF7748

MD5 Digest: 0xDE4C4FE9F14BAF60CA2469C69C08D87A

CRC32 Digest: 0xC4B9F696

Rootkit Property: Normal

Page 391: Prev

File Size: 83560 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2lz.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2LZ.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0x8E499644C4A9B0B75603E8BF41CE6C68A5E0E0DC

MD5 Digest: 0xA2CE40FE5FD18935734B20DD494861A1

CRC32 Digest: 0x96F047D9

Rootkit Property: Normal

File Size: 45160 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2rar.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2RAR.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0x4CFD30796CAF12DE5583DAF7606A6C1FCBFF529B

Page 392: Prev

MD5 Digest: 0xA518E1B01FB8A9F80816002B62A3AF6E

CRC32 Digest: 0xB92B1B8A

Rootkit Property: Normal

File Size: 136808 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2rtf.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2RTF.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0xF65F9823CAC09A3D9EB18DBDA2A843D91FD98567

MD5 Digest: 0xE83EC8711BCFB0E398A1B2834BACD646

CRC32 Digest: 0xCD4A8082

Rootkit Property: Normal

File Size: 75368 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2ss.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2SS.DLL

Page 393: Prev

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0xD80155D3679DC9B31DD29A21063B008C681DB819

MD5 Digest: 0xB5DABA1662F04241D046868F9BD819B2

CRC32 Digest: 0xC3AE6DC9

Rootkit Property: Normal

File Size: 87656 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2tar.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2TAR.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0xB3864625B7E008567995A2E50DB25DEA6B51297D

MD5 Digest: 0x95B9110DD628B24FE57B84F1FC4CE2C6

CRC32 Digest: 0x0E6D9F2C

Rootkit Property: Normal

File Size: 50792 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2text.dll

Product: File Decomposer

Product Version: 3.15.3

Page 394: Prev

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2TEXT.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0xDB7AFA42F696796F60A4A00417773F04F855601B

MD5 Digest: 0xCCB743EB8CFB306B155861DD54E55DB5

CRC32 Digest: 0xEA725A16

Rootkit Property: Normal

File Size: 222824 bytes

File: c:\program files\common files\symantec shared\decomposers\dec2tnef.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2TNEF.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0x85E1E2DAE5F55EE6F7871CF4746E2A25822CCA46

MD5 Digest: 0xB7202442245F48BC07920F52028AC85D

CRC32 Digest: 0x111E8ECD

Rootkit Property: Normal

File Size: 87656 bytes

Page 395: Prev

File: c:\program files\common files\symantec shared\decomposers\dec2zip.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DEC2ZIP.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0xAFAB03781EB6ACC7D286B2AC7B4BBD52C84E2578

MD5 Digest: 0x9FF912DB49BA2059B08799AAD0846F6E

CRC32 Digest: 0x76BB7F65

Rootkit Property: Normal

File Size: 214632 bytes

File: c:\program files\common files\symantec shared\decomposers\decsdk.dll

Product: File Decomposer

Product Version: 3.15.3

Company: Symantec Corporation

Description: File Decomposer Component

Original FileName: DECSDK.DLL

File Version Label: 3.15.3

File Version Number: 3.15.3.0

SHA-1 Digest: 0x0AC6B63EB10C44BBC8A641AD055BBC13031F8738

MD5 Digest: 0x73D1D93BB813839C3535483EF50DBECA

CRC32 Digest: 0x453EA666

Page 396: Prev

Rootkit Property: Normal

File Size: 43112 bytes

File: c:\program files\common files\symantec shared\dphtml.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec HTML Data Processor

Original FileName: DPHTML.DLL

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x2D59E0B5BC8F2F3771B4AD7E8B6285A08A730E24

MD5 Digest: 0xC8DF3145817CD73037FD4AB1D28BF2F8

CRC32 Digest: 0x5DD1C9A2

Rootkit Property: Normal

File Size: 136864 bytes

File: c:\program files\common files\symantec shared\dphttp.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec HTTP Data Processor

Original FileName: DPHTTP.DLL

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

Page 397: Prev

SHA-1 Digest: 0x0D2538AEA73989D4433AF2BF94A109902C91A974

MD5 Digest: 0xD3716CBB9F526DB2B0C7E11F9464C596

CRC32 Digest: 0xF22A4E82

Rootkit Property: Normal

File Size: 91808 bytes

File: c:\program files\common files\symantec shared\dpjs.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec JavaScript Data Processor

Original FileName: DPJS.DLL

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xD4470D4F43315B452F0EDF7C15FA57E493F60E3A

MD5 Digest: 0xA5F149648A301A98E7A80BCCA96A6256

CRC32 Digest: 0x02D533AE

Rootkit Property: Normal

File Size: 59040 bytes

File: c:\program files\common files\symantec shared\dpvbs.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec VBScript Data Processor

Page 398: Prev

Original FileName: DPVBS.DLL

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x62C89BB9144CC739E1E01F0C1056D58219F4EE7F

MD5 Digest: 0x8BF5A7C014F48FFB2F52D4840F05D3A1

CRC32 Digest: 0x838E4F84

Rootkit Property: Normal

File Size: 54944 bytes

File: c:\program files\common files\symantec shared\ecmldr32.dll

Product: ECOM Loader

Product Version: 51.3.0.11

Company: Symantec Corporation

Description: Symantec Engine Common Object Model Loader

Original FileName: ecmldr32.DLL

File Version Label: 51.3.0.11

File Version Number: 51.3.0.11

SHA-1 Digest: 0xEEA8B258A5DC6BBE3DB36897C0B5E65C7F725839

MD5 Digest: 0xBF4D6C3965216739DA4D8B162A87D4A1

CRC32 Digest: 0x7552E5BA

Rootkit Property: Normal

File Size: 54904 bytes

File: c:\program files\common files\symantec shared\eengine\eectrl.sys

Product: ERASER ENGINE

Page 399: Prev

Product Version: 110.1.0.78

Company: Symantec Corporation

Description: Symantec Eraser Control Driver

Original FileName: eeCtrl.sys

File Version Label: 110.1.0.78

File Version Number: 110.1.0.78

SHA-1 Digest: 0x9C405183CA1B5E8B7F54276256756404AC2DD13D

MD5 Digest: 0x089296AEDB9B72B4916AC959752BDC89

CRC32 Digest: 0xBC56290D

Rootkit Property: Normal

File Size: 371248 bytes

File: c:\program files\common files\symantec shared\eengine\eraserutilrebootdrv.sys

Product: ERASER ENGINE

Product Version: 110.1.0.78

Company: Symantec Corporation

Description: Symantec Eraser Utility Driver

Original FileName: eraser.sys

File Version Label: 110.1.0.78

File Version Number: 110.1.0.78

SHA-1 Digest: 0x55CEC34955C2F6E5AA35CD81D84ECC83095F6A91

MD5 Digest: 0x850259334652D392E33EE3412562E583

CRC32 Digest: 0x87D33748

Rootkit Property: Normal

File Size: 102448 bytes

Page 400: Prev

File: c:\program files\common files\symantec shared\options\vtcache.dll

Product: Symantec Shared Component

Product Version: 2005.3

Company: Symantec Corporation

Description: VT Cache

Original FileName: VTCache.dll

File Version Label: 2005.3.0.58

File Version Number: 2005.3.0.58

SHA-1 Digest: 0x264D05C15CEF6ABF2457226E446E53117CF6D6A9

MD5 Digest: 0x45ADAF496847578FF481AD32E7EB3436

CRC32 Digest: 0xD48D2B0A

Rootkit Property: Normal

File Size: 63112 bytes

File: c:\program files\common files\symantec shared\pfmisc.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Miscellaneous Proxy Filter

Original FileName: PFMisc.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x6E6752D9298FF34E73DA7260BB180CDD955A70B3

MD5 Digest: 0x2D7833B71645FA973E3FAD4597FCD47A

Page 401: Prev

CRC32 Digest: 0xC92538F0

Rootkit Property: Normal

File Size: 44192 bytes

File: c:\program files\common files\symantec shared\pfpriv.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Privacy Proxy Filter

Original FileName: PFPriv.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xE0996059D8872C77BED8BC4E340F3D85B6262BA8

MD5 Digest: 0xE53E72945E86AF55B11463AD03F9C729

CRC32 Digest: 0x0EF774AF

Rootkit Property: Normal

File Size: 100000 bytes

File: c:\program files\common files\symantec shared\pfsec.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Security Proxy Filter

Original FileName: PFSec.dll

File Version Label: 104.0.11.1

Page 402: Prev

File Version Number: 104.0.11.1

SHA-1 Digest: 0xB8C0B0673743D4E5083EF0C861C326B5B014E739

MD5 Digest: 0xD1ABA5FE656B9B8702A1E971B62B450C

CRC32 Digest: 0x1BE28DB7

Rootkit Property: Normal

File Size: 54944 bytes

File: c:\program files\common files\symantec shared\pxyhttp.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec HTTP Proxy

Original FileName: PxyHTTP.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xE38AA0DF93D31C1B0FE5A403ED277D99CFF98138

MD5 Digest: 0x01F862E5BEAFF1573CF97ED960663F57

CRC32 Digest: 0x652FECF5

Rootkit Property: Normal

File Size: 83616 bytes

File: c:\program files\common files\symantec shared\pxyim.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Page 403: Prev

Description: Symantec IM Proxy

Original FileName: PxyIM.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xE7EDA0F8356B66563DE48530FB06A7B2C35BDB09

MD5 Digest: 0x7C88DE363DBB63FC56BE476414B62214

CRC32 Digest: 0x45329FE8

Rootkit Property: Normal

File Size: 26784 bytes

File: c:\program files\common files\symantec shared\sndsrvc.exe

Product: Symantec Security Drivers

Product Version: 6.0

Company: Symantec Corporation

Description: Network Driver Service

Original FileName: SndSrvc.exe

File Version Label: 6.0.4.402

File Version Number: 6.0.4.402

SHA-1 Digest: 0x11A33AB554E776E7C9C53EF9F71A93DF58485B78

MD5 Digest: 0x0D411EEA92751C1ECD8453892F41E726

CRC32 Digest: 0xBAA5D623

Rootkit Property: Normal

File Size: 214720 bytes

File: c:\program files\common files\symantec shared\spbbc\spbbcdrv.sys

Page 404: Prev

Product: SPBBC

Product Version: 2.2.0.7

Company: Symantec Corporation

Description: SPBBC Driver

Original FileName: SPBBCDrv.sys

File Version Label: 2.2.0.7

File Version Number: 2.2.0.7

SHA-1 Digest: 0xBE1F815A83986051F1082645A6740756FB11553A

MD5 Digest: 0x677B10906838D3BFB1C07AC9087E4BF7

CRC32 Digest: 0xB65FCC5B

Rootkit Property: Normal

File Size: 389776 bytes

File: c:\program files\common files\symantec shared\spbbc\spbbcevt.dll

Product: SPBBC

Product Version: 2.2.0.7

Company: Symantec Corporation

Description: SPBBC Events

Original FileName: SPBBCEvt.dll

File Version Label: 2.2.0.7

File Version Number: 2.2.0.7

SHA-1 Digest: 0x31583132B38C9A386DAD3A236933696BB5F00CFC

MD5 Digest: 0xCF723424516314E7903551817D42C9F9

CRC32 Digest: 0x2A3A84E5

Rootkit Property: Normal

Page 405: Prev

File Size: 714384 bytes

File: c:\program files\common files\symantec shared\spbbc\spbbcsvc.exe

Product: SPBBC

Product Version: 2.2.0.7

Company: Symantec Corporation

Description: SPBBC Service

Original FileName: SPBBCSvc.exe

File Version Label: 2.2.0.7

File Version Number: 2.2.0.7

SHA-1 Digest: 0x9C377C892BDA358932942876207E901EC383A1B8

MD5 Digest: 0xC830007369E18A54AED23B5BB3AFA2BA

CRC32 Digest: 0x2D77B7DC

Rootkit Property: Normal

File Size: 1160848 bytes

File: c:\program files\common files\symantec shared\ssc\scscomms.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec Client Security Management Communications

Original FileName: SCSCOMMS.DLL

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0x595BC11F6FD13BD729E9D91EAD8D1933067C0FD4

Page 406: Prev

MD5 Digest: 0xFE8F065EA7F7344556764F07F027C481

CRC32 Digest: 0x39258780

Rootkit Property: Normal

File Size: 1028336 bytes

File: c:\program files\common files\symantec shared\ssc\transman.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0xFC773C5E5FCBADB336A5F4FD3A429D3607E3A72F

MD5 Digest: 0x3EDE46B8A1291AF48C2B4D606CA94681

CRC32 Digest: 0x4EC6BDEA

Rootkit Property: Normal

File Size: 461552 bytes

File: c:\program files\common files\symantec shared\ssc\vpshell2.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

Page 407: Prev

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0xAD2A63F577F799D34734599E3637FBFFFBE84116

MD5 Digest: 0xD2326C8989A89FA7A1AAFFBA1BC40133

CRC32 Digest: 0x6A66B0A9

Rootkit Property: Normal

File Size: 47344 bytes

File: c:\program files\common files\system\ado\msado15.dll

Product: Microsoft Data Access Components

Product Version: 2.81.3012.0

Company: Microsoft Corporation

Description: Microsoft Data Access - ActiveX Data Objects

Original FileName: msado15.dll

File Version Label: 2.81.3012.0 (xpsp_sp3_gdr.101108-1643)

File Version Number: 2.81.3012.0

SHA-1 Digest: 0xAFAFA8ECAA88FDCB69223D39C4A4513AF9A3C301

MD5 Digest: 0x26687D8E9FEED2EBAB77670C72007B48

CRC32 Digest: 0xB7EF00C2

Rootkit Property: Normal

File Size: 536576 bytes

File: c:\program files\common files\system\msadc\msadce.dll

Product: Microsoft Data Access Components

Product Version: 2.81.3002.0

Page 408: Prev

Company: Microsoft Corporation

Description: Microsoft Data Access - OLE DB Cursor Engine

Original FileName: msadce.dll

File Version Label: 2.81.3002.0 (xpsp_sp3_gdr.080501-1247)

File Version Number: 2.81.3002.0

SHA-1 Digest: 0xF0EBF963A46EDDC9307ADE8AF60DB3E14BBB3537

MD5 Digest: 0x142CEDECAE89E372EE347681C3FBB257

CRC32 Digest: 0x1F35277D

Rootkit Property: Normal

File Size: 331776 bytes

File: c:\program files\common files\system\msadc\msadcer.dll

Product: Microsoft Data Access Components

Product Version: 2.81.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - OLE DB Cursor Engine Resources

Original FileName: msadcer.dll

File Version Label: 2.81.1132.0 (xpsp.080413-0852)

File Version Number: 2.81.1132.0

SHA-1 Digest: 0x081D67447A0294EFB58B81406355B26C514EABEE

MD5 Digest: 0x81E9041DAC0983AACE5C8920AF73D64E

CRC32 Digest: 0x217A6833

Rootkit Property: Normal

File Size: 20480 bytes

Page 409: Prev

File: c:\program files\common files\system\ole db\msdaps.dll

Product: Microsoft Data Access Components

Product Version: 2.81.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - OLE DB Interface Proxies/Stubs

Original FileName: msdaps.dll

File Version Label: 2.81.1132.0 (xpsp.080413-0852)

File Version Number: 2.81.1132.0

SHA-1 Digest: 0xCE7BC510EAAA8CBC58D97AA993B29DE714780979

MD5 Digest: 0x90C12209E574F0E4BD304B259E3EBA15

CRC32 Digest: 0x399ACDDA

Rootkit Property: Normal

File Size: 204800 bytes

File: c:\program files\common files\system\ole db\msdasql.dll

Product: Microsoft Data Access Components

Product Version: 2.81.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - OLE DB Provider for ODBC Drivers

Original FileName: msdasql.dll

File Version Label: 2.81.1132.0 (xpsp.080413-0852)

File Version Number: 2.81.1132.0

SHA-1 Digest: 0x3B212D7F391E86C2441EDE27C05DCE7491612A96

MD5 Digest: 0x1ED4C96EC76C3DDFCABD7644DA23F4B6

CRC32 Digest: 0xCB22756B

Page 410: Prev

Rootkit Property: Normal

File Size: 315392 bytes

File: c:\program files\common files\system\ole db\msdasqlr.dll

Product: Microsoft Data Access Components

Product Version: 2.81.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - OLE DB Provider for ODBC Drivers Resources

Original FileName: msdasqlr.dll

File Version Label: 2.81.1132.0 (xpsp.080413-0852)

File Version Number: 2.81.1132.0

SHA-1 Digest: 0x417447D0BE020DC76D4CD4520C92E102FD1952D2

MD5 Digest: 0x8985FCECE06A74017E23DDD093E34D4E

CRC32 Digest: 0x9FB1F35F

Rootkit Property: Normal

File Size: 16384 bytes

File: c:\program files\common files\system\ole db\msdatl3.dll

Product: Microsoft Data Access Components

Product Version: 2.81.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - OLE DB Implementation Support Routines

Original FileName: msdatl3.dll

File Version Label: 2.81.1132.0 (xpsp.080413-0852)

File Version Number: 2.81.1132.0

Page 411: Prev

SHA-1 Digest: 0x01D4933BBD3328124DB94A053D7271B1C0348244

MD5 Digest: 0x73BAFFA0B02320690CDC606241078CE4

CRC32 Digest: 0x0D6DB567

Rootkit Property: Normal

File Size: 94208 bytes

File: c:\program files\common files\system\ole db\oledb32.dll

Product: Microsoft Data Access Components

Product Version: 2.81.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - OLE DB Core Services

Original FileName: oledb32.dll

File Version Label: 2.81.1132.0 (xpsp.080413-0852)

File Version Number: 2.81.1132.0

SHA-1 Digest: 0x604EED033F0E9528D5B72B097BCBC090391090E7

MD5 Digest: 0xDC095DB6D468CB5B653E05F865487E57

CRC32 Digest: 0x36AC9121

Rootkit Property: Normal

File Size: 487424 bytes

File: c:\program files\common files\system\ole db\oledb32r.dll

Product: Microsoft Data Access Components

Product Version: 2.81.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - OLE DB Core Services Resources

Page 412: Prev

Original FileName: oledb32r.dll

File Version Label: 2.81.1132.0 (xpsp.080413-0852)

File Version Number: 2.81.1132.0

SHA-1 Digest: 0xE70F2E9A5017B56E780C44953C5AC892FC762B0E

MD5 Digest: 0xF86A2C7C279C746D5C5E06941ED4C337

CRC32 Digest: 0xE50FA0B3

Rootkit Property: Normal

File Size: 65536 bytes

File: c:\program files\conexant\cnxt_modem_hdaudio_ven_14f1&dev_2bfa&subsys_10140588\hxfsetup.exe

Product: Conexant Universal Device Install/Uninstall Application

Product Version: 2.2.2.7

Company: Conexant Systems, Inc.

Description: Conexant Universal Device Install/Uninstall Application

Original FileName:

File Version Label: 2.2.2.7

File Version Number: 2.2.2.7

SHA-1 Digest: 0x21A2C2B027BAD0F78DF273F71A76C399A8D21C68

MD5 Digest: 0x5582DDDED231DBA93B61AB4F25DE42BE

CRC32 Digest: 0x2848CC46

Rootkit Property: Normal

File Size: 555216 bytes

File: c:\program files\convert excel to html\unins000.exe

Product: Inno Setup

Page 413: Prev

Product Version:

Company:

Description: Setup/Uninstall

Original FileName:

File Version Label: 51.42.0.0

File Version Number: 51.42.0.0

SHA-1 Digest: 0x695438C0A2F2D78FD470D503F1AC51FA0AA54E29

MD5 Digest: 0xD6ABC3C44E97BEEEA534E33E93AE97B4

CRC32 Digest: 0x51069412

Rootkit Property: Normal

File Size: 673546 bytes

File: c:\program files\filezilla ftp client\fzshellext.dll

Product: fzshellext Dynamic Link Library

Product Version: 3, 3, 4, 1

Company:

Description: fzshellext Dynamic Link Library

Original FileName: fzshellext.dll

File Version Label: 3, 3, 4, 1

File Version Number: 3.3.4.1

SHA-1 Digest: 0x0C729977F9CE8B17DC95FA7B86A69DB6E6AB322B

MD5 Digest: 0xB2013803CE166169789B53B54FFF9277

CRC32 Digest: 0xBDEB87B7

Rootkit Property: Normal

File Size: 94208 bytes

Page 414: Prev

File: c:\program files\filezilla ftp client\uninstall.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xBC666CD7720CD0ED5B07969F26FE9E3B482E5643

MD5 Digest: 0x769E63B8F06844EB98D112386C725E1C

CRC32 Digest: 0x97310D6A

Rootkit Property: Normal

File Size: 63488 bytes

File: c:\program files\google\google talk\googletalk.exe

Product: Google Talk

Product Version: 1,0,0,105

Company: Google

Description: Google Talk

Original FileName: googletalk.exe

File Version Label: 1,0,0,105

File Version Number: 1.0.0.105

SHA-1 Digest: 0xE8158A95522C7D4E59048CDEF5EBE61CBBA22D27

MD5 Digest: 0xFDC694C06891E14DD5BE5B668E4A69E0

Page 415: Prev

CRC32 Digest: 0xA71F13AD

Rootkit Property: Normal

File Size: 3289088 bytes

File: c:\program files\google\google talk\uninstall.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x19171E3FA2A71DEBAC863D08A1AEF7BD59536AAD

MD5 Digest: 0xACF578C24C002A5596B168B0CB918E9E

CRC32 Digest: 0x9798FF73

Rootkit Property: Normal

File Size: 57628 bytes

File: c:\program files\huawei access manager\uninst.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

Page 416: Prev

File Version Number: 0.0.0.0

SHA-1 Digest: 0x1B37F859F2B8433E6E08D0679583A9FD70B12674

MD5 Digest: 0xDCCA2C187C19DFE0A6246FE4D86A77F8

CRC32 Digest: 0xDB73FA2E

Rootkit Property: Normal

File Size: 94892 bytes

File: c:\program files\ibm\java60\jre\bin\jp2ssv.dll

Product: IBM Developer Kit for Windows,Java,1.6.0

Product Version: 6.0.0-20100902_01

Company: IBM

Description: Java(TM) Platform SE binary

Original FileName: jp2ssv.dll

File Version Label: 6.0.0-20100902_01

File Version Number: 6.0.0.0

SHA-1 Digest: 0xF58701CA4F10081B9BA3BC55A04C8987D5CFA560

MD5 Digest: 0x49070217BFDCC25AE34035C2AF79267D

CRC32 Digest: 0x2FDEA9BC

Rootkit Property: Normal

File Size: 42248 bytes

File: c:\program files\ibm\java60\jre\bin\jqs.exe

Product: IBM Developer Kit for Windows,Java,1.6.0

Product Version: 6.0.0-20100902_01

Company: IBM

Page 417: Prev

Description: Java(TM) Quick Starter Service

Original FileName: jqs.exe

File Version Label: 6.0.0-20100902_01

File Version Number: 6.0.0.0

SHA-1 Digest: 0xF5F6D8F71030C2849D4566D801DBDF37FDB503A8

MD5 Digest: 0xDF38AF1F500CB75E2798361A1009769F

CRC32 Digest: 0x96636DAB

Rootkit Property: Normal

File Size: 152840 bytes

File: c:\program files\ibm\java60\jre\bin\msvcr71.dll

Product: Microsoft® Visual Studio .NET

Product Version: 7.10.3052.4

Company: Microsoft Corporation

Description: Microsoft® C Runtime Library

Original FileName: MSVCR71.DLL

File Version Label: 7.10.3052.4

File Version Number: 7.10.3052.4

SHA-1 Digest: 0xB0CD0697F256F62A0818084B4FFBD425FEB86E29

MD5 Digest: 0x928C609C3E8BCCE7039117D7CA024E29

CRC32 Digest: 0xCEF06DF0

Rootkit Property: Normal

File Size: 353544 bytes

File: c:\program files\ibm\java60\jre\bin\ssv.dll

Page 418: Prev

Product: IBM Developer Kit for Windows,Java,1.6.0

Product Version: 6.0.0-20100902_01

Company: IBM

Description: Java(TM) Platform SE binary

Original FileName: ssv.dll

File Version Label: 6.0.0-20100902_01

File Version Number: 6.0.0.0

SHA-1 Digest: 0xA42455AECAC20BC5E54FA0BF612A30185324374A

MD5 Digest: 0x77AC4E185DC483F7E36BC9A49D98E44A

CRC32 Digest: 0x05F1434E

Rootkit Property: Normal

File Size: 365832 bytes

File: c:\program files\ibm\java60\jre\lib\deploy\jqs\ie\jqs_plugin.dll

Product: IBM Developer Kit for Windows,Java,1.6.0

Product Version: 6.0.0-20100902_01

Company: IBM

Description: Java(TM) Quick Starter binary

Original FileName: JQSIEStartDetector.dll

File Version Label: 6.0.0-20100902_01

File Version Number: 6.0.0.0

SHA-1 Digest: 0x8FE07E5A4AE90D0C2AB6EBB79563EE3D468AD3C0

MD5 Digest: 0x8EF23A70E0E5E656AAB0CB07D7DE6BF1

CRC32 Digest: 0x08341892

Rootkit Property: Normal

Page 419: Prev

File Size: 79112 bytes

File: c:\program files\ibm\lotus\symphony\framework\shared\eclipse\plugins\com.ibm.productivity.tools.base.app.win32_3.5.0.20090605-2002\preload.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x00AA9B84ABCEA6F67A71D635ACFF1588065472F4

MD5 Digest: 0xB174494940CAC9D412BEA3B98D38B371

CRC32 Digest: 0xFF188496

Rootkit Property: Normal

File Size: 40960 bytes

File: c:\program files\ibm\mobility client\artstartsvc.exe

Product: IBM Mobility Client

Product Version: 6.1.1.0

Company: IBM

Description: IBM Mobility Client

Original FileName: artstartsvc.exe

File Version Label: 6.1.1.1260

File Version Number: 6.1.1.1260

SHA-1 Digest: 0x3B1ABC0CBE403E7543982F62A097C9F06C630448

Page 420: Prev

MD5 Digest: 0x816D9B6E73D17BBDB9D74FED1B10ACC0

CRC32 Digest: 0xCA58A023

Rootkit Property: Normal

File Size: 41472 bytes

File: c:\program files\ibm\mobility client\artsvc.exe

Product: IBM Mobility Client

Product Version: 6.1.1.0

Company: IBM

Description: IBM Mobility Client

Original FileName: artsvc.exe

File Version Label: 6.1.1.1260

File Version Number: 6.1.1.1260

SHA-1 Digest: 0x2666DD4756A913FCF8895BA1C07DB00A306D4B9F

MD5 Digest: 0x88B935F62E7B8091EFBC99ACCBCAC664

CRC32 Digest: 0xBBB99186

Rootkit Property: Normal

File Size: 98304 bytes

File: c:\program files\ibm\my help\plugins\com.ibm.myhelp.common_1.3.14\pmonmh.exe

Product:

Product Version:

Company:

Description:

Original FileName:

Page 421: Prev

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x1D057FFF59BE0246113C4EDF22921B993B0F6AC3

MD5 Digest: 0x93985E65CECE32603A2AA04401C12F00

CRC32 Digest: 0x5165A509

Rootkit Property: Normal

File Size: 184371 bytes

File: c:\program files\ibm\personal communications\atmgrtok.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: Personal Communications Attach Manager User Token Library

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x07E1200EC5246E1E01101687FF49A22C8BA0D2DE

MD5 Digest: 0xA45CBDE32C9F545AB3293504979BF810

CRC32 Digest: 0x2D4E0708

Rootkit Property: Normal

File Size: 53248 bytes

File: c:\program files\ibm\personal communications\defsecur.dll

Product: Personal Communications

Product Version: 5.7.1

Page 422: Prev

Company: IBM Corporation

Description: DEFSECUR DLL

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xAA699CD2BF3EE4153F2D780657C98CE6D35E42D2

MD5 Digest: 0x06E17C01D9DD43D25B24606FA343485C

CRC32 Digest: 0x8B229427

Rootkit Property: Normal

File Size: 32768 bytes

File: c:\program files\ibm\personal communications\message.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: MESSAGE.DLL

Original FileName: MESSAGE.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x14C35D79467472A98683295689D47FE39776789E

MD5 Digest: 0xA15655C54EC06C4BADAF6E5D009FF8B5

CRC32 Digest: 0xCC3E5E8E

Rootkit Property: Normal

File Size: 40960 bytes

Page 423: Prev

File: c:\program files\ibm\personal communications\millutil.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: Personal Communications Utilities

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xBF64AFA376D5AE1675B54ABE1DE88AF0A8FDC874

MD5 Digest: 0xD51429839F1825AC63EA3642467A3DCA

CRC32 Digest: 0x25FD07E7

Rootkit Property: Normal

File Size: 45056 bytes

File: c:\program files\ibm\personal communications\msgio.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: Message queuing facility for WinMill

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x4F60CC02133FCEBA4443803BA6191D2706797869

MD5 Digest: 0xD5B5A50AB9EB7C79EF73C4048D85F513

CRC32 Digest: 0x8A732D5E

Page 424: Prev

Rootkit Property: Normal

File Size: 28672 bytes

File: c:\program files\ibm\personal communications\nodeinit.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: SNA Configuration Initialization

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xCA3BCDC06C2FF1EA21846DC5B37220F292603DDC

MD5 Digest: 0x7B849875E83762188E5EE61E156446DB

CRC32 Digest: 0x18A2EB07

Rootkit Property: Normal

File Size: 77824 bytes

File: c:\program files\ibm\personal communications\oocsvcs2.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

Page 425: Prev

SHA-1 Digest: 0x7D20CF58B6B1C562AA825FB953D461E77F35A76A

MD5 Digest: 0x6B56DDBA706352945B9212E9FB817F2D

CRC32 Digest: 0x4EB9DBAD

Rootkit Property: Normal

File Size: 485376 bytes

File: c:\program files\ibm\personal communications\pcs_agnt.exe

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: Always Resident PComm Process

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x977802E3292D2405BACA561357D6F16DE8910019

MD5 Digest: 0x6157B47B8423FF2C0EF363FBE655A0D3

CRC32 Digest: 0x425D6948

Rootkit Property: Normal

File Size: 36864 bytes

File: c:\program files\ibm\personal communications\pcscapi.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: Configuration API function for WinMill

Page 426: Prev

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xD98D59520FD1ACB66B6F03207F3E6F13E7316DB7

MD5 Digest: 0xA7AD8614D71080D0D5DA857721397E42

CRC32 Digest: 0x5FF6FCA4

Rootkit Property: Normal

File Size: 94208 bytes

File: c:\program files\ibm\personal communications\pcsclib.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PCSCLIB.DLL

Original FileName: PCSCLIB.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x4C4FCA5E6093686CE39C084D8A3B638963724F41

MD5 Digest: 0xDCBBF1B90C76528C5E526912262806B2

CRC32 Digest: 0x004A549F

Rootkit Property: Normal

File Size: 91648 bytes

File: c:\program files\ibm\personal communications\pcsmsg.dll

Product: Personal Communications

Page 427: Prev

Product Version: 5.7.1

Company: IBM Corporation

Description: PCSMSG.DLL

Original FileName: PCSMSG.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x9EA7CEAFC73F3F47739BF62618D6DD86A9F079C2

MD5 Digest: 0xBA6FEF8E83B90D42EBDACB30874A392A

CRC32 Digest: 0x5D20CC6E

Rootkit Property: Normal

File Size: 28672 bytes

File: c:\program files\ibm\personal communications\pcspref.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PCSPREF.DLL

Original FileName: PCSPREF.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xC0E7EF7D453593F38039B5F7E21511648144125A

MD5 Digest: 0xDF35D88823AC52A700763BFC14750FBD

CRC32 Digest: 0xD91FC7C8

Rootkit Property: Normal

File Size: 121344 bytes

Page 428: Prev

File: c:\program files\ibm\personal communications\pcsrtmsn.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PCSRTMSN.DLL

Original FileName: PCSRTMSN.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xFF84BB66D9C5C942990F43A7A8A0E7F23E18CB43

MD5 Digest: 0x6317615C7B4A4BBA0B7FA1EF0DA29762

CRC32 Digest: 0xE8FEF53E

Rootkit Property: Normal

File Size: 17920 bytes

File: c:\program files\ibm\personal communications\pcstq.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PCSTQ.DLL

Original FileName: PCSTQ.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x866D5ABEF6A327F544C0A7BF116B8EE063CC1D76

MD5 Digest: 0x9F889DDA805CCEFF543F01040FB2049E

Page 429: Prev

CRC32 Digest: 0x461E9E4C

Rootkit Property: Normal

File Size: 33280 bytes

File: c:\program files\ibm\personal communications\pcsw32x.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PCSW32X DLL

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x6CD9ACC557D228204A6959A130E17D019C7BC65D

MD5 Digest: 0x67FFCA99FB0054820E69F4968B3869E5

CRC32 Digest: 0xC7087A74

Rootkit Property: Normal

File Size: 28672 bytes

File: c:\program files\ibm\personal communications\pcswlib.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PCSWLIB.DLL

Original FileName: PCSWLIB.DLL

File Version Label: 5070.10.5249.773

Page 430: Prev

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xCD50ED916AD7BB0384B75ACCE0AC5EAF2876C884

MD5 Digest: 0xB5028E50FE75A2C0542958DD6957138A

CRC32 Digest: 0x9F79C55B

Rootkit Property: Normal

File Size: 35328 bytes

File: c:\program files\ibm\personal communications\pcswlibi.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PCSWLIBI.DLL

Original FileName: PCSWLIBI.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x3961EE52471585285172BD9F340C8420B2DDDFD7

MD5 Digest: 0xEE1D426C33625936E11B5F1A39A2B707

CRC32 Digest: 0xCB259752

Rootkit Property: Normal

File Size: 5120 bytes

File: c:\program files\ibm\personal communications\pcszlib.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Page 431: Prev

Description: PCSZLIB.DLL

Original FileName: PCSZLIB.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xE98AC1FF5374F1A3C674C34AB6314DE9BA89DF46

MD5 Digest: 0x5F35D7B8CC5DBB655523A1DD833D3B3D

CRC32 Digest: 0x17FDB461

Rootkit Property: Normal

File Size: 7168 bytes

File: c:\program files\ibm\personal communications\spelling.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: Formatting Services

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xCD64C732E0DB2C62E5DC87AFB1D2D2682D92786F

MD5 Digest: 0xF996FB4F50F8B3051065E270E03FD554

CRC32 Digest: 0x954EF6F5

Rootkit Property: Normal

File Size: 77824 bytes

File: c:\program files\ibm\personal communications\tpam.exe

Page 432: Prev

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xC8E92313EB9162ECC0E2CDC4F52E88B221298781

MD5 Digest: 0x26F2CC97DD775EA6BAFB5399A7C77403

CRC32 Digest: 0x3C9E42C4

Rootkit Property: Normal

File Size: 28672 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\classic\core.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java runtime library

Original FileName: core.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0x97669BA070C8FA7DF9A2FF9AB7D151DEC0665F66

MD5 Digest: 0x46B819C49C89324C53D87749C5FD87F3

CRC32 Digest: 0x5B8C05D3

Rootkit Property: Normal

Page 433: Prev

File Size: 106496 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\classic\jvm.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java Virtual Machine

Original FileName: jvm.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0xDC4F1A669DA2039C31996AC97623ECEAA5D7D363

MD5 Digest: 0x7F864C2FA20036F43DF6818F992B2454

CRC32 Digest: 0x1D3092E8

Rootkit Property: Normal

File Size: 1454080 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\dbghelp.dll

Product: Debugging Tools for Windows(R)

Product Version: 6.0.0007.0

Company: Microsoft Corporation

Description: Windows Image Helper

Original FileName: DBGHELP.DLL

File Version Label: 6.0.0007.0 (DbgBuild.020301-1738)

File Version Number: 6.0.7.0

SHA-1 Digest: 0x663E9DC48A5F6766C6283557455188F35B8187D4

Page 434: Prev

MD5 Digest: 0xEB43E3C27E5FFD29131333CB69947B87

CRC32 Digest: 0x2D720F4A

Rootkit Property: Normal

File Size: 712192 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\dbgmalloc.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java debug malloc library

Original FileName: dbgmalloc.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0xAE1C7C890C76DB5B5CF683E39AF1638DC16405D6

MD5 Digest: 0x46261D86999063B6AD9136495CE4A500

CRC32 Digest: 0x2095D9EF

Rootkit Property: Normal

File Size: 24576 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\hpi.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java runtime library

Original FileName: hpi.dll

Page 435: Prev

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0xFC915837AA78C379982548238A7FC24BDA232EB1

MD5 Digest: 0x3ACAA8BF4F4AB3ED1279562B49FC84C7

CRC32 Digest: 0xBAE5D01B

Rootkit Property: Normal

File Size: 69632 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\java.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java runtime library

Original FileName: java.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0x2FC2CEBCEFE3B6EEF975BBE4D263F2226C110D9E

MD5 Digest: 0xBAA9F14A32BE80933244AD9F9DECAF52

CRC32 Digest: 0x1579A0B5

Rootkit Property: Normal

File Size: 106496 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\java.exe

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Page 436: Prev

Company: IBM

Description: Java launcher

Original FileName: java.exe

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0x173D14D4E1B0F23E34582FF9C0D9FF9348626E4B

MD5 Digest: 0x97F712E960D09FFFAF6F31DF25C907DB

CRC32 Digest: 0x8B7123AD

Rootkit Property: Normal

File Size: 43752 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\jitc.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Just-in-time Compiler library

Original FileName: jitc.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0x58DCE2B98A7A30752C48D6CC4D329210C1B335ED

MD5 Digest: 0xFA462DF5BA0A61B4F36F514CA22E9D86

CRC32 Digest: 0x08C72ADA

Rootkit Property: Normal

File Size: 2460188 bytes

Page 437: Prev

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\jsig.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java Signal Interpose library

Original FileName: jsig.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0xD6299D5685039ABC57754EDA5BADE0F00B174863

MD5 Digest: 0xC4392A90EF5D69A2179F6779462D1B6B

CRC32 Digest: 0x79EBFCF5

Rootkit Property: Normal

File Size: 24576 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\net.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java runtime library

Original FileName: net.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0x1075EBDA2E6EF47C449E54DBC37FE829EF57AB77

MD5 Digest: 0xCCA02D39B9C6700C304373317119D4D6

CRC32 Digest: 0x5FE59C95

Page 438: Prev

Rootkit Property: Normal

File Size: 106496 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\nio.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java runtime library

Original FileName: nio.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0x0FAB0DFADFB700F5F1901B04F556DD0C5C36B93D

MD5 Digest: 0x248CFFEE9AD2AA742F7DD292AB3BC671

CRC32 Digest: 0x5D3FA770

Rootkit Property: Normal

File Size: 49152 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\ute.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Universal Trace Engine library

Original FileName: ute.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

Page 439: Prev

SHA-1 Digest: 0xEC5E6BA8D8C3101460296BB940A1FD88AB5AB626

MD5 Digest: 0x4F5531FCEA533F9885182186290422C3

CRC32 Digest: 0x12552BA7

Rootkit Property: Normal

File Size: 106558 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\xhpi.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java runtime library

Original FileName: xhpi.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0x681A7EF172C2BAC7E181362FF52D327B7611BE63

MD5 Digest: 0x0920D44001DD1E4BE3D4012E2D3918E8

CRC32 Digest: 0xBBA052CC

Rootkit Property: Normal

File Size: 28672 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_jvm\jre\bin\zip.dll

Product: IBM Developer Kit for Windows, Java 2, 1.4.2

Product Version: 1.4.2.0

Company: IBM

Description: Java runtime library

Page 440: Prev

Original FileName: zip.dll

File Version Label: 142,0,2006,1124

File Version Number: 142.2006.11.24

SHA-1 Digest: 0xA970A901F625B326F50EA5B6858E9B9ED0232EFD

MD5 Digest: 0x6605F4F26FA86202610225A5523A8C63

CRC32 Digest: 0x2536D5D5

Rootkit Property: Normal

File Size: 69632 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\_uninst\uninstaller.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x5F90C6EF908A78183CD2879B9AEC9F7689489E84

MD5 Digest: 0xEA377F13669DEA0F780D2488D0859587

CRC32 Digest: 0xB68B503F

Rootkit Property: Normal

File Size: 336668 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\cds\cdsclient.dll

Product: IBM Tivoli Provisioning Manager for Dynamic Content Delivery

Page 441: Prev

Product Version: 1.3.2.1

Company: IBM

Description: DCD client library

Original FileName: CDSClient.dll

File Version Label: 001_20080708D

File Version Number: 1.3.2.1

SHA-1 Digest: 0xC9BC0E0246023A9E101BB1C5D9C5017AD6A5758B

MD5 Digest: 0x3CC20D8F01E93216FF55340B95559362

CRC32 Digest: 0xFAE264C3

Rootkit Property: Normal

File Size: 86016 bytes

File: c:\program files\ibm\tivoli\dcd\client\issi\cds\cdswinsrv.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x7A57611C18A468197BE1AF688B02998EBDBDFE3D

MD5 Digest: 0x12FD9D1DD86FE562EA04F17E0781E2A6

CRC32 Digest: 0x704CF509

Rootkit Property: Normal

File Size: 53248 bytes

Page 442: Prev

File: c:\program files\ibm\trace facility\fmt_util.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: Trace Formatter Utility DLL

Original FileName: FMT_UTIL.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x55ADE1E4137CAEB5D5756AC7A533DB78F163C398

MD5 Digest: 0xAD58DA8AA448248717A71354435BF1D6

CRC32 Digest: 0xB944138B

Rootkit Property: Normal

File Size: 24576 bytes

File: c:\program files\ibm\trace facility\nstrc.dll

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: Independent Trace Facility

Original FileName: NSTRC.DLL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xB6A8A80FF323F1D6484D235FAC29293F05ECFE52

MD5 Digest: 0x0F1866CE6E8FDCB67669EE36A4E58303

Page 443: Prev

CRC32 Digest: 0xF95487EF

Rootkit Property: Normal

File Size: 36864 bytes

File: c:\program files\installshield installation information\{75e7fee8-16b1-4b1d-82b4-9594a38edf76}\setup.exe

Product: IBM 32-bit Runtime Environment for Java v6

Product Version: 6

Company: IBM

Description: Setup Launcher

Original FileName: Setup.exe

File Version Label: 6

File Version Number: 16.0.0.400

SHA-1 Digest: 0xC9DAF311A566D76B2006C5EF415F962F83C07302

MD5 Digest: 0x7F339A4333706BB8B76CC76F5B95E8D0

CRC32 Digest: 0x562D6FE1

Rootkit Property: Normal

File Size: 987744 bytes

File: c:\program files\installshield installation information\{ca96f3a1-f350-11d3-b354-002035c150e4}\setup.exe

Product: InstallShield

Product Version: 15.0

Company: Acresso Software Inc.

Description: Setup.exe

Original FileName: Setup.exe

Page 444: Prev

File Version Label: 15.0.498

File Version Number: 15.0.0.498

SHA-1 Digest: 0x7C38F49F874DA346A4A3E4F3850D7CC287D83576

MD5 Digest: 0x8D699C26857440661FAD1AED839FFC79

CRC32 Digest: 0xC3197CEC

Rootkit Property: Normal

File Size: 393216 bytes

File: c:\program files\intel\wifi\bin\dbengine.dll

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless Secure DB Engine

Original FileName: DbEngine.DLL

File Version Label: 13, 0, 0, 0

File Version Number: 13.0.0.0

SHA-1 Digest: 0x3A5CE06B82D8D4D72A478379EA5A269AB9C410B1

MD5 Digest: 0xE6DF2C30CB80344F5D5648AC6C6FF0C4

CRC32 Digest: 0x1488BE43

Rootkit Property: Normal

File Size: 512000 bytes

File: c:\program files\intel\wifi\bin\evteng.exe

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Page 445: Prev

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless Event Log Service

Original FileName: EvtEng.EXE

File Version Label: 13, 0, 0, 0

File Version Number: 13.0.0.0

SHA-1 Digest: 0xCDBAD2EF1F7FADCFFE1D8FF8EEE25C011E79A4DF

MD5 Digest: 0xA57BE3307ADA2FC086B5B43135735283

CRC32 Digest: 0xF5009052

Rootkit Property: Normal

File Size: 858384 bytes

File: c:\program files\intel\wifi\bin\intstngs.dll

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless Application Settings Module

Original FileName: IntelSettings.DLL

File Version Label: 13, 0, 0, 0

File Version Number: 13.0.0.0

SHA-1 Digest: 0x9BFFBC4D782E4B2EDBD1050BBDBE2A52B64D3FEE

MD5 Digest: 0x4205E9FB60FACC3C850421A0BDC3BD59

CRC32 Digest: 0xBFB2268A

Rootkit Property: Normal

File Size: 503808 bytes

Page 446: Prev

File: c:\program files\intel\wifi\bin\iwmsprov.dll

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel PROSet/Wireless IWMS Provider

Original FileName: IWMSProv.dll

File Version Label: 13, 0, 0, 0

File Version Number: 13.0.0.0

SHA-1 Digest: 0x1162927B0AAC6D9F259CFF5584B545AC616AB38A

MD5 Digest: 0x7F4C4287E02D74ADBAD8B6A5E133E1CC

CRC32 Digest: 0xD30D3D46

Rootkit Property: Normal

File Size: 200704 bytes

File: c:\program files\intel\wifi\bin\kmmdlplugins\supplicantplugin.dll

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless Supplicant Plugin

Original FileName: SupplicantPlugin.dll

File Version Label: 13, 0, 0, 12

File Version Number: 13.0.0.12

SHA-1 Digest: 0xDDB04DB287BA62F2FDE583DB07A50E39B850EADD

MD5 Digest: 0xC800C4D9DA27C3C87AB52E81EDEA367D

CRC32 Digest: 0x706CFFC2

Page 447: Prev

Rootkit Property: Normal

File Size: 411920 bytes

File: c:\program files\intel\wifi\bin\kmmdlplugins\wscplugin.dll

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless WSC Plugin Module

Original FileName: WSCPlugin.dll

File Version Label: 13, 0, 0, 5

File Version Number: 13.0.0.5

SHA-1 Digest: 0xD13FB216BA991F1D3A18030EB61535A4D72CC6D1

MD5 Digest: 0x95D603250B7CC45461414C0125CA3DCA

CRC32 Digest: 0x7167802B

Rootkit Property: Normal

File Size: 461072 bytes

File: c:\program files\intel\wifi\bin\murocapi.dll

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless Muroc API Module

Original FileName: MurocApi.DLL

File Version Label: 13, 0, 0, 5

File Version Number: 13.0.0.5

Page 448: Prev

SHA-1 Digest: 0xC3FB6D32405F3F0FE3849A745DC7A41424172CE8

MD5 Digest: 0x965F5039DB9F6FA9FC7251119265B303

CRC32 Digest: 0xD6ABF8DD

Rootkit Property: Normal

File Size: 872448 bytes

File: c:\program files\intel\wifi\bin\pfmgrapi.dll

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless Profile Manager API Module

Original FileName: ProfileMgrApi.DLL

File Version Label: 13, 0, 0, 2

File Version Number: 13.0.0.2

SHA-1 Digest: 0xE04294CACC849772427F2440A88DA38FCFAB4FF5

MD5 Digest: 0xEBAE66FB53EF7DAC726096B5BA8A0D69

CRC32 Digest: 0x363231FF

Rootkit Property: Normal

File Size: 1605632 bytes

File: c:\program files\intel\wifi\bin\s24evmon.exe

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) Wireless Management Service

Page 449: Prev

Original FileName: S24EvMon.exe/iWMSSvc.dll

File Version Label: 13, 0, 0, 10

File Version Number: 13.0.0.10

SHA-1 Digest: 0xF8FF906D72A3D71BA81C43B35BE983915054CFAB

MD5 Digest: 0x87955061FD3789CA7A5C4C72A05A1A9F

CRC32 Digest: 0x2CC2429A

Rootkit Property: Normal

File Size: 954368 bytes

File: c:\program files\intel\wifi\bin\s24mudll.dll

Product: Intel(R) PROSet/Wireless

Product Version: 13, 0, 0, 0

Company: Intel(R) Corporation

Description: Intel(R) PROSet/Wireless S24EvMon Module

Original FileName: s24mudll.dll

File Version Label: 13, 0, 0, 1

File Version Number: 13.0.0.1

SHA-1 Digest: 0x5E16C337C8BA1CCF462AC1E43765947E812FDB3D

MD5 Digest: 0xAE8749D0DE92ECB7ABDC1BAF5F9061E9

CRC32 Digest: 0x6D66857B

Rootkit Property: Normal

File Size: 135168 bytes

File: c:\program files\intel\wifi\bin\supplicant.dll

Product: Supplicant Dynamic Link Library

Page 450: Prev

Product Version: 13, 0, 0, 0

Company: Devicescape Software, Inc.

Description: Supplicant Dynamic Link Library

Original FileName: supplicant.dll

File Version Label: 13, 0, 0, 0

File Version Number: 13.0.0.0

SHA-1 Digest: 0x2EBAF28114031390ABE6FE86CD39909568A05B1F

MD5 Digest: 0x92CBC57E5106C6362FB7AF1EAF1A4342

CRC32 Digest: 0x0CB10E93

Rootkit Property: Normal

File Size: 1466368 bytes

File: c:\program files\lenovo\hotkey\cleanup.dll

Product: Installation Program

Product Version: 1.01

Company: Lenovo Group Limited

Description: Uninstaller for inf file

Original FileName: cleanup.dll

File Version Label: 1.01

File Version Number: 1.0.1.0

SHA-1 Digest: 0xCE57F5C723F86338783D50A71E117E177F57CEB2

MD5 Digest: 0x4417B193A6AFC52B7FC179F85DC40929

CRC32 Digest: 0x19B0E6F8

Rootkit Property: Normal

File Size: 30048 bytes

Page 451: Prev

File: c:\program files\lenovo\hotkey\hkvolkey.dll

Product: On screen display

Product Version: 1.01

Company: Lenovo Group Limited

Description: vk detecter for volume up/down keys

Original FileName: hkvolkey.dll

File Version Label: 1.01

File Version Number: 1.0.1.0

SHA-1 Digest: 0xCFC97331FC07C45163898C91ABD97C3E7119C335

MD5 Digest: 0xF10454A577C8FB6CC529FDFFB7B04E9F

CRC32 Digest: 0xF3C6E1E7

Rootkit Property: Normal

File Size: 79224 bytes

File: c:\program files\lenovo\hotkey\micmute.exe

Product: On screen display

Product Version: 1.02

Company: Lenovo Group Limited

Description: Microphone Mute Controll Service for ThinkPad

Original FileName: micmute.exe

File Version Label: 1.02

File Version Number: 1.0.2.0

SHA-1 Digest: 0xD89C370772E753470B8E8CD4AF3BE3171768AB48

MD5 Digest: 0xD584216C7767DCFB4B812B9B60A4A4E7

Page 452: Prev

CRC32 Digest: 0x2CE4A6E3

Rootkit Property: Normal

File Size: 45424 bytes

File: c:\program files\lenovo\hotkey\notifyf2.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x531CE772EAF167AF3A131C2822A01BD5A76E8AE9

MD5 Digest: 0x0C3E484BF4AEC2749A9F4D0A91870780

CRC32 Digest: 0x63C89013

Rootkit Property: Normal

File Size: 34344 bytes

File: c:\program files\lenovo\hotkey\tpfnf6r.exe

Product: ThinkPad FnF6 Resident Module

Product Version: 1.10

Company: Lenovo Group Limited

Description: ThinkPad FnF6 Resident Module

Original FileName: TPFNF6R.EXE

File Version Label: 1.10

Page 453: Prev

File Version Number: 1.1.0.0

SHA-1 Digest: 0xC8B487159366998C8EA4C620EDD0A0814F4EDC95

MD5 Digest: 0x2B083A7AD8DF8698159480A3D53E8B84

CRC32 Digest: 0xE1C81D45

Rootkit Property: Normal

File Size: 62752 bytes

File: c:\program files\lenovo\hotkey\tphksvc.exe

Product: On screen display

Product Version: 1.07

Company: Lenovo Group Limited

Description: On screen display Fn+Fx handler

Original FileName: tphksvc.exe

File Version Label: 1.07

File Version Number: 1.0.7.0

SHA-1 Digest: 0x23EC79A540B36A08CF5A9C9FE7E4368657877E94

MD5 Digest: 0x3C6A42A8494D74F44F048BB7F9F2DB44

CRC32 Digest: 0x6A7F64B0

Rootkit Property: Normal

File Size: 62320 bytes

File: c:\program files\lenovo\hotkey\tponscr.exe

Product: On screen display

Product Version: 5.30

Company: Lenovo Group Limited

Page 454: Prev

Description: On screen display drawer

Original FileName: tponscr.exe

File Version Label: 5.30

File Version Number: 5.3.0.0

SHA-1 Digest: 0x01AF1FE681E3FD575E1F3C5977AB8F09E2C9E1C9

MD5 Digest: 0x72D9419E4AA1C40C9E34821722D335C8

CRC32 Digest: 0x963A8EEE

Rootkit Property: Normal

File Size: 67432 bytes

File: c:\program files\lenovo\hotkey\tposdsvc.dll

Product: On screen display

Product Version: 1.01

Company: Lenovo Group Limited

Description: On screen display driver interface DLL

Original FileName: tposdsvc.dll

File Version Label: 1.01

File Version Number: 1.0.1.0

SHA-1 Digest: 0xCD6AA220B0DB46E5BDD85D499746D9543FAAF4D2

MD5 Digest: 0x254A8D98E103E06CF86CB2DA8708620F

CRC32 Digest: 0xF32FD092

Rootkit Property: Normal

File Size: 34080 bytes

File: c:\program files\lenovo\hotkey\tposdsvc.exe

Page 455: Prev

Product: On screen display

Product Version: 1.15

Company: Lenovo Group Limited

Description: On screen display message generator for ThinkPad

Original FileName: tposdsvc.exe

File Version Label: 1.15

File Version Number: 1.1.5.0

SHA-1 Digest: 0xE2F6FD15B8B92AB87C7F67BAAB2A5C1B76862EC5

MD5 Digest: 0x0BF10B23779565BC472BEEBE3B9A20D9

CRC32 Digest: 0x9A8CB8F7

Rootkit Property: Normal

File Size: 68976 bytes

File: c:\program files\lenovo\zoom\cleanup.dll

Product: Installation Program

Product Version: 1.01

Company: Lenovo Group Limited

Description: Uninstaller for inf file

Original FileName: cleanup.dll

File Version Label: 1.01

File Version Number: 1.0.1.0

SHA-1 Digest: 0xCE57F5C723F86338783D50A71E117E177F57CEB2

MD5 Digest: 0x4417B193A6AFC52B7FC179F85DC40929

CRC32 Digest: 0x19B0E6F8

Rootkit Property: Normal

Page 456: Prev

File Size: 30048 bytes

File: c:\program files\lenovo\zoom\tpscrex.exe

Product: ThinkPad UltraZoom

Product Version: 2.10

Company: Lenovo Group Limited

Description: ThinkPad UltraZoom

Original FileName: TpScrEx.exe

File Version Label: 2.10

File Version Number: 2.1.0.0

SHA-1 Digest: 0x67A06985D79E83DF9AADA1C117A1F027116547BC

MD5 Digest: 0x2B365FF1A4CC06813B892F92AAE4C0B7

CRC32 Digest: 0xE137B330

Rootkit Property: Normal

File Size: 144752 bytes

File: c:\program files\microsoft application virtualization client\sftlist.exe

Product: Microsoft Application Virtualization

Product Version: 4.6.0.10191

Company: Microsoft Corporation

Description: Microsoft Application Virtualization Client Service

Original FileName: sftlist.exe

File Version Label: 4.6.0.10191

File Version Number: 4.6.0.10191

SHA-1 Digest: 0x6A94405CA7DC475C9DE8FB041114ADC25E10E36E

Page 457: Prev

MD5 Digest: 0x05D2B0D0F1DB139970D4AF18C679429D

CRC32 Digest: 0xD5D47336

Rootkit Property: Normal

File Size: 483688 bytes

File: c:\program files\microsoft application virtualization client\sftvsa.exe

Product: Microsoft Application Virtualization

Product Version: 4.6.0.10191

Company: Microsoft Corporation

Description: Microsoft Application Virtualization Virtual Service Agent

Original FileName: sftvsa.exe

File Version Label: 4.6.0.10191

File Version Number: 4.6.0.10191

SHA-1 Digest: 0xEDCEDAE86018D2B999CFFA91813C18B3C2D1E935

MD5 Digest: 0xE6ED4F02B5A151BB44DE383B365C2117

CRC32 Digest: 0x6A367674

Rootkit Property: Normal

File Size: 209768 bytes

File: c:\program files\microsoft office\office11\mcps.dll

Product: Microsoft Clip Organizer

Product Version: 11.0.8164

Company: Microsoft Corporation

Description: Media Catalog Proxy/Stub

Original FileName: mcps.dll

Page 458: Prev

File Version Label: 11.0.8164

File Version Number: 11.0.8164.0

SHA-1 Digest: 0x9854D130E21D8B48D31F7848CB453514ECE11971

MD5 Digest: 0x40FA2F035ED88108850757CA51DAD942

CRC32 Digest: 0xD067104C

Rootkit Property: Normal

File Size: 103256 bytes

File: c:\program files\microsoft office\office11\mstores.dll

Product: Microsoft Clip Organizer

Product Version: 11.0.8164

Company: Microsoft Corporation

Description: Clip Organizer

Original FileName: MStoreS.dll

File Version Label: 11.0.8164

File Version Number: 11.0.8164.0

SHA-1 Digest: 0x3072FF8B1CECFCDFB4DAF8D893F4B637121AA2C7

MD5 Digest: 0x10875695BED690FC4B843E8FA6B75907

CRC32 Digest: 0x445775E8

Rootkit Property: Normal

File Size: 489824 bytes

File: c:\program files\microsoft office\office12\msohevi.dll

Product: 2007 Microsoft Office system

Product Version: 12.0.6413.1000

Page 459: Prev

Company: Microsoft Corporation

Description: 2007 Microsoft Office component

Original FileName: MsoHevI.dll

File Version Label: 12.0.6413.1000

File Version Number: 12.0.6413.1000

SHA-1 Digest: 0x28BBA04F92AA388D526F8D4D5555D35224CD706D

MD5 Digest: 0x269552E0E5BD5BFE0DA7AD42FAC34C37

CRC32 Digest: 0x19023306

Rootkit Property: Normal

File Size: 61816 bytes

File: c:\program files\mozilla firefox\uninstall\helper.exe

Product: Firefox

Product Version: 3.6.13

Company: Mozilla Corporation

Description: Firefox Helper

Original FileName: helper.exe

File Version Label: 3.6.13

File Version Number: 1.0.0.0

SHA-1 Digest: 0x9ED4F98C94680CB86CBAA43FB968A90B0A21A5F2

MD5 Digest: 0xF46F227D330C9E17249E2EEAF3EE687C

CRC32 Digest: 0x58BFC9E7

Rootkit Property: Normal

File Size: 553696 bytes

Page 460: Prev

File: c:\program files\netbeans 6.8\uninstall.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xF0E6D5A97D6DC04835C6880DA864B3FA45DFD63B

MD5 Digest: 0x1C9FC31F036271ABDF5EF398EE4E6993

CRC32 Digest: 0x66610491

Rootkit Property: Normal

File Size: 2236585 bytes

File: c:\program files\nokia\nokia pc suite 7\lang\phonebrowser_eng-us.nlr

Product: Nokia Phone Browser

Product Version: 6, 0, 9, 0

Company: Nokia

Description: Nokia Phone Browser language resources

Original FileName: PhoneBrowser_eng.NLR

File Version Label: 7, 1, 69, 0

File Version Number: 7.1.69.0

SHA-1 Digest: 0x2635FB05F1BE7114884174AF6942338BAA3CED30

MD5 Digest: 0xC9C5FF301B9DAB8D8EAF50E4AE85C5B4

CRC32 Digest: 0x41F827AB

Page 461: Prev

Rootkit Property: Normal

File Size: 26624 bytes

File: c:\program files\nokia\nokia pc suite 7\ngscm.dll

Product: Next Gen Suite Common Modules

Product Version: 1.0

Company: Nokia

Description: Next Gen Suite Common Modules

Original FileName: NGSCM.dll

File Version Label: 7, 1, 154, 0

File Version Number: 7.1.154.0

SHA-1 Digest: 0x5937FDD004A6D2C9CF35865603F5E3AC19E530EA

MD5 Digest: 0x289891A688A9FDA4CEBD370F230FF846

CRC32 Digest: 0x0DCA1F6F

Rootkit Property: Normal

File Size: 929792 bytes

File: c:\program files\nokia\nokia pc suite 7\phonebrowser.dll

Product: Phone Browser

Product Version: 3.0

Company: Nokia

Description: Phone Browser

Original FileName: PhoneBrowser.dll

File Version Label: 7, 1, 108, 0

File Version Number: 7.1.108.0

Page 462: Prev

SHA-1 Digest: 0x6C81E714568033F9A9643125A3F73CC2175A9332

MD5 Digest: 0xF0CBAF724FF71D400FF45FBCEC4F3898

CRC32 Digest: 0xCCC1F741

Rootkit Property: Normal

File Size: 613888 bytes

File: c:\program files\nokia\nokia pc suite 7\resource\phonebrowser_nokia.ngr

Product: Nokia Phone Browser

Product Version: 1, 0

Company: Nokia

Description: Nokia Phone Browser graphics resources

Original FileName: NokiaPhoneBrowser_Nokia.NGR

File Version Label: 7, 1, 21, 0

File Version Number: 7.1.21.0

SHA-1 Digest: 0xD69E35A3C7C2390DB1F25D5749DB2297C545C62D

MD5 Digest: 0x5058D323DDABFAD0D8D8BC2CAEF73070

CRC32 Digest: 0x491DEEDA

Rootkit Property: Normal

File Size: 573440 bytes

File: c:\program files\notepad++\nppshell_01.dll

Product:

Product Version: 0.1

Company:

Description: ShellHandler for Notepad++

Page 463: Prev

Original FileName: NppShell.dll

File Version Label: 0.1

File Version Number: 0.1.0.0

SHA-1 Digest: 0x24ED1C7296E52C405CA848876E3B421029E80D29

MD5 Digest: 0x07B6151824600789887C3C9899337F8E

CRC32 Digest: 0x98293081

Rootkit Property: Normal

File Size: 54272 bytes

File: c:\program files\notepad++\uninstall.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xC216A3CD501E674732903E33C0334D79B0126237

MD5 Digest: 0x97D0901888DF6BA7EEF4649400A9A479

CRC32 Digest: 0x43923BB9

Rootkit Property: Normal

File Size: 117487 bytes

File: c:\program files\outlook express\setup50.exe

Product: Microsoft® Windows® Operating System

Page 464: Prev

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Outlook Express Setup Library

Original FileName: SETUP50.EXE

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x2761EAC89D924535B5ED7DF4174F46C9CE87E4F3

MD5 Digest: 0x8058C01E0B96EC2F74FF764BE1B67D7F

CRC32 Digest: 0x2A33F27F

Rootkit Property: Normal

File Size: 73216 bytes

File: c:\program files\pc connectivity solution\servicelayer.exe

Product: PC Connectivity Solution

Product Version: 3.8

Company: Nokia.

Description: ServiceLayer Module

Original FileName: ServiceLayer.exe

File Version Label: 7, 0, 124, 0

File Version Number: 7.0.124.0

SHA-1 Digest: 0xE7D681D424E18CBA3F93707905D65DDF2D997901

MD5 Digest: 0x58D5BFDF3ADF49FE9CABD78CC61D92F6

CRC32 Digest: 0x63562659

Rootkit Property: Normal

File Size: 637952 bytes

Page 465: Prev

File: c:\program files\real\realplayer\codecs\avcq.dll

Product: AVC/H.264 Decoder (based on QuickTime SDK) (32-bit)

Product Version: 12.0.1.609

Company: RealNetworks, Inc.

Description: AVC/H.264 Decoder (based on QuickTime SDK)

Original FileName: AVCQ.DLL

File Version Label: 12.0.1.609

File Version Number: 12.0.1.609

SHA-1 Digest: 0x0E792CA4BDE2AEFA427856CCF4BE392703243761

MD5 Digest: 0x16B9CB79D9192996625B7DCF534C98F5

CRC32 Digest: 0xF7E854AA

Rootkit Property: Normal

File Size: 43008 bytes

File: c:\program files\real\realplayer\rcaplugins\rpshellextension.dll

Product:

Product Version: 12.0.1.609

Company: RealPlayer

Description: RealPlayer shellextension

Original FileName: rpshellextension.dll

File Version Label: 12.0.1.609

File Version Number: 12.0.1.609

SHA-1 Digest: 0xE30E749B5F08B107998A51E39729F517E0AB00AC

MD5 Digest: 0x17BAB994D35A42CC588ABAC29F56C080

Page 466: Prev

CRC32 Digest: 0x964B47E3

Rootkit Property: Normal

File Size: 123904 bytes

File: c:\program files\real\realplayer\update\r1puninst.exe

Product: Uninstaller Shell executable (32-bit)

Product Version: 12.0.1.609

Company: RealNetworks, Inc.

Description: Uninstaller Shell executable

Original FileName: RNUninst.EXE

File Version Label: 12.0.1.609

File Version Number: 12.0.1.609

SHA-1 Digest: 0x7859B735D4C8351319D7DC56AB12AEE46CCFDC56

MD5 Digest: 0x58EAF164B8E9ED1BE632100564375FD6

CRC32 Digest: 0xA4CA1AA9

Rootkit Property: Normal

File Size: 555224 bytes

File: c:\program files\real\realplayer\update\realsched.exe

Product: RealPlayer (32-bit)

Product Version: 12.0.1.609

Company: RealNetworks, Inc.

Description: RealNetworks Scheduler

Original FileName: realsched.exe

File Version Label: 12.0.1.609

Page 467: Prev

File Version Number: 12.0.1.609

SHA-1 Digest: 0xA13EBAB88463315185BC11C16340DF0019C626DE

MD5 Digest: 0x869513CA8428F231C7CAC62A6F9B974A

CRC32 Digest: 0x4BE5510C

Rootkit Property: Normal

File Size: 274608 bytes

File: c:\program files\sges-v3\uninstall.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x2A336C59DEBF502DEBA641F69352C5EC8F03604D

MD5 Digest: 0xFBC3F5EA0E12ACE8FA27182A2F1BF63E

CRC32 Digest: 0x19428EC5

Rootkit Property: Normal

File Size: 2236607 bytes

File: c:\program files\skype\phone\skype.exe

Product: Skype

Product Version: 5.1

Company: Skype Technologies S.A.

Page 468: Prev

Description: Skype

Original FileName: Skype.exe

File Version Label: 5.1.0.112

File Version Number: 5.1.0.112

SHA-1 Digest: 0x0EAEED3F20AEBF07C564AA7630238F702518D444

MD5 Digest: 0x61CFEDAF9C527A1463F34F71240F9BB5

CRC32 Digest: 0x72041B3D

Rootkit Property: Normal

File Size: 15026056 bytes

File: c:\program files\skype\plugin manager\skypepm.exe

Product:

Product Version: 1.0.0.0

Company: Skype Technologies

Description: Skype Extras Manager

Original FileName:

File Version Label: 3.0.0.5

File Version Number: 3.0.0.5

SHA-1 Digest: 0xF9C938CBE473F95769473B0B2F58E6ABAE799A01

MD5 Digest: 0x2CE8F1C52F490875592166316C512B6F

CRC32 Digest: 0xFF47615E

Rootkit Property: Normal

File Size: 80256 bytes

File: c:\program files\snapshot viewer\setup\setup.exe

Page 469: Prev

Product: Microsoft App-wide Setup for Windows

Product Version: 3.01

Company: Microsoft Corporation

Description: Microsoft Setup Tool

Original FileName: ACMSETUP.EXE

File Version Label: 3.01

File Version Number: 3.1.0.1622

SHA-1 Digest: 0xA9707E5771570739082CC2D6BAC2E91C4FB011DB

MD5 Digest: 0xD7F25C2088EEED2DA8184919639DB79F

CRC32 Digest: 0x4C0488FE

Rootkit Property: Normal

File Size: 352768 bytes

File: c:\program files\symantec client security\symantec antivirus\cliproxy.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0x494F3030542AB394FF75B69109FBD2EC7CA08DDD

MD5 Digest: 0x898DE0484542E061499D1C9A851E5128

CRC32 Digest: 0x13B7F0C3

Rootkit Property: Normal

Page 470: Prev

File Size: 302320 bytes

File: c:\program files\symantec client security\symantec antivirus\cliscan.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0x213D9C2F648ACCB497497E5E4ACF73598DDE94D0

MD5 Digest: 0x3556CC89A1F9D4076F188BA14503F7D2

CRC32 Digest: 0x3BB3DE81

Rootkit Property: Normal

File Size: 703728 bytes

File: c:\program files\symantec client security\symantec antivirus\defutdcd.dll

Product: Symantec Definition Utilities

Product Version: 3.1.13a.0

Company: Symantec Corporation

Description: Symantec Definition Utilities

Original FileName: DefUtDCD.dll

File Version Label: 3.1.13a.0

File Version Number: 3.1.13.0

SHA-1 Digest: 0x486BF5103AEA381A75F4233187E044C512BB165F

Page 471: Prev

MD5 Digest: 0x383047F10315DDA64069061DBE76E705

CRC32 Digest: 0x7CDA9EFA

Rootkit Property: Normal

File Size: 628312 bytes

File: c:\program files\symantec client security\symantec antivirus\defwatch.exe

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Virus Definition Daemon

Original FileName: DefWatch.exe

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0xB3A5B4BA666EE64C105CA415991488BD38E31F2B

MD5 Digest: 0x1F709C66D8AADFF35530C56EE261C462

CRC32 Digest: 0x0FCE551F

Rootkit Property: Normal

File Size: 31472 bytes

File: c:\program files\symantec client security\symantec antivirus\i2ldvp3.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

Page 472: Prev

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0xACFD89CDEDC42024A9668E7D9A8D7E911E7EA461

MD5 Digest: 0xF186CE62BDFE0A8BC6710D1FFAFF19C3

CRC32 Digest: 0xAB2EBA87

Rootkit Property: Normal

File Size: 140016 bytes

File: c:\program files\symantec client security\symantec antivirus\imail.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName: IMail.dll

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0xA4FD92E2816A2ADD9A2048D1D44A8FD3B0634A9B

MD5 Digest: 0x872CF96E1D5D999986B34686FF1D7FA0

CRC32 Digest: 0xF98F1F67

Rootkit Property: Normal

File Size: 290032 bytes

File: c:\program files\symantec client security\symantec antivirus\navlu.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Page 473: Prev

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0xC328177D7D835DA4A56DB418A939D20133970067

MD5 Digest: 0x23A88402D4746823C2D007BF998C850B

CRC32 Digest: 0x7C90B760

Rootkit Property: Normal

File Size: 52976 bytes

File: c:\program files\symantec client security\symantec antivirus\navntutl.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0x53C9377C4FC53DE51C59B181A2C96E683ACE821F

MD5 Digest: 0xA029E5F02CF9524D448E38F85C09AD12

CRC32 Digest: 0x4F180B16

Rootkit Property: Normal

File Size: 54000 bytes

Page 474: Prev

File: c:\program files\symantec client security\symantec antivirus\notesext.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0x0AC2B696816B5E2F88CF1734C40826AEA7884C07

MD5 Digest: 0x03215AD43EC772968D58FC836FD73A14

CRC32 Digest: 0x317A0DD2

Rootkit Property: Normal

File Size: 35056 bytes

File: c:\program files\symantec client security\symantec antivirus\rtvscan.exe

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0x8F7AEEEFDDA6491E6F0CFB4881A69F125392A946

MD5 Digest: 0x8FDAADF204A4F29214DA1B03342E2735

CRC32 Digest: 0xEE1E9458

Page 475: Prev

Rootkit Property: Normal

File Size: 1813232 bytes

File: c:\program files\symantec client security\symantec antivirus\savemail.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName: SavEmail.dll

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0xF16BB8EDF3846D84CE3DDDBC75136C6C9D8EA4EF

MD5 Digest: 0x6510B8DF193BD4CBFAB8B3B66267C9F7

CRC32 Digest: 0xE7EC472F

Rootkit Property: Normal

File Size: 31984 bytes

File: c:\program files\symantec client security\symantec antivirus\savroam.exe

Product: Symantec SAVRoam

Product Version: 10.1.5.5000

Company: symantec

Description: SAVRoam

Original FileName: SAVRoam.exe

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

Page 476: Prev

SHA-1 Digest: 0xC09F0DEB303F1E87030BD54EECB0A6802F8DBD45

MD5 Digest: 0x3525FDCFC567E807A337C61AFF366BE8

CRC32 Digest: 0xEFB115A9

Rootkit Property: Normal

File Size: 116464 bytes

File: c:\program files\symantec client security\symantec antivirus\savrt.sys

Product: Symantec AntiVirus AutoProtect

Product Version: 9.7

Company: Symantec Corporation

Description: AutoProtect

Original FileName: SAVRT.SYS

File Version Label: 9.7.2.3

File Version Number: 9.7.2.3

SHA-1 Digest: 0x915622BB091EBBD1ECA63E78BB10C1A4CF9C6BA7

MD5 Digest: 0x12B6E269EF8AC8EA36122544C8A1B6D8

CRC32 Digest: 0x2A6A6723

Rootkit Property: Normal

File Size: 337592 bytes

File: c:\program files\symantec client security\symantec antivirus\savrt32.dll

Product: Symantec AntiVirus AutoProtect

Product Version: 9.7

Company: Symantec Corporation

Description: AutoProtect DLL

Page 477: Prev

Original FileName: SAVRT.DLL

File Version Label: 9.7.2.3

File Version Number: 9.7.2.3

SHA-1 Digest: 0x5AF1A4297CEAD9A8BA49A086EC9937DB45896E12

MD5 Digest: 0xE8D8D57B398825BDEA011C5BE81AFE5A

CRC32 Digest: 0x6E1B9966

Rootkit Property: Normal

File Size: 231184 bytes

File: c:\program files\symantec client security\symantec antivirus\savrtpel.sys

Product: Symantec AntiVirus AutoProtect

Product Version: 9.7

Company: Symantec Corporation

Description: SAVRTPEL

Original FileName: SAVRTPEL.SYS

File Version Label: 9.7.2.3

File Version Number: 9.7.2.3

SHA-1 Digest: 0xBCA250710D7DDA7F71EED30212D665455FA1BA2E

MD5 Digest: 0x97E5B6F3F95465E1F59360B59D8EC64E

CRC32 Digest: 0x25E166F8

Rootkit Property: Normal

File Size: 54968 bytes

File: c:\program files\symantec client security\symantec antivirus\symprotectstorage.dll

Product: Symantec AntiVirus

Page 478: Prev

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0xB82A4C5A95E9C6ED4F25329E05657DED53D2320E

MD5 Digest: 0xC04367C2EF8741AF7133E62C72EA07C7

CRC32 Digest: 0xB277581E

Rootkit Property: Normal

File Size: 272112 bytes

File: c:\program files\symantec client security\symantec antivirus\vpmsece4.dll

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0x8EEC63DB4032D553869F9D21942842980F299FD6

MD5 Digest: 0x73B5E1E16FB4C3895AF9D0A125B09B7A

CRC32 Digest: 0x4A495268

Rootkit Property: Normal

File Size: 68848 bytes

Page 479: Prev

File: c:\program files\symantec client security\symantec client firewall\ccemlflt.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Email Confidential Info Scanner

Original FileName: ccEmlflt.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x876DE60534EB86005922D0A6E6545EB9A872693D

MD5 Digest: 0x7662A7EF58ED90865594C2EC4EC136EF

CRC32 Digest: 0x0C6DA234

Rootkit Property: Normal

File Size: 145056 bytes

File: c:\program files\symantec client security\symantec client firewall\ccfwsetg.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Firewall Settings Engine

Original FileName: ccFWSetg.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xDE20A79454F5A63E4740C816615BE352B2A25C7F

MD5 Digest: 0xF9CD9C38169474026F98108A20054199

Page 480: Prev

CRC32 Digest: 0x65F87CA9

Rootkit Property: Normal

File Size: 476832 bytes

File: c:\program files\symantec client security\symantec client firewall\issvc.exe

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Description: IS Service

Original FileName: ISSVC.exe

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0x090240D39773EAECFF623C1BD20C36C178F05769

MD5 Digest: 0xA59BA4C8C0698DDC9D805109B0F6C76C

CRC32 Digest: 0xE1FABC17

Rootkit Property: Normal

File Size: 87728 bytes

File: c:\program files\symantec client security\symantec client firewall\nisevt.dll

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Description: NIS Event Manager Log Event Forwarder

Original FileName:

File Version Label: 8.7.4.97

Page 481: Prev

File Version Number: 8.7.4.97

SHA-1 Digest: 0xEC728A94B70D68D2579CE6CEAADD1870868666B2

MD5 Digest: 0x4CD56B059301AFFE01C7EE33AB37C131

CRC32 Digest: 0x8F5E7E68

Rootkit Property: Normal

File Size: 132784 bytes

File: c:\program files\symantec client security\symantec client firewall\nislcom.dll

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Description: NIS License Wrapper

Original FileName: nisLCom.dll

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0x5F82CD4B8AE2F6C63CBFCF06600F1B33C5D383DF

MD5 Digest: 0x99917993884961FC09073ACA8968FBA6

CRC32 Digest: 0x07CBDBB2

Rootkit Property: Normal

File Size: 439984 bytes

File: c:\program files\symantec client security\symantec client firewall\nisres.dll

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Page 482: Prev

Description: Resource DLL

Original FileName: NISRes.dll

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0x47F11BFC60E68C2432C16573993455A98E1EAF2B

MD5 Digest: 0x7DE88912FBCED73385784D697B66F017

CRC32 Digest: 0x690F75D2

Rootkit Property: Normal

File Size: 300720 bytes

File: c:\program files\symantec client security\symantec client firewall\prsettg.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x335DC2B606A209EE53D01E29B9E86E9366A360E1

MD5 Digest: 0xFD35A0A83E8E627D44B5B0A7A2F97414

CRC32 Digest: 0xB4A274F3

Rootkit Property: Normal

File Size: 63112 bytes

File: c:\program files\symantec client security\symantec client firewall\sfwalert.dll

Page 483: Prev

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Description: Symantec Client Firewall Alerting

Original FileName:

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0x74E657F9C75CEC913959C37A6EB8B386127EBE67

MD5 Digest: 0x1554283926B6172B10C9ADE92F16B783

CRC32 Digest: 0xAC45033B

Rootkit Property: Normal

File Size: 288432 bytes

File: c:\program files\symantec client security\symantec client firewall\snlog.dll

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Description: SNLog

Original FileName:

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0x0A25260B0FA6C40B4712ED02B9544A9B68125638

MD5 Digest: 0x134897D72EC7129A23B4306C78136428

CRC32 Digest: 0xCAAA35D8

Rootkit Property: Normal

Page 484: Prev

File Size: 304816 bytes

File: c:\program files\symantec client security\symantec client firewall\symfwagt.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Firewall Agent

Original FileName: SymFWAgt.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xA67AD522B536541FF3F76DF05F9959E90B1840F1

MD5 Digest: 0xA9F85878057010406474B5B1A4B1CA78

CRC32 Digest: 0x5774C54F

Rootkit Property: Normal

File Size: 165536 bytes

File: c:\program files\symantec client security\symantec client firewall\symsport.exe

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Description: SymSPort.exe

Original FileName:

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0x20C26A2060BE13BF49D68E1B2477BAE86A510998

Page 485: Prev

MD5 Digest: 0x768F00CA60302DA7CA682B58C52A3A05

CRC32 Digest: 0xA725A488

Rootkit Property: Normal

File Size: 173744 bytes

File: c:\program files\symantec client security\symantec client firewall\tlevel.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec TLevel Assessor

Original FileName: TLevel.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xCEBD6B1B1FE3B4AC6C100B5AECFBD3CFC026F09C

MD5 Digest: 0x538A33E7C358458625638590580F634D

CRC32 Digest: 0x9422890E

Rootkit Property: Normal

File Size: 108192 bytes

File: c:\program files\symantec\liveupdate\lsetup.exe

Product: LiveUpdate

Product Version: 3.1.0.90

Company: Symantec Corporation

Description: LiveUpdate Installer

Original FileName: LSetup.exe

Page 486: Prev

File Version Label: 3.1.0.90

File Version Number: 3.1.0.90

SHA-1 Digest: 0xB8602A25B82488C31666D6983B39FB91B96F7E48

MD5 Digest: 0xA2B87C2E0EB3A3287E65023770068AB5

CRC32 Digest: 0xEB52CAD4

Rootkit Property: Normal

File Size: 186048 bytes

File: c:\program files\symantec\liveupdate\pslucomserver_3_1.dll

Product: LiveUpdate

Product Version: 3.1.0.90

Company: Symantec Corporation

Description: LiveUpdate Engine COM Module

Original FileName: LuComServer.exe

File Version Label: 3.1.0.90

File Version Number: 3.1.0.90

SHA-1 Digest: 0x3FF3F82DADAC304566EF6D2339BB0A9158919FCF

MD5 Digest: 0x50C361F63CC027684DC2AC061582FAF5

CRC32 Digest: 0xAA4A1914

Rootkit Property: Normal

File Size: 75456 bytes

File: c:\program files\symantec\symevent.sys

Product: SYMEVENT

Product Version: 12.1.2.1

Page 487: Prev

Company: Symantec Corporation

Description: Symantec Event Library

Original FileName: SYMEVENT.SYS

File Version Label: 12.1.2.1

File Version Number: 12.1.2.1

SHA-1 Digest: 0x4B45F7FC0736F1F8628EFCF93AC3A48B1E039C02

MD5 Digest: 0xDE6D1102D55926354171AE4E73936725

CRC32 Digest: 0xBE9FEBB9

Rootkit Property: Normal

File Size: 109744 bytes

File: c:\program files\synaptics\syntp\synisdll.dll

Product: Progressive Touch

Product Version: 7.5.17.25 10Aug07

Company: Synaptics, Inc.

Description: Install Resource Strings

Original FileName: SynISDLL.dll

File Version Label: 7.5.17.25 10Aug07

File Version Number: 7.5.17.25

SHA-1 Digest: 0x17002BC5DB71C5215BF8D400E16AFFAC94C6188C

MD5 Digest: 0xDDA7CA77EFA04A83919EB671353B1A21

CRC32 Digest: 0xF47A580C

Rootkit Property: Normal

File Size: 471040 bytes

Page 488: Prev

File: c:\program files\synaptics\syntp\syntpenh.exe

Product: Progressive Touch

Product Version: 7.5.17.25 10Aug07

Company: Synaptics, Inc.

Description: Synaptics TouchPad Enhancements

Original FileName: SynTPEnh.exe

File Version Label: 7.5.17.25 10Aug07

File Version Number: 7.5.17.25

SHA-1 Digest: 0x102F8486CD5C411B619D853EBC0405FE02A2361C

MD5 Digest: 0x49E9B2D790163FEA86E0FAB1C0A2AABC

CRC32 Digest: 0x9DCAB8D3

Rootkit Property: Normal

File Size: 512000 bytes

File: c:\program files\synaptics\syntp\syntplpr.exe

Product: Progressive Touch

Product Version: 7.5.17.25 10Aug07

Company: Synaptics, Inc.

Description: TouchPad Driver Helper Application

Original FileName: SynTPLpr.exe

File Version Label: 7.5.17.25 10Aug07

File Version Number: 7.5.17.25

SHA-1 Digest: 0x388A6E7DA4057C2EA881664F96F57F8EF63ABFBB

MD5 Digest: 0xEAD2CCC0F427DA355E85E3263C628EF6

CRC32 Digest: 0x0A3854EA

Page 489: Prev

Rootkit Property: Normal

File Size: 110592 bytes

File: c:\program files\tata photon+\huawei\uninst.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x6C3584DDAD3834D7CCE805B2ACF203FDC4BA60F1

MD5 Digest: 0x524FFB172A5F74CA9B47E35DEB29F52C

CRC32 Digest: 0x565E950E

Rootkit Property: Normal

File Size: 99211 bytes

File: c:\program files\thinkpad\bluetooth software\bin\btwdins.exe

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: Bluetooth Support Server

Original FileName: BTWDIns.EXE

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

Page 490: Prev

SHA-1 Digest: 0x1B5109056076CDCA41A0761040E899FD22B5C3E2

MD5 Digest: 0x26E038920DEC7BCDCAC1E4851A235DD0

CRC32 Digest: 0x59A7905B

Rootkit Property: Normal

File Size: 264800 bytes

File: c:\program files\thinkpad\connectutilities\acadaptersinfo.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Adapters Info Module

Original FileName: AcAdaptersInfo.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0x8603E60128272C88D19281F81BD27D27D12BA350

MD5 Digest: 0x6B6868819C9B9F050E0E59CF69E5DEBD

CRC32 Digest: 0x7F359B63

Rootkit Property: Normal

File Size: 144744 bytes

File: c:\program files\thinkpad\connectutilities\accrypthlpr.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Crypt Helper Module

Page 491: Prev

Original FileName: AcCryptHlpr.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xA23223606504202BAFF538FD774AC698DAE52826

MD5 Digest: 0xA9C4569AFB8EF4E7AD814E900E9E0094

CRC32 Digest: 0x234048F8

Rootkit Property: Normal

File Size: 472424 bytes

File: c:\program files\thinkpad\connectutilities\acgina.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Gina Module

Original FileName: ACGina.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xBB896092732B61292E0A8904DFC6AA3437B5E78F

MD5 Digest: 0x1E16125C2F89FF492DCE1C02CD5EDD92

CRC32 Digest: 0x12436F52

Rootkit Property: Normal

File Size: 237568 bytes

File: c:\program files\thinkpad\connectutilities\acgolan.dll

Product: Access Connections

Page 492: Prev

Product Version: 5.50

Company: Lenovo

Description: Access Connections Intel WLAN Adapter Support Module

Original FileName: AcGolan.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xAE2882E2CBF2613B4F6548B40A34AD7E3D39719E

MD5 Digest: 0x3188599A17109567C35B00AB0FAC997C

CRC32 Digest: 0x7D6737AC

Rootkit Property: Normal

File Size: 225280 bytes

File: c:\program files\thinkpad\connectutilities\acguihlpr.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections GUI Helper Module

Original FileName: ACGUIHlpr.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xBEB1FB1A44BD9D63E6374B50AE03F7B8EA6BF9D2

MD5 Digest: 0x254C9A12BCEA98691732833C3F5E431E

CRC32 Digest: 0x4BC67685

Rootkit Property: Normal

File Size: 1041768 bytes

Page 493: Prev

File: c:\program files\thinkpad\connectutilities\achelper.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Helper Module

Original FileName: ACHelper.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0x8662B5809F7ED297DE8035DA50C7D5E6826DE757

MD5 Digest: 0x3C597539CA2190D55BF7F2C04BD5D172

CRC32 Digest: 0x18F7ACBC

Rootkit Property: Normal

File Size: 99688 bytes

File: c:\program files\thinkpad\connectutilities\aclocmigrator.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Location Migration Module

Original FileName: AcLocMigrator.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xAE334464F03DF24E943506AA5DDB975DA2E88195

MD5 Digest: 0x740813D083A86BC9E98CC02094111CDB

Page 494: Prev

CRC32 Digest: 0xDE10B919

Rootkit Property: Normal

File Size: 120168 bytes

File: c:\program files\thinkpad\connectutilities\aclocsettings.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Location Settings Module

Original FileName: AcLocSettings.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0x47C6E2F0E4603160E57455B40A48D7E0F08ED521

MD5 Digest: 0x4669217997E8694F58C795562D6ED60E

CRC32 Digest: 0x1AE34970

Rootkit Property: Normal

File Size: 202088 bytes

File: c:\program files\thinkpad\connectutilities\acnewbioshelper.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

Page 495: Prev

File Version Number: 0.0.0.0

SHA-1 Digest: 0x4EA65DE4A78B00278AAE781455DD642ACE500CE4

MD5 Digest: 0x2BF68BAF97BD40CE30611F07B26BACAD

CRC32 Digest: 0xB9717E18

Rootkit Property: Normal

File Size: 6656 bytes

File: c:\program files\thinkpad\connectutilities\acon.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections ACON Module

Original FileName: ACon.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0x5DCEF730748306C18FCDBBCC20BCF11631AD66A5

MD5 Digest: 0x746A0EB97FDBFBF62767FB29D05F547C

CRC32 Digest: 0xCD0395AB

Rootkit Property: Normal

File Size: 714088 bytes

File: c:\program files\thinkpad\connectutilities\acprfmgr.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Page 496: Prev

Description: Access Connections Profile Manager Module

Original FileName: AcPrfMgr.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xF9265B7DF72866770BA136FE79494010EAE85215

MD5 Digest: 0x2986FC3A8B3BB53DE40CFCBC2FD34758

CRC32 Digest: 0x00E3720D

Rootkit Property: Normal

File Size: 169320 bytes

File: c:\program files\thinkpad\connectutilities\acprfmgrsvc.exe

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Profile Manager Service

Original FileName: AcPrfMgrSvc.exe

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xD6C1544FFCD42ED81EA38480C3A755E016B8148A

MD5 Digest: 0x99E1D5B861985310142FE1F5349E7C07

CRC32 Digest: 0xAFDE598D

Rootkit Property: Normal

File Size: 103784 bytes

File: c:\program files\thinkpad\connectutilities\acsmbioshelper.dll

Page 497: Prev

Product: ThinkVantage Access Connections

Product Version: 5.50

Company: Lenovo

Description: ThinkVantage Access Connections SMBIOS Helper Module

Original FileName: AcSmBiosHelper.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0x57802A9FADC18E0F8EB7891EF9D124185FB7EBA9

MD5 Digest: 0xF71F3880C161094DC0C1ED29928F5327

CRC32 Digest: 0x52992815

Rootkit Property: Normal

File Size: 91496 bytes

File: c:\program files\thinkpad\connectutilities\acsvc.exe

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Main Service

Original FileName: AcSvc.exe

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xAC8F1F738709310D8C8C8F1AF312D50178F9A345

MD5 Digest: 0xE2BA1C0CF3C4A3E9BFFFFFD6DE824090

CRC32 Digest: 0xA870AEA4

Rootkit Property: Normal

Page 498: Prev

File Size: 230760 bytes

File: c:\program files\thinkpad\connectutilities\acsvchlpr.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Main Service Helper Module

Original FileName: AcSvcHlpr.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xCB3E1BC1AE9185034DF314CDF724C5A652F004B3

MD5 Digest: 0x1AA6D013A44C54187143B46259E95FDA

CRC32 Digest: 0x36237AC4

Rootkit Property: Normal

File Size: 546152 bytes

File: c:\program files\thinkpad\connectutilities\acsvcstub.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Main Service Stub Module

Original FileName: AcSvcStub.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xB232584D9541E6D62BE029A4DC6956B29942F8F9

Page 499: Prev

MD5 Digest: 0xB3054714403E0CA297223D3F90BE74CD

CRC32 Digest: 0x02BD99FB

Rootkit Property: Normal

File Size: 181608 bytes

File: c:\program files\thinkpad\connectutilities\actray.exe

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Tray Application

Original FileName: AcTray.exe

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0x2E773C0BD50E77AA66510792F2292B7396418BF6

MD5 Digest: 0x7582DD8DB904C21DD98FF19C7D2D437F

CRC32 Digest: 0xF2E5FB4F

Rootkit Property: Normal

File Size: 431464 bytes

File: c:\program files\thinkpad\connectutilities\acturinsupport.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Turin Support Module

Original FileName: ACTurinSupport.dll

Page 500: Prev

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0xF2CCBE904CCDDE4C5BF27B2B6EDEFFEE43DEB181

MD5 Digest: 0x6209A58FB3EAE1F06E38CAF51F429A98

CRC32 Digest: 0x7718F935

Rootkit Property: Normal

File Size: 15720 bytes

File: c:\program files\thinkpad\connectutilities\anc.dll

Product: IBM Access Connections

Product Version: 3, 2, 0, 0

Company: IBM Corp.

Description: IBM Access Connections - ANC

Original FileName: ANC.DLL

File Version Label: 8.3

File Version Number: 8.3.0.0

SHA-1 Digest: 0xA44339FD180E0531F6E60B7A94BD98D31344FB2F

MD5 Digest: 0x1C2355D7A6B2941170C5AB71DFC8107F

CRC32 Digest: 0xAB8EBEE5

Rootkit Property: Normal

File Size: 57344 bytes

File: c:\program files\thinkpad\connectutilities\anca.dll

Product: IBM Access Connections

Product Version: 3, 2, 0, 0

Page 501: Prev

Company: IBM Corp.

Description: IBM Access Connections - ANC

Original FileName: ANCA.DLL

File Version Label: 8.3

File Version Number: 8.3.0.0

SHA-1 Digest: 0x791647C32AFD1265B5B23200CE06CEA02B416D56

MD5 Digest: 0x6F8DECC0FF846A3CE883EFFEE621EC84

CRC32 Digest: 0xD09F2253

Rootkit Property: Normal

File Size: 94208 bytes

File: c:\program files\thinkpad\connectutilities\res\us\guihlprres.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xC62271284C5468A5E5807D1B07D006B48F3F03AF

MD5 Digest: 0x976EED787006BF9318C65633EB2D9757

CRC32 Digest: 0x9B6009A3

Rootkit Property: Normal

File Size: 43520 bytes

Page 502: Prev

File: c:\program files\thinkpad\connectutilities\res\us\svchlprres.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x330168E04CF4EB9EA5A2FF076A68EAA91765BFE0

MD5 Digest: 0xAAA5A958039DA6CED587DEED117B7E3F

CRC32 Digest: 0x63A98EDB

Rootkit Property: Normal

File Size: 77824 bytes

File: c:\program files\thinkpad\connectutilities\res\us\trayres.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Tray Resource

Original FileName: TrayRes.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0x4B75737FB451F2C70A6C049614F7615A02C6BE2F

MD5 Digest: 0x6176C34459B60C794B17CED0D624D269

CRC32 Digest: 0x89E65B7A

Page 503: Prev

Rootkit Property: Normal

File Size: 9216 bytes

File: c:\program files\thinkpad\connectutilities\svcguihlpr.exe

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections SvcGuiHlpr Application

Original FileName: SvcGuiHlpr.exe

File Version Label: 5.50

File Version Number: 5.5.0.16

SHA-1 Digest: 0x09A0E02777E2195C72EB98D5330399579441650E

MD5 Digest: 0x1F8A66CE1E849D9C1B0AAC84BCF52799

CRC32 Digest: 0xF9A18B2E

Rootkit Property: Normal

File Size: 167936 bytes

File: c:\program files\thinkpad\connectutilities\thinqcon.dll

Product: Access Connections

Product Version: 5.50

Company: Lenovo

Description: Access Connections Thin QCon Module

Original FileName: ThinQCon.dll

File Version Label: 5.50

File Version Number: 5.5.0.16

Page 504: Prev

SHA-1 Digest: 0x0EB1A2683463609B60548FB71C1C580044AF2021

MD5 Digest: 0xFE4D8FB506BDD38B716FE0CCEC436D54

CRC32 Digest: 0x4B024717

Rootkit Property: Normal

File Size: 103784 bytes

File: c:\program files\thinkpad\connectutilities\tpwrpc.dll

Product: On screen display

Product Version: 1.02

Company: Lenovo Group Limited

Description: ThinkPad Wireless Radio Power Control Library

Original FileName: tpwrpc.dll

File Version Label: 1.02

File Version Number: 1.0.2.0

SHA-1 Digest: 0x21EDE6DA026A7F3E1B9E04093B585C93E91BA68A

MD5 Digest: 0xD724AEB8ACA260C6A8209D4F1993CF61

CRC32 Digest: 0xE5C7B7D8

Rootkit Property: Normal

File Size: 83392 bytes

File: c:\program files\thinkpad\tpshocks\mui\0409\tpshocks.dll

Product: ThinkVantage Active Protection System

Product Version: 1.54

Company: Lenovo.

Description: ThinkVantage Active Protection System

Page 505: Prev

Original FileName: TpShocks.exe

File Version Label: 1.54.0.1

File Version Number: 1.54.0.1

SHA-1 Digest: 0x951226B126BF93192DFBE61D45F13DF2F1B245F5

MD5 Digest: 0xF60ACC9E1708DD4098DB0447F4BF3A74

CRC32 Digest: 0xBCE4181F

Rootkit Property: Normal

File Size: 95520 bytes

File: c:\program files\thinkpad\utilities\tpkmapap.exe

Product: Keyboard Customizer

Product Version: 1, 3, 0, 0

Company: Lenovo

Description: Keyboard Customizer

Original FileName: TpKmapAp.EXE

File Version Label: 1, 3, 0, 0

File Version Number: 1.3.0.0

SHA-1 Digest: 0x13EC5126F6B55F0DB343E61FDC3E579251BAEEC0

MD5 Digest: 0xAC4DBF4B495BD25F6C9B9F55DA640420

CRC32 Digest: 0xD6DA0809

Rootkit Property: Normal

File Size: 868352 bytes

File: c:\program files\videolan\vlc\uninstall.exe

Product:

Page 506: Prev

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xF069624670FA9663EDB051F276171C3FE54970F6

MD5 Digest: 0xE1A3878DED0023D938E306554E55B5D6

CRC32 Digest: 0x7AB20C3C

Rootkit Property: Normal

File Size: 195815 bytes

File: c:\program files\websm\_uninst\uninstall.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x5A4A507953DF5CBEAEBDCEB9843D79CC2E317372

MD5 Digest: 0x2FF4687A26EC306FF7EF0FE7F4171981

CRC32 Digest: 0xF033EA48

Rootkit Property: Normal

File Size: 305148 bytes

Page 507: Prev

File: c:\program files\windows media player\setup_wm.exe

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Microsoft Windows Media Configuration Utility

Original FileName: setup_wm.exe

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0xF7D9EC64D779398C15BFE1B3727CEF36AC3FB92C

MD5 Digest: 0x70AE876F8314819A466A830D9BBF23FC

CRC32 Digest: 0x336F0DFB

Rootkit Property: Normal

File Size: 1669632 bytes

File: c:\program files\windows media player\wmpenc.exe

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player Encoder Helper

Original FileName: wmpenc.exe

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0xD7F49D0563E7FB5BA57B4735A858D33481AF63E7

MD5 Digest: 0xD78B9D50A090168C1FBF01710125B06C

Page 508: Prev

CRC32 Digest: 0x8F056CBF

Rootkit Property: Normal

File Size: 25600 bytes

File: c:\program files\windows media player\wmplayer.exe

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player

Original FileName: wmplayer.exe

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x2473468C8E097E495E4A0ECD81313DF71CC9F490

MD5 Digest: 0x15FC4AD85BADC2B2A851E5B8495FCFCD

CRC32 Digest: 0xB4A05D00

Rootkit Property: Normal

File Size: 64512 bytes

File: c:\program files\windows media player\wmpnetwk.exe

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player Network Sharing Service

Original FileName: WMPNetwk.exe

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

Page 509: Prev

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x577447EDA713CB328B563085E0128DAA92B05576

MD5 Digest: 0x6BAB4DC65515A098505F8B3D01FB6FE5

CRC32 Digest: 0xECF4D42C

Rootkit Property: Normal

File Size: 913408 bytes

File: c:\program files\windows media player\wmsetsdk.exe

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Microsoft Windows Media Configuration Utility

Original FileName: setup_wm.exe

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0xF7D9EC64D779398C15BFE1B3727CEF36AC3FB92C

MD5 Digest: 0x70AE876F8314819A466A830D9BBF23FC

CRC32 Digest: 0x336F0DFB

Rootkit Property: Normal

File Size: 1669632 bytes

File: c:\program files\winpcap\rpcapd.exe

Product: WinPcap

Product Version: 4.1.0.2001

Company: CACE Technologies, Inc.

Page 510: Prev

Description: Remote Packet Capture Daemon

Original FileName: rpcapd.exe

File Version Label: 4.1.0.2001

File Version Number: 4.1.0.2001

SHA-1 Digest: 0x1568C3BB5A8E7FD530AC1996A137FD22E117A707

MD5 Digest: 0xB60F58F175DE20A6739194E85B035178

CRC32 Digest: 0x772C6075

Rootkit Property: Normal

File Size: 117264 bytes

File: c:\program files\winpcap\uninstall.exe

Product: WinPcap 4.1.2

Product Version:

Company: CACE Technologies, Inc.

Description: WinPcap 4.1.2 installer

Original FileName:

File Version Label: 4.1.0.2001

File Version Number: 4.1.0.2001

SHA-1 Digest: 0x8A1C1C9718807DFE4671348F2B2F73ED75A2FC2D

MD5 Digest: 0xCA9A97F36C096F79CC209C8685F24E5A

CRC32 Digest: 0x1139EBF0

Rootkit Property: Normal

File Size: 119890 bytes

File: c:\program files\winrar\rarext.dll

Page 511: Prev

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 3.93.0.0

SHA-1 Digest: 0x82394E38071109609AB08C548005070E958E7BA7

MD5 Digest: 0x30A23A61E651C7487407CF74176C6AB1

CRC32 Digest: 0xFF741404

Rootkit Property: Normal

File Size: 141824 bytes

File: c:\program files\winrar\uninstall.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 3.93.0.0

SHA-1 Digest: 0xD048F25AC6F21D136487D51C95AF1688E27003CC

MD5 Digest: 0xEEF1A4F707778F6659AE9CB26B128EB9

CRC32 Digest: 0x7AFFB715

Rootkit Property: Normal

Page 512: Prev

File Size: 120832 bytes

File: c:\program files\wordweb\uninst.exe

Product:

Product Version: 1.0.0.0

Company: Antony Lewis

Description: WordWeb thesaurus/dictionary install program

Original FileName:

File Version Label: 5.0.0.0

File Version Number: 5.0.0.0

SHA-1 Digest: 0xB1195C1187F14327D1FCEA9B439D15F69610D6EC

MD5 Digest: 0x0850221B6B3989393BEFC04CA179093C

CRC32 Digest: 0xE2266743

Rootkit Property: Normal

File Size: 500920 bytes

File: c:\program files\wordweb\wcapture.dll

Product: DTCapt

Product Version: 3, 0, 0, 19

Company: Deskperience

Description: DTCapt Dynamic Link Library

Original FileName: DTCapt.dll

File Version Label: 3, 0, 0, 19

File Version Number: 3.0.0.19

SHA-1 Digest: 0x86DAC1C7284A6E1F37C955B05BF369CE82DAF4F6

Page 513: Prev

MD5 Digest: 0x63E10F26DFC62D215A507A8F16291E81

CRC32 Digest: 0xE2A7CDE8

Rootkit Property: Normal

File Size: 221400 bytes

File: c:\program files\wordweb\wucnt.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x7F09090849A43414950632A59881A380FEF73788

MD5 Digest: 0x7B34EB727FB33675B2AA3744E20E7177

CRC32 Digest: 0x8224E142

Rootkit Property: Normal

File Size: 22736 bytes

File: c:\program files\wordweb\wweb32.exe

Product: WordWeb

Product Version: 5.0.0.0

Company: Antony Lewis

Description: WordWeb thesaurus/dictionary

Original FileName:

Page 514: Prev

File Version Label: 5.0.0.0

File Version Number: 5.0.0.0

SHA-1 Digest: 0x6C88B0793B9E7CC681AF8E3643E0CEA646859CB6

MD5 Digest: 0x430C23985F52F458895B3875BCA5C4B8

CRC32 Digest: 0xBEC6F94E

Rootkit Property: Normal

File Size: 42168 bytes

File: c:\program files\wst\unins000.exe

Product:

Product Version:

Company:

Description: Setup/Uninstall

Original FileName:

File Version Label: 51.52.0.0

File Version Number: 51.52.0.0

SHA-1 Digest: 0xF0DA272B348EE179D858BCC7FAEA26C9B84972DC

MD5 Digest: 0x4A1A31B36549E9368BA56CC7FC273291

CRC32 Digest: 0x46FD07E2

Rootkit Property: Normal

File Size: 722718 bytes

File: c:\program files\yahoo!\messenger\yahoomessenger.exe

Product: Yahoo! Messenger

Product Version: 10,0,0,1270

Page 515: Prev

Company: Yahoo! Inc.

Description: Yahoo! Messenger

Original FileName:

File Version Label: 10,0,0,1270

File Version Number: 10.0.0.1270

SHA-1 Digest: 0x7AD170AC4A784D6EA68A5E9ECAEB462EAA0F9594

MD5 Digest: 0xC0D12E6C85FC6DD7FF1DBB04F2DC933B

CRC32 Digest: 0xBEC348A0

Rootkit Property: Normal

File Size: 5252408 bytes

File: c:\progra~1\common~1\instal~1\driver\1050\intel3~1\idriver.exe

Product: InstallDriver Module

Product Version: 10.50

Company: Macrovision Corporation

Description: InstallDriver Module

Original FileName: InstallDriver.EXE

File Version Label: 10.50.125

File Version Number: 10.50.0.125

SHA-1 Digest: 0x4043A8A9D6F0628586470D53B7DADCA3D1A3BA62

MD5 Digest: 0xD82C9D45C46477906DADDCAB7DC43068

CRC32 Digest: 0xDF34E087

Rootkit Property: Normal

File Size: 774144 bytes

Page 516: Prev

File: c:\progra~1\common~1\instal~1\driver\7\intel3~1\idriver.exe

Product: InstallDriver Module

Product Version: 7.03

Company:

Description: InstallDriver Module

Original FileName: InstallDriver.EXE

File Version Label: 7.03.318

File Version Number: 7.3.0.318

SHA-1 Digest: 0xA1292E1EBE9C948997DE2F90D7BB8634EC298B80

MD5 Digest: 0x23DBB0678BBE5AF50B6158CC043DD3ED

CRC32 Digest: 0x372ADD10

Rootkit Property: Normal

File Size: 622592 bytes

File: c:\progra~1\common~1\instal~1\driver\9\intel3~1\idriver.exe

Product: InstallDriver Module

Product Version: 9.01

Company: InstallShield Software Corporation

Description: InstallDriver Module

Original FileName: InstallDriver.EXE

File Version Label: 9.01.429

File Version Number: 9.1.0.429

SHA-1 Digest: 0xE5F40CD1F5C700F2417968BE16AA6E3862627313

MD5 Digest: 0x8CEF05C47F798BB773C04D19DBDABBF8

CRC32 Digest: 0x3A20A3B0

Page 517: Prev

Rootkit Property: Normal

File Size: 761856 bytes

File: c:\progra~1\common~1\micros~1\virtua~1\cvhbs.exe

Product: Microsoft Office 2010

Product Version: 14.0.4750.1000

Company: Microsoft Corporation

Description: Microsoft Office Client Virtualization Handler

Original FileName: CVHBS.exe

File Version Label: 14.0.4750.1000

File Version Number: 14.0.4750.1000

SHA-1 Digest: 0xA601532717B016C669FA24EDC12C8D988F2C4473

MD5 Digest: 0xA92FC5D8E0E8E202B424A4438724F6D4

CRC32 Digest: 0x46FC21A2

Rootkit Property: Normal

File Size: 379808 bytes

File: c:\progra~1\common~1\symant~1\ccalert.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Alert and Notification

Original FileName: CCALERT.DLL

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

Page 518: Prev

SHA-1 Digest: 0x19B438DAFCCA2707CC1550B2A55AF0EBE159E795

MD5 Digest: 0xAC3DA10512F2455FF95F659EF364A4E2

CRC32 Digest: 0x732E6BA3

Rootkit Property: Normal

File Size: 222880 bytes

File: c:\progra~1\common~1\symant~1\ccemlpxy.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Email Proxy

Original FileName: ccEmlPxy.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xFFE7990E5C505A9AB97A3B560E0B96BDE50BBF97

MD5 Digest: 0x0BB158E2EF248767D2B5A4E40452B1F0

CRC32 Digest: 0xC3F70BB8

Rootkit Property: Normal

File Size: 259744 bytes

File: c:\progra~1\common~1\symant~1\cclogin.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Login Manager

Page 519: Prev

Original FileName: ccLogin.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x1428CEAF76EB47A046E858BDDAC0090929249927

MD5 Digest: 0x44AC9B733A263379A7FAB41744EE5B77

CRC32 Digest: 0xAE7F8E36

Rootkit Property: Normal

File Size: 112288 bytes

File: c:\progra~1\common~1\symant~1\ccpxyevt.dll

Product: Client and Host Security Platform

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Proxy Event Factory

Original FileName: ccPxyEvt.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0xE66A119DF7DF4B8F09B91590B887201A93AE6A36

MD5 Digest: 0xACF90909394ED33B8B9E85C22AEDD3D5

CRC32 Digest: 0xA5947986

Rootkit Property: Normal

File Size: 276128 bytes

File: c:\progra~1\common~1\symant~1\ccsetevt.dll

Product: Client and Host Security Platform

Page 520: Prev

Product Version: 104.0.11.1

Company: Symantec Corporation

Description: Symantec Settings Manager Event Factory

Original FileName: ccSetEvt.dll

File Version Label: 104.0.11.1

File Version Number: 104.0.11.1

SHA-1 Digest: 0x753D856FDDC7FFE02373DBC1050A83C317B1A8FB

MD5 Digest: 0xDC9D956BF7551FF77FC91F6A5B05BC5F

CRC32 Digest: 0xF7F943D4

Rootkit Property: Normal

File Size: 87712 bytes

File: c:\progra~1\common~1\symant~1\spbbc\spbbcevt.dll

Product: SPBBC

Product Version: 2.2.0.7

Company: Symantec Corporation

Description: SPBBC Events

Original FileName: SPBBCEvt.dll

File Version Label: 2.2.0.7

File Version Number: 2.2.0.7

SHA-1 Digest: 0x31583132B38C9A386DAD3A236933696BB5F00CFC

MD5 Digest: 0xCF723424516314E7903551817D42C9F9

CRC32 Digest: 0x2A3A84E5

Rootkit Property: Normal

File Size: 714384 bytes

Page 521: Prev

File: c:\progra~1\common~1\symant~1\symcdata\scfids~1\20110126.001\symidsco.sys

Product: Symantec Intrusion Detection

Product Version: 8.5

Company: Symantec Corporation

Description: IDS Core Driver

Original FileName:

File Version Label: 8.5.0.8

File Version Number: 8.5.0.8

SHA-1 Digest: 0x590A8DFD05870F91070821106A79EDF1617BC8C0

MD5 Digest: 0x2133D1F879B280121B0E6A7D34B24A02

CRC32 Digest: 0x67E73D89

Rootkit Property: Normal

File Size: 270712 bytes

File: c:\progra~1\common~1\symant~1\virusd~1\20110202.002\cceraser.dll

Product: ERASER ENGINE

Product Version: 110.1.4.5

Company: Symantec Corporation

Description: Symantec Eraser Engine

Original FileName: ccEraser.dll

File Version Label: 110.1.4.5

File Version Number: 110.1.4.5

SHA-1 Digest: 0xE69155A0E430E8D9ECECE601A7A73F1E48DAF987

MD5 Digest: 0x18B460AD6C9DE8CBE5C1C636E6D434D6

Page 522: Prev

CRC32 Digest: 0x5F6052C3

Rootkit Property: Normal

File Size: 2792568 bytes

File: c:\progra~1\common~1\symant~1\virusd~1\20110202.002\ecmsvr32.dll

Product: ECOM Server

Product Version: 101.3.0.93

Company: Symantec Corporation

Description: Symantec Engine Common Object Model Server

Original FileName: ecmsvr32.DLL

File Version Label: 101.3.0.93

File Version Number: 101.3.0.93

SHA-1 Digest: 0xEFFCCFD92E3F83566B53FA8C43BF1E26CCF9A989

MD5 Digest: 0xCBD9B8DBE455EEFBD76766CDDE0474A9

CRC32 Digest: 0xE90169FA

Rootkit Property: Normal

File Size: 279992 bytes

File: c:\progra~1\common~1\symant~1\virusd~1\20110202.002\naveng.sys

Product: Symantec Antivirus Engine

Product Version: 20101.3.1.1

Company: Symantec Corporation

Description: AV Engine

Original FileName: naveng32.dll

File Version Label: 20101.3.1.1

Page 523: Prev

File Version Number: 20101.3.1.1

SHA-1 Digest: 0x2A2915DAA57B046A932F0FF30D8B0CE3FFDB86DC

MD5 Digest: 0xC8EF74E4D8105B1D02D58EA4734CF616

CRC32 Digest: 0xE013F945

Rootkit Property: Normal

File Size: 86008 bytes

File: c:\progra~1\common~1\symant~1\virusd~1\20110202.002\naveng32.dll

Product: Symantec Antivirus Engine

Product Version: 20101.3.0.103

Company: Symantec Corporation

Description: AV Engine

Original FileName: naveng32.dll

File Version Label: 20101.3.0.103

File Version Number: 20101.3.0.103

SHA-1 Digest: 0x23E0361D958F5ED85677EF38005BB23BA00A404E

MD5 Digest: 0x96AB66A711247D9793D1F6AA58FF5E42

CRC32 Digest: 0x1949B238

Rootkit Property: Normal

File Size: 177592 bytes

File: c:\progra~1\common~1\symant~1\virusd~1\20110202.002\navex15.sys

Product: Symantec Antivirus Engine

Product Version: 20101.3.1.1

Company: Symantec Corporation

Page 524: Prev

Description: AV Engine

Original FileName: navex32a.dll

File Version Label: 20101.3.1.1

File Version Number: 20101.3.1.1

SHA-1 Digest: 0x40AD9532DFA493915C2F44CD7E34DAEC42F40C6F

MD5 Digest: 0x94B3164055D821A62944D9FE84036470

CRC32 Digest: 0xCF3012DA

Rootkit Property: Normal

File Size: 1360760 bytes

File: c:\progra~1\common~1\symant~1\virusd~1\20110202.002\navex32a.dll

Product: Symantec Antivirus Engine

Product Version: 20101.3.0.103

Company: Symantec Corporation

Description: AV Engine

Original FileName: navex32a.dll

File Version Label: 20101.3.0.103

File Version Number: 20101.3.0.103

SHA-1 Digest: 0xF6F9812E7A76755BE6CBBB306746A2FBE055C261

MD5 Digest: 0xFE78ACFDE622E63D92CA49412BB9CE53

CRC32 Digest: 0x987A5090

Rootkit Property: Normal

File Size: 1705400 bytes

File: c:\progra~1\difx\270581355a767bf1\dpinst.exe

Page 525: Prev

Product: Driver Package Installer (DPInst)

Product Version: 2.1

Company: Microsoft Corporation

Description: Driver Package Installer

Original FileName: DPInst.exe

File Version Label: 2.1

File Version Number: 2.1.0.0

SHA-1 Digest: 0x77FA9F9255D8577AA28357F97E09838C9C43DE34

MD5 Digest: 0x3F442906B29B552F1C9FEC1E221D90B7

CRC32 Digest: 0x7BB58539

Rootkit Property: Normal

File Size: 795104 bytes

File: c:\progra~1\difx\b4723e9a0713e5b1\dpinst.exe

Product: Driver Package Installer (DPInst)

Product Version: 2.1.1

Company: Microsoft Corporation

Description: Driver Package Installer

Original FileName: DPInst.exe

File Version Label: 2.1.1

File Version Number: 2.1.1.0

SHA-1 Digest: 0x8EFE297772764772D2631FCE9398B3A27CE96AEB

MD5 Digest: 0x2BFABD08BFAA4C75FE105AF365733954

CRC32 Digest: 0xFAB7C421

Rootkit Property: Normal

Page 526: Prev

File Size: 800824 bytes

File: c:\progra~1\micros~2\office11\1033\ppintl.dll

Product: Microsoft Office 2003

Product Version: 11.0.8161

Company: Microsoft Corporation

Description: Microsoft Office PowerPoint

Original FileName: PPINTL.DLL

File Version Label: 11.0.8161

File Version Number: 11.0.8161.0

SHA-1 Digest: 0x667322B850BC5238983E4F1655A1EFED4102039A

MD5 Digest: 0x12EB7DFA9EF26CA8AC4074442D2A18BB

CRC32 Digest: 0xBA104F8B

Rootkit Property: Normal

File Size: 492896 bytes

File: c:\progra~1\micros~2\office11\gdiplus.dll

Product: Microsoft Office 2003

Product Version: 11.0.8312

Company: Microsoft Corporation

Description: Microsoft Office 2003 component

Original FileName: gdiplus.dll

File Version Label: 11.0.8312

File Version Number: 11.0.8312.0

SHA-1 Digest: 0x3FCE14147EB08096AF2DCE192802FA904A174774

Page 527: Prev

MD5 Digest: 0xD06AAF2A7BAC263D0FEB686880644F56

CRC32 Digest: 0xA33D9A43

Rootkit Property: Normal

File Size: 1700168 bytes

File: c:\progra~1\micros~2\office11\powerpnt.exe

Product: Microsoft Office 2003

Product Version: 11.0.8324

Company: Microsoft Corporation

Description: Microsoft Office PowerPoint

Original FileName: POWERPNT.EXE

File Version Label: 11.0.8324

File Version Number: 11.0.8324.0

SHA-1 Digest: 0xB5AAB28C0E17D2C3E08D3EDC909E0D679CA4F2A9

MD5 Digest: 0x845311B9DCE25F9267D4EE52CC263941

CRC32 Digest: 0x575B60C8

Rootkit Property: Normal

File Size: 6418776 bytes

File: c:\progra~1\symantec\liveup~1\lucoms~1.exe

Product: LiveUpdate

Product Version: 3.1.0.90

Company: Symantec Corporation

Description: LiveUpdate Engine COM Module

Original FileName: LuComServer.exe

Page 528: Prev

File Version Label: 3.1.0.90

File Version Number: 3.1.0.90

SHA-1 Digest: 0x7C866C9733D12F00C76B2B66967DB06C9E1B1420

MD5 Digest: 0xFC38B32BFC5F750FF3A5C527F946582B

CRC32 Digest: 0x8ECBFA66

Rootkit Property: Normal

File Size: 2528960 bytes

File: c:\progra~1\symant~2\symant~1\logfwder.dll

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Description: Internet Security Log Forwarder

Original FileName: LogFwder.dll

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0xB4E22A3649E9FF09FFFD801527314B06EB63CEB9

MD5 Digest: 0x3FA9C31799014473F4E2BC4611435C62

CRC32 Digest: 0xA6E5478B

Rootkit Property: Normal

File Size: 226992 bytes

File: c:\progra~1\symant~2\symant~1\nisalert.dll

Product: Internet Security

Product Version: 8.7

Page 529: Prev

Company: Symantec Corporation

Description: Internet Security Alert

Original FileName:

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0x2E49A720455A20D25FF49F627CAD23C7690D5B0D

MD5 Digest: 0xCBD6EFAD5BED419F93E0E8B912099B06

CRC32 Digest: 0x54C45278

Rootkit Property: Normal

File Size: 403120 bytes

File: c:\progra~1\symant~2\symant~1\nisprod.dll

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Description: NIS Product Plugin

Original FileName: NISProd.dll

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0x253E306B86FBF207399C02AE9A376EBEAE77D387

MD5 Digest: 0x83251EE5F07854FF9E229940ACC908F0

CRC32 Digest: 0x40253D53

Rootkit Property: Normal

File Size: 460464 bytes

Page 530: Prev

File: c:\progra~1\symant~2\symant~1\nistray.dll

Product: Internet Security

Product Version: 8.7

Company: Symantec Corporation

Description: Internet Security System Tray

Original FileName:

File Version Label: 8.7.4.97

File Version Number: 8.7.4.97

SHA-1 Digest: 0xF66946C1EEA8B904E3ED524F320D30DB18221E4B

MD5 Digest: 0x1DD030AD47C4AD9A36FFD39A530923F4

CRC32 Digest: 0x6C6304CD

Rootkit Property: Normal

File Size: 255664 bytes

File: c:\progra~1\symant~2\symant~2\vptray.exe

Product: Symantec AntiVirus

Product Version: 10.1.5.5000

Company: Symantec Corporation

Description: Symantec AntiVirus

Original FileName:

File Version Label: 10.1.5.5000

File Version Number: 10.1.5.5000

SHA-1 Digest: 0xB9CCE6A3F38412166FEC0D3CE62786AF048C6DEE

MD5 Digest: 0xA1307C939E5216317E363D06A5473C7D

CRC32 Digest: 0xEC128A08

Page 531: Prev

Rootkit Property: Normal

File Size: 125168 bytes

File: c:\progra~1\thinkpad\connec~1\acathv~1.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x0FCE9A330FC09AFC45DB2AAC522041281B3A6FD0

MD5 Digest: 0x4ED1E0158FCB12E27CBE2BADF0EE7315

CRC32 Digest: 0x9591CDEC

Rootkit Property: Normal

File Size: 53248 bytes

File: c:\progra~1\thinkpad\utilit~1\batlogex.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

Page 532: Prev

SHA-1 Digest: 0x2C2EB2A009DB0B00156FA915869423F199C8A419

MD5 Digest: 0xC31CAF9DD23823745159071D58CA47B5

CRC32 Digest: 0x0520B1D9

Rootkit Property: Normal

File Size: 208896 bytes

File: c:\progra~1\thinkpad\utilit~1\pwrmgrtr.dll

Product: ThinkPad Power Manager

Product Version: 1, 0, 0, 0

Company: Lenovo Group Limited

Description: ThinkPad Power Manager Background Monitor and Tray Battery Gauge

Original FileName: PWRMGRTR.DLL

File Version Label: 1, 0, 0, 0

File Version Number: 1.0.0.0

SHA-1 Digest: 0xF49C2C63A7ECA50BACB4C13BF284B687DC1EFADB

MD5 Digest: 0x569A4073C0E2826C7B9BE931B24E680E

CRC32 Digest: 0x265EF5A4

Rootkit Property: Normal

File Size: 294912 bytes

File: c:\progra~1\window~2\wmpband.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player Deskband

Page 533: Prev

Original FileName: wmdband.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x48DCC049640FD247A37999B54546CFDEA953AE7D

MD5 Digest: 0x54A9F1E18AAB48579AB70A32D60D780A

CRC32 Digest: 0xCE941996

Rootkit Property: Normal

File Size: 96256 bytes

File: c:\progra~1\yahoo!\messen~1\unwise.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x3C4735750C99C63E6861170A8C459A608594211E

MD5 Digest: 0x973567B98CDFC147DF4E60471D9DF072

CRC32 Digest: 0x5BE5019B

Rootkit Property: Normal

File Size: 153088 bytes

File: c:\sdwork\issimsvc.exe

Product:

Page 534: Prev

Product Version: 4.09

Company: IBM Corp.

Description: ISSI Service

Original FileName:

File Version Label: 4.09

File Version Number: 4.9.0.0

SHA-1 Digest: 0x45442B280CADC4B36DBE02A93DF02320CE668E2C

MD5 Digest: 0xB35439C61EAC9D093CB658D7F01F8486

CRC32 Digest: 0x4F92FB76

Rootkit Property: Normal

File Size: 242928 bytes

File: c:\sdwork\psapi.dll

Product: Microsoft® Windows NT(TM) Operating System

Product Version: 3.51

Company: Microsoft Corporation

Description: Process Status Helper

Original FileName: PSAPI

File Version Label: 3.51

File Version Number: 3.51.1016.1

SHA-1 Digest: 0x8A65DED13DACD9A767F494368B0E5FFD4DE8C971

MD5 Digest: 0x0BCD1BB56616ACE4561C8FA9A7EAFE47

CRC32 Digest: 0x6649A1C6

Rootkit Property: Normal

File Size: 14400 bytes

Page 535: Prev

File: c:\sdwork\w32maing.exe

Product: IBM Standard Software Installer

Product Version: 4.87

Company: IBM Corp.

Description: OSP Windows 32-bit ESD API

Original FileName:

File Version Label: 4.87

File Version Number: 0.4.0.87

SHA-1 Digest: 0x3E09C0DA197675063039B085EEE53817202E8517

MD5 Digest: 0x88D80A8D7C233BC8F4FC54407E8D8642

CRC32 Digest: 0xA172B620

Rootkit Property: Normal

File Size: 278016 bytes

File: c:\windows\$ntservicepackuninstallidnmitigationapis$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.2.0029.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.2.0029.0 (SRV03_QFE.031113-0918)

File Version Number: 6.2.29.0

SHA-1 Digest: 0x708ADF05475E7386AE77E0C9A72230B57B043566

MD5 Digest: 0xB5FF6305E3B6FDFC91057D2FAC100E4C

Page 536: Prev

CRC32 Digest: 0x51CA3978

Rootkit Property: Normal

File Size: 213216 bytes

File: c:\windows\$ntservicepackuninstallnlsdownlevelmapping$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.2.0029.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.2.0029.0 (SRV03_QFE.031113-0918)

File Version Number: 6.2.29.0

SHA-1 Digest: 0x708ADF05475E7386AE77E0C9A72230B57B043566

MD5 Digest: 0xB5FF6305E3B6FDFC91057D2FAC100E4C

CRC32 Digest: 0x51CA3978

Rootkit Property: Normal

File Size: 213216 bytes

File: c:\windows\$ntuninstallkb2079403$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

Page 537: Prev

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2115168$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2121546$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Page 538: Prev

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2141007$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2158563$\spuninst\spuninst.exe

Page 539: Prev

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2160329$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

Page 540: Prev

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2183461$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2229593$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

Page 541: Prev

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2259922$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2279986$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

Page 542: Prev

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2286198$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2296011$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Page 543: Prev

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2296199$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

Page 544: Prev

File: c:\windows\$ntuninstallkb2345886$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2347290$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Page 545: Prev

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2360937$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2378111_wm9$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

Page 546: Prev

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2387149$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2419632$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Page 547: Prev

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2423089$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2436673$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Page 548: Prev

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2440591$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

Page 549: Prev

File: c:\windows\$ntuninstallkb2443105$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2443685$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

Page 550: Prev

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb2467659$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb923561$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

Page 551: Prev

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb938464$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb946648$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Page 552: Prev

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb950759$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb950762$\spuninst\spuninst.exe

Page 553: Prev

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb950974$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

Page 554: Prev

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb951072-v2$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb951376-v2$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

Page 555: Prev

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb951698$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb951748$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

Page 556: Prev

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb951978$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb952004$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Page 557: Prev

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb952011$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0004.1

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0004.1 built by: dnsrv

File Version Number: 6.3.4.1

SHA-1 Digest: 0xF8E76D1F160D5FE0ADA4389E44F18A1667D90AFD

MD5 Digest: 0xA39DF582CA051AFC8811FBD00DB12F10

CRC32 Digest: 0x4CD39CBB

Rootkit Property: Normal

File Size: 221488 bytes

Page 558: Prev

File: c:\windows\$ntuninstallkb952069_wm9$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb952287$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Page 559: Prev

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb952954$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb953838$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

Page 560: Prev

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb954155_wm9$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb954459$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Page 561: Prev

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb954600$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb955069$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Page 562: Prev

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb955759$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

Page 563: Prev

File: c:\windows\$ntuninstallkb955839$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb956390$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

Page 564: Prev

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb956572$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb956744$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

Page 565: Prev

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb956802$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb956803$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Page 566: Prev

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb956844$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb958215$\spuninst\spuninst.exe

Page 567: Prev

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb958644$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

Page 568: Prev

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb958687$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb958690$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

Page 569: Prev

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb958869$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb959426$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

Page 570: Prev

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb960714$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb960803$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Page 571: Prev

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb960859$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

Page 572: Prev

File: c:\windows\$ntuninstallkb961118$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb961373$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Page 573: Prev

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb961501$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb963027$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

Page 574: Prev

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb967715$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb968389$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Page 575: Prev

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb968816_wm9$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb969059$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Page 576: Prev

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb969947$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

Page 577: Prev

File: c:\windows\$ntuninstallkb970430$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb971468$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

Page 578: Prev

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb971557$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb971657$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

Page 579: Prev

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb971737$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb971961$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Page 580: Prev

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb972270$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb973354$\spuninst\spuninst.exe

Page 581: Prev

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb973507$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

Page 582: Prev

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb973525$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb973540_wm9$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

Page 583: Prev

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb973687$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb973815$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

Page 584: Prev

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb973869$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb973904$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Page 585: Prev

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb974112$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

Page 586: Prev

File: c:\windows\$ntuninstallkb974318$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb974392$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Page 587: Prev

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb974455$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb974571$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

Page 588: Prev

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb975025$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb975467$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Page 589: Prev

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb975558_wm8$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb975560$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Page 590: Prev

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb975561$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

Page 591: Prev

File: c:\windows\$ntuninstallkb975562$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb975713$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

Page 592: Prev

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb976098-v2$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb976325$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

Page 593: Prev

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb977816$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb977914$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Page 594: Prev

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb978037$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb978207$\spuninst\spuninst.exe

Page 595: Prev

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb978251$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

Page 596: Prev

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb978262$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb978338$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

Page 597: Prev

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb978542$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb978601$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

Page 598: Prev

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb978695_wm9$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb978706$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Page 599: Prev

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb979309$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

Page 600: Prev

File: c:\windows\$ntuninstallkb979402_wm9$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb979482$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Page 601: Prev

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb979687$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb980182$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

Page 602: Prev

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb980195$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb980218$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Page 603: Prev

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb980232$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb980436$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Page 604: Prev

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb981322$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

Page 605: Prev

File: c:\windows\$ntuninstallkb981349$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb981793$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

Page 606: Prev

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb981852$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb981957$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

Page 607: Prev

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb981997$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb982132$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Page 608: Prev

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb982214$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb982381$\spuninst\spuninst.exe

Page 609: Prev

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb982665$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

Page 610: Prev

File Size: 231288 bytes

File: c:\windows\$ntuninstallkb982802$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\$ntuninstallmscomppackv1$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0003.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0003.0 built by: dnsrv

File Version Number: 6.3.3.0

SHA-1 Digest: 0x27DE9154D87A7A9A3B56A1D5460D5EAF546812FE

Page 611: Prev

MD5 Digest: 0xA9882FE31BA3BBB3557BBB2FF429A46E

CRC32 Digest: 0x161D5AC1

Rootkit Property: Normal

File Size: 221488 bytes

File: c:\windows\$ntuninstallwdf01007$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0004.1

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0004.1 built by: dnsrv

File Version Number: 6.3.4.1

SHA-1 Digest: 0xF8E76D1F160D5FE0ADA4389E44F18A1667D90AFD

MD5 Digest: 0xA39DF582CA051AFC8811FBD00DB12F10

CRC32 Digest: 0x4CD39CBB

Rootkit Property: Normal

File Size: 221488 bytes

File: c:\windows\$ntuninstallwmfdist11$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.2.0029.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

Page 612: Prev

File Version Label: 6.2.0029.0 (SRV03_QFE.031113-0918)

File Version Number: 6.2.29.0

SHA-1 Digest: 0x708ADF05475E7386AE77E0C9A72230B57B043566

MD5 Digest: 0xB5FF6305E3B6FDFC91057D2FAC100E4C

CRC32 Digest: 0x51CA3978

Rootkit Property: Normal

File Size: 213216 bytes

File: c:\windows\$ntuninstallwmp11$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.2.0029.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.2.0029.0 (SRV03_QFE.031113-0918)

File Version Number: 6.2.29.0

SHA-1 Digest: 0x708ADF05475E7386AE77E0C9A72230B57B043566

MD5 Digest: 0xB5FF6305E3B6FDFC91057D2FAC100E4C

CRC32 Digest: 0x51CA3978

Rootkit Property: Normal

File Size: 213216 bytes

File: c:\windows\$ntuninstallwudf01007$\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0004.1

Page 613: Prev

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0004.1 built by: dnsrv

File Version Number: 6.3.4.1

SHA-1 Digest: 0xF8E76D1F160D5FE0ADA4389E44F18A1667D90AFD

MD5 Digest: 0xA39DF582CA051AFC8811FBD00DB12F10

CRC32 Digest: 0x4CD39CBB

Rootkit Property: Normal

File Size: 221488 bytes

File: c:\windows\aaremove.exe

Product: aaremove Application

Product Version: 1, 0, 0, 1

Company:

Description: aaremove MFC Application

Original FileName: aaremove.EXE

File Version Label: 1, 0, 0, 1

File Version Number: 1.0.0.1

SHA-1 Digest: 0x92DB211CDCCF9FEED961D49B9E099249A3491DAB

MD5 Digest: 0xFDD6CB39D94E9B838F4ECB225D08150A

CRC32 Digest: 0xEE05F713

Rootkit Property: Normal

File Size: 11776 bytes

Page 614: Prev

File: c:\windows\apppatch\acadproc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Compatibility DLL

Original FileName:

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5A08FBFF77B730A9D2970FD731DE516AAE432ABD

MD5 Digest: 0xEA9EE60B408878E5F2012F9C783836DB

CRC32 Digest: 0x6DB7BE1C

Rootkit Property: Normal

File Size: 39424 bytes

File: c:\windows\apppatch\acgenral.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Compatibility DLL

Original FileName:

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD28C378F459FAFA7367649554B729A80B3924AAD

MD5 Digest: 0x310C15FD8358B2C4CD7A5B98A112883F

CRC32 Digest: 0xC008C15E

Page 615: Prev

Rootkit Property: Normal

File Size: 1852928 bytes

File: c:\windows\apppatch\aclayers.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5906

Company: Microsoft Corporation

Description: Windows Compatibility DLL

Original FileName:

File Version Label: 5.1.2600.5906 (xpsp_sp3_gdr.091120-1307)

File Version Number: 5.1.2600.5906

SHA-1 Digest: 0x57AD12A0F3AFE8BB6D28806E8A65EEB10759155C

MD5 Digest: 0xAF8841FEF8DE40D36E77C6662843EDAE

CRC32 Digest: 0x13AD000A

Rootkit Property: Normal

File Size: 471552 bytes

File: c:\windows\downloaded program files\avctactxlauncher.ocx

Product: DSView AppTracker Control

Product Version: 3.8.1.76

Company: Avocent Corporation

Description: DSView AppTracker Control

Original FileName: ActXLauncher.ocx

File Version Label: 3.8.1.76

File Version Number: 3.8.1.76

Page 616: Prev

SHA-1 Digest: 0x8C2D96FDBD59E8F0D2647E7E414E7224D19406B6

MD5 Digest: 0x53328997241C160A98B4E5422E0124B5

CRC32 Digest: 0x5ED90059

Rootkit Property: Normal

File Size: 49152 bytes

File: c:\windows\downloaded program files\avctdsview3interfacevieweru.dll

Product: DSView3InterfaceViewer

Product Version: 3.5.0.22

Company: Avocent Corporation

Description: DSView3InterfaceViewer

Original FileName: DSView3InterfaceViewer.dll

File Version Label: 3.5.0.22

File Version Number: 3.5.0.22

SHA-1 Digest: 0xA649908A951ED523701E04AEB20EF5B4DDF4DDB1

MD5 Digest: 0x7D00F8A5429711A62E8F98928CF3DA87

CRC32 Digest: 0x72B90D6C

Rootkit Property: Normal

File Size: 434176 bytes

File: c:\windows\downloaded program files\avctdsviewapptracker.dll

Product: DSViewAppTracker Dynamic Link Library

Product Version: 3.8.1.76

Company: Avocent Corporation

Description: DSViewAppTracker Dynamic Link Library

Page 617: Prev

Original FileName: DSViewAppTracker.dll

File Version Label: 3.8.1.76

File Version Number: 3.8.1.76

SHA-1 Digest: 0x4597D0FAFEAFA0090BA8B608747AFF5890044034

MD5 Digest: 0xD853149A0D48369A4E6347B7CF62E300

CRC32 Digest: 0x00454B77

Rootkit Property: Normal

File Size: 30208 bytes

File: c:\windows\downloaded program files\avctinterfaceviewerimpl.dll

Product: ActiveX Control Video Viewer

Product Version: 3.5.0.22

Company: Avocent Corporation

Description: InterfaceViewerImpl

Original FileName: InterfaceViewerImpl.dll

File Version Label: 3.5.0.22

File Version Number: 3.5.0.22

SHA-1 Digest: 0x1FDCB610E6DBEC8993A671E2FEF265E5C2959DB0

MD5 Digest: 0xE8C0D1D01C55E7E615787FEF8A45BFE1

CRC32 Digest: 0x60EB3EEB

Rootkit Property: Normal

File Size: 21504 bytes

File: c:\windows\downloaded program files\avctinterfacevieweru.dll

Product: ActiveX Control Video Viewer

Page 618: Prev

Product Version: 3.5.0.22

Company: Avocent Corporation

Description: InterfaceViewer

Original FileName: InterfaceViewer.dll

File Version Label: 3.5.0.22

File Version Number: 3.5.0.22

SHA-1 Digest: 0x57153C50A8B5A95BDFD21C758C0E820B8B24DF39

MD5 Digest: 0xF869410AC8ECEA9F052AB26730DBEA22

CRC32 Digest: 0xC605A994

Rootkit Property: Normal

File Size: 258048 bytes

File: c:\windows\downloaded program files\avctkeyboard.dll

Product: Keyboard Dynamic Link Library

Product Version: 3.5.0.22

Company: Avocent Corporation

Description: Keyboard DLL

Original FileName: Keyboard.dll

File Version Label: 3.5.0.22

File Version Number: 3.5.0.22

SHA-1 Digest: 0x038A4CF37D58D880C257127B5C76E89DCF8DDA71

MD5 Digest: 0x8023ADB9E83B6B15E2DD1FC08899F735

CRC32 Digest: 0xA660CFD4

Rootkit Property: Normal

File Size: 57344 bytes

Page 619: Prev

File: c:\windows\downloaded program files\avctputtytel.exe

Product: PuTTY suite

Product Version: 3.6.4.5

Company: Simon Tatham

Description: SSH, Telnet and Rlogin client

Original FileName: PuTTY

File Version Label: 3.6.4.5

File Version Number: 3.6.4.5

SHA-1 Digest: 0x2EE58B157AF07D319F98A94979013B6308845E39

MD5 Digest: 0xA2689E498584E0B31A4A55BB5A6E1F3B

CRC32 Digest: 0xB956A6E9

Rootkit Property: Normal

File Size: 520192 bytes

File: c:\windows\downloaded program files\avctrdpviewer.exe

Product: Avocent RDP Viewer

Product Version: 1.3.0.5

Company: Avocent Corp.

Description: Avocent RDP Viewer

Original FileName: rdpviewer.exe

File Version Label: 1.3.0.5

File Version Number: 1.3.0.5

SHA-1 Digest: 0xB2927E56DB42A38C2E3E33BF9E2200127601AB16

MD5 Digest: 0x2B7DCE9C1FC2E8768A6E9FAB12A92A4C

Page 620: Prev

CRC32 Digest: 0xF1560875

Rootkit Property: Normal

File Size: 151552 bytes

File: c:\windows\downloaded program files\avctrdpviewerja.dll

Product: Avocent RDP Viewer

Product Version: 1.1.0.1

Company: Avocent Corp.

Description: Avocent RDP Viewer

Original FileName: rdpviewer.exe

File Version Label: 1.1.0.1

File Version Number: 1.1.0.1

SHA-1 Digest: 0xA2D69E7A777DEE5711E40ECB72388B6F27F415BD

MD5 Digest: 0xC61AA9847CCCE946EC37E7C0EADD8CB6

CRC32 Digest: 0xB7FF018B

Rootkit Property: Normal

File Size: 106496 bytes

File: c:\windows\downloaded program files\avctrdpviewerko.dll

Product: Avocent RDP Viewer

Product Version: 1.1.0.1

Company: Avocent Corp.

Description: Avocent RDP Viewer

Original FileName: rdpviewer.exe

File Version Label: 1.1.0.1

Page 621: Prev

File Version Number: 1.1.0.1

SHA-1 Digest: 0x66999E8E88A4F635E66EB91126468C9601B6F82C

MD5 Digest: 0x6C53F306CD008FC5D6161D938B8CFB68

CRC32 Digest: 0x21FAB23B

Rootkit Property: Normal

File Size: 106496 bytes

File: c:\windows\downloaded program files\avctrdpviewerzh.dll

Product: Avocent RDP Viewer

Product Version: 1.1.0.1

Company: Avocent Corp.

Description: Avocent RDP Viewer

Original FileName: rdpviewer.exe

File Version Label: 1.1.0.1

File Version Number: 1.1.0.1

SHA-1 Digest: 0xD4B454D3BB445A2E6FB7CC85A9F5DFD42C1BB14B

MD5 Digest: 0xCBDDDAEEDDE33A1A7A640FA25609D88A

CRC32 Digest: 0xEBBE57E3

Rootkit Property: Normal

File Size: 102400 bytes

File: c:\windows\downloaded program files\avctserialviewer.exe

Product: Avocent Serial Viewer

Product Version: 3.6.4.5

Company: Avocent Corporation

Page 622: Prev

Description: Serial Viewer

Original FileName: ThirdPartyTelnet.exe

File Version Label: 3.6.4.5

File Version Number: 3.6.4.5

SHA-1 Digest: 0xD13FD477F8A8D088D1A64C90BEBA2AAABD9BB16E

MD5 Digest: 0x091DEC7D558F21651A3F9900EDCC56C2

CRC32 Digest: 0x8B3E70B4

Rootkit Property: Normal

File Size: 167936 bytes

File: c:\windows\downloaded program files\avctserialviewerja.dll

Product: Avocent Serial Viewer

Product Version: 3.6.4.5

Company: Avocent Corporation

Description: Serial Viewer

Original FileName: ThirdPartyTelnet.exe

File Version Label: 3.6.4.5

File Version Number: 3.6.4.5

SHA-1 Digest: 0xEEBF39F5585B746DC7DC4296CDC0EC676FCCF1AB

MD5 Digest: 0xD90952F7026CB4E2FCF84FEA6C19F0C8

CRC32 Digest: 0x2849CC37

Rootkit Property: Normal

File Size: 5120 bytes

File: c:\windows\downloaded program files\avctserialviewerko.dll

Page 623: Prev

Product: Avocent Serial Viewer

Product Version: 3.6.4.5

Company: Avocent Corporation

Description: Serial Viewer

Original FileName: ThirdPartyTelnet.exe

File Version Label: 3.6.4.5

File Version Number: 3.6.4.5

SHA-1 Digest: 0xF8BE661AC6C09A25A6BA8DB40A95FF5990F20F47

MD5 Digest: 0xFC4B9B334C4E64E05F35A90731B6BC07

CRC32 Digest: 0xFCA0C14A

Rootkit Property: Normal

File Size: 5120 bytes

File: c:\windows\downloaded program files\avctserialviewerzh.dll

Product: Avocent Serial Viewer

Product Version: 3.6.4.5

Company: Avocent Corporation

Description: Serial Viewer

Original FileName: ThirdPartyTelnet.exe

File Version Label: 3.6.4.5

File Version Number: 3.6.4.5

SHA-1 Digest: 0x8F6AAD2A8BB8893B57C57FFA21945EB31409E414

MD5 Digest: 0x47F44CBC69B8200C23CAF58144F91646

CRC32 Digest: 0x84FD74EF

Rootkit Property: Normal

Page 624: Prev

File Size: 4608 bytes

File: c:\windows\downloaded program files\avctvideoviewer.exe

Product: Avocent Session Viewer

Product Version: 3.5.0.22

Company: Avocent Corporation

Description: Video Viewer

Original FileName: AvctVideoViewer.ocx

File Version Label: 3.5.0.22

File Version Number: 3.5.0.22

SHA-1 Digest: 0x2627394C9D3DC9C1BF72417E0A72D61DA68D3A9B

MD5 Digest: 0xD8B9F652E99E5DA300B25A29D66A1343

CRC32 Digest: 0xBDBED88E

Rootkit Property: Normal

File Size: 1970176 bytes

File: c:\windows\downloaded program files\avctvideoviewerja.dll

Product: Avocent Session Viewer

Product Version: 3.5.0.22

Company: Avocent Corporation

Description: Video Viewer

Original FileName: AvctVideoViewerJA.dll

File Version Label: 3.5.0.22

File Version Number: 3.5.0.22

SHA-1 Digest: 0x96396C88CEC7CB723C0BB636F9CDA56C58512284

Page 625: Prev

MD5 Digest: 0x57C77C684E8F4DE10B6092A09239A822

CRC32 Digest: 0xD20C00B5

Rootkit Property: Normal

File Size: 733184 bytes

File: c:\windows\downloaded program files\avctvideoviewerko.dll

Product: Avocent Session Viewer

Product Version: 3.5.0.22

Company: Avocent Corporation

Description: Video Viewer

Original FileName: AvctVideoViewerJA.dll

File Version Label: 3.5.0.22

File Version Number: 3.5.0.22

SHA-1 Digest: 0x048D3E83B8F6B9A7C4A6491CA7061DE494047CB6

MD5 Digest: 0xB7A20499540F33512C5839DA9304AC8D

CRC32 Digest: 0xD87D53BD

Rootkit Property: Normal

File Size: 729088 bytes

File: c:\windows\downloaded program files\avctvideoviewerzh.dll

Product: Avocent Session Viewer

Product Version: 3.5.0.22

Company: Avocent Corporation

Description: Video Viewer

Original FileName: AvctVideoViewerZH.dll

Page 626: Prev

File Version Label: 3.5.0.22

File Version Number: 3.5.0.22

SHA-1 Digest: 0xDE23DD23921D7FBFB6FF3B9027C433E80E344737

MD5 Digest: 0x003A519F3D26A7004B3865D2401B3754

CRC32 Digest: 0x11D72864

Rootkit Property: Normal

File Size: 724992 bytes

File: c:\windows\downloaded program files\avctvirtualmedia.exe

Product: Avocent Virtual Media Viewer

Product Version: 3.5.1.1

Company: Avocent Corporation

Description: Avocent Virtual Media Viewer

Original FileName: VirtualMedia.exe

File Version Label: 3.5.1.1

File Version Number: 3.5.1.1

SHA-1 Digest: 0xD6D53E5ECB26C9B45DDE61C91B523FFED55F2639

MD5 Digest: 0xBA9980928CC1FC614192926E7D46C8B8

CRC32 Digest: 0x022DB02F

Rootkit Property: Normal

File Size: 565248 bytes

File: c:\windows\downloaded program files\avctvirtualmediaja.dll

Product: Avocent Virtual Media Viewer

Product Version: 3.5.1.1

Page 627: Prev

Company: Avocent Corporation

Description: Avocent Virtual Media Viewer

Original FileName: VirtualMedia.exe

File Version Label: 3.5.1.1

File Version Number: 3.5.1.1

SHA-1 Digest: 0x95E910B00DE90D1A294C4BCEB750842D99358E1E

MD5 Digest: 0x2DE779A3C6F352633E5A7793A66E9B56

CRC32 Digest: 0x7A67BF39

Rootkit Property: Normal

File Size: 73728 bytes

File: c:\windows\downloaded program files\avctvirtualmediako.dll

Product: Avocent Virtual Media Viewer

Product Version: 3.5.1.1

Company: Avocent Corporation

Description: Avocent Virtual Media Viewer

Original FileName: VirtualMedia.exe

File Version Label: 3.5.1.1

File Version Number: 3.5.1.1

SHA-1 Digest: 0x88B8436EABD738BA56FFADFA97392E53E7C6C9FC

MD5 Digest: 0x5949885385192E067D6B487FFCDFF0F7

CRC32 Digest: 0x4AB945E7

Rootkit Property: Normal

File Size: 73728 bytes

Page 628: Prev

File: c:\windows\downloaded program files\avctvirtualmediazh.dll

Product: Avocent Virtual Media Viewer

Product Version: 3.5.1.1

Company: Avocent Corporation

Description: Avocent Virtual Media Viewer

Original FileName: VirtualMedia.exe

File Version Label: 3.5.1.1

File Version Number: 3.5.1.1

SHA-1 Digest: 0xCDCBCA4BDF08B7C02D36393C42CB9E55921EE1D0

MD5 Digest: 0xCDC605304254672B4758D67BB25163BA

CRC32 Digest: 0xE99CE9E0

Rootkit Property: Normal

File Size: 69632 bytes

File: c:\windows\downloaded program files\avctvncviewer.exe

Product: Avocent Win32 Viewer

Product Version: 2.1.0.7

Company: Avocent Corp.

Description: vncviewer

Original FileName: vncviewer.exe

File Version Label: 2.1.0.7

File Version Number: 2.1.0.7

SHA-1 Digest: 0x239E3DB126C60F8C17B9E6030549F9BB84C6EC24

MD5 Digest: 0x8F07F92C90408B76B5FDC56352B0EC51

CRC32 Digest: 0x3B94FB4F

Page 629: Prev

Rootkit Property: Normal

File Size: 331776 bytes

File: c:\windows\downloaded program files\avctvncviewerja.dll

Product: Avocent Win32 Viewer

Product Version: 1.1.2.2

Company: Avocent Corp.

Description: vncviewer

Original FileName: vncviewer.exe

File Version Label: 1.1.2.2

File Version Number: 1.1.2.2

SHA-1 Digest: 0xF0A49385937AF2426283AAD296619F323845F71B

MD5 Digest: 0xC5ACC596D41E18CCA47E176734837EDD

CRC32 Digest: 0x5150B6F7

Rootkit Property: Normal

File Size: 86016 bytes

File: c:\windows\downloaded program files\avctvncviewerzh.dll

Product: Avocent Win32 Viewer

Product Version: 1.1.2.2

Company: Avocent Corp.

Description: vncviewer

Original FileName: vncviewer.exe

File Version Label: 1.1.2.2

File Version Number: 1.1.2.2

Page 630: Prev

SHA-1 Digest: 0xDB8D0D717B4F66D726E7A26C2C84F95056729DB7

MD5 Digest: 0x3182CB5063B604152D73179E524CC592

CRC32 Digest: 0x0162858F

Rootkit Property: Normal

File Size: 81920 bytes

File: c:\windows\downloaded program files\dynhttp.dll

Product: http client Module

Product Version: 1,0,0,1

Company: Avocent

Description: http client Module

Original FileName: AvocentHTTP.dll

File Version Label: 1,0,0,1

File Version Number: 1.0.0.1

SHA-1 Digest: 0x5EA4943B3DA26B7CDD0C6A157723205577453ADA

MD5 Digest: 0x15FE2940DE87E5CF5902C64A7B656E09

CRC32 Digest: 0xB73EEB1F

Rootkit Property: Normal

File Size: 106496 bytes

File: c:\windows\downloaded program files\gpwsx.ocx

Product: gpod

Product Version: 4.00

Company: IBM

Description:

Page 631: Prev

Original FileName: gpwsx.ocx

File Version Label: 4.00

File Version Number: 4.0.0.0

SHA-1 Digest: 0xF9B92EDE17C178937D37471530E5F06AE90C30BF

MD5 Digest: 0x22B4AAC96AE58EFA340C56C43BAA6C27

CRC32 Digest: 0x4D6FBA84

Rootkit Property: Normal

File Size: 184320 bytes

File: c:\windows\downloaded program files\juniperext.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x971973257BA03EDD1FB5152F1B60D8B1490143C7

MD5 Digest: 0x2037085825B999FE8A7AFC92A004F78D

CRC32 Digest: 0x596CDF72

Rootkit Property: Normal

File Size: 398632 bytes

File: c:\windows\downloaded program files\launchexe.dll

Product: launchEXE Module

Page 632: Prev

Product Version: 1, 0, 5, 2

Company:

Description: launchEXE Module

Original FileName: launchEXE.DLL

File Version Label: 1, 0, 5, 2

File Version Number: 1.0.5.2

SHA-1 Digest: 0xE2B83D0B1E68F2F7C378A83507100F4A36721C40

MD5 Digest: 0x08BAFA4FCDD9075F1AC17DB808F122B0

CRC32 Digest: 0xE336ED60

Rootkit Property: Normal

File Size: 53248 bytes

File: c:\windows\downloaded program files\vpclient.dll

Product: Soronti SorontiView.dll

Product Version: 1, 0, 5, 7

Company: Soronti, Inc.

Description: SorontiView.dll

Original FileName: sorontiview.dll

File Version Label: 1, 0, 5, 7

File Version Number: 1.0.5.7

SHA-1 Digest: 0x2313EB8047EC6C04193E08D1EAEC2C412264B6A1

MD5 Digest: 0x66B9EF18EDF8443A292C91B063D9DAD2

CRC32 Digest: 0xCB4AA86A

Rootkit Property: Normal

File Size: 172032 bytes

Page 633: Prev

File: c:\windows\downloaded program files\vpclient.exe

Product: Win32 Remote Viewer

Product Version: 1, 0, 5, 7

Company:

Description: Remote Viewer

Original FileName: VPViewer.exe

File Version Label: 1, 0, 5, 7

File Version Number: 1.0.5.7

SHA-1 Digest: 0x1401FAFB61A29A31ADC4032792A137EC963BBA1F

MD5 Digest: 0x2418E6F765D6C87C93DFD5AF1FD44E86

CRC32 Digest: 0xCB511E26

Rootkit Property: Normal

File Size: 118784 bytes

File: c:\windows\downloaded program files\vpfilexfer.dll

Product: TODO: <Product name>

Product Version: 1.0.0.1

Company: TODO: <Company name>

Description: TODO: <File description>

Original FileName: vpfilexfer.dll

File Version Label: 1.0.0.1

File Version Number: 1.0.0.1

SHA-1 Digest: 0x1C2D4BDB4EAAEE6D451E6DBEA1A035453ED29191

MD5 Digest: 0x4F9FA23444ACCCBC0FFAA077239C144F

Page 634: Prev

CRC32 Digest: 0xA031C1F0

Rootkit Property: Normal

File Size: 180224 bytes

File: c:\windows\explorer.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Windows Explorer

Original FileName: EXPLORER.EXE

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x9D2BF84874ABC5B6E9A2744B7865C193C08D362F

MD5 Digest: 0x12896823FB95BFB3DC9B46BCAEDC9923

CRC32 Digest: 0x0EE48FAF

Rootkit Property: Normal

File Size: 1033728 bytes

File: c:\windows\ie7\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.2.0029.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.2.0029.0 (SRV03_QFE.031113-0918)

Page 635: Prev

File Version Number: 6.2.29.0

SHA-1 Digest: 0x708ADF05475E7386AE77E0C9A72230B57B043566

MD5 Digest: 0xB5FF6305E3B6FDFC91057D2FAC100E4C

CRC32 Digest: 0x51CA3978

Rootkit Property: Normal

File Size: 213216 bytes

File: c:\windows\ie7updates\kb2183461-ie7\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\ie7updates\kb2360131-ie7\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Page 636: Prev

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\ie7updates\kb2416400-ie7\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

File Size: 231288 bytes

File: c:\windows\ie7updates\kb938127-v2-ie7\spuninst\spuninst.exe

Page 637: Prev

Product: Microsoft® Windows® Operating System

Product Version: 6.2.0029.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.2.0029.0 (SRV03_QFE.031113-0918)

File Version Number: 6.2.29.0

SHA-1 Digest: 0x708ADF05475E7386AE77E0C9A72230B57B043566

MD5 Digest: 0xB5FF6305E3B6FDFC91057D2FAC100E4C

CRC32 Digest: 0x51CA3978

Rootkit Property: Normal

File Size: 213216 bytes

File: c:\windows\ie7updates\kb982381-ie7\spuninst\spuninst.exe

Product: Microsoft® Windows® Operating System

Product Version: 6.3.0013.0

Company: Microsoft Corporation

Description: Windows Service Pack Uninstall

Original FileName: SPUNINST.EXE

File Version Label: 6.3.0013.0 built by: dnsrv

File Version Number: 6.3.13.0

SHA-1 Digest: 0x81ADF0958958754FE7D553C51DE20D80CF386BD1

MD5 Digest: 0x78141AD888BA82E3ABC854D229A59F07

CRC32 Digest: 0x97D3DFD3

Rootkit Property: Normal

Page 638: Prev

File Size: 231288 bytes

File: c:\windows\microsoft.net\framework\v1.1.4322\updates\hotfix.exe

Product: MSDDHotfix

Product Version: 1, 0, 1, 0

Company:

Description: MSDDHotfix

Original FileName: Hotfix.exe

File Version Label: 1, 0, 1, 0

File Version Number: 1.0.1.0

SHA-1 Digest: 0xEE7DD3770E5113A65516E2C96CC90A09ABCEB60B

MD5 Digest: 0xA0A32BA4F5473CE6877F2A21211D7B86

CRC32 Digest: 0xB3E78898

Rootkit Property: Normal

File Size: 73728 bytes

File: c:\windows\microsoft.net\framework\v2.0.50727\aspnet_state.exe

Product: Microsoft® .NET Framework

Product Version: 2.0.50727.3053

Company: Microsoft Corporation

Description: Microsoft ASP.NET State Server

Original FileName: aspnet_state.exe

File Version Label: 2.0.50727.3053 (netfxsp.050727-3000)

File Version Number: 2.0.50727.3053

SHA-1 Digest: 0x51E6CEA7D2C27FFE21976CD0AC3CF6078042653D

Page 639: Prev

MD5 Digest: 0x0E5E4957549056E2BF2C49F4F6B601AD

CRC32 Digest: 0x1AC50853

Rootkit Property: Normal

File Size: 34312 bytes

File: c:\windows\microsoft.net\framework\v2.0.50727\culture.dll

Product: Microsoft® .NET Framework

Product Version: 2.0.50727.3053

Company: Microsoft Corporation

Description: Microsoft Globalization Support

Original FileName: culture.dll

File Version Label: 2.0.50727.3053 (netfxsp.050727-3000)

File Version Number: 2.0.50727.3053

SHA-1 Digest: 0x304CF950CC933CC9E528E7000E12199CD6BBA9EC

MD5 Digest: 0x219AF0F9A54EBEEB3E7E20025D801034

CRC32 Digest: 0x82CF7E47

Rootkit Property: Normal

File Size: 27136 bytes

File: c:\windows\microsoft.net\framework\v2.0.50727\fusion.dll

Product: Microsoft® .NET Framework

Product Version: 2.0.50727.3053

Company: Microsoft Corporation

Description: Assembly manager

Original FileName: fusion.dll

Page 640: Prev

File Version Label: 2.0.50727.3053 (netfxsp.050727-3000)

File Version Number: 2.0.50727.3053

SHA-1 Digest: 0xD5F121D3D5E3699E920824F5733A4EB2A4741C76

MD5 Digest: 0xEA3AF33A9341B88D23FDC20D6EC826FE

CRC32 Digest: 0x65C8AEE5

Rootkit Property: Normal

File Size: 18936 bytes

File: c:\windows\microsoft.net\framework\v2.0.50727\microsoft visual j# 2.0 redistributable package - se\install.exe

Product: Microsoft® Visual Studio® 2005

Product Version: 8.0.50727.937

Company: Microsoft Corporation

Description: External Installer

Original FileName: Install.exe

File Version Label: 8.0.50727.937 (jsertm.050727-9300)

File Version Number: 8.0.50727.937

SHA-1 Digest: 0x70700387D45F20AF5E6842D97228D025926F3524

MD5 Digest: 0x722BD933842CC4DF602F68265C02B372

CRC32 Digest: 0x34405C6A

Rootkit Property: Normal

File Size: 612184 bytes

File: c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe

Product: Microsoft® .NET Framework

Product Version: 2.0.50727.3053

Page 641: Prev

Company: Microsoft Corporation

Description: .NET Runtime Optimization Service

Original FileName: mscorsvw.exe

File Version Label: 2.0.50727.3053 (netfxsp.050727-3000)

File Version Number: 2.0.50727.3053

SHA-1 Digest: 0x6BEACDA3C977838A88B4795BFA42B7AD8FC9A5A2

MD5 Digest: 0xD87ACAED61E417BBA546CED5E7E36D9C

CRC32 Digest: 0x7A5C237C

Rootkit Property: Normal

File Size: 69632 bytes

File: c:\windows\microsoft.net\framework\v2.0.50727\shfusion.dll

Product: Microsoft® .NET Framework

Product Version: 2.0.50727.3053

Company: Microsoft Corporation

Description: Microsoft COM Runtime Fusion Assembly Viewer

Original FileName: shfusion.dll

File Version Label: 2.0.50727.3053 (netfxsp.050727-3000)

File Version Number: 2.0.50727.3053

SHA-1 Digest: 0x1E0EFE7F5AAF8BEBF9E514BFB5BF5BA717990731

MD5 Digest: 0x36BA8022693AF7E967359FF3F97531D7

CRC32 Digest: 0x911141E0

Rootkit Property: Normal

File Size: 118784 bytes

Page 642: Prev

File: c:\windows\microsoft.net\framework\v2.0.50727\shfusres.dll

Product: Microsoft® .NET Framework

Product Version: 2.0.50727.3053

Company: Microsoft Corporation

Description: Microsoft COM Runtime Fusion Assembly Viewer Resources

Original FileName: shfusres.dll

File Version Label: 2.0.50727.3053 (netfxsp.050727-3000)

File Version Number: 2.0.50727.3053

SHA-1 Digest: 0xFC8FEAFC8BDB9539C924DBAF9A54516A94EBF410

MD5 Digest: 0x327DE7A9766CC9AA302C8D7F3925C8CE

CRC32 Digest: 0x9E4BD7B7

Rootkit Property: Normal

File Size: 95232 bytes

File: c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe

Product: Microsoft® .NET Framework

Product Version: 3.0.4506.2152

Company: Microsoft Corporation

Description: Windows CardSpace

Original FileName: infocard.exe

File Version Label: 3.0.4506.2152 (SP.030729-0100)

File Version Number: 3.0.4506.2152

SHA-1 Digest: 0x436FD2F86420D94416304A8ADB6CD6751D03C5B3

MD5 Digest: 0xC01AC32DC5C03076CFB852CB5DA5229C

CRC32 Digest: 0x39FFF0D9

Page 643: Prev

Rootkit Property: Normal

File Size: 881664 bytes

File: c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe

Product: Microsoft® .NET Framework

Product Version: 3.0.4506.2152

Company: Microsoft Corporation

Description: SMSvcHost.exe

Original FileName: SMSvcHost.exe

File Version Label: 3.0.4506.2152 (SP.030729-0100)

File Version Number: 3.0.4506.2152

SHA-1 Digest: 0x10F1EC2DAF049045FEAE843437146E19AEB62952

MD5 Digest: 0xD34612C5D02D026535B3095D620626AE

CRC32 Digest: 0xF903FB2F

Rootkit Property: Normal

File Size: 132096 bytes

File: c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe

Product: Microsoft® .NET Framework

Product Version: 3.0.6920.1427

Company: Microsoft Corporation

Description: PresentationFontCache.exe

Original FileName: PresentationFontCache.exe

File Version Label: 3.0.6920.1427 built by: SP

File Version Number: 3.0.6920.1427

Page 644: Prev

SHA-1 Digest: 0x760F989C9F04ADC60DF790C2FD6099FF10F35EA2

MD5 Digest: 0x8BA7C024070F2B7FDD98ED8A4BA41789

CRC32 Digest: 0x6B750355

Rootkit Property: Normal

File Size: 46104 bytes

File: c:\windows\microsoft.net\framework\v3.5\microsoft .net framework 3.5 sp1\setup.exe

Product: Microsoft® Visual Studio® 2008

Product Version: 9.0.30729.1

Company: Microsoft Corporation

Description: Suite Integration Toolkit Executable

Original FileName: Setup.exe

File Version Label: 9.0.30729.1 built by: SP

File Version Number: 9.0.30729.1

SHA-1 Digest: 0xE1C3DB8326981E50C6BEC02A840F3593D8A87DB6

MD5 Digest: 0xD69997274BB90D26092E24DD2F7165EE

CRC32 Digest: 0x19566495

Rootkit Property: Normal

File Size: 269304 bytes

File: c:\windows\pchealth\helpctr\binaries\pchsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft PCHealth Service Holder

Page 645: Prev

Original FileName: PCHSVC.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x46D3AEE4E4CEFEDCC287A9783EB607F1CA60D755

MD5 Digest: 0x4FCCA060DFE0C51A09DD5C3843888BCD

CRC32 Digest: 0xC480A270

Rootkit Property: Normal

File Size: 38400 bytes

File: c:\windows\system32\acs.exe

Product: Atheros Configuration Service (ACS)

Product Version: 5.0.0.359

Company: Atheros

Description: ACS

Original FileName: acs.exe

File Version Label: 5.0.0.359

File Version Number: 5.0.0.359

SHA-1 Digest: 0xBEF5CB3889C14C28A387989A6161CDA501FDF89B

MD5 Digest: 0x88459AC0F5D5A1AA60E56B5E6070ED0F

CRC32 Digest: 0x695EC4F6

Rootkit Property: Normal

File Size: 360533 bytes

File: c:\windows\system32\activeds.dll

Product: Microsoft® Windows® Operating System

Page 646: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: ADs Router Layer DLL

Original FileName: ADs

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x71DDE7DEA4019AB631FE85A31149A494363B7BDC

MD5 Digest: 0x2CDAE321B8E878A278BA2D2FA013060B

CRC32 Digest: 0xBE63F4A1

Rootkit Property: Normal

File Size: 193536 bytes

File: c:\windows\system32\actxprxy.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: ActiveX Interface Marshaling Library

Original FileName: ActXPrxy.dll

File Version Label: 6.00.2900.5512 (xpsp.080413-2113)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0xEC1F4ED9D76D99A9C1D3073A8E351FE0EFE03FB5

MD5 Digest: 0x912B67BB8249925A5C972FC5839EAE09

CRC32 Digest: 0xAB131156

Rootkit Property: Normal

File Size: 98304 bytes

Page 647: Prev

File: c:\windows\system32\adsldpc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: ADs LDAP Provider C DLL

Original FileName: adsldpc

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x1E272578A29B1C2ED7A013266CA50343A560FA2D

MD5 Digest: 0x0D84657DBF93DB98673DEFDF2B29E25A

CRC32 Digest: 0x111FDF40

Rootkit Property: Normal

File Size: 143360 bytes

File: c:\windows\system32\advapi32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5755

Company: Microsoft Corporation

Description: Advanced Windows 32 Base API

Original FileName: advapi32.dll

File Version Label: 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)

File Version Number: 5.1.2600.5755

SHA-1 Digest: 0xEA2E9BAC1789B53D7EFCD675A63F4A2B44898439

MD5 Digest: 0xE76F8807070ED04E7408A86D6D3A6137

Page 648: Prev

CRC32 Digest: 0xC9027432

Rootkit Property: Normal

File Size: 617472 bytes

File: c:\windows\system32\alg.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Application Layer Gateway Service

Original FileName: ALG.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xEF5728C819F466BFE56C36BC9DB3FAC004EF3D50

MD5 Digest: 0x8C515081584A38AA007909CD02020B3D

CRC32 Digest: 0x4DDAB640

Rootkit Property: Normal

File Size: 44544 bytes

File: c:\windows\system32\alrsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Alerter Service DLL

Original FileName: ALRSVC.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

Page 649: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x43295C3A78D9FEF4E4C778B5F1153DDF3F968E5B

MD5 Digest: 0xA9A3DAA780CA6C9671A19D52456705B4

CRC32 Digest: 0x2F7C8344

Rootkit Property: Normal

File Size: 17408 bytes

File: c:\windows\system32\apphelp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Application Compatibility Client Library

Original FileName: Apphelp

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x016EA16586E3C27F4BD43341BA906187A416AFE0

MD5 Digest: 0xCF492D7E9AF1C628B3536D20EF6F5CC7

CRC32 Digest: 0x30CDC203

Rootkit Property: Normal

File Size: 125952 bytes

File: c:\windows\system32\appmgmts.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Page 650: Prev

Description: Software installation Service

Original FileName: appmgmts.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x27BD216140F9390492A5183E4045985D16294DC0

MD5 Digest: 0xD8849F77C0B66226335A59D26CB4EDC6

CRC32 Digest: 0xA660859C

Rootkit Property: Normal

File Size: 167936 bytes

File: c:\windows\system32\athcfg20resu.dll

Product: Atheros Configuration API Res Dynamic Link Library

Product Version: 5.0.0.359

Company: Atheros Communications, Inc.

Description: ACAPI RES DLL

Original FileName: athcfg11res.dll

File Version Label: 5.0.0.359

File Version Number: 5.0.0.359

SHA-1 Digest: 0xC22E125CCE60D440CA9C3273E14A89CC63498B8A

MD5 Digest: 0xE2CEB663E5229C1D4FDAB913901B24F4

CRC32 Digest: 0x99BDD100

Rootkit Property: Normal

File Size: 114792 bytes

File: c:\windows\system32\athcfg20u.dll

Page 651: Prev

Product: Atheros Configuration API Dynamic Link Library

Product Version: 5.0.0.359

Company: Atheros

Description: ACAPI DLL

Original FileName: athcfg10.dll

File Version Label: 5.0.0.359

File Version Number: 5.0.0.359

SHA-1 Digest: 0x70B1D7CCBF6F527AC0690595B0CB379D8AA60524

MD5 Digest: 0x7E8C5BD781FDACD082EE1602595ECB2F

CRC32 Digest: 0x889DFA56

Rootkit Property: Normal

File Size: 299103 bytes

File: c:\windows\system32\ati2edxx.dll

Product: ATI External Device Utility

Product Version: 6, 14, 10, 2504

Company: ATI Technologies, Inc.

Description: ati2edxx

Original FileName: ati2edxx.dll

File Version Label: 6, 14, 10, 2504

File Version Number: 6.14.10.2504

SHA-1 Digest: 0x26C84AF48EC9F6A6FCC912AD30BBFF742AF00143

MD5 Digest: 0x9FBCE057A30BC7E0EF519BD2C8072E92

CRC32 Digest: 0xE3B877F1

Rootkit Property: Normal

Page 652: Prev

File Size: 41984 bytes

File: c:\windows\system32\ati2evxx.dll

Product: ATI External Event Utility for Windows

Product Version: 6.14.10.4142

Company: ATI Technologies Inc.

Description: ATI External Event Utility DLL Module

Original FileName: ATI2EVXX.DLL

File Version Label: 6.14.10.4142

File Version Number: 6.14.10.4142

SHA-1 Digest: 0x4428CB05066B3FC1966142DA51B916607AF0D058

MD5 Digest: 0x44AF903CB5552332CFF12D303C77DD2F

CRC32 Digest: 0x74A05F79

Rootkit Property: Normal

File Size: 86016 bytes

File: c:\windows\system32\ati2evxx.exe

Product: ATI External Event Utility for Windows

Product Version: 6.14.10.4142

Company: ATI Technologies Inc.

Description: ATI External Event Utility EXE Module

Original FileName: ATI2EVXX.EXE

File Version Label: 6.14.10.4142

File Version Number: 6.14.10.4142

SHA-1 Digest: 0x002B9AB03F7915FA3638B0A191F896F7D0791627

Page 653: Prev

MD5 Digest: 0xEEDAC720AC52A12EDBE1D1F9933B59E7

CRC32 Digest: 0x13A6BB74

Rootkit Property: Normal

File Size: 413696 bytes

File: c:\windows\system32\atiiiexx.dll

Product: ATI Display Driver Utilities

Product Version: 6.14.10.4004

Company: ATI Technologies Inc.

Description: .INF file installer

Original FileName: atiiiexx.dll

File Version Label: 6.14.10.4004

File Version Number: 6.14.10.4004

SHA-1 Digest: 0x2FDE9CAE034ED6042730BCC988977778847D212A

MD5 Digest: 0x6099841B0C3F55E19693A82AADF56D56

CRC32 Digest: 0x29C0D4FE

Rootkit Property: Normal

File Size: 307200 bytes

File: c:\windows\system32\atl.dll

Product: Microsoft (R) Visual C++

Product Version: 6.05.2284

Company: Microsoft Corporation

Description: ATL Module for Windows XP (Unicode)

Original FileName: ATL.DLL

Page 654: Prev

File Version Label: 3.05.2284

File Version Number: 3.5.2284.2

SHA-1 Digest: 0x571921057C5CE0B6C0D6422A6298F396E1B11D63

MD5 Digest: 0x224FB925C641DA16CEB6D60F40CA4C75

CRC32 Digest: 0xA75C4FDB

Rootkit Property: Normal

File Size: 58880 bytes

File: c:\windows\system32\audiodev.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.2.5721.5262

Company: Microsoft Corporation

Description: Portable Media Devices Shell Extension

Original FileName: audiodev.dll

File Version Label: 5.2.5721.5262 (WMP_11.090130-1421)

File Version Number: 5.2.5721.5262

SHA-1 Digest: 0x5EA03CD6FA44FD61A3AB53329361768E589B5BD7

MD5 Digest: 0x1899415F4E5BD55FB9486A4B20E45D6A

CRC32 Digest: 0x9E870589

Rootkit Property: Normal

File Size: 276992 bytes

File: c:\windows\system32\audiosrv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 655: Prev

Company: Microsoft Corporation

Description: Windows Audio Service

Original FileName: audiosrv.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0845)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x8DAF0F7CF979DF9FE7634B3EB64F21DD430E9BC7

MD5 Digest: 0xDEF7A7882BEC100FE0B2CE2549188F9D

CRC32 Digest: 0x2C6CC615

Rootkit Property: Normal

File Size: 42496 bytes

File: c:\windows\system32\authz.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Authorization Framework

Original FileName: authz.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x36977FD1A696A3C3B974D2147D23425F7B0E6BEC

MD5 Digest: 0x714705F29A917993536A6AB2DEDB0B7F

CRC32 Digest: 0xD7862A52

Rootkit Property: Normal

File Size: 62464 bytes

Page 656: Prev

File: c:\windows\system32\avicap32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: AVI Capture window class

Original FileName: AVICAP32.DLL

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x7F37A3AE136024BC0D3379FA92DA118765E8940D

MD5 Digest: 0x01CFA88F8DEE91EC9F8E0988F49D106E

CRC32 Digest: 0xBA083E18

Rootkit Property: Normal

File Size: 64000 bytes

File: c:\windows\system32\avifil32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5908

Company: Microsoft Corporation

Description: Microsoft AVI File support library

Original FileName: AVIFIL32.DLL

File Version Label: 5.1.2600.5908 (xpsp_sp3_gdr.091127-0541)

File Version Number: 5.1.2600.5908

SHA-1 Digest: 0x39FB0FB7D86E0FC7D46404AFBE42BB65AD7BA758

MD5 Digest: 0x382668323400BD3BCFE9FFF249515975

CRC32 Digest: 0x989336FE

Page 657: Prev

Rootkit Property: Normal

File Size: 84992 bytes

File: c:\windows\system32\basesrv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT BASE API Server DLL

Original FileName: basesrv

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x305EDA21E5E3CE960F5E23D2AC84366282835689

MD5 Digest: 0x42F1F4C0AFB08410E5F02D4B13EBB623

CRC32 Digest: 0x3502C84F

Rootkit Property: Normal

File Size: 52736 bytes

File: c:\windows\system32\batmeter.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Battery Meter Helper DLL

Original FileName: BATMETER.DLL

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

Page 658: Prev

SHA-1 Digest: 0x187EC7ABC2BF87E51681ED5A7F9467E9F55C6029

MD5 Digest: 0x231A0B0E3BA7ABFE469A8262FAA1FD71

CRC32 Digest: 0x1CB8FF5E

Rootkit Property: Normal

File Size: 29184 bytes

File: c:\windows\system32\browselc.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Shell Browser UI Library

Original FileName: BROWSEUI.DLL

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x86E7DE920010C213AC8A4B088734037B0941FCB1

MD5 Digest: 0xF3370C98F4981EDA6036689D298E67B9

CRC32 Digest: 0x65D8F110

Rootkit Property: Normal

File Size: 63488 bytes

File: c:\windows\system32\browser.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Computer Browser Service DLL

Page 659: Prev

Original FileName: browser.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x93E0BC4C8B09E6E211326576257965C4ED1248E9

MD5 Digest: 0xA06CE3399D16DB864F55FAEB1F1927A9

CRC32 Digest: 0x37EE5F5B

Rootkit Property: Normal

File Size: 77824 bytes

File: c:\windows\system32\browseui.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.6003

Company: Microsoft Corporation

Description: Shell Browser UI Library

Original FileName: BROWSEUI.DLL

File Version Label: 6.00.2900.6003 (xpsp_sp3_gdr.100623-1635)

File Version Number: 6.0.2900.6003

SHA-1 Digest: 0x285F9D1BF2DA802C9FA4DDA2688ABDDA43D6AB8A

MD5 Digest: 0x93B9631389F8C84E56F2552482C6C6E5

CRC32 Digest: 0x96FF7807

Rootkit Property: Normal

File Size: 1025024 bytes

File: c:\windows\system32\bthcrp.dll

Product: Bluetooth Software

Page 660: Prev

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: bthcrp DLL

Original FileName: bthcrp.DLL or bthcrp98.DLL

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0xACAD11742D69A3D5A2149EFFA06DFE02FEC987B9

MD5 Digest: 0xC995CDC2CD5E0763EF80A14DA9777D1A

CRC32 Digest: 0x1EF96F64

Rootkit Property: Normal

File Size: 106496 bytes

File: c:\windows\system32\btncopy.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: BTNCopy Module

Original FileName: BTNCopy.DLL

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0x361480794A2C84363ABAFC1D7111B2F522033E61

MD5 Digest: 0x34A9E4C2470F8493F477FF7B040D9CE2

CRC32 Digest: 0x9834F770

Rootkit Property: Normal

File Size: 49152 bytes

Page 661: Prev

File: c:\windows\system32\btneig~1.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: BTNeighborhood DLL

Original FileName: BTNeighborhood.DLL

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0x8E1953168B98DFC5FBF0C7C6BE1CE5493001A4DB

MD5 Digest: 0xC540C47A8831E352ADA5BBD3C9CAB30A

CRC32 Digest: 0xB9B0F8AD

Rootkit Property: Normal

File Size: 979021 bytes

File: c:\windows\system32\btosif.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: BTOSIF DLL

Original FileName: btosif.dll

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0x102D36ED35718C04D9A3E15089D441D2B0DCA478

MD5 Digest: 0x745075624F9B025B173DE1CA9A343172

Page 662: Prev

CRC32 Digest: 0xCB765899

Rootkit Property: Normal

File Size: 122880 bytes

File: c:\windows\system32\btrez.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: btrez DLL

Original FileName: btrez.DLL

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0xD7E80D6E61A8300A04B7727C55421012BCEEB864

MD5 Digest: 0xFA6728405DAACA8B465AB98C820EF8FB

CRC32 Digest: 0x6BE53056

Rootkit Property: Normal

File Size: 966656 bytes

File: c:\windows\system32\btsendto.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: SendTo Dialog DLL

Original FileName: btsendto.dll

File Version Label: 5.1.0.4700

Page 663: Prev

File Version Number: 5.1.0.4700

SHA-1 Digest: 0x91971C9CAB981DE9D5DFACF553FEDCB4AAF032CB

MD5 Digest: 0xEA52AC29040867AEF312766BCB266C77

CRC32 Digest: 0x5A3F243E

Rootkit Property: Normal

File Size: 221184 bytes

File: c:\windows\system32\btsend~1.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: SendTo from Office DLL

Original FileName: BtOfficeAddin.dll

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0x659830500D5D2058358789CC247B3EEF55E5A515

MD5 Digest: 0xFA3FA8294E10617E4E2D3C8D7930AEDC

CRC32 Digest: 0x20CD2ED9

Rootkit Property: Normal

File Size: 176128 bytes

File: c:\windows\system32\btwicons.dll

Product: btwicons Dynamic Link Library

Product Version: 1, 0, 0, 1

Company:

Page 664: Prev

Description: btwicons DLL

Original FileName: btwicons.DLL

File Version Label: 1, 0, 0, 1

File Version Number: 1.0.0.1

SHA-1 Digest: 0x4543BB745CDE6A86A5F08F57BEBC10C64A7D471B

MD5 Digest: 0xC55A277A03A2FF437319E953A5206CDB

CRC32 Digest: 0xC6ACE318

Rootkit Property: Normal

File Size: 2842624 bytes

File: c:\windows\system32\btwpimif.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: BTWPIMIF DLL

Original FileName: btwpimif.dll

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0x0D210E38C3A614DA10F851591A3AB19B7D844459

MD5 Digest: 0x6AA0C7FD62DB48439ACD6F69D90DE759

CRC32 Digest: 0xA4E16232

Rootkit Property: Normal

File Size: 45056 bytes

File: c:\windows\system32\btxppanel.dll

Page 665: Prev

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: BTXPPanel Module

Original FileName: BTXPPanel.DLL

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0x425369768B9F6E7745D479FD0463885675AA68AA

MD5 Digest: 0xAF19316A6CE864DAE46EC61E49E7AA2E

CRC32 Digest: 0x6EE864DB

Rootkit Property: Normal

File Size: 106496 bytes

File: c:\windows\system32\btxpshell.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: BtXpShell DLL

Original FileName: BtXpShell.DLL

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0x31B2F4690E0E824D6AC877E3D346DA33889FC2E6

MD5 Digest: 0x28A308BBF27DF2FACF3FFEB87BC914E2

CRC32 Digest: 0x55EDB59D

Rootkit Property: Normal

Page 666: Prev

File Size: 24576 bytes

File: c:\windows\system32\cabinet.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® Cabinet File API

Original FileName: cabinet.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2B946D9D45BA684394DD78C45E2CC71B28446D18

MD5 Digest: 0xF9D3C78CFE15271D80790677C893CE45

CRC32 Digest: 0xB18FF3B1

Rootkit Property: Normal

File Size: 60416 bytes

File: c:\windows\system32\cba.dll

Product: Intel Common Base Agent

Product Version: 6.12.0.142

Company: LANDesk Software Ltd.

Description: CBA Interface Library

Original FileName: CBA.DLL

File Version Label: 6.12.0.142 E

File Version Number: 6.12.0.142

SHA-1 Digest: 0x07564FE20A6290658EB7F12D2A75B75658663678

Page 667: Prev

MD5 Digest: 0x6359E3556DF766AD6E1AD7EFE59F6FA4

CRC32 Digest: 0x9DB6D628

Rootkit Property: Normal

File Size: 34600 bytes

File: c:\windows\system32\certcli.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® Certificate Services Client

Original FileName: CertCli

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x1949D2DE6E367A893AACB1D2A304E6291EACAB79

MD5 Digest: 0x00709952D444EAE14DBBD30D36FBAE0F

CRC32 Digest: 0x36C47AF8

Rootkit Property: Normal

File Size: 194560 bytes

File: c:\windows\system32\cewmdm.dll

Product: Windows Media Device Manager

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows CE WMDM Service Provider

Original FileName: CEWMDM.DLL

Page 668: Prev

File Version Label: 11.0.5721.5262

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x8B84442238E8016FBA6A364B10984EAE3F664F44

MD5 Digest: 0xDE1BEF23DEBED6700A51727F92E18207

CRC32 Digest: 0xE3E42001

Rootkit Property: Normal

File Size: 229376 bytes

File: c:\windows\system32\cfgmgr32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Configuration Manager Forwarder DLL

Original FileName: CFGMGR32.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x87BEEC45FAADA0B894D0A9D7C69B612E5638FC8B

MD5 Digest: 0x5F0CE62E0831CF972EC6949FD3E37DA7

CRC32 Digest: 0xC8685F52

Rootkit Property: Normal

File Size: 16896 bytes

File: c:\windows\system32\cisvc.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 669: Prev

Company: Microsoft Corporation

Description: Content Index service

Original FileName: cisvc.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5E29256F3E47541A02E738D50ABF37820F7BC3F5

MD5 Digest: 0x1CFE720EB8D93A7158A4EBC3AB178BDE

CRC32 Digest: 0x53113EF4

Rootkit Property: Normal

File Size: 5632 bytes

File: c:\windows\system32\clbcatq.dll

Product: COM Services

Product Version: 03.00.00.4414

Company: Microsoft Corporation

Description:

Original FileName:

File Version Label: 2001.12.4414.700

File Version Number: 2001.12.4414.700

SHA-1 Digest: 0xBD0F1633A7D858F27D3FA2BAD744B766A1533490

MD5 Digest: 0xF137A0CA70003DB20448D540651FA003

CRC32 Digest: 0xF43789FF

Rootkit Property: Normal

File Size: 498688 bytes

Page 670: Prev

File: c:\windows\system32\clipsrv.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT DDE Server

Original FileName: CLIPSRV.EXE

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x28DB51083926C4BB31A8211F63EC68A42F8FF22C

MD5 Digest: 0x34CBE729F38138217F9C80212A2A0C82

CRC32 Digest: 0x49E54A73

Rootkit Property: Normal

File Size: 33280 bytes

File: c:\windows\system32\clusapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Cluster API Library

Original FileName: clusapi

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x86C52208E983F9E8C9EE69EED8FBAC111696A822

MD5 Digest: 0xDF82E222578DBE59FCBBD69A02E4C806

CRC32 Digest: 0x65F46BA4

Page 671: Prev

Rootkit Property: Normal

File Size: 58368 bytes

File: c:\windows\system32\cmd.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Command Processor

Original FileName: Cmd.Exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x811A005CF787C6CCBE0D9F1C36C1D49A9CB71FD1

MD5 Digest: 0x6D778E0F95447E6546553EEEA709D03C

CRC32 Digest: 0xC299C503

Rootkit Property: Normal

File Size: 389120 bytes

File: c:\windows\system32\cnbjmon.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.2082

Company: Microsoft Corporation

Description: Langage Monitor for Canon Bubble-Jet Printer

Original FileName: CNBJMON.DLL

File Version Label: 5.1.2600.2082 (xpsp(skatari).040213-0952)

File Version Number: 0.3.0.0

Page 672: Prev

SHA-1 Digest: 0x79EB118DFED767B1F43378FCE84CE4C5CFC33FE5

MD5 Digest: 0x5D3D1AB0EF4EA55B731863050482C111

CRC32 Digest: 0x5559585D

Rootkit Property: Normal

File Size: 47104 bytes

File: c:\windows\system32\colbact.dll

Product: COM Services

Product Version: 03.00.00.4414

Company: Microsoft Corporation

Description:

Original FileName:

File Version Label: 2001.12.4414.700

File Version Number: 2001.12.4414.700

SHA-1 Digest: 0x37F76F0ADCAE0F54CBBE3D805D96B9696842D236

MD5 Digest: 0x690D97864735E8ECD87F55777E266690

CRC32 Digest: 0x1416CCD8

Rootkit Property: Normal

File Size: 60416 bytes

File: c:\windows\system32\comctl32.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.6028

Company: Microsoft Corporation

Description: Common Controls Library

Page 673: Prev

Original FileName: COMCTL32.DLL

File Version Label: 5.82 (xpsp_sp3_qfe.100823-1643)

File Version Number: 5.82.2900.6028

SHA-1 Digest: 0xD5D102EB9200C2A02CB53931AEEB480694E225C5

MD5 Digest: 0x93AFB83FBC1F9443CAC722FCA63D73BF

CRC32 Digest: 0xB00C920E

Rootkit Property: Normal

File Size: 617472 bytes

File: c:\windows\system32\comdlg32.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Common Dialogs DLL

Original FileName: comdlg32.dll

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x097776790214F0F3489F749BE018C84F2DC929D2

MD5 Digest: 0x86987A5000DFA3EBE2275C0456BCF2FE

CRC32 Digest: 0xF1E69F91

Rootkit Property: Normal

File Size: 276992 bytes

File: c:\windows\system32\comres.dll

Product: COM Services

Page 674: Prev

Product Version: 03.00.00.4414

Company: Microsoft Corporation

Description:

Original FileName:

File Version Label: 2001.12.4414.700

File Version Number: 2001.12.4414.700

SHA-1 Digest: 0xEDA8C030913D048CDA82AEB6066BE39E005CE0F1

MD5 Digest: 0x1280A158C722FA95A80FB7AEBE78FA7D

CRC32 Digest: 0x868482D5

Rootkit Property: Normal

File Size: 792064 bytes

File: c:\windows\system32\comsvcs.dll

Product: COM Services

Product Version: 03.00.00.4414

Company: Microsoft Corporation

Description:

Original FileName:

File Version Label: 2001.12.4414.702

File Version Number: 2001.12.4414.702

SHA-1 Digest: 0x12EA33F6B5A759B955031E78D407AB936BB975ED

MD5 Digest: 0xED0C0DF222209E43AD9AFBF3FE87DDE0

CRC32 Digest: 0xAC72C4C0

Rootkit Property: Normal

File Size: 1267200 bytes

Page 675: Prev

File: c:\windows\system32\credui.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Credential Manager User Interface

Original FileName: credui.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xBAF29803401D1AFD910D365B9F400DAF7FE86DD4

MD5 Digest: 0x235892E493845D64D890163CFEF90E97

CRC32 Digest: 0xB3BF3685

Rootkit Property: Normal

File Size: 163840 bytes

File: c:\windows\system32\crtdll.dll

Product: Microsoft® Windows NT(TM) Operating System

Product Version: 4.00

Company: Microsoft Corporation

Description: Microsoft C Runtime Library

Original FileName: CRTDLL.DLL

File Version Label: 4.00

File Version Number: 4.0.1183.1

SHA-1 Digest: 0xC432BD1921CBBE0EB91663FE4A80D17378230A1A

MD5 Digest: 0x06F2AEA1065838AAE394553063CDF28E

Page 676: Prev

CRC32 Digest: 0x9144DA9A

Rootkit Property: Normal

File Size: 149019 bytes

File: c:\windows\system32\crypt32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.131.2600.5512

Company: Microsoft Corporation

Description: Crypto API32

Original FileName: CRYPT32.DLL

File Version Label: 5.131.2600.5512 (xpsp.080413-2113)

File Version Number: 5.131.2600.5512

SHA-1 Digest: 0x3127DBE44B75C673C24F9AD63675FF91CD9C6321

MD5 Digest: 0xBDAAF79DD63F194434D31A74B9BB8B77

CRC32 Digest: 0xF04E4319

Rootkit Property: Normal

File Size: 599040 bytes

File: c:\windows\system32\cryptdll.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Cryptography Manager

Original FileName: cryptdll.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

Page 677: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x74766889F34BFEF4546C2380480F906D754B02B1

MD5 Digest: 0x17A1D675C12BBF80CAAC54A4855C41D0

CRC32 Digest: 0x15B1DB06

Rootkit Property: Normal

File Size: 33280 bytes

File: c:\windows\system32\cryptnet.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.131.2600.5512

Company: Microsoft Corporation

Description: Crypto Network Related API

Original FileName: CRYPTNET.DLL

File Version Label: 5.131.2600.5512 (xpsp.080413-2113)

File Version Number: 5.131.2600.5512

SHA-1 Digest: 0x98A248C4972D819D7A42647F0F042EF4CF96AB6D

MD5 Digest: 0xC14350FC0D47D806699C4F907FC6785B

CRC32 Digest: 0xFA6A73FD

Rootkit Property: Normal

File Size: 64512 bytes

File: c:\windows\system32\cryptsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Page 678: Prev

Description: Cryptographic Services

Original FileName: cryptsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x592BE5153E92D5F398FFAD0E76CC23234E521D08

MD5 Digest: 0x3D4E199942E29207970E04315D02AD3B

CRC32 Digest: 0x3B51D6CC

Rootkit Property: Normal

File Size: 62464 bytes

File: c:\windows\system32\cryptui.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.131.2600.5512

Company: Microsoft Corporation

Description: Microsoft Trust UI Provider

Original FileName: CRYPTUI.DLL

File Version Label: 5.131.2600.5512 (xpsp.080413-2113)

File Version Number: 5.131.2600.5512

SHA-1 Digest: 0x8D72E84D63A0B44BCA596C5F370FA0E4B595AC3C

MD5 Digest: 0x6E4BE11D50F8A8DE2BAD644C9C9DE8D3

CRC32 Digest: 0x7C67C971

Rootkit Property: Normal

File Size: 512512 bytes

File: c:\windows\system32\cscdll.dll

Page 679: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Offline Network Agent

Original FileName: CSCDLL.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xEF8C7DCF9A12B43BCD2C19A2AD366D65DB16E2D5

MD5 Digest: 0x515A7FAE2070C2B0242B2353443E2F11

CRC32 Digest: 0x4BF7EDED

Rootkit Property: Normal

File Size: 101888 bytes

File: c:\windows\system32\cscui.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Client Side Caching UI

Original FileName: cscui.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5208F129AA4974E2D7976D5A36E09B9F38869348

MD5 Digest: 0x085ED2E391A871C7BAE87E0228B546BA

CRC32 Digest: 0x551DBEDE

Rootkit Property: Normal

Page 680: Prev

File Size: 326656 bytes

File: c:\windows\system32\csrsrv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5915

Company: Microsoft Corporation

Description: Client Server Runtime Process

Original FileName: CSRSrv.DLL

File Version Label: 5.1.2600.5915 (xpsp_sp3_gdr.091211-1412)

File Version Number: 5.1.2600.5915

SHA-1 Digest: 0xA181214046A135BAC35182C4A8FB615367093CD9

MD5 Digest: 0x51C5B2BC37AE9EC5FED75B4AEEE04B18

CRC32 Digest: 0x8D9CC25E

Rootkit Property: Normal

File Size: 33280 bytes

File: c:\windows\system32\csrss.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Client Server Runtime Process

Original FileName: CSRSS.Exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x9B81FE32842DB93292A59A87E73CA113701F7E3B

Page 681: Prev

MD5 Digest: 0x44F275C64738EA2056E3D9580C23B60F

CRC32 Digest: 0x0F5A13CD

Rootkit Property: Normal

File Size: 6144 bytes

File: c:\windows\system32\ctfmon.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: CTF Loader

Original FileName: CTFMON.EXE

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x99CB7370F16773C8E2D0C86FE805EC638AB126E9

MD5 Digest: 0x5F1D5F88303D4A4DBC8E5F97BA967CC3

CRC32 Digest: 0xCAAB96B1

Rootkit Property: Normal

File Size: 15360 bytes

File: c:\windows\system32\d3dim700.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.03.2600.5512

Company: Microsoft Corporation

Description: Microsoft Direct3D

Original FileName: D3DIM700.dll

Page 682: Prev

File Version Label: 5.03.2600.5512 (xpsp.080413-0845)

File Version Number: 5.3.2600.5512

SHA-1 Digest: 0x3396CD75508C5896C7ECDF1784DDC65003B9BF25

MD5 Digest: 0x56ADB11F7D4D0816C0BE1E701C1B5E52

CRC32 Digest: 0xBF18A8C7

Rootkit Property: Normal

File Size: 824320 bytes

File: c:\windows\system32\davclnt.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Web DAV Client DLL

Original FileName: davclnt.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xDC187873A6298B97615A3DC125DF508F3A867D42

MD5 Digest: 0xFB8F8EEC8D9C2157789472DD61CDC78B

CRC32 Digest: 0x135F2862

Rootkit Property: Normal

File Size: 25088 bytes

File: c:\windows\system32\dbghelp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 683: Prev

Company: Microsoft Corporation

Description: Windows Image Helper

Original FileName: DBGHELP.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xE5C743C8D39DE0C0F43099476DE82CF5A862CC15

MD5 Digest: 0xB6E6F3F5B63053D5DC1F4EE32992492F

CRC32 Digest: 0x1AC2EF66

Rootkit Property: Normal

File Size: 640000 bytes

File: c:\windows\system32\dciman32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: DCI Manager

Original FileName: dciman32

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2C8BB1FF49379D6F335496410C1930841654A586

MD5 Digest: 0xD8B91D94ECB123862B390FDE3250D3BB

CRC32 Digest: 0xFA01F98E

Rootkit Property: Normal

File Size: 8704 bytes

Page 684: Prev

File: c:\windows\system32\ddraw.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.03.2600.5512

Company: Microsoft Corporation

Description: Microsoft DirectDraw

Original FileName: DDraw.dll

File Version Label: 5.03.2600.5512 (xpsp.080413-0845)

File Version Number: 5.3.2600.5512

SHA-1 Digest: 0x55B268AE2AEA99A0D233D77841AAA6FA250A4719

MD5 Digest: 0xA340CD71EB535A3DD751B5F28723E50C

CRC32 Digest: 0xBB2C1248

Rootkit Property: Normal

File Size: 279552 bytes

File: c:\windows\system32\ddrawex.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.03.2600.5512

Company: Microsoft Corporation

Description: Direct Draw Ex

Original FileName: ddrawex

File Version Label: 5.03.2600.5512 (xpsp.080413-0845)

File Version Number: 5.3.2600.5512

SHA-1 Digest: 0xD92523BA81EDE7AB1DFD4C685CFD6268506305EE

MD5 Digest: 0xA47F6A13202AA54541CA46D6CED79F5F

CRC32 Digest: 0x149FE63B

Page 685: Prev

Rootkit Property: Normal

File Size: 27136 bytes

File: c:\windows\system32\devenum.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 6.5.2600.5512

SHA-1 Digest: 0xD6809AD26328B1A3A1DB476F5B20A162BA67BD20

MD5 Digest: 0xAA5E22854F56C68148EB3345DBD62970

CRC32 Digest: 0x29C9D3FD

Rootkit Property: Normal

File Size: 59904 bytes

File: c:\windows\system32\dhcpcsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: DHCP Client Service

Original FileName: dhcpcsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

Page 686: Prev

SHA-1 Digest: 0x58D6F6ED00876B7EC653079E5448F74379697524

MD5 Digest: 0x5E38D7684A49CACFB752B046357E0589

CRC32 Digest: 0xAE0DEF93

Rootkit Property: Normal

File Size: 126976 bytes

File: c:\windows\system32\dllhost.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: COM Surrogate

Original FileName: dllhost.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5D0B0222B0F37A85D64B9283611E940313E21348

MD5 Digest: 0x0A9BA6AF531AFE7FA5E4FB973852D863

CRC32 Digest: 0x1C8C6AEA

Rootkit Property: Normal

File Size: 5120 bytes

File: c:\windows\system32\dmadmin.exe

Product: Logical Disk Manager for Windows NT

Product Version: 1.0

Company: Microsoft Corp., Veritas Software

Description: Logical Disk Manager service process

Page 687: Prev

Original FileName: dmadmin.exe

File Version Label: 2600.5512.503.0

File Version Number: 2600.5512.503.0

SHA-1 Digest: 0x26DAB1CC620A62B6382D84C350D334B86A0345D3

MD5 Digest: 0xE46050330BD42F33609117F861E32D3C

CRC32 Digest: 0x7639D603

Rootkit Property: Normal

File Size: 224768 bytes

File: c:\windows\system32\dmserver.dll

Product: Logical Disk Manager for Windows NT

Product Version: 1.0

Company: Microsoft Corp.

Description: Logical Disk Manager service dll

Original FileName: dmserver.dll

File Version Label: 2600.5512.503.0

File Version Number: 2600.5512.503.0

SHA-1 Digest: 0x80C6F2808D413AE6FA37F6FD4ADA8DC160F99A0A

MD5 Digest: 0x57EDEC2E5F59F0335E92F35184BC8631

CRC32 Digest: 0xAC42AB40

Rootkit Property: Normal

File Size: 23552 bytes

File: c:\windows\system32\dnsapi.dll

Product: Microsoft® Windows® Operating System

Page 688: Prev

Product Version: 5.1.2600.5625

Company: Microsoft Corporation

Description: DNS Client API DLL

Original FileName: dnsapi

File Version Label: 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)

File Version Number: 5.1.2600.5625

SHA-1 Digest: 0x3EAF6478C6F14794B05A612D845C1725757BEB0B

MD5 Digest: 0x5D3FDE8FB2801A2041D1B965372C4928

CRC32 Digest: 0x6145C1AF

Rootkit Property: Normal

File Size: 147968 bytes

File: c:\windows\system32\dnsrslvr.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: DNS Caching Resolver Service

Original FileName: dnsrslvr.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2E2F3D37181966E4BE410340FC1A34D57A453642

MD5 Digest: 0x474B4DC3983173E4B4C9740B0DAC98A6

CRC32 Digest: 0x9467091E

Rootkit Property: Normal

File Size: 45568 bytes

Page 689: Prev

File: c:\windows\system32\dot3api.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: 802.3 Autoconfiguration API

Original FileName: dot3api.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x50AD68B8A3450C8BD652A039B6F94045975E4B65

MD5 Digest: 0x8E2CC37BA87D8F681066E0E9C8A19F73

CRC32 Digest: 0x4A807BA3

Rootkit Property: Normal

File Size: 26112 bytes

File: c:\windows\system32\dot3dlg.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: 802.3 UI Helper

Original FileName: dot3dlg.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x1FAB45CB9BCEC525D36A32055A0E70F0E0AC94CF

MD5 Digest: 0x4E8F3230BAC8C1CAADF01A8C728E1C5C

Page 690: Prev

CRC32 Digest: 0x4975BB90

Rootkit Property: Normal

File Size: 9216 bytes

File: c:\windows\system32\dot3svc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Wired AutoConfig Service

Original FileName: dot3svc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD40A92548DC68129A468147432DE34F5C6DC2C90

MD5 Digest: 0x0F0F6E687E5E15579EF4DA8DD6945814

CRC32 Digest: 0x32D19D87

Rootkit Property: Normal

File Size: 132096 bytes

File: c:\windows\system32\drivers\abp480n5.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: AdvanSys SCSI Controller Driver

Original FileName: ABP480N5.SYS

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

Page 691: Prev

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x66D302025842F2268A867FC9A86B5BBCF0DE5BAB

MD5 Digest: 0x6ABB91494FE6C59089B9336452AB2EA3

CRC32 Digest: 0xED1225CB

Rootkit Property: Normal

File Size: 23552 bytes

File: c:\windows\system32\drivers\acpi.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: ACPI Driver for NT

Original FileName: ACPI.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFAF1AE66CC016DD7281A1FCA53BE841B6B611106

MD5 Digest: 0x8FD99680A539792A30E97944FDAECF17

CRC32 Digest: 0xFDE36A7C

Rootkit Property: Normal

File Size: 187776 bytes

File: c:\windows\system32\drivers\acpiec.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Page 692: Prev

Description: ACPI Embedded Controller Driver

Original FileName: acpiec.sys

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xF27A1EE007EB29DB95BEBEEB16F76322E2CDFDCE

MD5 Digest: 0x9859C0F6936E723E4892D7141B1327D5

CRC32 Digest: 0x2FFB4AF9

Rootkit Property: Normal

File Size: 11648 bytes

File: c:\windows\system32\drivers\adihdaud.sys

Product: SoundMAX Digital HD Audio Driver

Product Version: 5.10.01.4310

Company: Analog Devices, Inc.

Description: High Definition Audio Function Driver(Release Candidate 1)

Original FileName: ADIHDAud.sys

File Version Label: 5.10.01.4310 built by: WinDDK

File Version Number: 5.10.1.4310

SHA-1 Digest: 0xC5D0371682E7B8DBD924092A07CFD86226574FBC

MD5 Digest: 0x66614B9FDC7E74AB736A84D89F7B06B6

CRC32 Digest: 0x9D1D10B5

Rootkit Property: Normal

File Size: 176128 bytes

File: c:\windows\system32\drivers\adpu160m.sys

Page 693: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2484.0

Company: Microsoft Corporation

Description: Adaptec Ultra160 SCSI miniport

Original FileName: adpu160m.sys

File Version Label: v3.60a (Lab01_N(johnstra).010529-2218)

File Version Number: 5.1.2484.0

SHA-1 Digest: 0x53164FDFAB5A0C0DD564D362C9DA005F41E0BCC0

MD5 Digest: 0x9A11864873DA202C996558B2106B0BBC

CRC32 Digest: 0x6B692BF7

Rootkit Property: Normal

File Size: 101888 bytes

File: c:\windows\system32\drivers\aeaudio.sys

Product: Andrea Audio Driver

Product Version: 4.0.1.20

Company: Andrea Electronics Corporation

Description: Audio Noise Filtering Driver

Original FileName: AEAudio.sys

File Version Label: 4.0.1.20

File Version Number: 4.0.1.20

SHA-1 Digest: 0x2EE010C636BCC79CB45F4DBC870160BE5D7FFF8E

MD5 Digest: 0xC984DE22ED71414ABC42C1E03D412E33

CRC32 Digest: 0xE9D02F1C

Rootkit Property: Normal

Page 694: Prev

File Size: 152960 bytes

File: c:\windows\system32\drivers\aec.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2601.3142

Company: Microsoft Corporation

Description: Microsoft Acoustic Echo Canceller

Original FileName: aec.sys

File Version Label: 5.1.2601.3142

File Version Number: 5.1.2601.3142

SHA-1 Digest: 0x7CCD9DDA4ED4C776CD1A1BE021A13DBC4B277C7E

MD5 Digest: 0x8BED39E3C35D6A489438B8141717A557

CRC32 Digest: 0xF5078C1B

Rootkit Property: Normal

File Size: 142592 bytes

File: c:\windows\system32\drivers\afd.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5657

Company: Microsoft Corporation

Description: Ancillary Function Driver for WinSock

Original FileName: afd.sys

File Version Label: 5.1.2600.5657 (xpsp_sp3_gdr.080814-1236)

File Version Number: 5.1.2600.5657

SHA-1 Digest: 0x7AF696BE55454D2B297BB2115DDFBECF95AA7EEF

Page 695: Prev

MD5 Digest: 0x7E775010EF291DA96AD17CA4B17137D7

CRC32 Digest: 0x3605D2B3

Rootkit Property: Normal

File Size: 138496 bytes

File: c:\windows\system32\drivers\agnfilt.sys

Product: AT&T Global Network Firewall

Product Version: 6.7.0.3011

Company: AT&T

Description: Net Firewall

Original FileName: agnfilt.sys

File Version Label: 6.7.0.3011

File Version Number: 6.7.0.3011

SHA-1 Digest: 0xF1551080161BA24DB35534742C1F8202E18BF9DD

MD5 Digest: 0x1E5F5F898E8D0BE41EC6A3CC2476F25D

CRC32 Digest: 0xD39936CD

Rootkit Property: Normal

File Size: 180864 bytes

File: c:\windows\system32\drivers\agnwifi.sys

Product: AT&T Global Network Client

Product Version: 6.1.0.3000

Company: AT&T

Description: Wi-Fi Driver

Original FileName: agnwifi.sys

Page 696: Prev

File Version Label: 6.1.0.3000

File Version Number: 6.1.0.3000

SHA-1 Digest: 0xD16A6ED557A7C6E385C7BFF1E9055A2C759D2AED

MD5 Digest: 0x685443AFA5D1A94C5F47E4846B0E4C3D

CRC32 Digest: 0x7EC81B73

Rootkit Property: Normal

File Size: 19328 bytes

File: c:\windows\system32\drivers\agp440.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: 440 NT AGP Filter

Original FileName: agp440.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x8F2814AFD462823191004A52AFF05DACE9E134BB

MD5 Digest: 0x08FD04AA961BDC77FB983F328334E3D7

CRC32 Digest: 0xCFA21DB3

Rootkit Property: Normal

File Size: 42368 bytes

File: c:\windows\system32\drivers\agpcpq.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 697: Prev

Company: Microsoft Corporation

Description: CompatNT AGP Filter

Original FileName: agpcpq.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x0AE7FC426BC8AD5E461DC2FA1A903689FD0DFDB5

MD5 Digest: 0x03A7E0922ACFE1B07D5DB2EEB0773063

CRC32 Digest: 0x0C85FD08

Rootkit Property: Normal

File Size: 44928 bytes

File: c:\windows\system32\drivers\aha154x.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Adaptec AHA-154x series SCSI miniport

Original FileName: aha154x.sys

File Version Label: v1.13b (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x038E5CB01BF63EC2DFBCA5AEC9BE0575855E8472

MD5 Digest: 0xC23EA9B5F46C7F7910DB3EAB648FF013

CRC32 Digest: 0x0FA89078

Rootkit Property: Normal

File Size: 12800 bytes

Page 698: Prev

File: c:\windows\system32\drivers\aic78u2.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2474.0

Company: Microsoft Corporation

Description: Adaptec Ultra2 SCSI miniport

Original FileName: aic78u2.sys

File Version Label: v3.60a (Lab01_N.010510-0033)

File Version Number: 5.1.2474.0

SHA-1 Digest: 0xA659CBB358269D5DBC939C477AD8E6F38F38B9AC

MD5 Digest: 0x19DD0FB48B0C18892F70E2E7D61A1529

CRC32 Digest: 0xC6A2E537

Rootkit Property: Normal

File Size: 55168 bytes

File: c:\windows\system32\drivers\aic78xx.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2474.0

Company: Microsoft Corporation

Description: Adaptec Ultra SCSI miniport

Original FileName: aic78xx.sys

File Version Label: v3.60a (Lab01_N.010510-0033)

File Version Number: 5.1.2474.0

SHA-1 Digest: 0x22E79761B687A945AF616F38965D989C8E39481B

MD5 Digest: 0xB7FE594A7468AA0132DEB03FB8E34326

CRC32 Digest: 0x44970E33

Page 699: Prev

Rootkit Property: Normal

File Size: 56960 bytes

File: c:\windows\system32\drivers\aliide.sys

Product: ALi mini IDE Driver

Product Version: 1.20

Company: Acer Laboratories Inc.

Description: ALi mini IDE Driver

Original FileName: aliide.sys

File Version Label: 1.20

File Version Number: 1.2.0.0

SHA-1 Digest: 0x2B44EB781C9FE6B681E9FBD3EA179E6CC16BDE11

MD5 Digest: 0x1140AB9938809700B46BB88E46D72A96

CRC32 Digest: 0x5759BBAD

Rootkit Property: Normal

File Size: 5248 bytes

File: c:\windows\system32\drivers\alim1541.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: ALi M1541 NT AGP Filter

Original FileName: agpALi.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

Page 700: Prev

SHA-1 Digest: 0xA23C13598C1AD0F5E5D965DF58F32926EC26581C

MD5 Digest: 0xCB08AED0DE2DD889A8A820CD8082D83C

CRC32 Digest: 0x6A2B29CC

Rootkit Property: Normal

File Size: 42752 bytes

File: c:\windows\system32\drivers\amdagp.sys

Product: Windows (R) 2000 DDK Driver

Product Version: 5.00

Company: Advanced Micro Devices, Inc.

Description: AMD Win2000 AGP Filter

Original FileName: amdagp.sys

File Version Label: 5.00 (xpsp.080413-2111)

File Version Number: 5.2.2.2195

SHA-1 Digest: 0x09A537BC79F5D5E813B9A81D44C5CB12FDD0B8B5

MD5 Digest: 0x95B4FB835E28AA1336CEEB07FD5B9398

CRC32 Digest: 0x0466E287

Rootkit Property: Normal

File Size: 43008 bytes

File: c:\windows\system32\drivers\amsint.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: AMD SCSI/NET Controller

Page 701: Prev

Original FileName: amsint.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xDFBE8D37AC64734D58F1D4B6DD6DBD1817CF58B5

MD5 Digest: 0x79F5ADD8D24BD6893F2903A3E2F3FAD6

CRC32 Digest: 0xA249F884

Rootkit Property: Normal

File Size: 12032 bytes

File: c:\windows\system32\drivers\anc.sys

Product: IBM Access Connections

Product Version: 3, 2, 0, 0

Company: IBM Corp.

Description: IBM Access Connections - ANC

Original FileName: ANC.SYS

File Version Label: 8.3

File Version Number: 8.3.0.0

SHA-1 Digest: 0x0D3A35C14121BD1D62AF694DAEF4386592A742AC

MD5 Digest: 0x11AB185A7AF224800BBFB5B836974A17

CRC32 Digest: 0xEA65CDC8

Rootkit Property: Normal

File Size: 11520 bytes

File: c:\windows\system32\drivers\anydlc.sys

Product: Personal Communications

Page 702: Prev

Product Version: 5.7.1

Company: IBM Corporation

Description: ANYDLC.DLL(9X)/ANYDLC.SYS(NT)

Original FileName: ANUTIL

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xCADB62035214B2C92B1FA5EAC190BA59205F6545

MD5 Digest: 0x3EA28A33E8DDFA6576F5CB1C5FAB0AC4

CRC32 Digest: 0x978E457C

Rootkit Property: Normal

File Size: 38236 bytes

File: c:\windows\system32\drivers\appn.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: APPN library

Original FileName: APPN.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xDFA931FD0608C0F8B47A76A424150E534A893774

MD5 Digest: 0xA0166911B476D65B4790BD40F920F220

CRC32 Digest: 0xD79EDB8C

Rootkit Property: Normal

File Size: 1286560 bytes

Page 703: Prev

File: c:\windows\system32\drivers\appnapi.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: APPNAPI library

Original FileName: APPNAPI.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xA84BE01C60CB1750B2AC983F92D07401460D7E6F

MD5 Digest: 0xC12B83254A99014D9A46E49D56DA3809

CRC32 Digest: 0x5E733278

Rootkit Property: Normal

File Size: 120192 bytes

File: c:\windows\system32\drivers\appnbase.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: APPNBASE library

Original FileName: APPNBASE.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x45158CBBD086326044668EF80B8C6A7CB751C7A5

MD5 Digest: 0x6B6D87514E49563002A006C5A2AEBF84

Page 704: Prev

CRC32 Digest: 0x734B85ED

Rootkit Property: Normal

File Size: 195872 bytes

File: c:\windows\system32\drivers\appnnode.exe

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: APPNNODE executable

Original FileName: APPNNODE.EXE

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x38D831A1ACBB7D601A3E13D2A6A0A64DE00B50C4

MD5 Digest: 0xBD282DD4FF522E5BD9B2805BBB1D3CA7

CRC32 Digest: 0xCDC744DE

Rootkit Property: Normal

File Size: 32768 bytes

File: c:\windows\system32\drivers\apshm86.sys

Product: ThinkVantage Active Protection System

Product Version: 1.54

Company: Lenovo.

Description: ThinkVantage Active Protection System HID Digitizer Activity Monitor Driver

Original FileName: ApsHM86.sys

File Version Label: 1.54.0.0 built by: WinDDK

Page 705: Prev

File Version Number: 1.54.0.0

SHA-1 Digest: 0x27BE9610FDBE08D8F1F40F972C93E4E2DD39D72A

MD5 Digest: 0x639BA7B37F25054CF5E82604E736D250

CRC32 Digest: 0xED9E392C

Rootkit Property: Normal

File Size: 19504 bytes

File: c:\windows\system32\drivers\apsx86.sys

Product: ThinkVantage Active Protection System

Product Version: 1.54

Company: Lenovo.

Description: Shockproof Disk Driver

Original FileName: ApsX86.sys

File Version Label: 1.54.0.0

File Version Number: 1.54.0.0

SHA-1 Digest: 0x2160C1B1D1D1FA5B30DD02EBAABBF654D1006A8A

MD5 Digest: 0xA3AEE791DB8C73882F4503BFAACD8C9E

CRC32 Digest: 0x60BC4DEE

Rootkit Property: Normal

File Size: 103472 bytes

File: c:\windows\system32\drivers\ar5211.sys

Product: Atheros AR5001 Wireless Network Adapter

Product Version: 5.0.100.112

Company: Atheros Communications, Inc.

Page 706: Prev

Description: Driver for Atheros AR5001 Wireless Network Adapter

Original FileName: AR5211.SYS

File Version Label: 5.0.100.112

File Version Number: 5.0.100.112

SHA-1 Digest: 0xF27B9296532C5F86F068D780BD7E5A4335F5E37E

MD5 Digest: 0x317564A02DC28747BEA2E9043955DD6E

CRC32 Digest: 0xA2010F4B

Rootkit Property: Normal

File Size: 508672 bytes

File: c:\windows\system32\drivers\artndint.sys

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xDBE8F013CB99596FC9D80BDD9787E4DE6BC5C725

MD5 Digest: 0xC9323D8401D8A2EE8850FAB5D71CCD61

CRC32 Digest: 0xCE4C4D86

Rootkit Property: Normal

File Size: 7760 bytes

File: c:\windows\system32\drivers\asc.sys

Page 707: Prev

Product: AdvanSys SCSI driver

Product Version: 2.9I-MS

Company: Advanced System Products, Inc.

Description: AdvanSys SCSI Controller Driver

Original FileName: ASC.SYS

File Version Label: 2.9I-MS (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x4457225E1E685A96E56DF08FB595FB2A47B98DA6

MD5 Digest: 0x62D318E9A0C8FC9B780008E724283707

CRC32 Digest: 0x16B40078

Rootkit Property: Normal

File Size: 26496 bytes

File: c:\windows\system32\drivers\asc3350p.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: AdvanSys SCSI Card Driver

Original FileName: ASC3350P.SYS

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x672231041EF98C2EA4798EEF1FDB7795FD44957B

MD5 Digest: 0x69EB0CC7714B32896CCBFD5EDCBEA447

CRC32 Digest: 0x315A63EE

Rootkit Property: Normal

Page 708: Prev

File Size: 22400 bytes

File: c:\windows\system32\drivers\asc3550.sys

Product: AdvanSys PCI Ultra Wide SCSI Driver

Product Version: 3.1E-MS

Company: Advanced System Products, Inc.

Description: AdvanSys Ultra-Wide PCI SCSI Driver

Original FileName: ASC3550.SYS

File Version Label: 3.1E-MS (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xDA0773D97F8E38F858C7F03AA7A17E2E50C060F7

MD5 Digest: 0x5D8DE112AA0254B907861E9E9C31D597

CRC32 Digest: 0xC23AF74E

Rootkit Property: Normal

File Size: 14848 bytes

File: c:\windows\system32\drivers\asyncmac.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: MS Remote Access serial network driver

Original FileName: ASYNCMAC.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD3AE90917C931145319570B926D360B29CF6A569

Page 709: Prev

MD5 Digest: 0xB153AFFAC761E7F5FCFA822B9C4E97BC

CRC32 Digest: 0x66433D07

Rootkit Property: Normal

File Size: 14336 bytes

File: c:\windows\system32\drivers\atapi.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IDE/ATAPI Port Driver

Original FileName: atapi.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA719156E8AD67456556A02C34E762944234E7A44

MD5 Digest: 0x9F3A2F5AA6875C72BF062C712CFA2674

CRC32 Digest: 0xE758DA4A

Rootkit Property: Normal

File Size: 96512 bytes

File: c:\windows\system32\drivers\ati2mtag.sys

Product: ATI Radeon WindowsNT Miniport Driver

Product Version: 6.14.10.6635

Company: ATI Technologies Inc.

Description: ATI Radeon WindowsNT Miniport Driver

Original FileName: ati2mtag.sys

Page 710: Prev

File Version Label: 6.14.10.6635

File Version Number: 6.14.10.6635

SHA-1 Digest: 0x141A0072FA7CA40502AF10256B38E46515F1DE05

MD5 Digest: 0xE150424208C8A91DEED8C45019A6CDD2

CRC32 Digest: 0x190B6284

Rootkit Property: Normal

File Size: 1724416 bytes

File: c:\windows\system32\drivers\atmarpc.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IP/ATM Arp Client

Original FileName: ATMARP.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xAABB3172DB4A0824DD4A1B558FCE94AE2D3B3259

MD5 Digest: 0x9916C1225104BA14794209CFA8012159

CRC32 Digest: 0x6ED62A34

Rootkit Property: Normal

File Size: 59904 bytes

File: c:\windows\system32\drivers\atmeltpm.sys

Product: Atmel TPM Driver

Product Version: 3.0.0.15

Page 711: Prev

Company: Atmel, Inc.

Description: Atmel TPM Driver

Original FileName: AtmelTpm.SYS

File Version Label: 3.0.0.15 built by: WinDDK

File Version Number: 3.0.0.15

SHA-1 Digest: 0x480F894E0212ACF626B7252B27E2D14E012DCFA2

MD5 Digest: 0xDBF0D7E2DF33B469EB55406FEA759350

CRC32 Digest: 0x0D7E93F5

Rootkit Property: Normal

File Size: 15872 bytes

File: c:\windows\system32\drivers\audstub.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: AudStub Driver

Original FileName: audstub.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xE07EE000BC06B455534D8A517305C1208D30306B

MD5 Digest: 0xD9F724AA26C010A217C97606B160ED68

CRC32 Digest: 0x222A24E2

Rootkit Property: Normal

File Size: 3072 bytes

Page 712: Prev

File: c:\windows\system32\drivers\avpnnic.sys

Product: AGN Virtual Network Adapter Driver

Product Version: 5.08

Company: AT&T

Description: AGN Virtual Network Adapter Driver

Original FileName: avpnnic.sys

File Version Label: 5.08 built by: WinDDK

File Version Number: 5.0.1.1

SHA-1 Digest: 0x769C22AEE4A34874BC681C653F813246D5E635A1

MD5 Digest: 0x84632BB018CDB66B366EAD809BB0A426

CRC32 Digest: 0x8CFFED8A

Rootkit Property: Normal

File Size: 13952 bytes

File: c:\windows\system32\drivers\b57xp32.sys

Product: Broadcom NetXtreme Gigabit Ethernet Driver

Product Version: 7.44.0.0

Company: Broadcom Corporation

Description: Broadcom NetXtreme Gigabit Ethernet NDIS5.1 Driver.

Original FileName: b57xp32.sys

File Version Label: 7.44.0.0 built by: WinDDK

File Version Number: 7.44.0.0

SHA-1 Digest: 0x1D84D4C7C1D68880D74FBA0C0DC354FA3A5DF134

MD5 Digest: 0x8A8FD355547B50BD5BE0BC473C0AF148

CRC32 Digest: 0x5042BAEA

Page 713: Prev

Rootkit Property: Normal

File Size: 114688 bytes

File: c:\windows\system32\drivers\btkrnl.sys

Product: Bluetooth Software

Product Version: 5.1.0.4601

Company: Broadcom Corporation.

Description: Bluetooth Bus Enumerator

Original FileName: BTKRNL.SYS

File Version Label: 5.1.0.4601

File Version Number: 5.1.0.4601

SHA-1 Digest: 0x71F38D2CC0D9C7E597D68721E8A17E1CC463C313

MD5 Digest: 0xEF5E0DE0A7CA2977A9255F36F4D915AB

CRC32 Digest: 0x23B1B94A

Rootkit Property: Normal

File Size: 879624 bytes

File: c:\windows\system32\drivers\btport.sys

Product: Bluetooth Software

Product Version: 5.1.0.3200

Company: Broadcom Corporation.

Description: Bluetooth BTPORT Driver for Windows 2000

Original FileName: BTPORT.SYS

File Version Label: 5.1.0.3200

File Version Number: 5.1.0.3200

Page 714: Prev

SHA-1 Digest: 0x8654363C960CFA748F53E68D5A4C4C28D1F8DA4B

MD5 Digest: 0x58A49BD10E08D3D4333A60DEDCB1CED8

CRC32 Digest: 0x7C9ABC9F

Rootkit Property: Normal

File Size: 37424 bytes

File: c:\windows\system32\drivers\btwusb.sys

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: Driver for Bluetooth USB Devices

Original FileName: BTWUSB.SYS

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0xB5A31DC1E4D350A5A5D3BC3FB31D45776C57BF34

MD5 Digest: 0x053DC5BE74621B63BB48C2B86BAFC7B0

CRC32 Digest: 0x2F906FE6

Rootkit Property: Normal

File Size: 74688 bytes

File: c:\windows\system32\drivers\cbidf2k.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: CardBus/PCMCIA IDE Miniport Driver

Page 715: Prev

Original FileName: cbidf2k.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x2D93247F985EF498535BE7B95172182FF829588A

MD5 Digest: 0x90A673FC8E12A79AFBED2576F6A7AAF9

CRC32 Digest: 0xE2CABB8A

Rootkit Property: Normal

File Size: 13952 bytes

File: c:\windows\system32\drivers\ccdcmb.sys

Product:

Product Version:

Company: Nokia

Description: Nokia USB Phone Bus Driver

Original FileName: ccdcmb.sys

File Version Label: 7.1.18.34

File Version Number: 7.1.18.34

SHA-1 Digest: 0xDC3E0F50EFB5F0E007FB58CCDB9CE331E67188BE

MD5 Digest: 0x4A8A2AA0706B659175169DECF198E9D7

CRC32 Digest: 0xAE27893B

Rootkit Property: Normal

File Size: 17664 bytes

File: c:\windows\system32\drivers\ccdcmbo.sys

Product:

Page 716: Prev

Product Version:

Company: Nokia

Description: Nokia USB Phone Bus Driver

Original FileName: ccdcmb.sys

File Version Label: 7.1.18.34

File Version Number: 7.1.18.34

SHA-1 Digest: 0x83E8628456083E0FA7A17E5D8C010FF3CE07A20E

MD5 Digest: 0xFD3E61831095AC62E6840D986B5A2016

CRC32 Digest: 0x63A0695C

Rootkit Property: Normal

File Size: 22016 bytes

File: c:\windows\system32\drivers\cd20xrnt.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: IBM Portable CD-ROM Drive Miniport

Original FileName: cd20xrnt.sys

File Version Label: v3.01 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x97E979A4E41A18118F290B283C52D1B2E583D9F6

MD5 Digest: 0xF3EC03299634490E97BBCE94CD2954C7

CRC32 Digest: 0xB3CE8E7C

Rootkit Property: Normal

File Size: 7680 bytes

Page 717: Prev

File: c:\windows\system32\drivers\cdrom.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: SCSI CD-ROM Driver

Original FileName: cdrom.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA80D103EECFE831B93C01F092ABCDDAE90BCCD6F

MD5 Digest: 0x1F4260CC5B42272D71F79E570A27A4FE

CRC32 Digest: 0x9B9244F9

Rootkit Property: Normal

File Size: 62976 bytes

File: c:\windows\system32\drivers\cmbatt.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Control Method Battery Driver

Original FileName: cmbatt.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x7D4DB7B95DCD863BBF1581503F66B03617DE443D

MD5 Digest: 0x0F6C187D38D98F8DF904589A5F94D411

Page 718: Prev

CRC32 Digest: 0x500B36CD

Rootkit Property: Normal

File Size: 13952 bytes

File: c:\windows\system32\drivers\cmdide.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: CMD Technology, Inc.

Description: CMD PCI IDE Bus Driver

Original FileName: cmdide.sys

File Version Label: 2.0.7 (XPClient.010817-1148)

File Version Number: 2.0.7.0

SHA-1 Digest: 0x5FF466B81A33C5998B091D291C6E940BC6A72DB8

MD5 Digest: 0xE5DCB56C533014ECBC556A8357C929D5

CRC32 Digest: 0x9EDE6CB6

Rootkit Property: Normal

File Size: 6656 bytes

File: c:\windows\system32\drivers\compbatt.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Composite Battery Driver

Original FileName: compbatt.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

Page 719: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2A5A0C88D11CA2264779C2FC1430842CD96D3BD7

MD5 Digest: 0x6E4C9F21F0FAE8940661144F41B13203

CRC32 Digest: 0x698A2D41

Rootkit Property: Normal

File Size: 10240 bytes

File: c:\windows\system32\drivers\cpqarray.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Compaq Drive Array Controllers SCSI Miniport Driver

Original FileName: CPQARRAY.SYS

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xB53994B750D378E4536AA2D84F23FAD510EFE835

MD5 Digest: 0x3EE529119EED34CD212A215E8C40D4B6

CRC32 Digest: 0xD5CBA14C

Rootkit Property: Normal

File Size: 14976 bytes

File: c:\windows\system32\drivers\dac2w2k.sys

Product: Mylex Disk Array Controller Driver

Product Version: 6.00-21

Company: Mylex Corporation

Page 720: Prev

Description: Mylex Disk Array Controller Driver

Original FileName: dac2w2k.sys

File Version Label: 6.00-21 (XPClient.010817-1148)

File Version Number: 6.0.21.0

SHA-1 Digest: 0xE34986FD8FD9A7F0F6561A96890037F6B6794D2D

MD5 Digest: 0xE550E7418984B65A78299D248F0A7F36

CRC32 Digest: 0x56839B03

Rootkit Property: Normal

File Size: 179584 bytes

File: c:\windows\system32\drivers\dac960nt.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Mylex Disk Array Controller Driver

Original FileName: DAC960NT.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xCEEB731A2504482159FA6E57CD658E760CDB4E6C

MD5 Digest: 0x683789CAA3864EB46125AE86FF677D34

CRC32 Digest: 0x91A444B9

Rootkit Property: Normal

File Size: 14720 bytes

File: c:\windows\system32\drivers\disk.sys

Page 721: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: PnP Disk Driver

Original FileName: scsidisk.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA19652B689C06A116CF889823979669327DE109F

MD5 Digest: 0x044452051F3E02E7963599FC8F4F3E25

CRC32 Digest: 0x96AFE78F

Rootkit Property: Normal

File Size: 36352 bytes

File: c:\windows\system32\drivers\dmboot.sys

Product: VERITAS® NT Disk Manager

Product Version: 1.0

Company: Microsoft Corp., Veritas Software

Description: NT Disk Manager Startup Driver

Original FileName: dmboot.sys

File Version Label: 2600.5512.503.0

File Version Number: 2600.5512.503.0

SHA-1 Digest: 0x6EF561FBD8B9A3797C82DCE0425A3557B80CB5C9

MD5 Digest: 0xD992FE1274BDE0F84AD826ACAE022A41

CRC32 Digest: 0xF01A10D1

Rootkit Property: Normal

Page 722: Prev

File Size: 799744 bytes

File: c:\windows\system32\drivers\dmio.sys

Product: VERITAS® NT Disk Manager

Product Version: 1.0

Company: Microsoft Corp., Veritas Software

Description: NT Disk Manager I/O Driver

Original FileName: dmio.sys

File Version Label: 2600.5512.503.0

File Version Number: 2600.5512.503.0

SHA-1 Digest: 0x244A53AB6CECFD0C6D106284165CB6BB9AEA87CA

MD5 Digest: 0x7C824CF7BBDE77D95C08005717A95F6F

CRC32 Digest: 0x13E4FE1F

Rootkit Property: Normal

File Size: 153344 bytes

File: c:\windows\system32\drivers\dmload.sys

Product: Logical Disk Manager for Windows NT

Product Version: 1.0

Company: Microsoft Corp., Veritas Software.

Description: NT Disk Manager Startup Driver

Original FileName: dmload.sys

File Version Label: 2600.0.503.0

File Version Number: 2600.0.503.0

SHA-1 Digest: 0xA768077067DB3DE64B1CEB98EC2DA42B7F184EBA

Page 723: Prev

MD5 Digest: 0xE9317282A63CA4D188C0DF5E09C6AC5F

CRC32 Digest: 0xAC8D78B2

Rootkit Property: Normal

File Size: 5888 bytes

File: c:\windows\system32\drivers\dmusic.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Kernel DLS Synthesizer

Original FileName: DMusic.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA30227904D422A4DC0B7BD1D67E05DD747A524CC

MD5 Digest: 0x8A208DFCF89792A484E76C40E5F50B45

CRC32 Digest: 0x63259F5F

Rootkit Property: Normal

File Size: 52864 bytes

File: c:\windows\system32\drivers\dpti2o.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2462.0

Company: Microsoft Corporation

Description: DPT SmartRAID miniport

Original FileName: dpti2o.sys

Page 724: Prev

File Version Label: 2.09 (Lab01_N.010309-0027)

File Version Number: 5.1.2462.0

SHA-1 Digest: 0x739CBEF2D4F11C525B748547E8BE293FFDBF6362

MD5 Digest: 0x40F3B93B4E5B0126F2F5C0A7A5E22660

CRC32 Digest: 0xDB671F27

Rootkit Property: Normal

File Size: 20192 bytes

File: c:\windows\system32\drivers\drmkaud.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Kernel DRM Audio Descrambler Filter

Original FileName: drmkaud.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xCED162D79F69003C470CE6A84BED2FC18E1693DA

MD5 Digest: 0x8F5FCFF8E8848AFAC920905FBD9D33C8

CRC32 Digest: 0x32E3BE7F

Rootkit Property: Normal

File Size: 2944 bytes

File: c:\windows\system32\drivers\e1e5132.sys

Product: Intel(R) PRO/1000 Adapter

Product Version: 9.4.17.0

Page 725: Prev

Company: Intel Corporation

Description: Intel(R) PRO/1000 Adapter NDIS 5.2 deserialized driver

Original FileName: E1E5232.SYS

File Version Label: 9.4.17.0 built by: WinDDK

File Version Number: 9.4.17.0

SHA-1 Digest: 0x6F2650BAA38FC43A245CE38D860ABF42372216C9

MD5 Digest: 0x6F7CCD3C02B26D530900F06D98171A69

CRC32 Digest: 0x69462177

Rootkit Property: Normal

File Size: 230400 bytes

File: c:\windows\system32\drivers\ewusbdev.sys

Product: Huawei Technologies Co., Ltd. USB Modem/Serial Device Driver

Product Version: 1. 0. 0. 9. SP00

Company: Huawei Technologies Co., Ltd.

Description: USB Modem/Serial Device Driver

Original FileName: ewusbdev.sys

File Version Label: 1. 0. 0. 9

File Version Number: 1.0.0.9

SHA-1 Digest: 0xCDBA5E9998336923DB16706B6EE2D77802ECF42F

MD5 Digest: 0x922065957563D851B5A68B95AADAC6AD

CRC32 Digest: 0x600354D8

Rootkit Property: Normal

File Size: 100736 bytes

Page 726: Prev

File: c:\windows\system32\drivers\ewusbmdm.sys

Product: Huawei Technologies Co., Ltd. USB Modem/Serial Device Driver

Product Version: 2. 0. 3. 826

Company: Huawei Technologies Co., Ltd.

Description: USB Modem/Serial Device Driver

Original FileName: ewusbmdm.sys

File Version Label: 2. 0. 3. 826

File Version Number: 2.0.3.826

SHA-1 Digest: 0xB9451269B206302DCAE7D6EEFC0B938C9F13383D

MD5 Digest: 0x20330198554B7DDB44403AF21D6AE179

CRC32 Digest: 0xE48C0CA3

Rootkit Property: Normal

File Size: 102528 bytes

File: c:\windows\system32\drivers\fdc.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Floppy Disk Controller Driver

Original FileName: fdc.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xDF9E8A2D18AEDD359476C1A45877F0614ECF4993

MD5 Digest: 0x92CDD60B6730B9F50F6A1A0C1F8CDC81

CRC32 Digest: 0x47C3B1AB

Page 727: Prev

Rootkit Property: Normal

File Size: 27392 bytes

File: c:\windows\system32\drivers\flpydisk.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Floppy Driver

Original FileName: floppy.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x019614B5B22C191FBFB8E9565CF7682CC8F02F6E

MD5 Digest: 0x9D27E7B80BFCDF1CDD9B555862D5E7F0

CRC32 Digest: 0x16F17776

Rootkit Property: Normal

File Size: 20480 bytes

File: c:\windows\system32\drivers\fltmgr.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Filesystem Filter Manager

Original FileName: fltMgr.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

Page 728: Prev

SHA-1 Digest: 0x9D951CF22A9F5DC75469F96C45CEFE6C73B2047F

MD5 Digest: 0xB2CF4B0786F8212CB92ED2B50C6DB6B0

CRC32 Digest: 0x32451E2A

Rootkit Property: Normal

File Size: 129792 bytes

File: c:\windows\system32\drivers\ftdisk.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: FT Disk Driver

Original FileName: ftdisk.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x12B8DB7B23BF05C46BCE7640B0714BF682B7C2A4

MD5 Digest: 0x6AC26732762483366C3969C9E4D2259D

CRC32 Digest: 0x3EC05674

Rootkit Property: Normal

File Size: 125056 bytes

File: c:\windows\system32\drivers\hdaudbus.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.10.01.5013

Company: Windows (R) Server 2003 DDK provider

Description: High Definition Audio Bus Driver v1.0a

Page 729: Prev

Original FileName: hdaudbus.sys

File Version Label: 5.10.01.5013 built by: WinDDK

File Version Number: 5.10.1.5013

SHA-1 Digest: 0x0192B8EA988A83A7CB98A2617ABCEB8AF608C181

MD5 Digest: 0x573C7D0A32852B48F3058CFD8026F511

CRC32 Digest: 0xE06DAA47

Rootkit Property: Normal

File Size: 144384 bytes

File: c:\windows\system32\drivers\hidusb.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: USB Miniport Driver for Input Devices

Original FileName: HIDUSB.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x6126A6D2A56FE0C290B093A754E1FCF9521AE3E0

MD5 Digest: 0xCCF82C5EC8A7326C3066DE870C06DAF1

CRC32 Digest: 0x985D00AF

Rootkit Property: Normal

File Size: 10368 bytes

File: c:\windows\system32\drivers\hpn.sys

Product: Microsoft® Windows® Operating System

Page 730: Prev

Product Version: 5.1.2467.0

Company: Microsoft Corporation

Description: NetRAID-4M Miniport Driver

Original FileName: hpn.sys

File Version Label: 5.1.2467.0 (Lab01_N(johnstra).010423-0023)

File Version Number: 5.1.2467.0

SHA-1 Digest: 0x3A38D34761E756225B20529FC069550AF25382C8

MD5 Digest: 0xB028377DEA0546A5FCFBA928A8AEFAE0

CRC32 Digest: 0x8C4094E2

Rootkit Property: Normal

File Size: 25952 bytes

File: c:\windows\system32\drivers\hsx_cnxt.sys

Product: SoftK56 Modem Driver

Product Version: 7.39.00

Company: Conexant Systems, Inc.

Description: HSF_CNXT driver

Original FileName: HSF_CNXT.sys

File Version Label: 7.39.00 built by: WinDDK

File Version Number: 7.39.0.0

SHA-1 Digest: 0x1C8A172C9817CEDCABC8D7888A1D3DF0AA350E31

MD5 Digest: 0x11EC1AFCEB5C917CE73D3C301FF4291E

CRC32 Digest: 0x2B5A3B3F

Rootkit Property: Normal

File Size: 670208 bytes

Page 731: Prev

File: c:\windows\system32\drivers\hsx_dpv.sys

Product: SoftK56 Modem Driver

Product Version: 7.39.00

Company: Conexant Systems, Inc.

Description: HSF_DP driver

Original FileName: HSF_DP.sys

File Version Label: 7.39.00 built by: WinDDK

File Version Number: 7.39.0.0

SHA-1 Digest: 0x614C2EA0E50B6B59CB2C66C7CA32F39B7568FD31

MD5 Digest: 0xB1FC0B027DF4374F9E5B796CFDF797B3

CRC32 Digest: 0xF8D32BD4

Rootkit Property: Normal

File Size: 936448 bytes

File: c:\windows\system32\drivers\hsxhwazl.sys

Product: SoftK56 Modem Driver

Product Version: 7.39.00

Company: Conexant Systems, Inc.

Description: HSF_HWAZL WDM driver

Original FileName: HSF_HWAZL.sys

File Version Label: 7.39.00 built by: WinDDK

File Version Number: 7.39.0.0

SHA-1 Digest: 0xC9D792281750C0E7E2A873974BF1BAECE8DB5173

MD5 Digest: 0x3AF45F5B4157C88FFAE24D89BA408302

Page 732: Prev

CRC32 Digest: 0xF5A7CD74

Rootkit Property: Normal

File Size: 192512 bytes

File: c:\windows\system32\drivers\http.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5891

Company: Microsoft Corporation

Description: HTTP Protocol Stack

Original FileName: http.sys

File Version Label: 5.1.2600.5891 (xpsp_sp3_gdr.091020-1758)

File Version Number: 5.1.2600.5891

SHA-1 Digest: 0x721F9CB8FBB6FE323278CCD1391956998E3A804D

MD5 Digest: 0xF80A415EF82CD06FFAF0D971528EAD38

CRC32 Digest: 0x1AFFFD95

Rootkit Property: Normal

File Size: 265728 bytes

File: c:\windows\system32\drivers\i2omp.sys

Product: Microsoft® Windows® Operating System

Product Version: 1.0.0.6

Company: Microsoft Corporation

Description: I2O Miniport Driver

Original FileName: i2omp.sys

File Version Label: 1.0.0.6 (xpsp.080413-2108)

Page 733: Prev

File Version Number: 1.0.0.6

SHA-1 Digest: 0xF25501D8753613AE1C0E7D75CBD72991458EDE70

MD5 Digest: 0xF10863BF1CCC290BABD1A09188AE49E0

CRC32 Digest: 0x7CA6B2D1

Rootkit Property: Normal

File Size: 18560 bytes

File: c:\windows\system32\drivers\i8042prt.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: i8042 Port Driver

Original FileName: i8042prt.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x684D74767873A042DE4BA26A7D322F1E7CA9D6F7

MD5 Digest: 0x4A0B06AA8943C1E332520F7440C0AA30

CRC32 Digest: 0x930B8273

Rootkit Property: Normal

File Size: 52480 bytes

File: c:\windows\system32\drivers\iastor.sys

Product: Intel Matrix Storage Manager driver

Product Version: 7.0.0.1020

Company: Intel Corporation

Page 734: Prev

Description: Intel Matrix Storage Manager driver - ia32

Original FileName: iaStor.sys

File Version Label: 7.0.0.1020

File Version Number: 7.0.0.1020

SHA-1 Digest: 0x39FEDED925D83DA3CA6E1BC29415D141864E53FF

MD5 Digest: 0xFD7F9D74C2B35DBDA400804A3F5ED5D8

CRC32 Digest: 0xFC8B081F

Rootkit Property: Normal

File Size: 277784 bytes

File: c:\windows\system32\drivers\ibmbldid.sys

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x2636A7479329EC31AF650449DBD1BB389A1075B7

MD5 Digest: 0x3A7DBE81EC5EDB96A0A61C7D4AF3198D

CRC32 Digest: 0xEA21BABA

Rootkit Property: Normal

File Size: 4224 bytes

File: c:\windows\system32\drivers\ibmpmdrv.sys

Page 735: Prev

Product: ThinkPad

Product Version: 1.60

Company: Lenovo.

Description: ThinkPad Power Management Driver

Original FileName: IBMPMDRV.SYS

File Version Label: 1.60.0.4

File Version Number: 1.60.0.4

SHA-1 Digest: 0x04BA4F8BC9996FC4BF13143E31E3ADA82B02EDA3

MD5 Digest: 0x400D7095D5AE08970F839BCAC1843106

CRC32 Digest: 0xDEF75861

Rootkit Property: Normal

File Size: 26608 bytes

File: c:\windows\system32\drivers\igxpmp32.sys

Product: Intel Graphics Accelerator Drivers for Windows NT(R)

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: Intel Graphics Miniport Driver

Original FileName: igxpmp32.sys

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0x4D6FF43616C17B823B3BE36D9B8F19B168B25872

MD5 Digest: 0x06B71441957B48A4866DE2FE27CB79C8

CRC32 Digest: 0x865E0081

Rootkit Property: Normal

Page 736: Prev

File Size: 5765056 bytes

File: c:\windows\system32\drivers\imapi.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IMAPI Kernel Driver

Original FileName: IMAPI.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x11A1C247E82B8DEB69BFA852259CAF9793EF0AEE

MD5 Digest: 0x083A052659F5310DD8B6A6CB05EDCF8E

CRC32 Digest: 0xD2E09C6D

Rootkit Property: Normal

File Size: 42112 bytes

File: c:\windows\system32\drivers\ini910u.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: INITIO ini910u SCSI miniport

Original FileName: ini910u.sys

File Version Label: 2.17 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xA922AF93451BFD2852E4EEDE3D7FFCAEDE9A898F

Page 737: Prev

MD5 Digest: 0x4A40E045FAEE58631FD8D91AFC620719

CRC32 Digest: 0x81DFF172

Rootkit Property: Normal

File Size: 16000 bytes

File: c:\windows\system32\drivers\intelide.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Intel PCI IDE Driver

Original FileName: intelide.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x26A71F20A825368CE1A0510413906B486E84B34A

MD5 Digest: 0xB5466A9250342A7AA0CD1FBA13420678

CRC32 Digest: 0xC8C1CBCE

Rootkit Property: Normal

File Size: 5504 bytes

File: c:\windows\system32\drivers\intelppm.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Processor Device Driver

Original FileName: intelppm.sys

Page 738: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFDE26AB07EBB4895815BC01E84D0FF31F7553FE2

MD5 Digest: 0x8C953733D8F36EB2133F5BB58808B66B

CRC32 Digest: 0xFDE5A55D

Rootkit Property: Normal

File Size: 36352 bytes

File: c:\windows\system32\drivers\ip6fw.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IPv6 Windows Firewall Driver

Original FileName: ip6fw.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x4755DD23EB1780211F8CCF27966F78907D2EB851

MD5 Digest: 0x3BB22519A194418D5FEC05D800A19AD0

CRC32 Digest: 0x58857D4C

Rootkit Property: Normal

File Size: 36608 bytes

File: c:\windows\system32\drivers\ipfltdrv.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Page 739: Prev

Company: Microsoft Corporation

Description: IP FILTER DRIVER

Original FileName: ipfltdrv.sys

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x77253EF369A95E2CB3BF5531D963260A9C2E7857

MD5 Digest: 0x731F22BA402EE4B62748ADAF6363C182

CRC32 Digest: 0xFE3B7609

Rootkit Property: Normal

File Size: 32896 bytes

File: c:\windows\system32\drivers\ipinip.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IP in IP Encapsulation Driver

Original FileName: IPINIP.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xB3540C34656CD1425D935D979C6E08064CBEDC79

MD5 Digest: 0xB87AB476DCF76E72010632B5550955F5

CRC32 Digest: 0x67A6AB94

Rootkit Property: Normal

File Size: 20864 bytes

Page 740: Prev

File: c:\windows\system32\drivers\ipnat.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IP Network Address Translator

Original FileName: IPNAT.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xCADA5FE764992D74A8BCEE9705A01EF61EAEA5DF

MD5 Digest: 0xCC748EA12C6EFFDE940EE98098BF96BB

CRC32 Digest: 0xB99B4679

Rootkit Property: Normal

File Size: 152832 bytes

File: c:\windows\system32\drivers\ipsec.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IPSec Driver

Original FileName: ipsec.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5C6DBEC1D047A3252E8FDAD3A240DDA073ACEFEC

MD5 Digest: 0x23C74D75E36E7158768DD63D92789A91

CRC32 Digest: 0x6C4384AC

Page 741: Prev

Rootkit Property: Normal

File Size: 75264 bytes

File: c:\windows\system32\drivers\irda.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IRDA Protocol Driver

Original FileName: irda.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x80DB95006DA032753EDED1A58233D80A3001FB5A

MD5 Digest: 0xACA5E7B54409F9CB5EED97ED0C81120E

CRC32 Digest: 0x719C49C5

Rootkit Property: Normal

File Size: 88192 bytes

File: c:\windows\system32\drivers\irenum.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Infra-Red Bus Enumerator

Original FileName: irenum.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

Page 742: Prev

SHA-1 Digest: 0xB3E13FDF5DCB365512C96C83DB29C19611A5803F

MD5 Digest: 0xC93C9FF7B04D772627A3646D89F7BF89

CRC32 Digest: 0x0FE5E18A

Rootkit Property: Normal

File Size: 11264 bytes

File: c:\windows\system32\drivers\isamfilter.sys

Product: IBM Standard Asset Manager

Product Version: 7.32

Company: IBM Corp.

Description: IBM Standard Asset Manager Filter

Original FileName: isamfilter.sys

File Version Label: 7.32 built by: WinDDK

File Version Number: 7.32.0.1

SHA-1 Digest: 0x58E83680111B50F0A8C82EC8810CDE53ABD6892B

MD5 Digest: 0xA5425E15045272E22CE5F61C99FA15A8

CRC32 Digest: 0x2498DD3D

Rootkit Property: Normal

File Size: 6400 bytes

File: c:\windows\system32\drivers\isapnp.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: PNP ISA Bus Driver

Page 743: Prev

Original FileName: isapnp.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xEF0E8DF348B9BE72F292BB7216EA381CBD0B0BAB

MD5 Digest: 0x05A299EC56E52649B1CF2FC52D20F2D7

CRC32 Digest: 0x457CDA61

Rootkit Property: Normal

File Size: 37248 bytes

File: c:\windows\system32\drivers\kbdclass.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Keyboard Class Driver

Original FileName: kbdclass.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD1531EAABD403C811DFBFB17985A97DBB0C3E534

MD5 Digest: 0x463C1EC80CD17420A542B7F36A36F128

CRC32 Digest: 0x2EA2933D

Rootkit Property: Normal

File Size: 24576 bytes

File: c:\windows\system32\drivers\klognt.sys

Product: Personal Communications

Page 744: Prev

Product Version: 5.7.1

Company: IBM Corporation

Description: KLOGNT DLL

Original FileName:

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x0A4E8FE87CF95ED2E109B5DA3120303502A15590

MD5 Digest: 0x6BF4D4960B5A6B01EE75120B6BD994E7

CRC32 Digest: 0x668AA5EA

Rootkit Property: Normal

File Size: 24588 bytes

File: c:\windows\system32\drivers\kmixer.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Kernel Mode Audio Mixer

Original FileName: kmixer.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x79A0399FFCA1E5616EBFCAD9F49D66B1102E4F23

MD5 Digest: 0x692BCF44383D056AED41B045A323D378

CRC32 Digest: 0x52C8998A

Rootkit Property: Normal

File Size: 172416 bytes

Page 745: Prev

File: c:\windows\system32\drivers\ldlcserv.exe

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: LDLCSERV.EXE

Original FileName: LDLCSERV.EXE

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x4DF56C8C1F3C2C8A1DAE29E67B9218900F657EB6

MD5 Digest: 0x6A1BC28F7463091433485BD36871D065

CRC32 Digest: 0xBD959CFE

Rootkit Property: Normal

File Size: 28672 bytes

File: c:\windows\system32\drivers\llc2.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: LLC2 library

Original FileName: LLC2.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xE741E343E8DD0170EBD8975C992593AA6A7862CC

MD5 Digest: 0x6EC170CA8E5DC1130505C0FF25147BE3

Page 746: Prev

CRC32 Digest: 0x212FB614

Rootkit Property: Normal

File Size: 101408 bytes

File: c:\windows\system32\drivers\mdmxsdk.sys

Product: Diagnostic Interface

Product Version: 1.0.2.010

Company: Conexant

Description: Diagnostic Interface DRIVER

Original FileName: MDMXSDK.SYS

File Version Label: 1.0.2.010

File Version Number: 1.0.2.10

SHA-1 Digest: 0x40B3416E6F67A17D604270FF03A58B153BC835B5

MD5 Digest: 0xE246A32C445056996074A397DA56E815

CRC32 Digest: 0x0426BB6A

Rootkit Property: Normal

File Size: 12544 bytes

File: c:\windows\system32\drivers\mouclass.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Mouse Class Driver

Original FileName: mouclass.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

Page 747: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xE0718537A99CF900283414D1DB86083AEC23ED77

MD5 Digest: 0x35C9E97194C8CFB8430125F8DBC34D04

CRC32 Digest: 0x0770AE6E

Rootkit Property: Normal

File Size: 23040 bytes

File: c:\windows\system32\drivers\mouhid.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: HID Mouse Filter Driver

Original FileName: mouhid.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x4D5C2048C9830E945B8B3642BA1237E8B72A87AF

MD5 Digest: 0xB1C303E17FB9D46E87A98E4BA6769685

CRC32 Digest: 0xB4128B51

Rootkit Property: Normal

File Size: 12160 bytes

File: c:\windows\system32\drivers\mraid35x.sys

Product: MegaRAID Miniport Driver for Windows Whistler 32

Product Version: 6.19

Company: American Megatrends Inc.

Page 748: Prev

Description: MegaRAID RAID Controller Driver for Windows Whistler 32

Original FileName: mraid35x.sys

File Version Label: 6.19 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x9CFC3D8CDDDDB08C78BDE481E4BC92C409D2E29A

MD5 Digest: 0x3F4BB95E5A44F3BE34824E8E7CAF0737

CRC32 Digest: 0x61BAAD38

Rootkit Property: Normal

File Size: 17280 bytes

File: c:\windows\system32\drivers\mrxdav.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT WebDav Minirdr

Original FileName: MRxDAV.Sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x68DC26E6576EF52BEDC7D97BA44679A0E1CC3D74

MD5 Digest: 0x11D42BB6206F33FBB3BA0288D3EF81BD

CRC32 Digest: 0x72D89C77

Rootkit Property: Normal

File Size: 180608 bytes

File: c:\windows\system32\drivers\mrxsmb.sys

Page 749: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5944

Company: Microsoft Corporation

Description: Windows NT SMB Minirdr

Original FileName: MRXSMB.Sys

File Version Label: 5.1.2600.5944 (xpsp_sp3_gdr.100224-1415)

File Version Number: 5.1.2600.5944

SHA-1 Digest: 0x52EFF61934A595EBD9FAA6E291E1F01E72D4B9FF

MD5 Digest: 0xF3AEFB11ABC521122B67095044169E98

CRC32 Digest: 0xB6C80700

Rootkit Property: Normal

File Size: 455680 bytes

File: c:\windows\system32\drivers\msgpc.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: MS General Packet Classifier

Original FileName: MSGPC.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xCB51536535DA476D37EA63D6BC62F797AB35E2B6

MD5 Digest: 0x0A02C63C8B144BD8C86B103DEE7C86A2

CRC32 Digest: 0xD143F959

Rootkit Property: Normal

Page 750: Prev

File Size: 35072 bytes

File: c:\windows\system32\drivers\mskssrv.sys

Product: Microsoft(R) Windows(R) Operating System

Product Version: 5.3.2600.5512

Company: Microsoft Corporation

Description: MS KS Server

Original FileName: mskssrv.sys

File Version Label: 5.3.2600.5512 (xpsp.080413-2108)

File Version Number: 5.3.2600.5512

SHA-1 Digest: 0x9B5514C00E297A0752E489931D46F74AE12CD9A7

MD5 Digest: 0xD1575E71568F4D9E14CA56B7B0453BF1

CRC32 Digest: 0xD1937CAB

Rootkit Property: Normal

File Size: 7552 bytes

File: c:\windows\system32\drivers\mspclock.sys

Product: Microsoft(R) Windows(R) Operating System

Product Version: 5.3.2600.5512

Company: Microsoft Corporation

Description: MS Proxy Clock

Original FileName: mspclock.sys

File Version Label: 5.3.2600.5512 (xpsp.080413-2108)

File Version Number: 5.3.2600.5512

SHA-1 Digest: 0x9EED6E8B8384D1BD0D7AAEC62026D5B102594275

Page 751: Prev

MD5 Digest: 0x325BB26842FC7CCC1FCCE2C457317F3E

CRC32 Digest: 0xE4D8749E

Rootkit Property: Normal

File Size: 5376 bytes

File: c:\windows\system32\drivers\mspqm.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: MS Proxy Quality Manager

Original FileName: mspqm.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xEFC0C76A25ECC8B1C5CB537F95CF20B0D96D747C

MD5 Digest: 0xBAD59648BA099DA4A17680B39730CB3D

CRC32 Digest: 0x077CFB92

Rootkit Property: Normal

File Size: 4992 bytes

File: c:\windows\system32\drivers\mssmbios.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: System Management BIOS Driver

Original FileName: smbios.sys

Page 752: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x22822AB6DD4DEFA28E54C814C1252E64C1305251

MD5 Digest: 0xAF5F4F3F14A8EA2C26DE30F7A1E17136

CRC32 Digest: 0x99E79913

Rootkit Property: Normal

File Size: 15488 bytes

File: c:\windows\system32\drivers\ndistapi.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: NDIS 3.0 connection wrapper driver

Original FileName: NDISTAPI.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x53A892C2CFE5B775349CEB42300EF8B3217DC585

MD5 Digest: 0x1AB3D00C991AB086E69DB84B6C0ED78F

CRC32 Digest: 0x677B6C64

Rootkit Property: Normal

File Size: 10112 bytes

File: c:\windows\system32\drivers\ndisuio.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 753: Prev

Company: Microsoft Corporation

Description: NDIS User mode I/O Driver

Original FileName: NDISUIO.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xCEA30801140ADF385FD2E7326CC7CC47601D19AF

MD5 Digest: 0xF927A4434C5028758A842943EF1A3849

CRC32 Digest: 0xD9F8161A

Rootkit Property: Normal

File Size: 14592 bytes

File: c:\windows\system32\drivers\ndiswan.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: MS PPP Framing Driver (Strong Encryption)

Original FileName: NDISWAN.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x005371445088726EE73E8625A6C7FA0216F1DC06

MD5 Digest: 0xEDC1531A49C80614B2CFDA43CA8659AB

CRC32 Digest: 0x5BF984E0

Rootkit Property: Normal

File Size: 91520 bytes

Page 754: Prev

File: c:\windows\system32\drivers\netbios.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: NetBIOS interface driver

Original FileName: NETBIOS.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xC74F9616C2E8C5B5CB9D672B1D03567FCFACCA05

MD5 Digest: 0x5D81CF9A2F1A3A756B66CF684911CDF0

CRC32 Digest: 0x06492F9D

Rootkit Property: Normal

File Size: 34688 bytes

File: c:\windows\system32\drivers\netbt.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: MBT Transport driver

Original FileName: netbt.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x9D2E1A5FBE165725C366FFADB0B64F400B8CBC1D

MD5 Digest: 0x74B2B2F5BEA5E9A3DC021D685551BD3D

CRC32 Digest: 0x6649407E

Page 755: Prev

Rootkit Property: Normal

File Size: 162816 bytes

File: c:\windows\system32\drivers\netw5x32.sys

Product: Intel® Wireless WiFi Link Adapter

Product Version:

Company: Intel Corporation

Description: Intel® Wireless WiFi Link Driver

Original FileName: NETw5x32.SYS

File Version Label: 13.0.0.107

File Version Number: 13.0.0.107

SHA-1 Digest: 0x0D1EBF55CE6A319079DAE26E709236F6A85F0ADD

MD5 Digest: 0x580207A7C9BDE8BA65401F51F9BA9741

CRC32 Digest: 0x0A3B412C

Rootkit Property: Normal

File Size: 5977216 bytes

File: c:\windows\system32\drivers\npf.sys

Product: WinPcap

Product Version: 4.1.0.2001

Company: CACE Technologies, Inc.

Description: npf.sys (NT5/6 x86) Kernel Driver

Original FileName: npf.sys

File Version Label: 4.1.0.2001

File Version Number: 4.1.0.2001

Page 756: Prev

SHA-1 Digest: 0x34FB3BB374D7B99F936C1968E135F9EF86B425E2

MD5 Digest: 0xB48DC6ABCD3AEFF8618350CCBDC6B09A

CRC32 Digest: 0x9F14B68E

Rootkit Property: Normal

File Size: 35088 bytes

File: c:\windows\system32\drivers\nscirda.sys

Product: NSC Fast Infrared Driver.

Product Version: 1,0,0,0

Company: National Semiconductor Corporation

Description: NSC Fast Infrared Driver.

Original FileName: nscirda.sys

File Version Label: 5,02,00,011 (xpsp.080413-0852)

File Version Number: 5.2.0.11

SHA-1 Digest: 0xFDB38B5B4B2A7DF41F15B1572E68E40662C852F2

MD5 Digest: 0x2ADC0CA9945C65284B3D19BC18765974

CRC32 Digest: 0xE4471432

Rootkit Property: Normal

File Size: 28672 bytes

File: c:\windows\system32\drivers\nstrcnt.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: NSTRCNT.SYS

Page 757: Prev

Original FileName: NSTRCNT.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x35099691BB2763AE9EDCA8118CB91ED1FC8D8BFB

MD5 Digest: 0xBDE3A4F2AB6F0CCBA5F5520FF0DB1240

CRC32 Digest: 0x15AB7418

Rootkit Property: Normal

File Size: 12028 bytes

File: c:\windows\system32\drivers\nwlnkflt.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: NWLINK2 Traffic Filter Driver

Original FileName: nwlnkflt.sys

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x99C71139009069EB04E65CAB57BD71F3403B101D

MD5 Digest: 0xB305F3FAD35083837EF46A0BBCE2FC57

CRC32 Digest: 0xD954F090

Rootkit Property: Normal

File Size: 12416 bytes

File: c:\windows\system32\drivers\nwlnkfwd.sys

Product: Microsoft® Windows® Operating System

Page 758: Prev

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: NWLINK2 Forwarder Driver

Original FileName: nwlnkfwd.sys

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x4A55D8E1EF7F7A9ADB8DD2F21DB0F92FC21F7249

MD5 Digest: 0xC99B3415198D1AAB7227F2C88FD664B9

CRC32 Digest: 0xEC20DF69

Rootkit Property: Normal

File Size: 32512 bytes

File: c:\windows\system32\drivers\parport.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Parallel Port Driver

Original FileName: parport.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA75D3CF7ACF657076C762D03BA379F945EC27368

MD5 Digest: 0x5575FAF8F97CE5E713D108C2A58D7C7C

CRC32 Digest: 0xB6923EE2

Rootkit Property: Normal

File Size: 80128 bytes

Page 759: Prev

File: c:\windows\system32\drivers\pccsmcfd.sys

Product:

Product Version:

Company: Nokia

Description: PCCS Mode Change Filter Driver

Original FileName: pccsmcfd.sys

File Version Label: 7.0.0.0

File Version Number: 7.0.0.0

SHA-1 Digest: 0x52C4558656EE4DA7C58A1344F42356B2C828C9AF

MD5 Digest: 0xFD2041E9BA03DB7764B2248F02475079

CRC32 Digest: 0xFDDC04E8

Rootkit Property: Normal

File Size: 18816 bytes

File: c:\windows\system32\drivers\pci.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: NT Plug and Play PCI Enumerator

Original FileName: pci.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA6FE7CA93616532F0B6305FC6878939830E45FE8

MD5 Digest: 0xA219903CCF74233761D92BEF471A07B1

Page 760: Prev

CRC32 Digest: 0x56762C21

Rootkit Property: Normal

File Size: 68224 bytes

File: c:\windows\system32\drivers\pciide.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Generic PCI IDE Bus Driver

Original FileName: pciide.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xDD1A94969B0B66FF72E39107E297BFFE23781CBD

MD5 Digest: 0xCCF5F451BB1A5A2A522A76E670000FF0

CRC32 Digest: 0xEE7549F9

Rootkit Property: Normal

File Size: 3328 bytes

File: c:\windows\system32\drivers\pcmcia.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: PCMCIA Bus Driver

Original FileName: pcmcia.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

Page 761: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xB021DEA299A2684D6698CFF9E39C9030396608B1

MD5 Digest: 0x9E89EF60E9EE05E3F2EEF2DA7397F1C1

CRC32 Digest: 0xFDF68AE1

Rootkit Property: Normal

File Size: 120192 bytes

File: c:\windows\system32\drivers\pdlnacom.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNACOM.SYS

Original FileName: PDLNACOM.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xBD6B15F9C6D8EE52F579B1ED52F3B86A3081BF38

MD5 Digest: 0x11F1CE5DCDA14CA488FA462326A55DBA

CRC32 Digest: 0x5A4D069C

Rootkit Property: Normal

File Size: 75200 bytes

File: c:\windows\system32\drivers\pdlnafac.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Page 762: Prev

Description: PDLNAFAC.SYS

Original FileName: PDLNAFAC.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x26E4DD96F8FDEB9746B3F34896EA95C2C9E63A26

MD5 Digest: 0xC19580F33330F6A9322BEEC663F75B74

CRC32 Digest: 0xE0356CED

Rootkit Property: Normal

File Size: 36048 bytes

File: c:\windows\system32\drivers\pdlnatcm.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNATCM.SYS

Original FileName: PDLNATCM.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xDA474766E68BFE21DEC899DDED15677118302B93

MD5 Digest: 0x783D6DBDDF90E7BF4BEBD5541B8EA9EE

CRC32 Digest: 0x6821992C

Rootkit Property: Normal

File Size: 20480 bytes

File: c:\windows\system32\drivers\pdlnatdl.sys

Page 763: Prev

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNATDL.SYS

Original FileName: PDLNATDL.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x542D1B12A4EE9031564081647EDF06090940E20A

MD5 Digest: 0x9DCE400FDBC757F7957927C0051F3D3D

CRC32 Digest: 0xB5868BAD

Rootkit Property: Normal

File Size: 18432 bytes

File: c:\windows\system32\drivers\pdlncbas.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNCBAS.SYS

Original FileName: PDLNCBAS.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x99C422B424805FE6863764BF860646A5F1400B9B

MD5 Digest: 0xF647014133068A3425D5104A6E2B88A5

CRC32 Digest: 0x04C3F668

Rootkit Property: Normal

Page 764: Prev

File Size: 6784 bytes

File: c:\windows\system32\drivers\pdlncfwk.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNCFWK.SYS

Original FileName: PDLNCFWK.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xBE731CD3E28AF8550209C9CA8DBFFFE549549B81

MD5 Digest: 0xC7D1CE981C8547EAA80C484EE610A51F

CRC32 Digest: 0x89DD8CE1

Rootkit Property: Normal

File Size: 160288 bytes

File: c:\windows\system32\drivers\pdlnctdl.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNCTDL.SYS

Original FileName: PDLNCTDL.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x967507AB95FFA1412EFB77EE9048859B30C051E7

Page 765: Prev

MD5 Digest: 0x8F0F5E60B5BF5FAE56BDA4513E1BCF93

CRC32 Digest: 0x5A706AAB

Rootkit Property: Normal

File Size: 12288 bytes

File: c:\windows\system32\drivers\pdlndint.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNDINT.SYS

Original FileName: PDLNDINT.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x965563723ACB21A645A760E75B2F373FF8CA53F6

MD5 Digest: 0x6C75699E517F63A482804CFC80546A4A

CRC32 Digest: 0x97C26B79

Rootkit Property: Normal

File Size: 12800 bytes

File: c:\windows\system32\drivers\pdlndldl.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNDLDL.SYS

Original FileName: PDLNDLDL.SYS

Page 766: Prev

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x29A70D341C0F3EB58065D04CFA9133B23174AC39

MD5 Digest: 0xBBF28B64A0337A9B4F1D5CFA8AFDDEAC

CRC32 Digest: 0xCE4E77EF

Rootkit Property: Normal

File Size: 59392 bytes

File: c:\windows\system32\drivers\pdlndlpb.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNDLPB.SYS

Original FileName: PDLNDLPB.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xA2D1AA10431E41B919B44ACD69F0A9353CE75B37

MD5 Digest: 0x99D9E584980E453BB3BD5E7DDBE7580E

CRC32 Digest: 0x5F1C7BD0

Rootkit Property: Normal

File Size: 70144 bytes

File: c:\windows\system32\drivers\pdlndoem.sys

Product: Personal Communications

Product Version: 5.7.1

Page 767: Prev

Company: IBM Corporation

Description: PDLNDOEM.SYS

Original FileName: PDLNDOEM.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xB3665911832CC57F5417AAE491BD3844B3C11B36

MD5 Digest: 0x54472ABEF7845C8412E4A39DCDDE19ED

CRC32 Digest: 0x739AF553

Rootkit Property: Normal

File Size: 18944 bytes

File: c:\windows\system32\drivers\pdlndqll.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNDQLL.SYS

Original FileName: PDLNDQLL.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x0C873AA85D9D72ADD9B2043C4690FCD0CB830DB8

MD5 Digest: 0x1DC235E946D38694FCA8B99D8550E3EA

CRC32 Digest: 0x4E558195

Rootkit Property: Normal

File Size: 53248 bytes

Page 768: Prev

File: c:\windows\system32\drivers\pdlndsdl.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNDSDL.SYS

Original FileName: PDLNDSDL.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x6EC45E75EE67EF222ED0184A8E8FEEFE1527FA4B

MD5 Digest: 0x463AECDF65EE52FAB907E038F1DC6B9F

CRC32 Digest: 0xDDF1C468

Rootkit Property: Normal

File Size: 67072 bytes

File: c:\windows\system32\drivers\pdlndtdl.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNDTDL.SYS

Original FileName: PDLNDTDL.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x495D40C483ECD9DB517991714929956F24C80F1B

MD5 Digest: 0xAEBD20E1CAC597B82C4EABFBCAA9D9F9

CRC32 Digest: 0x385B9CF9

Page 769: Prev

Rootkit Property: Normal

File Size: 51712 bytes

File: c:\windows\system32\drivers\pdlnebas.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNEBAS.SYS

Original FileName: PDLNEBAS.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xEF929013D3E176B1E06D3697877AF5544947E73C

MD5 Digest: 0xC1A32CFC72AD02E026353873CEF80C80

CRC32 Digest: 0x04656EF4

Rootkit Property: Normal

File Size: 8608 bytes

File: c:\windows\system32\drivers\pdlnecfg.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNECFG.SYS

Original FileName: PDLNECFG.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

Page 770: Prev

SHA-1 Digest: 0x589142A541AC2CA1BAE3E1C6C9E152C05D250731

MD5 Digest: 0x09FC3B8CF15319515906A187CE6841B5

CRC32 Digest: 0x0228548D

Rootkit Property: Normal

File Size: 50336 bytes

File: c:\windows\system32\drivers\pdlnemap.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNEMAP.SYS

Original FileName: PDLNEMAP.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xE9381A422DC61F7FF1D8F2B3A0758F4C12835F7D

MD5 Digest: 0x956B93B4CCE0763B57D13DC5BB190526

CRC32 Digest: 0x08BFCF33

Rootkit Property: Normal

File Size: 67184 bytes

File: c:\windows\system32\drivers\pdlnemsg.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNEMSG.SYS

Page 771: Prev

Original FileName: PDLNEMSG.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x1A62E4111E39827D2D332CAE781B0A9B2A3062AC

MD5 Digest: 0x268C838DB60BA87C018149D2171D232C

CRC32 Digest: 0xB67DF0B5

Rootkit Property: Normal

File Size: 12768 bytes

File: c:\windows\system32\drivers\pdlnepkt.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNEPKT.SYS

Original FileName: PDLNEPKT.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x7981C5CCADE5F6BE5FA08011D3D5C61C917197EC

MD5 Digest: 0x9D1AE0BC98B2CC47DECFCF1BC6CA531C

CRC32 Digest: 0x17058CC1

Rootkit Property: Normal

File Size: 19984 bytes

File: c:\windows\system32\drivers\pdlnshay.sys

Product: Personal Communications

Page 772: Prev

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNSHAY.SYS

Original FileName: PDLNSHAY.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x5CEB7B869CED7AA8F98614A1786E0BA541C6AD3E

MD5 Digest: 0xFC0A7F996DDA6CA020217CB479D08F36

CRC32 Digest: 0x6B8A7E79

Rootkit Property: Normal

File Size: 59504 bytes

File: c:\windows\system32\drivers\pdlnslea.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNSLEA.SYS

Original FileName: PDLNSLEA.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xCBE0745DC3836D506E81F8763A41B611A193AF46

MD5 Digest: 0xAE9E37F7C759DE11E8754A8288EA6D23

CRC32 Digest: 0x78CDA2CF

Rootkit Property: Normal

File Size: 22384 bytes

Page 773: Prev

File: c:\windows\system32\drivers\pdlnsv25.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNSV25.SYS

Original FileName: PDLNSV25.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xB47EF056F71A83670872D929540152C64BAB928B

MD5 Digest: 0x8698BA42F05BF901D3C8C6E61B2FC38A

CRC32 Digest: 0x8A368C63

Rootkit Property: Normal

File Size: 54416 bytes

File: c:\windows\system32\drivers\pdlnsx25.sys

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: PDLNSX25.SYS

Original FileName: PDLNSX25.SYS

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0x6D7D559751C9A098E697B7CF80EF7355E43148A1

MD5 Digest: 0x28CCA5CED734BCB8D80B821A5901CE05

Page 774: Prev

CRC32 Digest: 0x3A15B118

Rootkit Property: Normal

File Size: 58432 bytes

File: c:\windows\system32\drivers\perc2.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2467.0

Company: Microsoft Corporation

Description: PERC 2 Miniport Driver

Original FileName: perc2.sys

File Version Label: 5.1.2467.0 (Lab01_N(johnstra).010423-0023)

File Version Number: 5.1.2467.0

SHA-1 Digest: 0x013292B4A5C1829AAF323CDEF54434FC71861EE5

MD5 Digest: 0x6C14B9C19BA84F73D3A86DBA11133101

CRC32 Digest: 0x2790D0A7

Rootkit Property: Normal

File Size: 27296 bytes

File: c:\windows\system32\drivers\perc2hib.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2467.0

Company: Microsoft Corporation

Description: PERC 2 Hibernate Driver

Original FileName: perc2hib.sys

File Version Label: 5.1.2467.0 (Lab01_N(johnstra).010423-0023)

Page 775: Prev

File Version Number: 5.1.2467.0

SHA-1 Digest: 0x72A3B2EBDF235FABDAE12BD8BA3DC4C8773CE066

MD5 Digest: 0xF50F7C27F131AFE7BEBA13E14A3B9416

CRC32 Digest: 0xCBF789A1

Rootkit Property: Normal

File Size: 5504 bytes

File: c:\windows\system32\drivers\pmemnt.sys

Product: Microsoft(R) Windows NT(TM) Operating System

Product Version: 4.00

Company: Microsoft Corporation

Description: Physical Memory Driver

Original FileName: PMEMNT.SYS

File Version Label: 4.00

File Version Number: 4.0.1381.1

SHA-1 Digest: 0xF2527576354C72FA18D30FA52CE95F0152873AE1

MD5 Digest: 0xFA292805788528C083F416E151B60AB6

CRC32 Digest: 0x0D9C95FF

Rootkit Property: Normal

File Size: 7012 bytes

File: c:\windows\system32\drivers\ptilink.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Parallel Technologies, Inc.

Page 776: Prev

Description: Parallel Technologies DirectParallel IO Library

Original FileName: ptilink.sys

File Version Label: 1.10 (XPClient.010817-1148)

File Version Number: 1.1.0.0

SHA-1 Digest: 0xE8C148E71E870965CA452142E55AC89486779D56

MD5 Digest: 0x80D317BD1C3DBC5D4FE7B1678C60CADD

CRC32 Digest: 0xA5E3747E

Rootkit Property: Normal

File Size: 17792 bytes

File: c:\windows\system32\drivers\pxhelp20.sys

Product: PxHelp20

Product Version:

Company: Sonic Solutions

Description: Px Engine Device Driver for Windows 2000/XP

Original FileName: PxHelp20.sys

File Version Label: 3.00.33a

File Version Number: 3.0.33.0

SHA-1 Digest: 0x722FF1200307C2008F6F972493FF374A9CBD3AEF

MD5 Digest: 0x81088114178112618B1C414A65E50F7C

CRC32 Digest: 0x497DA859

Rootkit Property: Normal

File Size: 36528 bytes

File: c:\windows\system32\drivers\ql1080.sys

Page 777: Prev

Product: Miniport Driver for QLogic ISP PCI Adapters

Product Version:

Company: QLogic Corporation

Description: Miniport Driver for QLogic ISP PCI Adapters

Original FileName: ql1080.mpd

File Version Label: 3.04

File Version Number: 3.4.0.0

SHA-1 Digest: 0x7391D80B6C4028404BCE9368962A93D3F9B1746E

MD5 Digest: 0x0A63FB54039EB5662433CABA3B26DBA7

CRC32 Digest: 0xF184EEC8

Rootkit Property: Normal

File Size: 40320 bytes

File: c:\windows\system32\drivers\ql10wnt.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Miniport Driver for QLogic ISP PCI Adapters

Original FileName: ql10wnt.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x1E6ECEA2299B25787E1066BAFF861F40662C2085

MD5 Digest: 0x6503449E1D43A0FF0201AD5CB1B8C706

CRC32 Digest: 0x0D812D60

Rootkit Property: Normal

Page 778: Prev

File Size: 33152 bytes

File: c:\windows\system32\drivers\ql12160.sys

Product: Miniport Driver for QLogic ISP PCI Adapters

Product Version:

Company: QLogic Corporation

Description: Miniport Driver for QLogic ISP PCI Adapters

Original FileName: ql12160.sys

File Version Label: 7.13.02 (W64)

File Version Number: 7.13.2.0

SHA-1 Digest: 0xEB7A27648B15BEE48E1A66B8B2D945B4DC3C3EFC

MD5 Digest: 0x156ED0EF20C15114CA097A34A30D8A01

CRC32 Digest: 0x3526E204

Rootkit Property: Normal

File Size: 45312 bytes

File: c:\windows\system32\drivers\ql1240.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: QLogic ISP PCI Adapters

Original FileName: ql1240.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x345CE10ADAD4FCECED677BC64B810237945CDBAE

Page 779: Prev

MD5 Digest: 0x70F016BEBDE6D29E864C1230A07CC5E6

CRC32 Digest: 0x2EB396EC

Rootkit Property: Normal

File Size: 40448 bytes

File: c:\windows\system32\drivers\ql1280.sys

Product: Miniport Driver for QLogic ISP PCI Adapters

Product Version:

Company: QLogic Corporation

Description: Miniport Driver for QLogic ISP PCI Adapters

Original FileName: ql1280.sys

File Version Label: 7.13.01 (W2K)

File Version Number: 7.13.1.0

SHA-1 Digest: 0xAD07D35A767E634D8FB7C9189E295A70CC2BAFD4

MD5 Digest: 0x907F0AEEA6BC451011611E732BD31FCF

CRC32 Digest: 0xCC20C290

Rootkit Property: Normal

File Size: 49024 bytes

File: c:\windows\system32\drivers\rasacd.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: RAS Automatic Connection Driver

Original FileName: rasacd.sys

Page 780: Prev

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xAB474DB29198EA46F5E1C1D60B7AA215660CD563

MD5 Digest: 0xFE0D99D6F31E4FAD8159F690D68DED9C

CRC32 Digest: 0x56F20605

Rootkit Property: Normal

File Size: 8832 bytes

File: c:\windows\system32\drivers\rasirda.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: IrDA WAN Miniport Driver

Original FileName: irwan.sys

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x3473B9581DBA8E07C1D5A854AB087CFDCF348999

MD5 Digest: 0x0207D26DDF796A193CCD9F83047BB5FC

CRC32 Digest: 0x809FF581

Rootkit Property: Normal

File Size: 19584 bytes

File: c:\windows\system32\drivers\rasl2tp.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 781: Prev

Company: Microsoft Corporation

Description: RAS L2TP mini-port/call-manager driver

Original FileName: rasl2tp.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xB9FE509C7536D4DB8117D9F482720A9732A2984C

MD5 Digest: 0x11B4A627BC9614B885C4969BFA5FF8A6

CRC32 Digest: 0xB395B71A

Rootkit Property: Normal

File Size: 51328 bytes

File: c:\windows\system32\drivers\raspppoe.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: RAS PPPoE mini-port/call-manager driver

Original FileName: raspppoe.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x696DFA5C8928839E20EB287B904E6FAC1D4DDB36

MD5 Digest: 0x5BC962F2654137C9909C3D4603587DEE

CRC32 Digest: 0xFE86878C

Rootkit Property: Normal

File Size: 41472 bytes

Page 782: Prev

File: c:\windows\system32\drivers\raspptp.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Peer-to-Peer Tunneling Protocol

Original FileName: RASPPTP.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xDE55E72AA3708BA1AFD7C13FB7D60A5A65D53C08

MD5 Digest: 0xEFEEC01B1D3CF84F16DDD24D9D9D8F99

CRC32 Digest: 0x3C581D26

Rootkit Property: Normal

File Size: 48384 bytes

File: c:\windows\system32\drivers\raspti.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: PTI DirectParallel(R) mini-port/call-manager driver

Original FileName: raspti.sys

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x9F85B3C30FF634D23E711CC694750D5D8AD14419

MD5 Digest: 0xFDBB1D60066FCFBB7452FD8F9829B242

CRC32 Digest: 0x7BEE3044

Page 783: Prev

Rootkit Property: Normal

File Size: 16512 bytes

File: c:\windows\system32\drivers\rdbss.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Redirected Drive Buffering SubSystem Driver

Original FileName: RDBSS.Sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xDFC7963C8FC9C1B639600EDCF8F24479ACD8A88D

MD5 Digest: 0x7AD224AD1A1437FE28D89CF22B17780A

CRC32 Digest: 0xE482ACA8

Rootkit Property: Normal

File Size: 175744 bytes

File: c:\windows\system32\drivers\rdpcdd.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: RDP Miniport

Original FileName: RDPCDD.SYS

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

Page 784: Prev

SHA-1 Digest: 0xDBDA3AC341EDFF01B7C00357B3F0FEAFEEF15470

MD5 Digest: 0x4912D5B403614CE99C28420F75353332

CRC32 Digest: 0xB8C0D604

Rootkit Property: Normal

File Size: 4224 bytes

File: c:\windows\system32\drivers\rdpdr.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft RDP Device redirector

Original FileName: RDPDR.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x58C87E8EEAAF6E9CBC754B62E570E415EC719C42

MD5 Digest: 0x15CABD0F7C00C47C70124907916AF3F1

CRC32 Digest: 0x68EEB56A

Rootkit Property: Normal

File Size: 196224 bytes

File: c:\windows\system32\drivers\redbook.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Redbook Audio Filter Driver

Page 785: Prev

Original FileName: redbook.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD17DC93354A34753BB062C5C7E0841E3F2BC74E8

MD5 Digest: 0xF828DD7E1419B6653894A8F97A0094C5

CRC32 Digest: 0x58D37148

Rootkit Property: Normal

File Size: 57600 bytes

File: c:\windows\system32\drivers\rootmdm.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Legacy Non-Pnp Modem Device Driver

Original FileName: ROOTMDM.SYS

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xB4A02978D8BB4B064FA1067696A4838DAAF0B963

MD5 Digest: 0xD8B0B4ADE32574B2D9C5CC34DC0DBBE7

CRC32 Digest: 0xD52E147A

Rootkit Property: Normal

File Size: 5888 bytes

File: c:\windows\system32\drivers\s24trans.sys

Product: Intel Wireless LAN Packet Driver

Page 786: Prev

Product Version: 13, 0, 0, 3

Company: Intel Corporation

Description: Intel WLAN Packet Driver

Original FileName: S24TRANS.SYS

File Version Label: 13, 0, 0, 3

File Version Number: 13.0.0.3

SHA-1 Digest: 0xEAC780B6ADC21362DC180AB37D1030F0D2A599CD

MD5 Digest: 0xE7958E8ACDA7CA20127EF5F2235F25CC

CRC32 Digest: 0x31875064

Rootkit Property: Normal

File Size: 13952 bytes

File: c:\windows\system32\drivers\scsiport.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: SCSI Port Driver

Original FileName: scsiport.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFCC138A05370378FB7699C73518D01136099941C

MD5 Digest: 0x76C465F570E90C28942D52CCB2580A10

CRC32 Digest: 0xCABF2AA2

Rootkit Property: Normal

File Size: 96384 bytes

Page 787: Prev

File: c:\windows\system32\drivers\secdrv.sys

Product: Macrovision SECURITY Driver

Product Version: SECURITY Driver 4.03.086 2006/09/13

Company: Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.

Description: Macrovision SECURITY Driver

Original FileName: SECDRV.SYS

File Version Label: 4.03.086

File Version Number: 4.3.86.0

SHA-1 Digest: 0x51613026E706F9BDCBC0C94CF2014BC9FB58A3E8

MD5 Digest: 0x90A3935D05B494A5A39D37E71F09A677

CRC32 Digest: 0x3B5FE253

Rootkit Property: Normal

File Size: 20480 bytes

File: c:\windows\system32\drivers\serenum.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Serial Port Enumerator

Original FileName: serenum.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x9A4AC71BB4107B0C1E7F6948F288D8FC8030F177

MD5 Digest: 0x0F29512CCD6BEAD730039FB4BD2C85CE

Page 788: Prev

CRC32 Digest: 0x34CE180C

Rootkit Property: Normal

File Size: 15744 bytes

File: c:\windows\system32\drivers\serial.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Serial Device Driver

Original FileName: serial.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x57F1FAE6A306BF14F6EF3E43C0C4252E9F21C0DC

MD5 Digest: 0xCCA207A8896D4C6A0C9CE29A4AE411A7

CRC32 Digest: 0x41855B7C

Rootkit Property: Normal

File Size: 64512 bytes

File: c:\windows\system32\drivers\sftfsxp.sys

Product: Microsoft Application Virtualization

Product Version: 4.6.0.10191

Company: Microsoft Corporation

Description: Microsoft Application Virtualization File System

Original FileName: sftfs.sys

File Version Label: 4.6.0.10191

Page 789: Prev

File Version Number: 4.6.0.10191

SHA-1 Digest: 0x49180AE655A3406A8B7D050714E7F352983F89FA

MD5 Digest: 0x14CB193ECD4E71A32446790F9ECF39DD

CRC32 Digest: 0xDE5663A0

Rootkit Property: Normal

File Size: 554344 bytes

File: c:\windows\system32\drivers\sftplayxp.sys

Product: Microsoft Application Virtualization

Product Version: 4.6.0.10191

Company: Microsoft Corporation

Description: Microsoft Application Virtualization SystemGuard

Original FileName: sftplay.sys

File Version Label: 4.6.0.10191

File Version Number: 4.6.0.10191

SHA-1 Digest: 0x1B4EB5FB4B7A02AAE17C78755DE1D4B53F38E71C

MD5 Digest: 0x1F05637831CAF19B069AAF361D720BB9

CRC32 Digest: 0xDA63DED7

Rootkit Property: Normal

File Size: 211432 bytes

File: c:\windows\system32\drivers\sftredirxp.sys

Product: Microsoft Application Virtualization

Product Version: 4.6.0.10191

Company: Microsoft Corporation

Page 790: Prev

Description: Microsoft Application Virtualization SystemGuard

Original FileName: sftredir.sys

File Version Label: 4.6.0.10191

File Version Number: 4.6.0.10191

SHA-1 Digest: 0x189A40210984FD2FFE833EFA9408A025F63F3574

MD5 Digest: 0x423628F17862593D7D43E02187F4C1B5

CRC32 Digest: 0xFB4850B1

Rootkit Property: Normal

File Size: 20584 bytes

File: c:\windows\system32\drivers\sftvolxp.sys

Product: Microsoft Application Virtualization

Product Version: 4.6.0.10191

Company: Microsoft Corporation

Description: Microsoft Application Virtualization Volume Manager

Original FileName: SoftVol.sys

File Version Label: 4.6.0.10191

File Version Number: 4.6.0.10191

SHA-1 Digest: 0xC794782C2A0820B68A5125D9B38F9C371D88BC22

MD5 Digest: 0x258AB73A01FA1B8D1A2A053C6BBA5544

CRC32 Digest: 0xB8B665FB

Rootkit Property: Normal

File Size: 18280 bytes

File: c:\windows\system32\drivers\sisagp.sys

Page 791: Prev

Product: SiS (R) NT AGP Filter

Product Version: 5.12.01.2010

Company: Silicon Integrated Systems Corporation

Description: SiS NT AGP Filter

Original FileName: SISAGP.SYS

File Version Label: 5.12.01.2010 (xpsp.080413-2111)

File Version Number: 5.12.1.2010

SHA-1 Digest: 0x2D6113D14210476AEBCF055E81B9CC672A509D37

MD5 Digest: 0x6B33D0EBD30DB32E27D1D78FE946A754

CRC32 Digest: 0x5DFBD112

Rootkit Property: Normal

File Size: 40960 bytes

File: c:\windows\system32\drivers\smapint.sys

Product: Microsoft(R) Windows NT(TM) Operating System

Product Version: 4.00

Company: Microsoft Corporation

Description: SMAPI I/O

Original FileName: smapint.sys

File Version Label: 4.00

File Version Number: 4.0.1381.1

SHA-1 Digest: 0x3F00278038ED76580618FA63686C5A207CA19577

MD5 Digest: 0x26341D0DD225D19FD50E0EE3C3C77502

CRC32 Digest: 0x15D5BEDD

Rootkit Property: Normal

Page 792: Prev

File Size: 14848 bytes

File: c:\windows\system32\drivers\sparrow.sys

Product: Microsoft(R) Windows (R) 2000 Operating System

Product Version: 5.1.2409.1

Company: Adaptec, Inc.

Description: Adaptec AIC-6x60 series SCSI miniport

Original FileName: sparrow.sys

File Version Label: v2.0a (ReleaseBinaries.001205-1804)

File Version Number: 5.1.2409.1

SHA-1 Digest: 0x778141F9E86A699C15D999110BC6BC6C3153534D

MD5 Digest: 0x83C0F71F86D3BDAF915685F3D568B20E

CRC32 Digest: 0x8CB45591

Rootkit Property: Normal

File Size: 19072 bytes

File: c:\windows\system32\drivers\splitter.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Kernel Audio Splitter

Original FileName: splitter.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2892EC95C3C8E4F5C767D709AC82FA2A6471C277

Page 793: Prev

MD5 Digest: 0xAB8B92451ECB048A4D1DE7C3FFCB4A9F

CRC32 Digest: 0xB27F2EF3

Rootkit Property: Normal

File Size: 6272 bytes

File: c:\windows\system32\drivers\sr.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: System Restore Filesystem Filter Driver

Original FileName: sr.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x97CC0454D9E1258D45D69C64F980BD04060142E6

MD5 Digest: 0x76BB022C2FB6902FD5BDD4F78FC13A5D

CRC32 Digest: 0x87CDCCA3

Rootkit Property: Normal

File Size: 73472 bytes

File: c:\windows\system32\drivers\srv.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.6031

Company: Microsoft Corporation

Description: Server driver

Original FileName: SRV.SYS

Page 794: Prev

File Version Label: 5.1.2600.6031 (xpsp_sp3_gdr.100826-1646)

File Version Number: 5.1.2600.6031

SHA-1 Digest: 0x5B23A108AED3E2B6A22D20782B7BD251FE322C6A

MD5 Digest: 0x0F6AEFAD3641A657E18081F52D0C15AF

CRC32 Digest: 0xE2B07EB4

Rootkit Property: Normal

File Size: 357248 bytes

File: c:\windows\system32\drivers\swenum.sys

Product: Microsoft(R) Windows(R) Operating System

Product Version: 5.3.2600.5512

Company: Microsoft Corporation

Description: Plug and Play Software Device Enumerator

Original FileName: swenum.sys

File Version Label: 5.3.2600.5512 (xpsp.080413-2108)

File Version Number: 5.3.2600.5512

SHA-1 Digest: 0x283D7B9E45F2D5E615166BE8AD232B7D74875D0A

MD5 Digest: 0x3941D127AEF12E93ADDF6FE6EE027E0F

CRC32 Digest: 0xF48E0A06

Rootkit Property: Normal

File Size: 4352 bytes

File: c:\windows\system32\drivers\swmidi.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 795: Prev

Company: Microsoft Corporation

Description: Microsoft GS Wavetable Synthesizer

Original FileName: swmidi.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x492E94F981EDA355E3F1854CFBB673986C428BC7

MD5 Digest: 0x8CE882BCC6CF8A62F2B2323D95CB3D01

CRC32 Digest: 0x2093E35B

Rootkit Property: Normal

File Size: 56576 bytes

File: c:\windows\system32\drivers\sym_hi.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2462.0

Company: LSI Logic

Description: Symbios Hi-Perf SCSI Miniport Driver

Original FileName: SYM_HI.SYS

File Version Label: 5.1.2462.0 (Lab01_N.010309-0027)

File Version Number: 5.1.2462.0

SHA-1 Digest: 0x5D9308D2738C48479943A508C04B19A5AE739E6C

MD5 Digest: 0x80AC1C4ABBE2DF3B738BF15517A51F2C

CRC32 Digest: 0xCDA26020

Rootkit Property: Normal

File Size: 28384 bytes

Page 796: Prev

File: c:\windows\system32\drivers\sym_u3.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2462.0

Company: LSI Logic

Description: Symbios Ultra3 SCSI Miniport Driver

Original FileName: SYM_U3.SYS

File Version Label: 5.1.2462.0 (Lab01_N.010309-0027)

File Version Number: 5.1.2462.0

SHA-1 Digest: 0x5552CA82224B296495A10641F32DECCCF9167FDF

MD5 Digest: 0xBF4FAB949A382A8E105F46EBB4937058

CRC32 Digest: 0xF11B2687

Rootkit Property: Normal

File Size: 30688 bytes

File: c:\windows\system32\drivers\symc810.sys

Product: Microsoft(R) Windows (R) 2000 Operating System

Product Version: 5.1.2409.1

Company: Symbios Logic Inc.

Description: Symbios Logic Inc. SCSI Miniport Driver

Original FileName: SYMC810.SYS

File Version Label: 5.1.2409.1 (ReleaseBinaries.001205-1804)

File Version Number: 5.1.2409.1

SHA-1 Digest: 0x09F6023B965069572C2D8F40DF323CCA2EFB9143

MD5 Digest: 0x1FF3217614018630D0A6758630FC698C

CRC32 Digest: 0x4FE9C1F8

Page 797: Prev

Rootkit Property: Normal

File Size: 16256 bytes

File: c:\windows\system32\drivers\symc8xx.sys

Product: Microsoft(R) Windows (R) 2000 Operating System

Product Version: 5.1.2409.1

Company: LSI Logic

Description: Symbios 8XX SCSI Miniport Driver

Original FileName: SYMC8XX.SYS

File Version Label: 5.1.2409.1 (ReleaseBinaries.001205-1804)

File Version Number: 5.1.2409.1

SHA-1 Digest: 0xF5AFEF7C1C705621E8C3CC03755F979C76FCC55A

MD5 Digest: 0x070E001D95CF725186EF8B20335F933C

CRC32 Digest: 0xC2EED0C8

Rootkit Property: Normal

File Size: 32640 bytes

File: c:\windows\system32\drivers\symdns.sys

Product: Symantec Security Drivers

Product Version: 6.0

Company: Symantec Corporation

Description: DNS Filter Driver

Original FileName: SYMDNS

File Version Label: 6.0.4.402

File Version Number: 6.0.4.402

Page 798: Prev

SHA-1 Digest: 0x229ED46A13C20D8AEB459CC932B8BDE85203A6AF

MD5 Digest: 0x99F158D37B42FCA00B3F5AB5B3EFEBB7

CRC32 Digest: 0xFADA9DDE

Rootkit Property: Normal

File Size: 12992 bytes

File: c:\windows\system32\drivers\symfw.sys

Product: Symantec Security Drivers

Product Version: 6.0

Company: Symantec Corporation

Description: Firewall Filter Driver

Original FileName:

File Version Label: 6.0.4.402

File Version Number: 6.0.4.402

SHA-1 Digest: 0x1BEA14A980DABB0A52EF6B924547E284A911A86A

MD5 Digest: 0x29AE12DB354A89382A43A8FCB6AB0AB5

CRC32 Digest: 0x786FF3E3

Rootkit Property: Normal

File Size: 110784 bytes

File: c:\windows\system32\drivers\symids.sys

Product: Symantec Security Drivers

Product Version: 6.0

Company: Symantec Corporation

Description: IDS Filter Driver

Page 799: Prev

Original FileName:

File Version Label: 6.0.4.402

File Version Number: 6.0.4.402

SHA-1 Digest: 0x6C41926EAE3724136A6F3F4B555C3CBC4EE39057

MD5 Digest: 0x728D1DFF8573B5DD18DA536FA733EB11

CRC32 Digest: 0x4A0EB6FC

Rootkit Property: Normal

File Size: 31936 bytes

File: c:\windows\system32\drivers\symndis.sys

Product: Symantec Security Drivers

Product Version: 6.0

Company: Symantec Corporation

Description: NDIS Filter Driver

Original FileName: SYMNDIS

File Version Label: 6.0.4.402

File Version Number: 6.0.4.402

SHA-1 Digest: 0x04493FF9C2DF458F904CCC5E452667A86763E17B

MD5 Digest: 0xB1F616C31575DA1535C2A7823C112182

CRC32 Digest: 0x92DF5937

Rootkit Property: Normal

File Size: 28352 bytes

File: c:\windows\system32\drivers\symredrv.sys

Product: Symantec Security Drivers

Page 800: Prev

Product Version: 6.0

Company: Symantec Corporation

Description: Redirector Filter Driver

Original FileName: SYMREDRV

File Version Label: 6.0.4.402

File Version Number: 6.0.4.402

SHA-1 Digest: 0x3391925CD39AC9B0656903C49F994A26FF623CF1

MD5 Digest: 0x6C0A85982F4E0D672B85A2BFB50A24B5

CRC32 Digest: 0x12F45570

Rootkit Property: Normal

File Size: 24768 bytes

File: c:\windows\system32\drivers\symtdi.sys

Product: Symantec Security Drivers

Product Version: 6.0

Company: Symantec Corporation

Description: Network Dispatch Driver

Original FileName:

File Version Label: 6.0.4.402

File Version Number: 6.0.4.402

SHA-1 Digest: 0x4B1673617D80CD9FFBAACB25CA5C75B3E71ACAB9

MD5 Digest: 0xCDDA3BA3F7D5B63FF9F85CB478C11473

CRC32 Digest: 0xCF12E1E8

Rootkit Property: Normal

File Size: 195776 bytes

Page 801: Prev

File: c:\windows\system32\drivers\syntp.sys

Product: Synaptics Device Driver

Product Version: 7.5.17.25 10Aug07

Company: Synaptics, Inc.

Description: Synaptics Touchpad Driver

Original FileName: SynTP.sys

File Version Label: 7.5.17.25 10Aug07

File Version Number: 7.5.17.25

SHA-1 Digest: 0x2F577A87B28C3E1DA6FD1C5C03759D53D25DDD6A

MD5 Digest: 0x58F3288F83A3E8169EEB6A10787C7F2E

CRC32 Digest: 0x8BFA789D

Rootkit Property: Normal

File Size: 177664 bytes

File: c:\windows\system32\drivers\sysaudio.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: System Audio WDM Filter

Original FileName: sysaudio.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x86F3E756DD2845391485B33C82831AFC240AEBD8

MD5 Digest: 0x8B83F3ED0F1688B4958F77CD6D2BF290

Page 802: Prev

CRC32 Digest: 0x5A883441

Rootkit Property: Normal

File Size: 60800 bytes

File: c:\windows\system32\drivers\tcpip.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5625

Company: Microsoft Corporation

Description: TCP/IP Protocol Driver

Original FileName: tcpip.sys

File Version Label: 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)

File Version Number: 5.1.2600.5625

SHA-1 Digest: 0x67E432A0C6A588E3B9AAD49424B457DB47A79B15

MD5 Digest: 0x9AEFA14BD6B182D61E3119FA5F436D3D

CRC32 Digest: 0xC7935406

Rootkit Property: Normal

File Size: 361600 bytes

File: c:\windows\system32\drivers\tdsmapi.sys

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

Page 803: Prev

File Version Number: 0.0.0.0

SHA-1 Digest: 0x1CBDFECC391018AC8686342BA125785C4BDF8B14

MD5 Digest: 0x564B337034271B7BDDCABFDDC91C6B7A

CRC32 Digest: 0x5A0D57C6

Rootkit Property: Normal

File Size: 9343 bytes

File: c:\windows\system32\drivers\termdd.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Terminal Server Driver

Original FileName: termdd.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xE1057801F2C9748345C08D2E343B78861941ABB5

MD5 Digest: 0x88155247177638048422893737429D9E

CRC32 Digest: 0xEB452F4C

Rootkit Property: Normal

File Size: 40840 bytes

File: c:\windows\system32\drivers\tmcomm.sys

Product: Trend Micro AEGIS

Product Version: 2.80

Company: Trend Micro Inc.

Page 804: Prev

Description: TrendMicro Common Module

Original FileName: TmComm.sys

File Version Label: 2.80.0.1078

File Version Number: 2.80.0.1078

SHA-1 Digest: 0x44374CD30AFD51C8B86F533BACBFDABC31950F40

MD5 Digest: 0x91C8ED783527718B05E6D170E4A0D242

CRC32 Digest: 0x58C22AA9

Rootkit Property: Normal

File Size: 161296 bytes

File: c:\windows\system32\drivers\toside.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Toshiba PCI IDE Controller

Original FileName: toside.sys

File Version Label: 5.1.2600.0 (XPClient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x26C83FA01090898102ED8751EDDCD11C59F2EB7A

MD5 Digest: 0xF2790F6AF01321B172AA62F8E1E187D9

CRC32 Digest: 0x17B27F39

Rootkit Property: Normal

File Size: 4992 bytes

File: c:\windows\system32\drivers\tphkdrv.sys

Page 805: Prev

Product: ThinkPad OnScreenDisplay

Product Version: 3.01

Company: Lenovo Group Limited

Description: ThinkPad Hotkey Driver

Original FileName: tphkdrv.sys

File Version Label: 3.01

File Version Number: 5.0.2195.1620

SHA-1 Digest: 0xF0F68ED1838BA67F2442AE6AA1DEEFD2B32C7C95

MD5 Digest: 0x8AEF2188630F5ECD79AD9ABBA630630B

CRC32 Digest: 0x66210474

Rootkit Property: Normal

File Size: 17844 bytes

File: c:\windows\system32\drivers\tppwrif.sys

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x460E20031EB2127B7FDB52958FD951C7031FA53A

MD5 Digest: 0x44672DE6CEA9569C21C4B7A8D2560750

CRC32 Digest: 0x7AA3AE7B

Rootkit Property: Normal

Page 806: Prev

File Size: 4442 bytes

File: c:\windows\system32\drivers\trcboot.exe

Product: Personal Communications

Product Version: 5.7.1

Company: IBM Corporation

Description: TRCBOOT.EXE

Original FileName: TRCBOOT.EXE

File Version Label: 5070.10.5249.773

File Version Number: 5070.10.5249.773

SHA-1 Digest: 0xA20C574D169A08708955DF880832796D6795829D

MD5 Digest: 0xF148F952FC89545137622EB73525EF8F

CRC32 Digest: 0xE68F60D1

Rootkit Property: Normal

File Size: 28672 bytes

File: c:\windows\system32\drivers\tsmapip.sys

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x249819CDAE09BD55C2B442234B7CB88B68824CE0

Page 807: Prev

MD5 Digest: 0xF2ABA3066D7921D7FCDBD66DEA88BE11

CRC32 Digest: 0x91CB1385

Rootkit Property: Normal

File Size: 7168 bytes

File: c:\windows\system32\drivers\ultra.sys

Product: Promise ultra66 Miniport Driver for WindowsNT

Product Version: 1.43 (Build 0603)

Company: Promise Technology, Inc.

Description: Promise Ultra66 Miniport Driver

Original FileName: ultra66.sys

File Version Label: 1.43 (Build 0603)

File Version Number: 1.0.507.1

SHA-1 Digest: 0x17E20C9332CF1B6DFDB2CC567566119D2084D9D4

MD5 Digest: 0x1B698A51CD528D8DA4FFAED66DFC51B9

CRC32 Digest: 0x35DCF875

Rootkit Property: Normal

File Size: 36736 bytes

File: c:\windows\system32\drivers\update.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Update Driver

Original FileName: update.sys

Page 808: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x3068CF03D3BFF84FB1144E4E03A1242F0261A374

MD5 Digest: 0x402DDC88356B1BAC0EE3DD1580C76A31

CRC32 Digest: 0x72FCC7B4

Rootkit Property: Normal

File Size: 384768 bytes

File: c:\windows\system32\drivers\usbccgp.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: USB Common Class Generic Parent Driver

Original FileName: USBCCGP.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xE4F6F560F8107DC4C61B106C1BCFB92237DF50ED

MD5 Digest: 0x173F317CE0DB8E21322E71B7E60A27E8

CRC32 Digest: 0x4330E262

Rootkit Property: Normal

File Size: 32128 bytes

File: c:\windows\system32\drivers\usbehci.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 809: Prev

Company: Microsoft Corporation

Description: EHCI eUSB Miniport Driver

Original FileName: USBEHCI.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2D87DE64AABDC49EACC538D05B29C1CB481815E3

MD5 Digest: 0x65DCF09D0E37D4C6B11B5B0B76D470A7

CRC32 Digest: 0x6EB02505

Rootkit Property: Normal

File Size: 30208 bytes

File: c:\windows\system32\drivers\usbhub.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Default Hub Driver for USB

Original FileName: usbhub.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x0302DFD1FEE854066CC1975ECE9EFBB45399555D

MD5 Digest: 0x1AB3CDDE553B6E064D2E754EFE20285C

CRC32 Digest: 0xAC404D7B

Rootkit Property: Normal

File Size: 59520 bytes

Page 810: Prev

File: c:\windows\system32\drivers\usbprint.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: USB Printer driver

Original FileName: usbprint.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x57CC8334546A0D030EB28E19F55BE0BD9B0F14F7

MD5 Digest: 0xA717C8721046828520C9EDF31288FC00

CRC32 Digest: 0xAD155946

Rootkit Property: Normal

File Size: 25856 bytes

File: c:\windows\system32\drivers\usbser.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: USB Modem Driver

Original FileName: usbser.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5ABCFCF50F8F39335E7AEAF106FA07BB80865FE2

MD5 Digest: 0x1C888B000C2F9492F4B15B5B6B84873E

CRC32 Digest: 0xE6CA45F3

Page 811: Prev

Rootkit Property: Normal

File Size: 26112 bytes

File: c:\windows\system32\drivers\usbser_lowerflt.sys

Product:

Product Version:

Company: Nokia

Description: Filter Driver for Nokia USB Phone Bus Driver

Original FileName: usbser_lowerflt.sys

File Version Label: 7.1.18.34

File Version Number: 7.1.18.34

SHA-1 Digest: 0x9BE6E62E562F7AB36738CE30345EDBF86446C170

MD5 Digest: 0x587E643A4E2FFD9A00F114B057CEB773

CRC32 Digest: 0x488B7D8D

Rootkit Property: Normal

File Size: 7808 bytes

File: c:\windows\system32\drivers\usbser_lowerfltj.sys

Product:

Product Version:

Company: Nokia

Description: Filter Driver for Nokia USB Phone Bus Driver

Original FileName: usbser_lowerflt.sys

File Version Label: 7.1.18.34

File Version Number: 7.1.18.34

Page 812: Prev

SHA-1 Digest: 0x0E2056B557D22021F12F23428001CBE950363CC1

MD5 Digest: 0xFCA6A196D47CB972A0E4ADC0DB9CD17C

CRC32 Digest: 0x037C3BEC

Rootkit Property: Normal

File Size: 7808 bytes

File: c:\windows\system32\drivers\usbstor.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: USB Mass Storage Class Driver

Original FileName: usbstor.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x086DCDA17A57A4765A22608F96F8C955946F7DCC

MD5 Digest: 0xA32426D9B14A089EAA1D922E0C5801A9

CRC32 Digest: 0xA891EF88

Rootkit Property: Normal

File Size: 26368 bytes

File: c:\windows\system32\drivers\usbuhci.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: UHCI USB Miniport Driver

Page 813: Prev

Original FileName: USBUHCI.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x57D162F1678DCE537E9147F67932B9BE843B920B

MD5 Digest: 0x26496F9DEE2D787FC3E61AD54821FFE6

CRC32 Digest: 0x7DD7FF10

Rootkit Property: Normal

File Size: 20608 bytes

File: c:\windows\system32\drivers\vga.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: VGA/Super VGA Video Driver

Original FileName: vga.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xEF28535DC943A831C1A2289326D55B7ABB669B45

MD5 Digest: 0x0D3A8FAFCEACD8B7625CD549757A7DF1

CRC32 Digest: 0x18A98B95

Rootkit Property: Normal

File Size: 20992 bytes

File: c:\windows\system32\drivers\viaagp.sys

Product: Microsoft® Windows® Operating System

Page 814: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: VIA NT AGP Filter

Original FileName: viaagp.sys

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xE729AD9662899415194A57D72FB53A6038B34622

MD5 Digest: 0x754292CE5848B3738281B4F3607EAEF4

CRC32 Digest: 0xD5B39B1A

Rootkit Property: Normal

File Size: 42240 bytes

File: c:\windows\system32\drivers\viaide.sys

Product: Microsoft(R) Windows NT(R) Operating System

Product Version: 5.00.1636.1

Company: Microsoft Corporation

Description: Generic PCI IDE Bus Driver

Original FileName: pciide.sys

File Version Label: 1.00.01.01

File Version Number: 1.0.1.1

SHA-1 Digest: 0xBEAB75667DA69C7E20C862325BE1C96F94FB3D2A

MD5 Digest: 0x3B3EFCDA263B8AC14FDF9CBDD0791B2E

CRC32 Digest: 0x72F3B3E5

Rootkit Property: Normal

File Size: 5376 bytes

Page 815: Prev

File: c:\windows\system32\drivers\wanarp.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: MS Remote Access and Routing ARP Driver

Original FileName: WANARP.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFE32CA6BE9B526570ED6064B84D938FC10155CA4

MD5 Digest: 0xE20B95BAEDB550F32DD489265C1DA1F6

CRC32 Digest: 0x5391C642

Rootkit Property: Normal

File Size: 34560 bytes

File: c:\windows\system32\drivers\wcndis.sys

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xC1FCFA75C8B21CC3E39F982B812DB18F3E61798D

MD5 Digest: 0xC92784C52D1156A46557B3025AA458C5

Page 816: Prev

CRC32 Digest: 0x3F3DA177

Rootkit Property: Normal

File Size: 15720 bytes

File: c:\windows\system32\drivers\wdf01000.sys

Product: Microsoft® Windows® Operating System

Product Version: 1.7.6001.0

Company: Microsoft Corporation

Description: WDF Dynamic

Original FileName: wdf01000.sys

File Version Label: 1.7.6001.0 (longhorn_rtm.080118-1840)

File Version Number: 1.7.6001.0

SHA-1 Digest: 0xBB9471B0476B8382039FA879E88B06608B653273

MD5 Digest: 0xBBCFEAB7E871CDDAC2D397EE7FA91FDC

CRC32 Digest: 0x8381B9C3

Rootkit Property: Normal

File Size: 503008 bytes

File: c:\windows\system32\drivers\wdmaud.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: MMSYSTEM Wave/Midi API mapper

Original FileName: WDMAUD.SYS

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

Page 817: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x400EAA59B0C8015C37F1AF04A4D031DE75F63520

MD5 Digest: 0x6768ACF64B18196494413695F0C3A00F

CRC32 Digest: 0xA918B9D4

Rootkit Property: Normal

File Size: 83072 bytes

File: c:\windows\system32\drivers\wpdusb.sys

Product: Microsoft® Windows® Operating System

Product Version: 5.2.5721.5262

Company: Microsoft Corporation

Description: WPD USB Driver

Original FileName: wpdusb.sys

File Version Label: 5.2.5721.5262 (WMP_11.090130-1421)

File Version Number: 5.2.5721.5262

SHA-1 Digest: 0xB8AE5D584C4E0534F05E30E6A5F4929BC1BC70EB

MD5 Digest: 0xC60DC16D4E406810FAD54B98DC92D5EC

CRC32 Digest: 0x33C41DAD

Rootkit Property: Normal

File Size: 38528 bytes

File: c:\windows\system32\drivers\wsimd.sys

Product: Wireless Intermediate Miniport Driver

Product Version: 1.0.0.47

Company: Atheros Communications, Inc.

Page 818: Prev

Description: Wireless Intermediate Miniport Driver

Original FileName: WSIMD.SYS

File Version Label: 1.0.0.47

File Version Number: 1.0.0.47

SHA-1 Digest: 0x9263564CDD5177EC32ACD44DB205FA466D0EB621

MD5 Digest: 0xEBEDF91C32FE60C724402E6F44CA3152

CRC32 Digest: 0x8D83C7F7

Rootkit Property: Normal

File Size: 54432 bytes

File: c:\windows\system32\drivers\wudfpf.sys

Product: Microsoft® Windows® Operating System

Product Version: 6.0.6001.18000

Company: Microsoft Corporation

Description: Windows Driver Foundation - User-mode Driver Framework Platform Driver

Original FileName: WUDFPf.sys

File Version Label: 6.0.6001.18000 (longhorn_rtm.080118-1840)

File Version Number: 6.0.6001.18000

SHA-1 Digest: 0x317E585FB94E723A395F29DF4174A4A3F1A92CC6

MD5 Digest: 0x6FF66513D372D479EF1810223C8D20CE

CRC32 Digest: 0x03576EA5

Rootkit Property: Normal

File Size: 77696 bytes

File: c:\windows\system32\drivers\wudfrd.sys

Page 819: Prev

Product: Microsoft® Windows® Operating System

Product Version: 6.0.6001.18000

Company: Microsoft Corporation

Description: Windows Driver Foundation - User-mode Driver Framework Reflector

Original FileName: WUDFRd.sys

File Version Label: 6.0.6001.18000 (longhorn_rtm.080118-1840)

File Version Number: 6.0.6001.18000

SHA-1 Digest: 0x9D38015BB5375543AE220A3C3CF4C90009319CDA

MD5 Digest: 0xAC13CB789D93412106B0FB6C7EB2BCB6

CRC32 Digest: 0xDC928FF1

Rootkit Property: Normal

File Size: 83328 bytes

File: c:\windows\system32\drmclien.dll

Product: Microsoft® DRM

Product Version: 9.00.00.4503

Company: Microsoft Corporation

Description: DRM Client DLL

Original FileName: drmclien.dll

File Version Label: 9.00.00.4503

File Version Number: 9.0.0.4503

SHA-1 Digest: 0x677A9972D4CFFA67E030C84E415D1E9FCD95FE2A

MD5 Digest: 0x2E229C47678C8D275CCBA88704659DE6

CRC32 Digest: 0x5C0DA935

Rootkit Property: Normal

Page 820: Prev

File Size: 299520 bytes

File: c:\windows\system32\drprov.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Terminal Server Network Provider

Original FileName: DRPROV.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xEB37B896875D963B0B8536D081AEEE5D6E759F8E

MD5 Digest: 0x2DE1190196EE9555DB548A57622022EB

CRC32 Digest: 0x13C53C62

Rootkit Property: Normal

File Size: 14336 bytes

File: c:\windows\system32\dsa.dll

Product: Devicescape Windows WPA Supplicant (Core 0.4.3)

Product Version: 1, 634, 9, 11

Company: Devicescape

Description: Devicescape Windows Supplicant DLL

Original FileName: dsa.dll

File Version Label: 1, 634, 9, 11

File Version Number: 1.634.9.11

SHA-1 Digest: 0xFEE61DDB3F8E416E7D894A2DBBCD9805BA3406D7

Page 821: Prev

MD5 Digest: 0xF6BF89BF86B4B27EA28AA0B5943F7F73

CRC32 Digest: 0xC354BBE7

Rootkit Property: Normal

File Size: 1257566 bytes

File: c:\windows\system32\dsound.dll

Product: Microsoft(R) Windows(R) Operating System

Product Version: 5.3.2600.5512

Company: Microsoft Corporation

Description: DirectSound

Original FileName: dsound.dll

File Version Label: 5.3.2600.5512 (xpsp.080413-0845)

File Version Number: 5.3.2600.5512

SHA-1 Digest: 0x360AC8659B7662CE958BB45639D6380FCCEA6FEF

MD5 Digest: 0x4D83ED8BDDEC431FC8AD907B47CFB6E3

CRC32 Digest: 0x33C2A52C

Rootkit Property: Normal

File Size: 367616 bytes

File: c:\windows\system32\dssenh.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5507

Company: Microsoft Corporation

Description: Microsoft Enhanced DSS and Diffie-Hellman Cryptographic Provider

Original FileName: dssenh.dll

Page 822: Prev

File Version Label: 5.1.2600.5507 (xpsp.080318-1711)

File Version Number: 5.1.2600.5507

SHA-1 Digest: 0x1ECC8DB8C706D215A999A04B8C04DEB77F89010D

MD5 Digest: 0xFEDE68BF80052BAD393AFD5C2E60DCB0

CRC32 Digest: 0x8CEF95D4

Rootkit Property: Normal

File Size: 138752 bytes

File: c:\windows\system32\dwrcsh32.dll

Product: DameWare Development DWRCSh32

Product Version: 6, 9, 0, 4

Company: DameWare Development LLC

Description: Shell interface for DameWare Mini Remote Control Application

Original FileName: DWRCSh32.dll

File Version Label: 6, 9, 0, 4

File Version Number: 6.9.0.4

SHA-1 Digest: 0xDB7B987038D87A12852225869E11EC5FABD1630F

MD5 Digest: 0xA211A22826D486A6B16C655934FC3D65

CRC32 Digest: 0x447357C5

Rootkit Property: Normal

File Size: 68120 bytes

File: c:\windows\system32\dxmasf.dll

Product:

Product Version:

Page 823: Prev

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 6.4.9.1133

SHA-1 Digest: 0x38BCE223A02C1833F4F2C80425B798AFFDBD4930

MD5 Digest: 0x8B4C502DE1AAAF6AF41AE3C14E40BA0A

CRC32 Digest: 0x6DEF62A6

Rootkit Property: Normal

File Size: 498742 bytes

File: c:\windows\system32\eapolqec.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft EAPOL NAP Enforcement Client

Original FileName: EapolQec.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x4D0641A39F6F9E8750E8C6A1E3C7363B1BEE7C48

MD5 Digest: 0xE6EF7BC927D9F8F9BA1584BFC39E0C6F

CRC32 Digest: 0xADE51F41

Rootkit Property: Normal

File Size: 30720 bytes

Page 824: Prev

File: c:\windows\system32\eappcfg.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Eap Peer Config

Original FileName: eappcfg.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x16C7EF237D2962D8D6B7E1599651E9DF487A0BD0

MD5 Digest: 0x5DB625E7D095604010CF84DE2D8ACFA6

CRC32 Digest: 0x9DAC861D

Rootkit Property: Normal

File Size: 126976 bytes

File: c:\windows\system32\eappprxy.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft EAPHost Peer Client DLL

Original FileName: eappprxy.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xDA67818DFC9999AC37D1D37AB76481ECD58F7C89

MD5 Digest: 0xABC4206543450C0666D152F4B65833B8

CRC32 Digest: 0x520B358C

Page 825: Prev

Rootkit Property: Normal

File Size: 40960 bytes

File: c:\windows\system32\eapsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft EAPHost service

Original FileName: eapsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x13761A05B23ED5BA3139C722768D8010E5DA71B9

MD5 Digest: 0x2187855A7703ADEF0CEF9EE4285182CC

CRC32 Digest: 0xF4F823C1

Rootkit Property: Normal

File Size: 33792 bytes

File: c:\windows\system32\egathdrv.sys

Product: IBM eGatherer

Product Version:

Company: IBM Corporation

Description: IBM eGatherer Kernel Module

Original FileName: EGATHDRV.SYS

File Version Label: 2.05

File Version Number: 2.0.0.5

Page 826: Prev

SHA-1 Digest: 0x51C135AD2172948F9251C4C8128F89AC900D91E8

MD5 Digest: 0x2D0FC676D159525F6CD74C3302C7A61C

CRC32 Digest: 0xAFBC8CC8

Rootkit Property: Normal

File Size: 5427 bytes

File: c:\windows\system32\ersvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Error Reporting Service

Original FileName: ERSVC.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x990F99259722FE54DD2D5D4CD58FD1EA64F35F16

MD5 Digest: 0xBC93B4A066477954555966D77FEC9ECB

CRC32 Digest: 0x3F0DE687

Rootkit Property: Normal

File Size: 23040 bytes

File: c:\windows\system32\es.dll

Product: COM Services

Product Version: 03.00.00.4414

Company: Microsoft Corporation

Description:

Page 827: Prev

Original FileName:

File Version Label: 2001.12.4414.706

File Version Number: 2001.12.4414.706

SHA-1 Digest: 0x4E77D4CA22F372292AFB418764166AAE26110096

MD5 Digest: 0xD4991D98F2DB73C60D042F1AEF79EFAE

CRC32 Digest: 0x73472672

Rootkit Property: Normal

File Size: 253952 bytes

File: c:\windows\system32\esent.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Server Database Storage Engine

Original FileName: esent.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xAE8C6716967B384F4D74E42AB0A7C483C66A3217

MD5 Digest: 0xF5B754CDEA20BBB3A31E16A776EDE6D6

CRC32 Digest: 0x55E7302C

Rootkit Property: Normal

File Size: 1082368 bytes

File: c:\windows\system32\eventlog.dll

Product: Microsoft® Windows® Operating System

Page 828: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Event Logging Service

Original FileName: Eventlog.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x20DF622631E9E0A3212AE79E6B2289316FD6C12E

MD5 Digest: 0x6D4FEB43EE538FC5428CC7F0565AA656

CRC32 Digest: 0x584A961B

Rootkit Property: Normal

File Size: 56320 bytes

File: c:\windows\system32\fontsub.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5888

Company: Microsoft Corporation

Description: Font Subsetting DLL

Original FileName: fontsub

File Version Label: 5.1.2600.5888 (xpsp_sp3_gdr.091015-1548)

File Version Number: 5.1.2600.5888

SHA-1 Digest: 0x4779B62CFD6BDB986B3BBAF947CFF4BBC11F6AA9

MD5 Digest: 0x6B6FAA61E31C496CA6F7B1663B01F286

CRC32 Digest: 0x32F3565F

Rootkit Property: Normal

File Size: 81920 bytes

Page 829: Prev

File: c:\windows\system32\gdi32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5698

Company: Microsoft Corporation

Description: GDI Client DLL

Original FileName: gdi32

File Version Label: 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932)

File Version Number: 5.1.2600.5698

SHA-1 Digest: 0x0F37018F672C7635691F7317ADE3C5A63904EC96

MD5 Digest: 0x8B1F3320AEBB536E021A5014409862DE

CRC32 Digest: 0xB5F6B116

Rootkit Property: Normal

File Size: 286720 bytes

File: c:\windows\system32\h323.tsp

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft H.323 Telephony Service Provider

Original FileName: H323.TSP

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x363C1A006AD9CB6FB9889620E784DCFBA488AC3F

MD5 Digest: 0x8BC2B02DC11C98D14CEE43B8E8393FF3

Page 830: Prev

CRC32 Digest: 0xF8E7B681

Rootkit Property: Normal

File Size: 265728 bytes

File: c:\windows\system32\hccutils.dll

Product: Intel(R) Common User Interface

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: hccutils Module

Original FileName: HCCUTILS.DLL

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0x0737405B8141D3296F2B7F84DD18A029912477B1

MD5 Digest: 0x91C7E815073324F36F768165E714E643

CRC32 Digest: 0x28C10A8E

Rootkit Property: Normal

File Size: 102400 bytes

File: c:\windows\system32\hid.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Hid User Library

Original FileName: hid.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

Page 831: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x8A2C21BE5502F065AE5F806E1534149BC1269962

MD5 Digest: 0x8973122796E3B5D6B5900FC186E55FEA

CRC32 Digest: 0x8814D58C

Rootkit Property: Normal

File Size: 20992 bytes

File: c:\windows\system32\hidphone.tsp

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft HID Phone TSP

Original FileName: hidphone.tsp

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x8326D265A3B461C9F9A7D74D56ADD05A6FF3CEE0

MD5 Digest: 0x6B552ED3BEE5AA3C4560478FF779BA98

CRC32 Digest: 0xECC329BC

Rootkit Property: Normal

File Size: 29696 bytes

File: c:\windows\system32\hkcmd.exe

Product: Intel(R) Common User Interface

Product Version: 6.14.10.4860

Company: Intel Corporation

Page 832: Prev

Description: hkcmd Module

Original FileName: HKCMD.EXE

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0x600E9CCC2B62D83B903E2C0659EFA5B462105777

MD5 Digest: 0x9CFCDD671467E28273BDE9D5968D1234

CRC32 Digest: 0x6DE8A4B4

Rootkit Property: Normal

File Size: 162328 bytes

File: c:\windows\system32\hlink.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.2.3790.2748

Company: Microsoft Corporation

Description: Microsoft Office 2000 component

Original FileName: hlink.dll

File Version Label: 5.2.3790.2748 (srv03_sp1_qfe.060717-0810)

File Version Number: 5.2.3790.2748

SHA-1 Digest: 0xEF7E8396B987ACA96C67D859CA4B92C862302D24

MD5 Digest: 0x4B3F282C998813C86A6CF89615960630

CRC32 Digest: 0xF3C7276C

Rootkit Property: Normal

File Size: 72704 bytes

File: c:\windows\system32\hnetcfg.dll

Page 833: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Home Networking Configuration Manager

Original FileName: HNETCFG.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x93768C7019A79077B74D183B6C1D3B3A91C0C4B4

MD5 Digest: 0x3CB32D3B8CBE79899D63280BB7A83CD9

CRC32 Digest: 0x96358152

Rootkit Property: Normal

File Size: 344064 bytes

File: c:\windows\system32\iac25_32.ax

Product: Indeo® audio software

Product Version: 2.05.53

Company: Intel Corporation

Description: Indeo® audio software

Original FileName: iac25_32.ax

File Version Label: 2.05.53

File Version Number: 2.0.5.53

SHA-1 Digest: 0x80072A2315BDABF34ED9CC4787AB98A0E37D937F

MD5 Digest: 0x877C90686858D899B042BBA45E9B7F2C

CRC32 Digest: 0xB4BC1D29

Rootkit Property: Normal

Page 834: Prev

File Size: 199680 bytes

File: c:\windows\system32\ibmpmsvc.exe

Product: ThinkPad Power Management Service

Product Version: 1.60

Company: Lenovo.

Description: ThinkPad Power Management Service

Original FileName: IBMPMSVC.EXE

File Version Label: 1.60.0.4

File Version Number: 1.60.0.4

SHA-1 Digest: 0x8E46FFEEF600E04E0118F8D2731A1FE21CA23472

MD5 Digest: 0x06AF18300C5B511A3D85C3E0B7909C10

CRC32 Digest: 0x5386F342

Rootkit Property: Normal

File Size: 38248 bytes

File: c:\windows\system32\icaapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: DLL Interface to TermDD Device Driver

Original FileName: icaapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x166E7E5C0064C63FB4516303B879D1C83B69CF2A

Page 835: Prev

MD5 Digest: 0xDF6551E4C4C46655A0C76194F1FCEA5D

CRC32 Digest: 0xBB86C1E5

Rootkit Property: Normal

File Size: 11264 bytes

File: c:\windows\system32\iccvid.dll

Product: Cinepak for Windows 32

Product Version: 1.10.0.0

Company: Radius Inc.

Description: Cinepak® Codec

Original FileName: iccvid.drv

File Version Label: 1.10.0.11

File Version Number: 1.10.0.13

SHA-1 Digest: 0x4DFD86CFCA8CC2B349A6BBDA10380B4C4E38A0CF

MD5 Digest: 0x938B596D4170E4F9870A902DF2DEEF48

CRC32 Digest: 0x15666C59

Rootkit Property: Normal

File Size: 80384 bytes

File: c:\windows\system32\icm32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Color Management Module (CMM)

Original FileName: ICM32.DLL

Page 836: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x252748BDFDED7A366000D6E91FB13ED6638C73C0

MD5 Digest: 0x6D07DF8A3B4E89B5BAC943B64F0B70D0

CRC32 Digest: 0x6110F300

Rootkit Property: Normal

File Size: 254976 bytes

File: c:\windows\system32\icmp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: ICMP DLL

Original FileName: icmp.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x03CA0C72B022FF5CAA3F62716946228960F2D8DA

MD5 Digest: 0x4EA92135C436D18975C2EBEC242B71DA

CRC32 Digest: 0x8B5BEF06

Rootkit Property: Normal

File Size: 3584 bytes

File: c:\windows\system32\ie4uinit.exe

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Page 837: Prev

Company: Microsoft Corporation

Description: IE Per-User Initialization Utility

Original FileName: IE4UINIT.EXE

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

SHA-1 Digest: 0x1116533B7FAA54EE945A92B18F0F60E83F0D67AA

MD5 Digest: 0xBB1E44F08617D4575D3F31DCEFDB84E2

CRC32 Digest: 0x04AC3A94

Rootkit Property: Normal

File Size: 70656 bytes

File: c:\windows\system32\ieframe.dll

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Company: Microsoft Corporation

Description: Internet Explorer

Original FileName: IEFRAME.DLL

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

SHA-1 Digest: 0x1B82C3DFF7659522066E0BC4C3779F1786F22B48

MD5 Digest: 0xFBD1701C30E58B590D7089484B9BC1FA

CRC32 Digest: 0x37F17E33

Rootkit Property: Normal

File Size: 6075904 bytes

Page 838: Prev

File: c:\windows\system32\iertutil.dll

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Company: Microsoft Corporation

Description: Run time utility for Internet Explorer

Original FileName: IeRtUtil.dll

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

SHA-1 Digest: 0x2827C8A23B45F8495140A3C1ED5CF6439B7EAE42

MD5 Digest: 0xD336FA28CFE620182E2C46D15E29B4CC

CRC32 Digest: 0x7B295FD3

Rootkit Property: Normal

File Size: 268288 bytes

File: c:\windows\system32\ieudinit.exe

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Company: Microsoft Corporation

Description: IE Per User Active Setup Uninstall Utility

Original FileName: IEUDINIT.EXE

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

SHA-1 Digest: 0x46D9DF3D53F585F67EA18D4AEE39F529CE5F2B01

MD5 Digest: 0xF3B5A170B8E051DCC06CB79EA65636C5

CRC32 Digest: 0xB1A0428E

Page 839: Prev

Rootkit Property: Normal

File Size: 13824 bytes

File: c:\windows\system32\igfxdev.dll

Product: Intel(R) Common User Interface

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: igfxdev Module

Original FileName: IGFXDEV.DLL

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0x1C7CBEB26615F7C84668FBC24A6CA6282756C9B0

MD5 Digest: 0xCFF29149F6B458219AADB81A77BC5FB0

CRC32 Digest: 0x864BA273

Rootkit Property: Normal

File Size: 204800 bytes

File: c:\windows\system32\igfxpers.exe

Product: Intel(R) Common User Interface

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: persistence Module

Original FileName: IGFXPERS.EXE

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

Page 840: Prev

SHA-1 Digest: 0x2005F6D7FD6FE74EAFA8096D12E7CDE55A446B19

MD5 Digest: 0x7ABF75BA95393A261271F5954678A613

CRC32 Digest: 0xABEFD3F3

Rootkit Property: Normal

File Size: 137752 bytes

File: c:\windows\system32\igfxpph.dll

Product: Intel(R) Common User Interface

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: igfxpph Module

Original FileName: IGFXPPH.DLL

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0x2112F8FE2BD36F63194A979C788CB4BAB69C5707

MD5 Digest: 0xE0F5306DAE23E8CAC415E56575A52C96

CRC32 Digest: 0x38CCED9A

Rootkit Property: Normal

File Size: 204800 bytes

File: c:\windows\system32\igfxres.dll

Product: Intel(R) Common User Interface

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: igfxres Module

Page 841: Prev

Original FileName: IGFXRES.DLL

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0xBE839EB90D67258056F3D2CC53E5F86360BE3DC4

MD5 Digest: 0xF20A1BEAE6311DC8D5787DBD3B399B56

CRC32 Digest: 0x0F3EA378

Rootkit Property: Normal

File Size: 172032 bytes

File: c:\windows\system32\igfxress.dll

Product: Intel(R) Common User Interface

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: igfxress Module

Original FileName: IGFXRESS.DLL

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0x6A6FF427E552A40764AD7F744D4248B0C73FE3B1

MD5 Digest: 0x4C7EFA1AFCE2207CF520C24D178A1530

CRC32 Digest: 0xBAB4062C

Rootkit Property: Normal

File Size: 3293184 bytes

File: c:\windows\system32\igfxsrvc.dll

Product: Intel(R) Common User Interface

Page 842: Prev

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: igfxsrvc Module

Original FileName: IGFXSRVC.EXE

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0x651F945041F1D07F8ED0005A53E1FE29E684E9C4

MD5 Digest: 0xA4A0E379961D53D797892F097FB6A9BA

CRC32 Digest: 0x8F378AAC

Rootkit Property: Normal

File Size: 47616 bytes

File: c:\windows\system32\igfxsrvc.exe

Product: Intel(R) Common User Interface

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: igfxsrvc Module

Original FileName: IGFXSRVC.EXE

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0xA29A6084BFB68EEF9514A3636B7683DA4284AAE5

MD5 Digest: 0xA408F0306ABAF0EB4501AC3E22ACC7E0

CRC32 Digest: 0x463D576C

Rootkit Property: Normal

File Size: 252440 bytes

Page 843: Prev

File: c:\windows\system32\igfxtray.exe

Product: Intel(R) Common User Interface

Product Version: 6.14.10.4860

Company: Intel Corporation

Description: igfxTray Module

Original FileName: IGFXTRAY.EXE

File Version Label: 6.14.10.4860

File Version Number: 6.14.10.4860

SHA-1 Digest: 0xC59A18FE940A8F7AF0970BE106676BC25F3ECCBF

MD5 Digest: 0x98D91A68DA26C02E786E554874A83D19

CRC32 Digest: 0x3C4569DE

Rootkit Property: Normal

File Size: 141848 bytes

File: c:\windows\system32\igxpun.exe

Product: Intel(R) Graphics Media Accelerator Driver

Product Version: 1, 0, 38, 0

Company: Intel(R) Corporation

Description: Intel(R) Graphics Media Accelerator Driver installer

Original FileName: Setup.exe

File Version Label: 1, 0, 38, 0

File Version Number: 1.0.38.0

SHA-1 Digest: 0xD490E021913F11448C173BF065523588BD290412

MD5 Digest: 0xC8B53805DECF8A158A132F2DED69E8BC

Page 844: Prev

CRC32 Digest: 0x6ED61BC9

Rootkit Property: Normal

File Size: 399896 bytes

File: c:\windows\system32\imaadp32.acm

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IMA ADPCM CODEC for MSACM

Original FileName: imaadp32.acm

File Version Label: 5.1.2600.5512 (xpsp.080413-0845)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFE71CE5D64E4A2A91910C57535FFB1F80A392650

MD5 Digest: 0x577E496F0D41411BF149394D80959D53

CRC32 Digest: 0xF571E46F

Rootkit Property: Normal

File Size: 16384 bytes

File: c:\windows\system32\imagehlp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT Image Helper

Original FileName: IMAGEHLP.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

Page 845: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2EAA144578F2BEB69DA027CA0E15445C98A95607

MD5 Digest: 0xCA648BD638245EB83F971FF71B031BEC

CRC32 Digest: 0xF7A06429

Rootkit Property: Normal

File Size: 144384 bytes

File: c:\windows\system32\imapi.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Image Mastering API

Original FileName: imapi.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x50F53A563C11D0F26D70DFD290589506B224FA4A

MD5 Digest: 0x30DEAF54A9755BB8546168CFE8A6B5E1

CRC32 Digest: 0xFFFB411A

Rootkit Property: Normal

File Size: 150528 bytes

File: c:\windows\system32\imm32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Page 846: Prev

Description: Windows XP IMM32 API Client DLL

Original FileName: imm32

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xF9BE7678080084BC3CB48D0CB64BBA9BA98800F1

MD5 Digest: 0x0DA85218E92526972A821587E6A8BF8F

CRC32 Digest: 0xC1486DA0

Rootkit Property: Normal

File Size: 110080 bytes

File: c:\windows\system32\inetpp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Internet Print Provider DLL

Original FileName: inetpp.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xEAC23E24785642668B666A738F8336AC19E24BFE

MD5 Digest: 0xEE4C651A217B01D636B5364AC77DA892

CRC32 Digest: 0x687EA163

Rootkit Property: Normal

File Size: 75264 bytes

File: c:\windows\system32\ipconf.tsp

Page 847: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Multicast Conference TAPI Service Provider

Original FileName: ipconf.tsp

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xCB99FE2487B82E88B5FD4DA50AA11BF3D85FAA5B

MD5 Digest: 0x8B8A45DF7CEF36D93C7BD3E4C84003B8

CRC32 Digest: 0xF45E399D

Rootkit Property: Normal

File Size: 17408 bytes

File: c:\windows\system32\iphlpapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IP Helper API

Original FileName: iphlpapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD1B9EEDE5A4650DC577ABC73D81B948A45A36830

MD5 Digest: 0xAF07DC9B7CC455629E732340C7B15F3A

CRC32 Digest: 0xE4D0E9E4

Rootkit Property: Normal

Page 848: Prev

File Size: 94720 bytes

File: c:\windows\system32\ipnathlp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft NAT Helper Components

Original FileName: IPNATHLP.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xB6ED18DD0C81847C06D9A7AC5A4B52D29B489CFB

MD5 Digest: 0x83F41D0D89645D7235C051AB1D9523AC

CRC32 Digest: 0xC4465897

Rootkit Property: Normal

File Size: 331264 bytes

File: c:\windows\system32\ipsecsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows IPSec SPD Server DLL

Original FileName: ipsecsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA66D4D640AE59E303A6F284FBD2E3B4BAE02C2DA

Page 849: Prev

MD5 Digest: 0x332760FBA1655FCFD35BD6F4FD871300

CRC32 Digest: 0x103E6145

Rootkit Property: Normal

File Size: 183808 bytes

File: c:\windows\system32\ir32_32.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 3.24.15.3

SHA-1 Digest: 0xE50AA40AEAB7CE7E45A3C48BBCBF2780392EE37D

MD5 Digest: 0x43ECA1576906BA76FB3E329A338A3CAE

CRC32 Digest: 0xE5A04ACB

Rootkit Property: Normal

File Size: 199168 bytes

File: c:\windows\system32\ir50_32.dll

Product: Intel Indeo® video 5.10

Product Version: R.5.10.15.2.55

Company: Intel Corporation

Description: Intel Indeo® video 5.10

Original FileName: ir50_32.dll

Page 850: Prev

File Version Label: R.5.10.15.2.55

File Version Number: 5.2562.15.55

SHA-1 Digest: 0x9DFF59284FF6BAB9E26423349EB993F608AB3FF9

MD5 Digest: 0x5F10DC19D92CCF6B719B494572F4F74B

CRC32 Digest: 0x48149A66

Rootkit Property: Normal

File Size: 755200 bytes

File: c:\windows\system32\irmon.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Infrared Monitor

Original FileName: irmon.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x715DF0EB71A61BF7D6238EBD7BF1BB7A96C4EA04

MD5 Digest: 0x49CC4533CE897CB2E93C1E84A818FDE5

CRC32 Digest: 0xC579F449

Rootkit Property: Normal

File Size: 28160 bytes

File: c:\windows\system32\iyuv_32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5908

Page 851: Prev

Company: Microsoft Corporation

Description: Intel Indeo(R) Video YUV Codec

Original FileName: iyuv_32.dll

File Version Label: 5.1.2600.5908 (xpsp_sp3_gdr.091127-0541)

File Version Number: 5.1.2600.5908

SHA-1 Digest: 0xAE37B92A8ABD212D966FBA12C2E98A08187E0A54

MD5 Digest: 0xC07552F5734B37F947289B51BC932376

CRC32 Digest: 0x4F324839

Rootkit Property: Normal

File Size: 48128 bytes

File: c:\windows\system32\jscript.dll

Product: Microsoft (R) JScript

Product Version: 5.7.6002.22145

Company: Microsoft Corporation

Description: Microsoft (R) JScript

Original FileName: jscript.dll

File Version Label: 5.7.6002.22145

File Version Number: 5.7.6002.22145

SHA-1 Digest: 0x59C3EFB1FE545CE9026229F64A0312A40157AA9D

MD5 Digest: 0xB39D9A185DCB17B679A9475ECFFB33B2

CRC32 Digest: 0xFFE0A64E

Rootkit Property: Normal

File Size: 512000 bytes

Page 852: Prev

File: c:\windows\system32\kerberos.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5834

Company: Microsoft Corporation

Description: Kerberos Security Package

Original FileName: kerberos.dll

File Version Label: 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305)

File Version Number: 5.1.2600.5834

SHA-1 Digest: 0xC92BC7C31CFBCC5376EA655D4FAD5054E214535D

MD5 Digest: 0x99EA6AC9B3FEE42E0438A3A24720EE3F

CRC32 Digest: 0x9DE1CE9B

Rootkit Property: Normal

File Size: 301568 bytes

File: c:\windows\system32\kernel32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5781

Company: Microsoft Corporation

Description: Windows NT BASE API Client DLL

Original FileName: kernel32

File Version Label: 5.1.2600.5781 (xpsp_sp3_gdr.090321-1317)

File Version Number: 5.1.2600.5781

SHA-1 Digest: 0xC88D57CC99F75CD928B47B6E444231F26670138F

MD5 Digest: 0xB921FB870C9AC0D509B2CCABBBBE95F3

CRC32 Digest: 0x8A0508E5

Page 853: Prev

Rootkit Property: Normal

File Size: 989696 bytes

File: c:\windows\system32\kmddsp.tsp

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: TAPI Kernel-Mode Service Provider

Original FileName: KMDDSP.TSP

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x7E93C1DE384FF60C613421BD573CFC645D960D99

MD5 Digest: 0x76EC97C5068D3D9FAA7774B0F659D31A

CRC32 Digest: 0x1E77AE45

Rootkit Property: Normal

File Size: 33280 bytes

File: c:\windows\system32\kmsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Key Management Service

Original FileName: KmSvc.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

Page 854: Prev

SHA-1 Digest: 0xBED5C824EF40C80C2B70A49C0B568D2399DABCC5

MD5 Digest: 0x8878BD685E490239777BFE51320B88E9

CRC32 Digest: 0x0132DA14

Rootkit Property: Normal

File Size: 61440 bytes

File: c:\windows\system32\ksuser.dll

Product: Microsoft(R) Windows(R) Operating System

Product Version: 5.3.2600.5512

Company: Microsoft Corporation

Description: User CSA Library

Original FileName: ksuser.dll

File Version Label: 5.3.2600.5512 (xpsp.080413-0845)

File Version Number: 5.3.2600.5512

SHA-1 Digest: 0x7A3BF42E83441B6415B2A57D64A7392F52CB17FE

MD5 Digest: 0x9B9F1C38D559047B8AC0DBA2D5FEBDE9

CRC32 Digest: 0xBD8E6BD9

Rootkit Property: Normal

File Size: 4096 bytes

File: c:\windows\system32\l3codeca.acm

Product: MPEG Layer-3 Audio Codec for MSACM

Product Version: 1, 0, 0, 0

Company: Fraunhofer Institut Integrierte Schaltungen IIS

Description: MPEG Layer-3 Audio Codec for MSACM

Page 855: Prev

Original FileName: l3codec.acm

File Version Label: 1, 9, 0, 0306

File Version Number: 1.9.0.306

SHA-1 Digest: 0xECD01A411677EBA860D060676DD8876474378411

MD5 Digest: 0xF3946B534CC197CBFFD9A2ECFD1F556F

CRC32 Digest: 0x3B8C55ED

Rootkit Property: Normal

File Size: 307260 bytes

File: c:\windows\system32\l3codecx.ax

Product: MPEG Layer-3 Audio Codec for Microsoft DirectShow

Product Version: 1, 9, 0, 0311

Company: Fraunhofer Institut Integrierte Schaltungen IIS

Description: MPEG Layer-3 Audio Decoder

Original FileName: L3CODECX.AX

File Version Label: 1, 9, 0, 0311

File Version Number: 1.9.0.311

SHA-1 Digest: 0x47B4EC1314CED1DBA55CE6DC9668D5B8106C29EA

MD5 Digest: 0x69A0628BBE1A404B1BA0B6DCA7610A06

CRC32 Digest: 0x04530585

Rootkit Property: Normal

File Size: 98304 bytes

File: c:\windows\system32\linkinfo.dll

Product: Microsoft® Windows® Operating System

Page 856: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Volume Tracking

Original FileName: LINKINFO.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xABBC2B1DC026422D1AE58456A11075E4CF672338

MD5 Digest: 0x2DC5A8019E2387987905F77C664E4BE2

CRC32 Digest: 0xDB546D0B

Rootkit Property: Normal

File Size: 19968 bytes

File: c:\windows\system32\lmhsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: TCPIP NetBios Transport Services DLL

Original FileName: lmhsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xB11A261CEA8DDAD6B1D9816B724723A6126AFFA3

MD5 Digest: 0xA7DB739AE99A796D91580147E919CC59

CRC32 Digest: 0x9A04CEF1

Rootkit Property: Normal

File Size: 13824 bytes

Page 857: Prev

File: c:\windows\system32\localspl.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5809

Company: Microsoft Corporation

Description: Local Spooler DLL

Original FileName: localspl.dll

File Version Label: 5.1.2600.5809 (xpsp_sp3_gdr.090507-1329)

File Version Number: 5.1.2600.5809

SHA-1 Digest: 0x321340B618B46B8FFC8E8B05FF0723F663E04C37

MD5 Digest: 0xAA897735D5AB916297A6823A9B2D61B1

CRC32 Digest: 0xAD2571CE

Rootkit Property: Normal

File Size: 345600 bytes

File: c:\windows\system32\locator.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Rpc Locator

Original FileName: locator.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x7E2CC7D2DA54EE5D36FF5BC95972232983C076BB

MD5 Digest: 0xAAED593F84AFA419BBAE8572AF87CF6A

Page 858: Prev

CRC32 Digest: 0x7B25ABAF

Rootkit Property: Normal

File Size: 75264 bytes

File: c:\windows\system32\lpk.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Language Pack

Original FileName: LanguagePack

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x05F1D34E919B8B625A32B4B4C4AC55E6E974C342

MD5 Digest: 0x012DF358CEBAA23ACB26D82077820817

CRC32 Digest: 0x9689B06F

Rootkit Property: Normal

File Size: 22016 bytes

File: c:\windows\system32\lsasrv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5834

Company: Microsoft Corporation

Description: LSA Server DLL

Original FileName: lsasrv.dll

File Version Label: 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305)

Page 859: Prev

File Version Number: 5.1.2600.5834

SHA-1 Digest: 0x42940943F90EE2F6BBC66571D530F7571559F063

MD5 Digest: 0x6A77C91890CFE08135301574BB29559F

CRC32 Digest: 0xCDA675ED

Rootkit Property: Normal

File Size: 730112 bytes

File: c:\windows\system32\lsass.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: LSA Shell (Export Version)

Original FileName: lsass.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xDE5A73CBB5F51F64C53FB4277EF2C23E70DB123F

MD5 Digest: 0xBF2466B3E18E970D8A976FB95FC1CA85

CRC32 Digest: 0xE6696FF6

Rootkit Property: Normal

File Size: 13312 bytes

File: c:\windows\system32\macromed\flash\flashutil10l_activex.exe

Product: Flash® Player Installer/Uninstaller

Product Version: 10,1,102,64

Company: Adobe Systems, Inc.

Page 860: Prev

Description: Adobe® Flash® Player Installer/Uninstaller 10.1 r102

Original FileName: FlashUtil.exe

File Version Label: 10,1,102,64

File Version Number: 10.1.102.64

SHA-1 Digest: 0xC02F7F79797C56F82B3A30606ADA7C0228DBDC83

MD5 Digest: 0x711FD53E441255983C0AB014E2F107F4

CRC32 Digest: 0x79C0E2ED

Rootkit Property: Normal

File Size: 233936 bytes

File: c:\windows\system32\macromed\flash\flashutil10l_plugin.exe

Product: Flash® Player Installer/Uninstaller

Product Version: 10,1,102,64

Company: Adobe Systems, Inc.

Description: Adobe® Flash® Player Installer/Uninstaller 10.1 r102

Original FileName: FlashUtil.exe

File Version Label: 10,1,102,64

File Version Number: 10.1.102.64

SHA-1 Digest: 0xAB756C898F3A103C3CD7C3595ABE19294FD0DDD3

MD5 Digest: 0x8D5E9603AD5FDD6B7E8F9DB6264F1CD1

CRC32 Digest: 0xB3FA1A5A

Rootkit Property: Normal

File Size: 233936 bytes

File: c:\windows\system32\mdimon.dll

Page 861: Prev

Product: Microsoft Office Document Imaging

Product Version: 11.3.8166.2

Company: Microsoft Corporation

Description: Microsoft® Document Imaging

Original FileName: MSPCORE.DLL

File Version Label: 11.3.8166.2

File Version Number: 0.3.8166.2

SHA-1 Digest: 0x878A88238B3592091DF8D8E709CC63425C9B225F

MD5 Digest: 0x322FD75A97DBA67FC8F97A9957F857F1

CRC32 Digest: 0x52534918

Rootkit Property: Normal

File Size: 28040 bytes

File: c:\windows\system32\mf3216.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: 32-bit to 16-bit Metafile Conversion DLL

Original FileName: mf3216.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x515C3C869059BBE9A9F62608E520BC7E8BFF4DC6

MD5 Digest: 0x2FDAE072FDF96930257949D289E950F1

CRC32 Digest: 0x0FFAC6FF

Rootkit Property: Normal

Page 862: Prev

File Size: 40960 bytes

File: c:\windows\system32\mfc42.dll

Product: Microsoft (R) Visual C++

Product Version: 6.02.400

Company: Microsoft Corporation

Description: MFCDLL Shared Library - Retail Version

Original FileName: MFC42.DLL

File Version Label: 6.02.8073.0

File Version Number: 6.2.8073.0

SHA-1 Digest: 0x8C0959CE1B24B81FCAC665C29CAA358E2E56E037

MD5 Digest: 0x9018AC8A2745963B2E675FB880A11FED

CRC32 Digest: 0x9032B140

Rootkit Property: Normal

File Size: 974848 bytes

File: c:\windows\system32\mfc42u.dll

Product: Microsoft (R) Visual C++

Product Version: 6.02.400

Company: Microsoft Corporation

Description: MFCDLL Shared Library - Retail Version

Original FileName: MFC42.DLL

File Version Label: 6.02.8073.0

File Version Number: 6.2.8073.0

SHA-1 Digest: 0x90CE4A0FE7B3866CD402951C78B2C9EDD47FEDE4

Page 863: Prev

MD5 Digest: 0x652401636A8D82D81A99A637A6A49F09

CRC32 Digest: 0x6D3492F5

Rootkit Property: Normal

File Size: 974848 bytes

File: c:\windows\system32\mfc71.dll

Product: Microsoft® Visual Studio .NET

Product Version: 7.10.5057.0

Company: Microsoft Corporation

Description: MFCDLL Shared Library - Retail Version

Original FileName: MFC71.DLL

File Version Label: 7.10.5057.0

File Version Number: 7.10.5057.0

SHA-1 Digest: 0xFBCEF9C5BA94B2B653EECE8D40C207AE9CBCED59

MD5 Digest: 0x58535D8377E3C0E2518434EFD88D1D9F

CRC32 Digest: 0x89366B14

Rootkit Property: Normal

File Size: 1056768 bytes

File: c:\windows\system32\mfc71u.dll

Product: Microsoft® Visual Studio .NET

Product Version: 7.10.5057.0

Company: Microsoft Corporation

Description: MFCDLL Shared Library - Retail Version

Original FileName: MFC71U.DLL

Page 864: Prev

File Version Label: 7.10.5057.0

File Version Number: 7.10.5057.0

SHA-1 Digest: 0x2F5412628FA2699E4F4A7FD8CED9E58A3A23BF59

MD5 Digest: 0x12F8CB899B4C14B76ECD251986362788

CRC32 Digest: 0xEAEA799C

Rootkit Property: Normal

File Size: 1049600 bytes

File: c:\windows\system32\mfplat.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Media Foundation Platform DLL

Original FileName: mfplat.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x40DC99E4EA774CD0A899346C8DCDE6B9C01706DA

MD5 Digest: 0xADC5D27EB04A03368163C7C41F5CA1A8

CRC32 Digest: 0xAAEC511A

Rootkit Property: Normal

File Size: 212992 bytes

File: c:\windows\system32\mgmtapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 865: Prev

Company: Microsoft Corporation

Description: Microsoft SNMP Manager API (uses WinSNMP)

Original FileName: mgmtapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x6569124EC611D04EE05C0B21C519CFF7BC9F3224

MD5 Digest: 0x1E744353BD534405187A404667DA3DC3

CRC32 Digest: 0xEFA7CD43

Rootkit Property: Normal

File Size: 14848 bytes

File: c:\windows\system32\midimap.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft MIDI Mapper

Original FileName: midimap.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0845)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5C72E1C08A4038A4CE908D9B57E78A23EE5FE0EF

MD5 Digest: 0x5C12660A97822F6E61576943B49AAAD6

CRC32 Digest: 0x2E6D5FD1

Rootkit Property: Normal

File Size: 18944 bytes

Page 866: Prev

File: c:\windows\system32\mlang.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Multi Language Support DLL

Original FileName: MLANG.DLL

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x28893E22E6311BBD303C9F7D3DBD99C844C70B66

MD5 Digest: 0xB714735C12A70171DE28657948FD91F1

CRC32 Digest: 0x667645C0

Rootkit Property: Normal

File Size: 586240 bytes

File: c:\windows\system32\mnmsrvc.exe

Product: Windows® NetMeeting®

Product Version: 3.01

Company: Microsoft Corporation

Description: NetMeeting Remote Desktop Sharing

Original FileName: mnmsrvc.dll

File Version Label: 5.1.2600.5512

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xF38C1D9AEAF417902ABD68E1A63121142296B569

MD5 Digest: 0xD18F1F0C101D06A1C1ADF26EED16FCDD

CRC32 Digest: 0x79B801B9

Page 867: Prev

Rootkit Property: Normal

File Size: 32768 bytes

File: c:\windows\system32\modemui.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Modem Properties

Original FileName: MODEMUI.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x938341EBF69E751198ECC8593C924D1EE9AA1425

MD5 Digest: 0xFE4A73CDBC882A19D070F1C01586E81A

CRC32 Digest: 0x7FB93AED

Rootkit Property: Normal

File Size: 153600 bytes

File: c:\windows\system32\mpg2splt.ax

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 6.5.2600.5512

Page 868: Prev

SHA-1 Digest: 0x3EE2516A68CC58A88C9DEBC3C24FE1960C0FEBD5

MD5 Digest: 0x3302B1CB44223D03D1D5BD59FB8C3114

CRC32 Digest: 0x43789624

Rootkit Property: Normal

File Size: 148992 bytes

File: c:\windows\system32\mpr.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Multiple Provider Router DLL

Original FileName: mpr.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x0AFFD0A48F5F137169158083C61CF46454689055

MD5 Digest: 0xDD7BD97FB8BD800963789158A5E4B41D

CRC32 Digest: 0xD8E6EFF4

Rootkit Property: Normal

File Size: 59904 bytes

File: c:\windows\system32\mprapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT MP Router Administration DLL

Page 869: Prev

Original FileName: mprapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xF786CB504A764DB01112BB91EDD91D4D05CDDA61

MD5 Digest: 0xEA5B8BECA3F279C757578CD7F1E95855

CRC32 Digest: 0x212AD01A

Rootkit Property: Normal

File Size: 87040 bytes

File: c:\windows\system32\mprdim.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Dynamic Interface Manager

Original FileName: MPRDIM.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x1C969551BEB3F20CD5E5D7632BAFF638D071AFBD

MD5 Digest: 0x7E699FF5F59B5D9DE5390E3C34C67CF5

CRC32 Digest: 0x95B6C3CA

Rootkit Property: Normal

File Size: 53248 bytes

File: c:\windows\system32\msacm32.dll

Product: Microsoft® Windows® Operating System

Page 870: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft ACM Audio Filter

Original FileName: msfltr32.acm

File Version Label: 5.1.2600.5512 (xpsp.080413-0845)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x9BE8C8A0CE2316FEFF5783EFBE259BB1F6334A63

MD5 Digest: 0x2098AB52BD5316E59AA36F3437B13BE6

CRC32 Digest: 0xEDE4B266

Rootkit Property: Normal

File Size: 71680 bytes

File: c:\windows\system32\msacm32.drv

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Microsoft Sound Mapper

Original FileName: msacm32.acm

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xBB7A0493B31CC4245A6EE9838E5ACAAAFC129957

MD5 Digest: 0x9A3BD5F55AADFF859539142F6328A66E

CRC32 Digest: 0xD5406BAE

Rootkit Property: Normal

File Size: 20480 bytes

Page 871: Prev

File: c:\windows\system32\msadp32.acm

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft ADPCM CODEC for MSACM

Original FileName: msadp32.acm

File Version Label: 5.1.2600.5512 (xpsp.080413-0845)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x8410A9A0782EE525EA9890A50A8A5CB7A1F9F17F

MD5 Digest: 0xC5648BE5409E0AABDA8C9047BAC8F603

CRC32 Digest: 0xFF08C10B

Rootkit Property: Normal

File Size: 14848 bytes

File: c:\windows\system32\msasn1.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5875

Company: Microsoft Corporation

Description: ASN.1 Runtime APIs

Original FileName: msasn1.dll

File Version Label: 5.1.2600.5875 (xpsp_sp3_gdr.090904-1413)

File Version Number: 5.1.2600.5875

SHA-1 Digest: 0xFDB9C1E25067E147C999607C420CDD9656DEEC99

MD5 Digest: 0x04D898830DF96A17A20FD35D7590F87E

Page 872: Prev

CRC32 Digest: 0x63D6A79F

Rootkit Property: Normal

File Size: 58880 bytes

File: c:\windows\system32\msaud32.acm

Product: Windows Media Audio

Product Version: 8.00.00.4502

Company: Microsoft Corporation

Description: Windows Media Audio

Original FileName: msaud32

File Version Label: 8.00.00.4502

File Version Number: 8.0.0.4502

SHA-1 Digest: 0x3790A144773F029333898D36E891AF19E7DB73D9

MD5 Digest: 0x55AEEA66C5E84E3FD6CD3E933397D478

CRC32 Digest: 0xD579EDC6

Rootkit Property: Normal

File Size: 282654 bytes

File: c:\windows\system32\mscms.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5627

Company: Microsoft Corporation

Description: Microsoft Color Matching System DLL

Original FileName: MSCMS.DLL

File Version Label: 5.1.2600.5627 (xpsp_sp3_gdr.080624-1245)

Page 873: Prev

File Version Number: 5.1.2600.5627

SHA-1 Digest: 0x383F96126C94BDBA172BF2DEC307FC9A42BEBD3C

MD5 Digest: 0x4AC2FA4A6F0DF2511BAC13393C06EFF1

CRC32 Digest: 0xF9922B11

Rootkit Property: Normal

File Size: 74240 bytes

File: c:\windows\system32\mscoree.dll

Product: Microsoft® .NET Framework

Product Version: 4.0.31106.0

Company: Microsoft Corporation

Description: Microsoft .NET Runtime Execution Engine

Original FileName: mscoree.dll

File Version Label: 4.0.31106.0 (Main.031106-0000)

File Version Number: 4.0.31106.0

SHA-1 Digest: 0x437703D6916457B7B7E6367CB285FDD952CBE550

MD5 Digest: 0x128DD9AF8640DBCC711940903C8B554F

CRC32 Digest: 0x0BFE0393

Rootkit Property: Normal

File Size: 297808 bytes

File: c:\windows\system32\msctf.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Page 874: Prev

Description: MSCTF Server DLL

Original FileName: MSCTF.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x3C5A241879C49EFAE60E7D20C81195C0008FC317

MD5 Digest: 0xE40FCF943127DDC8FD60554B722D762B

CRC32 Digest: 0x392BE0B0

Rootkit Property: Normal

File Size: 297984 bytes

File: c:\windows\system32\msctfime.ime

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Text Frame Work Service IME

Original FileName: MSCTFIME.IME

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x434C43FC87679A37AA054C0C18E190CCB39A4439

MD5 Digest: 0x5733177BCF16EE78B99543C9B0AB81EA

CRC32 Digest: 0x6D3663FE

Rootkit Property: Normal

File Size: 177152 bytes

File: c:\windows\system32\msdart.dll

Page 875: Prev

Product: Microsoft Data Access Components

Product Version: 2.81.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - OLE DB Runtime Routines

Original FileName: msdart.dll

File Version Label: 2.81.1132.0 (xpsp.080413-0852)

File Version Number: 2.81.1132.0

SHA-1 Digest: 0x6EDBDF77F982BF3FC0AE497B7AFF9D7636AF8CD0

MD5 Digest: 0x01F0CBEB457CAE7EF0CA52C7CCA5B0E8

CRC32 Digest: 0xB5818AFB

Rootkit Property: Normal

File Size: 151552 bytes

File: c:\windows\system32\msdmo.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 6.5.2600.5512

SHA-1 Digest: 0x291179F9A56F4B63AC6492BA8BA613FFAAEED48D

MD5 Digest: 0xD25C03D04159D462D69F294BA7142BDB

CRC32 Digest: 0x2C91FB32

Rootkit Property: Normal

Page 876: Prev

File Size: 14336 bytes

File: c:\windows\system32\msdtc.exe

Product: Microsoft Distributed Transaction Coordinator

Product Version: 03.01.00.4414

Company: Microsoft Corporation

Description: MS DTC console program

Original FileName:

File Version Label: 2001.12.4414.700

File Version Number: 2001.12.4414.700

SHA-1 Digest: 0xBC01515610B7CFEF9098FC892BA0E3F37B257A45

MD5 Digest: 0xA137F1470499A205ABBB9AAFB3B6F2B1

CRC32 Digest: 0x49AF15E1

Rootkit Property: Normal

File Size: 6144 bytes

File: c:\windows\system32\msg711.acm

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Microsoft CCITT G.711 (A-Law and u-Law) CODEC for MSACM

Original FileName: msg711.acm

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xEA9A3033755C3B8C370D1722B9725E453DBF2EDB

Page 877: Prev

MD5 Digest: 0x33271A2667334B9A8842C65A079EF375

CRC32 Digest: 0xE64DACA2

Rootkit Property: Normal

File Size: 9216 bytes

File: c:\windows\system32\msg723.acm

Product: Windows® NetMeeting®

Product Version: 3.01

Company: Microsoft Corporation

Description: Microsoft G.723.1 CODEC for MSACM

Original FileName: msg723.acm

File Version Label: 4.4.3400

File Version Number: 4.4.0.3400

SHA-1 Digest: 0x4D882E9C149D6F671A08A21675C64F25634381CF

MD5 Digest: 0xB87F759738C52E8D6FBCDAAA84C6486F

CRC32 Digest: 0x33A6F6D7

Rootkit Property: Normal

File Size: 118784 bytes

File: c:\windows\system32\msgina.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT Logon GINA DLL

Original FileName: MSGINA.DLL

Page 878: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x4C0DCC93F51F2A30BB304E7F6219D523057FD4DB

MD5 Digest: 0xD7B7A57C0E57C836F18CF12A4C62A1CA

CRC32 Digest: 0x24544FED

Rootkit Property: Normal

File Size: 997376 bytes

File: c:\windows\system32\msgsm32.acm

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Microsoft GSM 6.10 Audio CODEC for MSACM

Original FileName: msgsm32.acm

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x48AE80F47E1543564D0313BD883845E87D334736

MD5 Digest: 0x3A9846E207DAFC13009C048A2F6F8C2A

CRC32 Digest: 0x86032C00

Rootkit Property: Normal

File Size: 19968 bytes

File: c:\windows\system32\msgsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 879: Prev

Company: Microsoft Corporation

Description: NT Messenger Service

Original FileName: msgsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x3AD9925DD867CF0BEB6CACE008EC6E7CA5AEA290

MD5 Digest: 0x986B1FF5814366D71E0AC5755C88F2D3

CRC32 Digest: 0x9EF23DBA

Rootkit Property: Normal

File Size: 33792 bytes

File: c:\windows\system32\msgsys.dll

Product: Intel Common Base Agent

Product Version: 6.12.0.142

Company: LANDesk Software Ltd.

Description: CBA -- Message System Library

Original FileName: MsgSys.DLL

File Version Label: 6.12.0.142 E

File Version Number: 6.12.0.142

SHA-1 Digest: 0xC0B3D188D2A7DEECB772FE86570EFB9B7C37C320

MD5 Digest: 0x6A4A5F73BD9AF98426BB7E21C54EFC5B

CRC32 Digest: 0x238BC590

Rootkit Property: Normal

File Size: 46896 bytes

Page 880: Prev

File: c:\windows\system32\msh261.drv

Product: Windows® NetMeeting®

Product Version: 3.01

Company: Microsoft Corporation

Description: Microsoft H.261 ICM Driver

Original FileName: msh261.drv

File Version Label: 5.1.2600.5512

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xC6F583D7A4071DC2F31E6A205056A0602BCE9EA4

MD5 Digest: 0xC6FD300A6100AC89BC4CB944C19FA2A9

CRC32 Digest: 0x219A6F89

Rootkit Property: Normal

File Size: 188416 bytes

File: c:\windows\system32\msh263.drv

Product: Windows® NetMeeting®

Product Version: 3.01

Company: Microsoft Corporation

Description: Microsoft H.263 ICM Driver

Original FileName: msh263.drv

File Version Label: 5.1.2600.5512

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x0D54818EE39DF6847AE208F7CD6798DB834FD021

MD5 Digest: 0x7D529AA41EA993357F8C3D7E92C2372A

CRC32 Digest: 0xFFD41AD6

Page 881: Prev

Rootkit Property: Normal

File Size: 294912 bytes

File: c:\windows\system32\mshta.exe

Product: Windows® Internet Explorer

Product Version: 7.00.5730.13

Company: Microsoft Corporation

Description: Microsoft (R) HTML Application host

Original FileName: MSHTA.EXE

File Version Label: 7.00.5730.13 (longhorn(wmbla).070711-1130)

File Version Number: 7.0.5730.13

SHA-1 Digest: 0xD0B69CB68F058C046FC90F27C3A12D7EF86AF89F

MD5 Digest: 0x2667B412F7453B8C39197D3C550536CD

CRC32 Digest: 0x1B5E4188

Rootkit Property: Normal

File Size: 45568 bytes

File: c:\windows\system32\mshtml.dll

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Company: Microsoft Corporation

Description: Microsoft (R) HTML Viewer

Original FileName: MSHTML.DLL

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

Page 882: Prev

SHA-1 Digest: 0xC31DAD736EE6C48FEDFAFAED8BDDEC75532A4488

MD5 Digest: 0x2F2DA920F5B9582D40B9761D2AB45696

CRC32 Digest: 0x697412CD

Rootkit Property: Normal

File Size: 3604480 bytes

File: c:\windows\system32\mshtmled.dll

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Company: Microsoft Corporation

Description: Microsoft® HTML Editing Component

Original FileName: MSHTMLED.DLL

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

SHA-1 Digest: 0x1688CCAA877B024867E1663E7310E26F4B0D3598

MD5 Digest: 0xDECC5A0426C82CD84AB5C7BEC0412BE5

CRC32 Digest: 0xD473322C

Rootkit Property: Normal

File Size: 478208 bytes

File: c:\windows\system32\msi.dll

Product: Windows Installer - Unicode

Product Version: 3.1.4001.5512

Company: Microsoft Corporation

Description: Windows Installer

Page 883: Prev

Original FileName: msi.dll

File Version Label: 3.1.4001.5512

File Version Number: 3.1.4001.5512

SHA-1 Digest: 0x27591EE4BC2970090D421423E771EC51E46B6A41

MD5 Digest: 0xD3F72D50DE53F9F1F55240115AF4D42E

CRC32 Digest: 0xF2937316

Rootkit Property: Normal

File Size: 2843136 bytes

File: c:\windows\system32\msidle.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: User Idle Monitor

Original FileName: MSIDLE.DLL

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x1D00D997FB0A45E52F47CAEA5133B6D2B3C623E0

MD5 Digest: 0xE47E364C96467FD54FA44D59F927C3AB

CRC32 Digest: 0xF3AD331F

Rootkit Property: Normal

File Size: 6656 bytes

File: c:\windows\system32\msiexec.exe

Product: Windows Installer - Unicode

Page 884: Prev

Product Version: 3.1.4001.5512

Company: Microsoft Corporation

Description: Windows® installer

Original FileName: msiexec.exe

File Version Label: 3.1.4001.5512

File Version Number: 3.1.4001.5512

SHA-1 Digest: 0x2007D2C57E7B68B550DB764F3CB4F43BB0274460

MD5 Digest: 0x5879D691E842574A20FE63817CB76DF9

CRC32 Digest: 0xC4F9691B

Rootkit Property: Normal

File Size: 78848 bytes

File: c:\windows\system32\msimg32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: GDIEXT Client DLL

Original FileName: gdiext

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFE7C3659D785B40C1888F9BCF8317B02E925BE8E

MD5 Digest: 0xAFFC87E2501FCE8F09D4C10BA6421CCF

CRC32 Digest: 0x8FFFA7F2

Rootkit Property: Normal

File Size: 4608 bytes

Page 885: Prev

File: c:\windows\system32\msimtf.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Active IMM Server DLL

Original FileName: MSIMTF.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA2EB2B4A82A5FF168EF7A84E43B9AEADFF9ED590

MD5 Digest: 0xE11457C66FDD966EE415FBBC6D9BE643

CRC32 Digest: 0xC7A48FD4

Rootkit Property: Normal

File Size: 159232 bytes

File: c:\windows\system32\msjet40.dll

Product: Microsoft (R) Jet

Product Version: 4.00.9511.0

Company: Microsoft Corporation

Description: Microsoft Jet Engine Library

Original FileName: MSJET40.DLL

File Version Label: 4.00.9511.0

File Version Number: 4.0.9511.0

SHA-1 Digest: 0x6AA89ECB20022142D3ADE0E482572DF18D7C6D7E

MD5 Digest: 0x9E70016C950B1F8FDEAA6F067E2E25A8

Page 886: Prev

CRC32 Digest: 0x8A6D00B1

Rootkit Property: Normal

File Size: 1516568 bytes

File: c:\windows\system32\msjint40.dll

Product: Microsoft (R) Jet

Product Version: 4.00.9502.0

Company: Microsoft Corporation

Description: Microsoft Jet Database Engine International DLL

Original FileName: MSJINT40.DLL

File Version Label: 4.00.9502.0

File Version Number: 4.0.9502.0

SHA-1 Digest: 0x3251F7DC20DFCDF5A34F3EE55DF4D8FBBDA4CEA6

MD5 Digest: 0x7E2B58CE8C4013287371667880B1080D

CRC32 Digest: 0x55DA2207

Rootkit Property: Normal

File Size: 151583 bytes

File: c:\windows\system32\msjter40.dll

Product: Microsoft (R) Jet

Product Version: 4.00.9502.0

Company: Microsoft Corporation

Description: Microsoft Jet Database Engine Error DLL

Original FileName: MSJTER40.DLL

File Version Label: 4.00.9502.0

Page 887: Prev

File Version Number: 4.0.9502.0

SHA-1 Digest: 0x37DA5313093B1AFD9AA7A976E63DB98B2773ADBF

MD5 Digest: 0x0D14F07B29FBF0D750AA2495DD72B968

CRC32 Digest: 0xA3F03ED0

Rootkit Property: Normal

File Size: 60192 bytes

File: c:\windows\system32\msls31.dll

Product: Microsoft® Line Services

Product Version: 3.10

Company: Microsoft Corporation

Description: Microsoft Line Services library file

Original FileName: MSLS31.DLL

File Version Label: 3.10.349.0

File Version Number: 3.10.349.0

SHA-1 Digest: 0xB0D2A2897A2FB6A98207BE16D0ABC06118022EEC

MD5 Digest: 0x87B27E19DC5B4F8F3FEF061A155977B9

CRC32 Digest: 0xDABC3EF1

Rootkit Property: Normal

File Size: 156160 bytes

File: c:\windows\system32\mspatcha.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Page 888: Prev

Description: Microsoft(R) Patch Engine

Original FileName: mspatcha.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x14D7946AB6769B9366C114822BFDE12FA2113E11

MD5 Digest: 0xB85E95679B5ADC12311BCD3F5385D623

CRC32 Digest: 0x4B9B3D50

Rootkit Property: Normal

File Size: 29696 bytes

File: c:\windows\system32\mspmsnsv.dll

Product: Windows Media Device Manager

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Microsoft Media Device Service Provider

Original FileName: MsPMSNSv.dll

File Version Label: 11.0.5721.5262

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x249D26A0E3A741E023D88E41B070061FEB1D1E21

MD5 Digest: 0x051B1BDECD6DEE18C771B5D5EC7F044D

CRC32 Digest: 0x179069B6

Rootkit Property: Normal

File Size: 27136 bytes

File: c:\windows\system32\mspmsp.dll

Page 889: Prev

Product: Windows Media Device Manager

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Microsoft Media Device Service Provider

Original FileName: MsPMSP.dll

File Version Label: 11.0.5721.5262

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x68A351EAA386A8F62CF8CDA07743B33FD15261A4

MD5 Digest: 0x062ED848780162270910D8F87790D0E0

CRC32 Digest: 0x899702EF

Rootkit Property: Normal

File Size: 175616 bytes

File: c:\windows\system32\msprivs.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Privilege Translations

Original FileName: mspriv.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xCAD7E84A17E3AAA40DDB7D7A87D440FD86E80E35

MD5 Digest: 0xC6BB1D1500DB4A0E224CB65E6C7E8A80

CRC32 Digest: 0x05D5AC68

Rootkit Property: Normal

Page 890: Prev

File Size: 48128 bytes

File: c:\windows\system32\msrle32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5908

Company: Microsoft Corporation

Description: Microsoft RLE Compressor

Original FileName: msrle32.dll

File Version Label: 5.1.2600.5908 (xpsp_sp3_gdr.091127-0541)

File Version Number: 5.1.2600.5908

SHA-1 Digest: 0x26B27B96604BEF2BEF5FB1CEA8F066B397646922

MD5 Digest: 0x777819E1514AA632364DE59F810B292C

CRC32 Digest: 0x32B7A1C2

Rootkit Property: Normal

File Size: 11264 bytes

File: c:\windows\system32\mstlsapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® Terminal Server Licensing

Original FileName: mstlsapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA88F24CB797BB85ABA9EA841103FAAE3677188A7

Page 891: Prev

MD5 Digest: 0x2D65D56C2F8B6CC5EBFF8E7200C30304

CRC32 Digest: 0x164C5464

Rootkit Property: Normal

File Size: 116224 bytes

File: c:\windows\system32\msutb.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: MSUTB Server DLL

Original FileName: MSUTB.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xC0B75DE05A02C0CC94B0D1EF5DFEE3AE79E212C0

MD5 Digest: 0x17AA58A54C00F1746B8654C050491F43

CRC32 Digest: 0x39B0DAD1

Rootkit Property: Normal

File Size: 195072 bytes

File: c:\windows\system32\msv1_0.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5876

Company: Microsoft Corporation

Description: Microsoft Authentication Package v1.0

Original FileName: MSV1_0.DLL

Page 892: Prev

File Version Label: 5.1.2600.5876 (xpsp_sp3_gdr.090909-1234)

File Version Number: 5.1.2600.5876

SHA-1 Digest: 0xFB79958937F4574EA217321D1A869C02EDBD9EBE

MD5 Digest: 0x517561A1113B04E51D936CD018DE1C1F

CRC32 Digest: 0xE8B51352

Rootkit Property: Normal

File Size: 136192 bytes

File: c:\windows\system32\msvcirt.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT IOStreams DLL

Original FileName: msvcirt.dll

File Version Label: 7.0.2600.5512 (xpsp.080413-2111)

File Version Number: 7.0.2600.5512

SHA-1 Digest: 0x93159F6E1BD0250BA45A27787A7814BA9B24FF7E

MD5 Digest: 0x585992D78B671AAA075C02241309795D

CRC32 Digest: 0xE60C55DB

Rootkit Property: Normal

File Size: 57344 bytes

File: c:\windows\system32\msvcp60.dll

Product: Microsoft (R) Visual C++

Product Version: 6.02.3104.0

Page 893: Prev

Company: Microsoft Corporation

Description: Microsoft (R) C++ Runtime Library

Original FileName: MSVCP60.DLL

File Version Label: 6.02.3104.0

File Version Number: 6.2.3104.0

SHA-1 Digest: 0x97F12347BD168FA577527824F71897AFF886C999

MD5 Digest: 0xF404830F3CD9BF8F2515E489C0CDA297

CRC32 Digest: 0xD70BFB00

Rootkit Property: Normal

File Size: 413696 bytes

File: c:\windows\system32\msvcp71.dll

Product: Microsoft® Visual Studio .NET

Product Version: 7.10.3077.0

Company: Microsoft Corporation

Description: Microsoft® C++ Runtime Library

Original FileName: MSVCP71.DLL

File Version Label: 7.10.3077.0

File Version Number: 7.10.3077.0

SHA-1 Digest: 0xC8CCB04EEDAC821A13FAE314A2435192860C72B8

MD5 Digest: 0x561FA2ABB31DFA8FAB762145F81667C2

CRC32 Digest: 0x5A3B11D4

Rootkit Property: Normal

File Size: 499712 bytes

Page 894: Prev

File: c:\windows\system32\msvcr71.dll

Product: Microsoft® Visual Studio .NET

Product Version: 7.10.3052.4

Company: Microsoft Corporation

Description: Microsoft® C Runtime Library

Original FileName: MSVCR71.DLL

File Version Label: 7.10.3052.4

File Version Number: 7.10.3052.4

SHA-1 Digest: 0x4CF530F625AB01BAF8A513B02A259B8D35C60B30

MD5 Digest: 0xCF8889C5F5764AC1976E6458A748D35F

CRC32 Digest: 0x6C335B7E

Rootkit Property: Normal

File Size: 348160 bytes

File: c:\windows\system32\msvcrt.dll

Product: Microsoft® Windows® Operating System

Product Version: 7.0.2600.5512

Company: Microsoft Corporation

Description: Windows NT CRT DLL

Original FileName: msvcrt.dll

File Version Label: 7.0.2600.5512 (xpsp.080413-2111)

File Version Number: 7.0.2600.5512

SHA-1 Digest: 0x70D5F97088CC9348BB9D10098AF0738A696B96DE

MD5 Digest: 0x355EDBB4D412B01F1740C17E3F50FA00

CRC32 Digest: 0x0B7B1677

Page 895: Prev

Rootkit Property: Normal

File Size: 343040 bytes

File: c:\windows\system32\msvfw32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Video for Windows DLL

Original FileName: msvfw32.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0845)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA0132DE325C72A73EE497A3517C4CE942569F25F

MD5 Digest: 0x235B2311786AC007AD644B12A2DA8AC7

CRC32 Digest: 0xA8A6AED5

Rootkit Property: Normal

File Size: 121344 bytes

File: c:\windows\system32\msvidc32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5908

Company: Microsoft Corporation

Description: Microsoft Video 1 Compressor

Original FileName: msvidc32.dll

File Version Label: 5.1.2600.5908 (xpsp_sp3_gdr.091127-0541)

File Version Number: 5.1.2600.5908

Page 896: Prev

SHA-1 Digest: 0x9A2A8EC8D67929C735C36F1E599A91E961B55F7A

MD5 Digest: 0xFCB4782D700268C1B82ECEF74CF1A3B9

CRC32 Digest: 0x96BB9FCE

Rootkit Property: Normal

File Size: 28672 bytes

File: c:\windows\system32\mswmdm.dll

Product: Windows Media Device Manager

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Device Manager Core

Original FileName: WMDM.dll

File Version Label: 11.0.5721.5262

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x37F24A87BE5357F79E332595780D9A7A1AE09A9F

MD5 Digest: 0xCF55708E01719037B441ED53C8886A84

CRC32 Digest: 0xE3CA88BB

Rootkit Property: Normal

File Size: 321536 bytes

File: c:\windows\system32\mswsock.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5625

Company: Microsoft Corporation

Description: Microsoft Windows Sockets 2.0 Service Provider

Page 897: Prev

Original FileName: mswsock.dll

File Version Label: 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249)

File Version Number: 5.1.2600.5625

SHA-1 Digest: 0xE7EC9DEC28DB732BD344F4BDE6F60975175A4E7C

MD5 Digest: 0x832E4DD8964AB7ACC880B2837CB1ED20

CRC32 Digest: 0xFBBA0828

Rootkit Property: Normal

File Size: 245248 bytes

File: c:\windows\system32\mswstr10.dll

Product: Microsoft (R) Jet

Product Version: 4.00.9502.0

Company: Microsoft Corporation

Description: Microsoft Jet Sort Library

Original FileName: MSWSTR10.DLL

File Version Label: 4.00.9502.0

File Version Number: 4.0.9502.0

SHA-1 Digest: 0x1FB815E1258D808411C5874AF0C6C7CC5FC6C7C3

MD5 Digest: 0xAFDC647D16B285B9AE6140335B3B3255

CRC32 Digest: 0x0E3FED45

Rootkit Property: Normal

File Size: 621344 bytes

File: c:\windows\system32\msyuv.dll

Product: Microsoft(R) Windows(R) Operating System

Page 898: Prev

Product Version: 5.3.2600.5908

Company: Microsoft Corporation

Description: Microsoft UYVY Video Decompressor

Original FileName: MSYUV.DLL

File Version Label: 5.3.2600.5908 (xpsp_sp3_gdr.091127-0541)

File Version Number: 5.3.2600.5908

SHA-1 Digest: 0x7B088BD67F731D2F5A977A0718E03B0CAAA6A790

MD5 Digest: 0x0F200BE1ED9DE188CA6407A3759BE7CF

CRC32 Digest: 0xB91919AA

Rootkit Property: Normal

File Size: 17920 bytes

File: c:\windows\system32\mtxclu.dll

Product: COM Services

Product Version: 03.01.00.4414

Company: Microsoft Corporation

Description: MS DTC amd MTS clustering support DLL

Original FileName:

File Version Label: 2001.12.4414.706

File Version Number: 2001.12.4414.706

SHA-1 Digest: 0x4712AC78DE94E12A94EC132044B9F04F76AAEA63

MD5 Digest: 0x36795A645EAA47FE31D2A8F136A2C69B

CRC32 Digest: 0x28BC32EA

Rootkit Property: Normal

File Size: 66560 bytes

Page 899: Prev

File: c:\windows\system32\mydocs.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: My Documents Folder UI

Original FileName: mydocs.dll

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x03DE584B1601B98C897768717E4F629A19F87662

MD5 Digest: 0x538A270F35A713C360B7ED4168BB7521

CRC32 Digest: 0x0946122A

Rootkit Property: Normal

File Size: 90624 bytes

File: c:\windows\system32\ncobjapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description:

Original FileName: NCObjAPI.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x7AFDF6DC60B2EE364D3D3CD6EEB8509B9A278DA0

MD5 Digest: 0xEC29A79F1E76DC509E24D401F29D0678

Page 900: Prev

CRC32 Digest: 0xAF655A0A

Rootkit Property: Normal

File Size: 36352 bytes

File: c:\windows\system32\nddeapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Network DDE Share Management APIs

Original FileName: NDDEAPI.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x62268747F51A908297B1248F6E06C81D7B638C0B

MD5 Digest: 0x013C1148C1EC025596896E093F60F608

CRC32 Digest: 0x7E995810

Rootkit Property: Normal

File Size: 17920 bytes

File: c:\windows\system32\ndptsp.tsp

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: NDIS Proxy TAPI Service Provider

Original FileName: NDProxy.TSP

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

Page 901: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x8B91982F4EAD7D00DB82BFD81C4039EB0512F1C3

MD5 Digest: 0x4589963D84F2984FA5949A72162BA4F4

CRC32 Digest: 0x91C131A8

Rootkit Property: Normal

File Size: 56832 bytes

File: c:\windows\system32\netapi32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5694

Company: Microsoft Corporation

Description: Net Win32 API DLL

Original FileName: NetApi32.DLL

File Version Label: 5.1.2600.5694 (xpsp_sp3_gdr.081015-1312)

File Version Number: 5.1.2600.5694

SHA-1 Digest: 0x5E935F90226FF224936EDF449F925B647B535917

MD5 Digest: 0x318230E845919255EF3C5D5E1E863631

CRC32 Digest: 0x5A9AE439

Rootkit Property: Normal

File Size: 337408 bytes

File: c:\windows\system32\netcfgx.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Page 902: Prev

Description: Network Configuration Objects

Original FileName: netcfgx.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x51F5DCADE9EF8F94B78FACB4239583313FC516FB

MD5 Digest: 0x37A62C6092AADD2EFDE0468DD8818E99

CRC32 Digest: 0xD3BC095D

Rootkit Property: Normal

File Size: 622592 bytes

File: c:\windows\system32\netdde.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Network DDE - DDE Communication

Original FileName: NETDDE.EXE

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x7235C82AA9698D9297A73E44CB365FD5973CEF78

MD5 Digest: 0xB857BA82860D7FF85AE29B095645563B

CRC32 Digest: 0x59828835

Rootkit Property: Normal

File Size: 111104 bytes

File: c:\windows\system32\netlogon.dll

Page 903: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Net Logon Services DLL

Original FileName: NetLogon.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA6AB9D384B3D801A8973B4ED5F01961CB0B8A07C

MD5 Digest: 0x1B7F071C51B77C272875C3A23E1E4550

CRC32 Digest: 0xE25458B0

Rootkit Property: Normal

File Size: 407040 bytes

File: c:\windows\system32\netman.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Network Connections Manager

Original FileName: netman.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x33F8C80CBC4A8B5AFD12B74E8999BA5D448C9C19

MD5 Digest: 0x13E67B55B3ABD7BF3FE7AAE5A0F9A9DE

CRC32 Digest: 0x03CCA430

Rootkit Property: Normal

Page 904: Prev

File Size: 198144 bytes

File: c:\windows\system32\netrap.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Net Remote Admin Protocol DLL

Original FileName: NetRap.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x80BE09DDFF957E6739EF107BCD1B8337B64A6432

MD5 Digest: 0xB41D53899E37CC43DA85DA19998BEE81

CRC32 Digest: 0x7D4399F5

Rootkit Property: Normal

File Size: 11776 bytes

File: c:\windows\system32\netshell.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Network Connections Shell

Original FileName: netshell.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x93A40E968C9FF4BBAE8397F55DB8B291D9E4E0A0

Page 905: Prev

MD5 Digest: 0x062F837C1FBDB6A0A75F82EFC2EE8E74

CRC32 Digest: 0xDE6F9AEC

Rootkit Property: Normal

File Size: 1703936 bytes

File: c:\windows\system32\netui0.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: NT LM UI Common Code - GUI Classes

Original FileName: netui0.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFAABE827C5AF25A3E6E5876BF736F4F74D0D5334

MD5 Digest: 0xAC5DF42FE314C1446B1DAD237BFCFFE0

CRC32 Digest: 0xEEE6EB1F

Rootkit Property: Normal

File Size: 80896 bytes

File: c:\windows\system32\netui1.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: NT LM UI Common Code - Networking classes

Original FileName: netui1.dll

Page 906: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xCC75ED3D171F5D038E945DE1E31C249B4D51F11A

MD5 Digest: 0xED5A816D8E11E03F1937AC3C56826EE4

CRC32 Digest: 0x3226AF77

Rootkit Property: Normal

File Size: 245760 bytes

File: c:\windows\system32\normaliz.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.0.5441.0

Company: Microsoft Corporation

Description: Unicode Normalization DLL

Original FileName: normaliz.dll

File Version Label: 6.0.5441.0 (winmain(wmbla).060628-1735)

File Version Number: 6.0.5441.0

SHA-1 Digest: 0xECD1FC4EBCD524AEFAC77061A8C0B5E4A2A01A8D

MD5 Digest: 0x10753A3ADC3E39A3B10CC3F08E98E6B4

CRC32 Digest: 0x80634486

Rootkit Property: Normal

File Size: 23552 bytes

File: c:\windows\system32\npptools.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 907: Prev

Company: Microsoft Corporation

Description: NPP Tools Helper DLL

Original FileName: NPPTools.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFA6948D0F9B020F13BAD7BCB984289D676E0FD3F

MD5 Digest: 0x68A131335A20B343923A2957EB1E413D

CRC32 Digest: 0x0BFD0E6F

Rootkit Property: Normal

File Size: 54784 bytes

File: c:\windows\system32\ntdll.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5755

Company: Microsoft Corporation

Description: NT Layer DLL

Original FileName: ntdll.dll

File Version Label: 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)

File Version Number: 5.1.2600.5755

SHA-1 Digest: 0xE753D19A2E3B98B2B3B8F02F276092096D10F22D

MD5 Digest: 0x911DDF2E16761643A47225F654D811E5

CRC32 Digest: 0x56E74C35

Rootkit Property: Normal

File Size: 714752 bytes

Page 908: Prev

File: c:\windows\system32\ntdsapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: NT5DS

Original FileName: ntdsapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFFABBDD524C77BA338F0EFBA8F609DFAB6AAB021

MD5 Digest: 0xEC4C0D9BFD9F7E33F8B395AD54E13063

CRC32 Digest: 0x4E8ED6F9

Rootkit Property: Normal

File Size: 67072 bytes

File: c:\windows\system32\ntlanman.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® Lan Manager

Original FileName: ntlanman.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xE4B4479A8B95199F760E921D3BCF964123B6D2B2

MD5 Digest: 0x36468087E22C57A83DF758B3F90DF73F

CRC32 Digest: 0x9A79689D

Page 909: Prev

Rootkit Property: Normal

File Size: 44032 bytes

File: c:\windows\system32\ntlsapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® License Server Interface DLL

Original FileName: ntlsapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x40A6726065AE8937C318148703AE197DBF7CEAD4

MD5 Digest: 0xB464BD425D5D09ABE4192234D1577B22

CRC32 Digest: 0x6A0576EE

Rootkit Property: Normal

File Size: 8192 bytes

File: c:\windows\system32\ntmarta.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT MARTA provider

Original FileName: ntmarta.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

Page 910: Prev

SHA-1 Digest: 0x7E2EA4D88645138E5EDB646157FD702C347BB53A

MD5 Digest: 0x549290DBC280C887681D7652978DBBE0

CRC32 Digest: 0x35FC486D

Rootkit Property: Normal

File Size: 118784 bytes

File: c:\windows\system32\ntmssvc.dll

Product: Microsoft® Windows Whistler® Operating System

Product Version: 5.1.2400.5512

Company: Microsoft Corporation

Description: Removable Storage Manager

Original FileName: ntmssvc.dll

File Version Label: 5.1.2400.5512

File Version Number: 5.1.2400.5512

SHA-1 Digest: 0xEC429EC2F14C9E97F8B99F6A3267DBFE44A92E27

MD5 Digest: 0x156F64A3345BD23C600655FB4D10BC08

CRC32 Digest: 0xFB1AA7D8

Rootkit Property: Normal

File Size: 435200 bytes

File: c:\windows\system32\nts.dll

Product: Intel Common Base Agent

Product Version: 6.12.0.142

Company: LANDesk Software Ltd.

Description: NTS

Page 911: Prev

Original FileName: NTS.DLL

File Version Label: 6.12.0.142 E

File Version Number: 6.12.0.142

SHA-1 Digest: 0xD0FC9686FF2D53C8EFDA572FB1F51FEE97D1F396

MD5 Digest: 0x0C343609DF3677E456E168FDB07139F9

CRC32 Digest: 0xE581928A

Rootkit Property: Normal

File Size: 83752 bytes

File: c:\windows\system32\ntshrui.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Shell extensions for sharing

Original FileName: ntshrui.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x590EF8248DCE2107930917B15541ED91BA84E185

MD5 Digest: 0xA70A2D85AD143D6BB823C246CEB699A5

CRC32 Digest: 0xA17F3F5B

Rootkit Property: Normal

File Size: 143360 bytes

File: c:\windows\system32\oakley.dll

Product: Microsoft® Windows® Operating System

Page 912: Prev

Product Version: 5.1.2600.5886

Company: Microsoft Corporation

Description: Oakley Key Manager

Original FileName: oakley.dll

File Version Label: 5.1.2600.5886 (xpsp_sp3_gdr.091012-1253)

File Version Number: 5.1.2600.5886

SHA-1 Digest: 0x0722EDDAFD29D4572BEF110E321F9AC7285712BA

MD5 Digest: 0xC5FF8682EADA5B3B27A865F1C3EF9270

CRC32 Digest: 0xEF817BD2

Rootkit Property: Normal

File Size: 270336 bytes

File: c:\windows\system32\occache.dll

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Company: Microsoft Corporation

Description: Object Control Viewer

Original FileName: OCCACHE.DLL

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

SHA-1 Digest: 0xFE9AFF6B8A0179B54B35E61CD8B24800E2B33D35

MD5 Digest: 0x971D01F521285E15B76D67A1754D2891

CRC32 Digest: 0xE3AD79EC

Rootkit Property: Normal

File Size: 102912 bytes

Page 913: Prev

File: c:\windows\system32\odbc32.dll

Product: Microsoft Data Access Components

Product Version: 3.525.3012.0

Company: Microsoft Corporation

Description: Microsoft Data Access - ODBC Driver Manager

Original FileName: ODBC32

File Version Label: 3.525.3012.0 (xpsp_sp3_gdr.101108-1643)

File Version Number: 3.525.3012.0

SHA-1 Digest: 0xA3B962AD88002F64BB46379182EB0D949C8207DF

MD5 Digest: 0x40B0F98BAD16AD5DEF894E88C3EF8014

CRC32 Digest: 0x7371AFB4

Rootkit Property: Normal

File Size: 249856 bytes

File: c:\windows\system32\odbcbcp.dll

Product: Microsoft SQL Server

Product Version: 3.85.1132

Company: Microsoft Corporation

Description: Microsoft BCP for ODBC

Original FileName: ODBCBCP

File Version Label: 2000.085.1132.00 (xpsp.080413-0852)

File Version Number: 2000.85.1132.0

SHA-1 Digest: 0xBF5C3C94701E3009BB1EF98607055F712ABF61E2

MD5 Digest: 0x369F7B1A4F358B976176556A1A331F36

Page 914: Prev

CRC32 Digest: 0x35EE6559

Rootkit Property: Normal

File Size: 24576 bytes

File: c:\windows\system32\odbccp32.dll

Product: Microsoft Data Access Components

Product Version: 3.525.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - ODBC Installer

Original FileName: ODBCCP32

File Version Label: 3.525.1132.0 (xpsp.080413-0852)

File Version Number: 3.525.1132.0

SHA-1 Digest: 0xCC3A2A750B59974F938D30049A56034CFA8EA714

MD5 Digest: 0x2C288AA87E4723AC9FF4D76A192EC3F8

CRC32 Digest: 0xD90B53D6

Rootkit Property: Normal

File Size: 106496 bytes

File: c:\windows\system32\odbcint.dll

Product: Microsoft Data Access Components

Product Version: 3.525.1132.0

Company: Microsoft Corporation

Description: Microsoft Data Access - ODBC Resources

Original FileName: ODBCINT

File Version Label: 3.525.1132.0 (xpsp.080413-0852)

Page 915: Prev

File Version Number: 3.525.1132.0

SHA-1 Digest: 0x9CF815158FF84A7153ED6140E37CF42C906A0DE0

MD5 Digest: 0x6B7C6B32F8E84D56C6260D684019FEA2

CRC32 Digest: 0x716DE794

Rootkit Property: Normal

File Size: 94208 bytes

File: c:\windows\system32\odbcji32.dll

Product: Microsoft Data Access Components

Product Version: 4.00.6305.0

Company: Microsoft Corporation

Description: Microsoft ODBC Desktop Driver Pack 3.5

Original FileName:

File Version Label: 4.0.6305.0

File Version Number: 4.0.6305.0

SHA-1 Digest: 0x182217E66AFC5465648A15B0DAFB66A67A3BB8B8

MD5 Digest: 0x5CE275CDC5FFB77B1EC29DBDFE4B6689

CRC32 Digest: 0x176915E1

Rootkit Property: Normal

File Size: 53279 bytes

File: c:\windows\system32\odbcjt32.dll

Product: Microsoft Data Access Components

Product Version: 4.00.6305.0

Company: Microsoft Corporation

Page 916: Prev

Description: Microsoft ODBC Desktop Driver Pack 3.5

Original FileName:

File Version Label: 4.0.6305.0

File Version Number: 4.0.6305.0

SHA-1 Digest: 0xE91D0769D2FB7AE8210A4AD4FD8B885FAB1790F1

MD5 Digest: 0x1B05DCC75FBB903A17E3E0DDAEA8D508

CRC32 Digest: 0x0ED7DF9D

Rootkit Property: Normal

File Size: 278559 bytes

File: c:\windows\system32\ole32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.6010

Company: Microsoft Corporation

Description: Microsoft OLE for Windows

Original FileName: OLE32.DLL

File Version Label: 5.1.2600.6010 (xpsp_sp3_gdr.100712-1633)

File Version Number: 5.1.2600.6010

SHA-1 Digest: 0x9C1934E436A2056853797697B4E6A060637097ED

MD5 Digest: 0x7A6A7900B5E322763430BA6FD9A31224

CRC32 Digest: 0x2C4B341E

Rootkit Property: Normal

File Size: 1288192 bytes

File: c:\windows\system32\oleacc.dll

Page 917: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Active Accessibility Core Component

Original FileName: OLEACC.DLL

File Version Label: 4.2.5406.0 (xpclient.010817-1148)

File Version Number: 4.2.5406.0

SHA-1 Digest: 0xFFE7A3E6FBA7F7CFE1E26FED3F8BE00C47E9E2FC

MD5 Digest: 0x5F2DBE3CB563741C8084657BF956CE64

CRC32 Digest: 0x5E164907

Rootkit Property: Normal

File Size: 163328 bytes

File: c:\windows\system32\oleaut32.dll

Product:

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description:

Original FileName:

File Version Label: 5.1.2600.5512

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x3168A173D177F470928B468DB777640861DCB32E

MD5 Digest: 0x387006CF9983000BAB76DD250D424045

CRC32 Digest: 0x1EE83658

Rootkit Property: Normal

Page 918: Prev

File Size: 551936 bytes

File: c:\windows\system32\olepro32.dll

Product:

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description:

Original FileName:

File Version Label: 5.1.2600.5512

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x4414A46EFC93A14F4268AFA4925DBB86D9FB3BDC

MD5 Digest: 0x5652F6CE1D9E9D8068B9D29BC21B5409

CRC32 Digest: 0x0EFC6591

Rootkit Property: Normal

File Size: 84992 bytes

File: c:\windows\system32\onex.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: IEEE 802.1X supplicant library

Original FileName: onex.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xB2DCFF6F357A68ABFF957DAD6444AA43310C533E

Page 919: Prev

MD5 Digest: 0xCA04959077AFE36369D37B3504740C87

CRC32 Digest: 0xC15BD3F6

Rootkit Property: Normal

File Size: 144384 bytes

File: c:\windows\system32\packet.dll

Product: WinPcap

Product Version: 4.1.0.2001

Company: CACE Technologies, Inc.

Description: packet.dll (NT5) Dynamic Link Library

Original FileName: packet.dll

File Version Label: 4.1.0.2001

File Version Number: 4.1.0.2001

SHA-1 Digest: 0xB8EFE133D421CCEF04FCF13A4ABA78999DB936E9

MD5 Digest: 0x94EC0B68B4F933CBE5B92523ADC4AE2C

CRC32 Digest: 0x98E08A5A

Rootkit Property: Normal

File Size: 100880 bytes

File: c:\windows\system32\pdclntif.dll

Product:

Product Version:

Company:

Description:

Original FileName:

Page 920: Prev

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xC3B1AA769C91C32D45611D22C77A23B3ADCA7421

MD5 Digest: 0x5A361AE0D8D5C8769AE44EAE3BD35A8E

CRC32 Digest: 0x92AE3C0E

Rootkit Property: Normal

File Size: 548864 bytes

File: c:\windows\system32\pdf995mon.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xFDC1B774F6BD315A33456280B247D80EA30ACA20

MD5 Digest: 0xAF238673651EFC0226EA74239B502A6F

CRC32 Digest: 0x91FB3BA1

Rootkit Property: Normal

File Size: 51716 bytes

File: c:\windows\system32\pdh.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5773

Page 921: Prev

Company: Microsoft Corporation

Description: Windows Performance Data Helper DLL

Original FileName: PDH.DLL

File Version Label: 5.1.2600.5773 (xpsp_sp3_gdr.090306-1225)

File Version Number: 5.1.2600.5773

SHA-1 Digest: 0x8BD42FC0E89066C9FCB7638058CB0591A4240B68

MD5 Digest: 0x62CF83A6989312A0DD39BBFFB3D1C166

CRC32 Digest: 0x8AA81D2A

Rootkit Property: Normal

File Size: 284160 bytes

File: c:\windows\system32\pdprdlg.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x5716DC1685075150F6C7DB298EC18A8F8CD2D2E0

MD5 Digest: 0xAF974F21B7D02F490E2B835E98258BBA

CRC32 Digest: 0x5E9F9627

Rootkit Property: Normal

File Size: 139264 bytes

Page 922: Prev

File: c:\windows\system32\pdresrc.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xE6BFC46E3B8BEF7D487D6BD7A7657C8DA08BEE5F

MD5 Digest: 0xDE28AE480416BD1CBBF89024981E92F9

CRC32 Digest: 0x5BACA234

Rootkit Property: Normal

File Size: 36864 bytes

File: c:\windows\system32\pds.dll

Product: Intel Common Base Agent

Product Version: 6.12.0.142

Company: LANDesk Software Ltd.

Description: PDS API

Original FileName: PDS.DLL

File Version Label: 6.12.0.142 E

File Version Number: 6.12.0.142

SHA-1 Digest: 0x203D6CB147B42DBB6A97D971093A6A1FEE75C224

MD5 Digest: 0x9FA002C00AFBBF4599B86B2E195737FB

CRC32 Digest: 0xB755EF97

Page 923: Prev

Rootkit Property: Normal

File Size: 83752 bytes

File: c:\windows\system32\perfdisk.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Disk Performance Objects DLL

Original FileName: PERFDISK.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x0C18F274BC5DF869D6674C9116600AC93E05FB38

MD5 Digest: 0xABFB673B24A9B3287761D497529FB5B9

CRC32 Digest: 0xCE5E0F7A

Rootkit Property: Normal

File Size: 26624 bytes

File: c:\windows\system32\perfos.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows System Performance Objects DLL

Original FileName: PERFOS.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

Page 924: Prev

SHA-1 Digest: 0x2A81B74E85E47B0A7550B770691CE1E0545C2A37

MD5 Digest: 0xACDAFCD14EC0ECE89198503746A5C147

CRC32 Digest: 0x9FA2759E

Rootkit Property: Normal

File Size: 25088 bytes

File: c:\windows\system32\pjlmon.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: PJL Language monitor

Original FileName: PJLMON.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2BFF971DA5E020F06279776F5A381A823E84C552

MD5 Digest: 0x222DE7F5EDB9DDBE628384A1A8BE59CE

CRC32 Digest: 0x84B5D55E

Rootkit Property: Normal

File Size: 15360 bytes

File: c:\windows\system32\portabledeviceapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.2.5721.5262

Company: Microsoft Corporation

Description: Windows Portable Device API Components

Page 925: Prev

Original FileName: PortableDeviceApi.dll

File Version Label: 5.2.5721.5262 (WMP_11.090130-1421)

File Version Number: 5.2.5721.5262

SHA-1 Digest: 0x6B2D75973059CC297C21FE8872A415B9F12DFC95

MD5 Digest: 0xE132AD94798E72ACB650E985984C7F58

CRC32 Digest: 0x3AF598ED

Rootkit Property: Normal

File Size: 254976 bytes

File: c:\windows\system32\powrprof.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Power Profile Helper DLL

Original FileName: POWRPROF.DLL

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0xA7D14F0DA81B0F10C748936AF8C3E93566F92AE5

MD5 Digest: 0x50A166237A0FA771261275A405646CC0

CRC32 Digest: 0x278004AF

Rootkit Property: Normal

File Size: 17408 bytes

File: c:\windows\system32\profmap.dll

Product: Microsoft® Windows® Operating System

Page 926: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Userenv

Original FileName: userenv.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xE2E7BD2B2EDA2510301398F230E2AE4B8845A5B7

MD5 Digest: 0xFCFA1C55971CC229D353B3A15ACCD995

CRC32 Digest: 0x3D414BA2

Rootkit Property: Normal

File Size: 27648 bytes

File: c:\windows\system32\psapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Process Status Helper

Original FileName: PSAPI

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xB31A80D13C4E9DC5409F43C1B146ED2FF6DF3F1B

MD5 Digest: 0x9CFCB3CA3D83B4EAA133F0644A2C6F31

CRC32 Digest: 0x75BBDCAD

Rootkit Property: Normal

File Size: 23040 bytes

Page 927: Prev

File: c:\windows\system32\psbase.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Protected Storage default provider

Original FileName: psbase.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x86CED32C6FA6343EBAF31AEA2E1C60E05BEE37F0

MD5 Digest: 0x22D89D84E8E081CDA529DBF8C0255A38

CRC32 Digest: 0xA2E621AA

Rootkit Property: Normal

File Size: 96768 bytes

File: c:\windows\system32\pstorsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Protected storage server

Original FileName: Protected storage server

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x933A8424844CE4DE11B82091F96733B8D7FC77C1

MD5 Digest: 0x853D0D0C6F02D7BFDF1CF99DD7553732

Page 928: Prev

CRC32 Digest: 0x4ADEDA3C

Rootkit Property: Normal

File Size: 34304 bytes

File: c:\windows\system32\qagentrt.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Quarantine Agent Service Run-Time

Original FileName: QAgentRT.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5EBE9135EB6F1C7D3C0413C2AD341E330E50694F

MD5 Digest: 0x0102140028FAD045756796E1C685D695

CRC32 Digest: 0xF6C84EE9

Rootkit Property: Normal

File Size: 291328 bytes

File: c:\windows\system32\qcap.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

Page 929: Prev

File Version Number: 6.5.2600.5512

SHA-1 Digest: 0x8D14E32C4206F79A11DB6804FD332B80F976DCDA

MD5 Digest: 0x54B0324241BBF3642159918F9A4F16FB

CRC32 Digest: 0x93FFA4C3

Rootkit Property: Normal

File Size: 192512 bytes

File: c:\windows\system32\qdvd.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 6.5.2600.5512

SHA-1 Digest: 0x71C576BDE540384ABCE169492C864E16127E4F11

MD5 Digest: 0x56C2D16EB8E6F48F25A1D603AF3C9584

CRC32 Digest: 0x01B955D2

Rootkit Property: Normal

File Size: 386048 bytes

File: c:\windows\system32\qedit.dll

Product:

Product Version:

Company:

Page 930: Prev

Description:

Original FileName:

File Version Label:

File Version Number: 6.5.2600.5512

SHA-1 Digest: 0x4FB136A79B1EF83411408E7A6C0B808E5DEB4B72

MD5 Digest: 0x0E07F36810F52B580B8A27E67D34D860

CRC32 Digest: 0xAC503C53

Rootkit Property: Normal

File Size: 562176 bytes

File: c:\windows\system32\qmgr.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.7.2600.5512

Company: Microsoft Corporation

Description: Background Intelligent Transfer Service

Original FileName: qmgr.dll

File Version Label: 6.7.2600.5512 (xpsp.080413-2108)

File Version Number: 6.7.2600.5512

SHA-1 Digest: 0x164E9CE62B4CA39A47872B831C316B97CACC1B7A

MD5 Digest: 0x574738F61FCA2935F5265DC4E5691314

CRC32 Digest: 0x52E2619B

Rootkit Property: Normal

File Size: 409088 bytes

File: c:\windows\system32\quartz.dll

Page 931: Prev

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 6.5.2600.5933

SHA-1 Digest: 0xD2550CFF54EAEF25CC35B68E709F18C752117D63

MD5 Digest: 0x49804C9E6B0B709A0B607DB7E9462AA3

CRC32 Digest: 0xC4A59DCC

Rootkit Property: Normal

File Size: 1291776 bytes

File: c:\windows\system32\qutil.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Quarantine Utilities

Original FileName: QUtil.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x392C8EB70A466005241A3CCA65DF373291646446

MD5 Digest: 0x8AE93AACC648921BAACB8602991AC4B3

CRC32 Digest: 0x50936CDD

Rootkit Property: Normal

Page 932: Prev

File Size: 76800 bytes

File: c:\windows\system32\rasadhlp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Remote Access AutoDial Helper

Original FileName: rasadhlp.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x6FDFFDB27F09C9414913E2B56526CE9884520C66

MD5 Digest: 0x6F9BEF24C578D5D6740E080BEDD6A448

CRC32 Digest: 0x3AB3D6CF

Rootkit Property: Normal

File Size: 7680 bytes

File: c:\windows\system32\rasapi32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Remote Access API

Original FileName: rasapi32.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2B764E033D62D37765392A55774C44D8D6E9414F

Page 933: Prev

MD5 Digest: 0x92C4F48B62B0B876194584C3FF09CCB6

CRC32 Digest: 0x770061DC

Rootkit Property: Normal

File Size: 237056 bytes

File: c:\windows\system32\rasauto.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Remote Access AutoDial Manager

Original FileName: rasauto.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x039C0AF32C5121FA10D77E599A3B3D632F48E92A

MD5 Digest: 0xAD188BE7BDF94E8DF4CA0A55C00A5073

CRC32 Digest: 0x84EC1C81

Rootkit Property: Normal

File Size: 88576 bytes

File: c:\windows\system32\raschap.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5886

Company: Microsoft Corporation

Description: Remote Access PPP CHAP

Original FileName: raschap.dll

Page 934: Prev

File Version Label: 5.1.2600.5886 (xpsp_sp3_gdr.091012-1253)

File Version Number: 5.1.2600.5886

SHA-1 Digest: 0x88907FB57B371BCC86D5A05EEFFCE084E64F2F31

MD5 Digest: 0x56CE97FF94B7662A300D359CD6F4D601

CRC32 Digest: 0xC15CF2BE

Rootkit Property: Normal

File Size: 79872 bytes

File: c:\windows\system32\rasdlg.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Remote Access Common Dialog API

Original FileName: rasdlg.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x435219FA31B2B30AA6DA64C82D63D9CCC6B7F03E

MD5 Digest: 0x401A8C0BE0BAA7D7A470F0942244152D

CRC32 Digest: 0xB70596BD

Rootkit Property: Normal

File Size: 658432 bytes

File: c:\windows\system32\rasman.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 935: Prev

Company: Microsoft Corporation

Description: Remote Access Connection Manager

Original FileName: Rasman.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xAB8EAD1EA84AEC88420D0536D67C522080BAF1C5

MD5 Digest: 0x4DEF926F6A0545AE486A03C84F2EE482

CRC32 Digest: 0x17F7DF86

Rootkit Property: Normal

File Size: 61440 bytes

File: c:\windows\system32\rasmans.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Remote Access Connection Manager

Original FileName: Rasmans.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xC126E4DA985441F7ED3A406EB23672880BD479CA

MD5 Digest: 0x76A9A3CBEADD68CC57CDA5E1D7448235

CRC32 Digest: 0xFDF0D491

Rootkit Property: Normal

File Size: 186368 bytes

Page 936: Prev

File: c:\windows\system32\rasppp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Remote Access PPP

Original FileName: rasppp.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x621A9BAAC17592C4F298B57EFF32B4F1D652F5E4

MD5 Digest: 0xD0545A010ED2259A740C8414899A938F

CRC32 Digest: 0x39664D4C

Rootkit Property: Normal

File Size: 210944 bytes

File: c:\windows\system32\rasqec.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: RAS Quarantine Enforcement Client

Original FileName: Rasqec.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x43E685B935C13B989C6E66F5BB1DFB5C90340AB8

MD5 Digest: 0xA655C88AA555BB8EF8957BD29408827F

CRC32 Digest: 0xBED66C90

Page 937: Prev

Rootkit Property: Normal

File Size: 61952 bytes

File: c:\windows\system32\rastapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Remote Access TAPI Compliance Layer

Original FileName: Rastapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x0357A3DD57AF6714E164EBD444BC6A8E749D82F4

MD5 Digest: 0x5F7692CEC90E2E9AA32CD58321E234B8

CRC32 Digest: 0xF10B1051

Rootkit Property: Normal

File Size: 58368 bytes

File: c:\windows\system32\rastls.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5886

Company: Microsoft Corporation

Description: Remote Access PPP EAP-TLS

Original FileName: rastls.dll

File Version Label: 5.1.2600.5886 (xpsp_sp3_gdr.091012-1253)

File Version Number: 5.1.2600.5886

Page 938: Prev

SHA-1 Digest: 0x78A6676B45145741F58E639D8ED4B66FD133B1F9

MD5 Digest: 0xA39BE37C9237DB5F1990D61B268EA555

CRC32 Digest: 0xC19C24D0

Rootkit Property: Normal

File Size: 149504 bytes

File: c:\windows\system32\regapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Registry Configuration APIs

Original FileName: regapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x0B43CC40011A36366D3490973E82BCD162BB93DA

MD5 Digest: 0xAF11C591F2F4AFF4A6CF699D376F618B

CRC32 Digest: 0xBED16F0E

Rootkit Property: Normal

File Size: 49664 bytes

File: c:\windows\system32\regsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Remote Registry Service

Page 939: Prev

Original FileName: REGSVC.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD6CB5C67E557B76303CC61EF72694B7B8F9013A5

MD5 Digest: 0x5B19B557B0C188210A56A6B699D90B8F

CRC32 Digest: 0xC89570EB

Rootkit Property: Normal

File Size: 59904 bytes

File: c:\windows\system32\resutils.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Cluster Resource Utility DLL

Original FileName: resutils

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x72B3940D66F245B158582BD54B882313C0B5E7D8

MD5 Digest: 0xF51EBB6FC536A6B2D588FD668D3A8249

CRC32 Digest: 0x69706896

Rootkit Property: Normal

File Size: 58880 bytes

File: c:\windows\system32\riched20.dll

Product: Microsoft RichEdit Control, version 3.0

Page 940: Prev

Product Version: 3.0

Company: Microsoft Corporation

Description: Rich Text Edit Control, v3.0

Original FileName: riched20.dll

File Version Label: 5.30.23.1230

File Version Number: 5.30.23.1230

SHA-1 Digest: 0xA9A7D69448D44BF2BBCB61514BDEE9658D12B0E4

MD5 Digest: 0xC1FAEA15E41F62D7BFA7FBC395C24BA6

CRC32 Digest: 0xE13FBE07

Rootkit Property: Normal

File Size: 433664 bytes

File: c:\windows\system32\riched32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Wrapper Dll for Richedit 1.0

Original FileName: riched32.dll

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

File Version Number: 5.1.2600.0

SHA-1 Digest: 0x59903E96E1EDC257A4850D45AD8C63F17454AE9D

MD5 Digest: 0xD4931277DF5393E84A48B27DF40914E3

CRC32 Digest: 0x30613B77

Rootkit Property: Normal

File Size: 3584 bytes

Page 941: Prev

File: c:\windows\system32\rpcrt4.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.6022

Company: Microsoft Corporation

Description: Remote Procedure Call Runtime

Original FileName: rpcrt4.dll

File Version Label: 5.1.2600.6022 (xpsp_sp3_gdr.100813-1643)

File Version Number: 5.1.2600.6022

SHA-1 Digest: 0xED649542CB1C74752EF0FA7CCEBC388339D4E478

MD5 Digest: 0xD4502F124289A31976130CCCB014C9AA

CRC32 Digest: 0xE9ECB923

Rootkit Property: Normal

File Size: 590848 bytes

File: c:\windows\system32\rpcss.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5755

Company: Microsoft Corporation

Description: Distributed COM Services

Original FileName: rpcss.dll

File Version Label: 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)

File Version Number: 5.1.2600.5755

SHA-1 Digest: 0x7391155A9976797C2072E013FA3C38197B268DE7

MD5 Digest: 0x6B27A5C03DFB94B4245739065431322C

Page 942: Prev

CRC32 Digest: 0x87442341

Rootkit Property: Normal

File Size: 401408 bytes

File: c:\windows\system32\rsaenh.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5507

Company: Microsoft Corporation

Description: Microsoft Enhanced Cryptographic Provider

Original FileName: rsaenh.dll

File Version Label: 5.1.2600.5507 (xpsp.080318-1711)

File Version Number: 5.1.2600.5507

SHA-1 Digest: 0x8E8DD9DB03ED502D915DEE9E4F9FD3F10593E27C

MD5 Digest: 0x54DAE3EA34802B4ED9AE1C6B1209FA56

CRC32 Digest: 0x3D3E2E74

Rootkit Property: Normal

File Size: 208384 bytes

File: c:\windows\system32\rsvp.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.0

Company: Microsoft Corporation

Description: Microsoft RSVP

Original FileName: rsvp.exe

File Version Label: 5.1.2600.0 (xpclient.010817-1148)

Page 943: Prev

File Version Number: 5.1.2600.0

SHA-1 Digest: 0xF3AFA282797985C7AD0E48D6D236BE2EF93FD4B9

MD5 Digest: 0x471B3F9741D762ABE75E9DEEA4787E47

CRC32 Digest: 0x9FF36E74

Rootkit Property: Normal

File Size: 132608 bytes

File: c:\windows\system32\rsvpsp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Windows Rsvp 1.0 Service Provider

Original FileName: rsvpsp.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x980149E92439FF690253EDB335B3F81484F0C5FB

MD5 Digest: 0x72451FD61DDBB0A1FB071B7C3CDE5594

CRC32 Digest: 0x8C7577BA

Rootkit Property: Normal

File Size: 92672 bytes

File: c:\windows\system32\rtutils.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Page 944: Prev

Description: Routing Utilities

Original FileName: RTUTILS.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x1878DB387ED7E53FFD7B8150C26DDAF51560C447

MD5 Digest: 0x876CCF164E08D6B903CD14398E056DD2

CRC32 Digest: 0x0ECAC511

Rootkit Property: Normal

File Size: 44032 bytes

File: c:\windows\system32\samlib.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: SAM Library DLL

Original FileName: SAMLib.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA1D75237CEDC30A45117BA1C2040DDFD9F7BB667

MD5 Digest: 0x8329A39D5A402A75A74301D6A62ECDA1

CRC32 Digest: 0xF7AAF5EE

Rootkit Property: Normal

File Size: 64000 bytes

File: c:\windows\system32\samsrv.dll

Page 945: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: SAM Server DLL

Original FileName: samsrv.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x6BAC2D36C3775FDAB8B3CE06002526C0CAF1D4EE

MD5 Digest: 0xF05B8CDB7FE0E55DCCFB1D946CE80064

CRC32 Digest: 0x5DAA448B

Rootkit Property: Normal

File Size: 415744 bytes

File: c:\windows\system32\scardsvr.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Smart Card Resource Management Server

Original FileName: SCardSvr.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x473F1F9D753CE9F5438DC747E464F4D9CBF8D1B6

MD5 Digest: 0x86D007E7A654B9A71D1D7D856B104353

CRC32 Digest: 0x22D15646

Rootkit Property: Normal

Page 946: Prev

File Size: 95744 bytes

File: c:\windows\system32\scecli.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Security Configuration Editor Client Engine

Original FileName: scecli

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x3A3535122DA168A549D2007123E9AE06146F2002

MD5 Digest: 0xA86BB5E61BF3E39B62AB4C7E7085A084

CRC32 Digest: 0x72380630

Rootkit Property: Normal

File Size: 181248 bytes

File: c:\windows\system32\scesrv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Security Configuration Editor Engine

Original FileName: scesrv

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5645735BC87F7A0948FD5F04D72A0DE95215C690

Page 947: Prev

MD5 Digest: 0xB24A42A413E694AD73FDFB7FBD492C31

CRC32 Digest: 0x4EFB5F51

Rootkit Property: Normal

File Size: 314880 bytes

File: c:\windows\system32\schannel.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.6006

Company: Microsoft Corporation

Description: TLS / SSL Security Provider

Original FileName: schannel.dll

File Version Label: 5.1.2600.6006 (xpsp_sp3_gdr.100629-1818)

File Version Number: 5.1.2600.6006

SHA-1 Digest: 0xEEFFE7CA576150637A240C658F89BD526D51E894

MD5 Digest: 0x30ACE70B3C0242F0D1AC3B4FA708710F

CRC32 Digest: 0xCB363DC4

Rootkit Property: Normal

File Size: 149504 bytes

File: c:\windows\system32\schedsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Task Scheduler Engine

Original FileName: schedsvc.dll

Page 948: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x758C9FB6F57EE6756837EFB4E0B453467E90633B

MD5 Digest: 0x0A9A7365A1CA4319AA7C1D6CD8E4EAFA

CRC32 Digest: 0x0F0B6BC3

Rootkit Property: Normal

File Size: 192512 bytes

File: c:\windows\system32\sclgntfy.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Secondary Logon Service Notification DLL

Original FileName: SCLGNTFY.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x86840F7152371D7AA669D6EC424FA0A8E2330CC6

MD5 Digest: 0x63FF9068E5BDA0BC9ECD38FBBB216E24

CRC32 Digest: 0xAB2B1EAF

Rootkit Property: Normal

File Size: 20480 bytes

File: c:\windows\system32\seclogon.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 949: Prev

Company: Microsoft Corporation

Description: Secondary Logon Service DLL

Original FileName: SECLOGON.EXE

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5C4AB46327948B6B877EB0076461F9AD91B0717C

MD5 Digest: 0xCBE612E2BB6A10E3563336191EDA1250

CRC32 Digest: 0xC88D3600

Rootkit Property: Normal

File Size: 18944 bytes

File: c:\windows\system32\secur32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5834

Company: Microsoft Corporation

Description: Security Support Provider Interface

Original FileName: security.dll

File Version Label: 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305)

File Version Number: 5.1.2600.5834

SHA-1 Digest: 0x9A593CBB1A335A58B168007CCBB2DC162CF68845

MD5 Digest: 0x5357826C8A8DD6A07F17C48BB45BE46E

CRC32 Digest: 0x3D0002B7

Rootkit Property: Normal

File Size: 56832 bytes

Page 950: Prev

File: c:\windows\system32\selnt.dll

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0x612EB2C742D93F4E5B078ADD6D9CE6FAE28C71FB

MD5 Digest: 0x3F806DB86057B458759E8021367B8BED

CRC32 Digest: 0x09DA545A

Rootkit Property: Normal

File Size: 118784 bytes

File: c:\windows\system32\sens.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: System Event Notification Service (SENS)

Original FileName: sens.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x39051EBA6C2A27336D3A8056B0813C21FC595E7D

MD5 Digest: 0x7FDD5D0684ECA8C1F68B4D99D124DCD0

CRC32 Digest: 0x763429BD

Page 951: Prev

Rootkit Property: Normal

File Size: 39424 bytes

File: c:\windows\system32\sensapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: SENS Connectivity API DLL

Original FileName: SensApi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x64A18E53100F6DB32C39B34A1C49EB5E2EB6AD0D

MD5 Digest: 0x3CBA2210FA39C6ED7895634842E930DD

CRC32 Digest: 0x328005C5

Rootkit Property: Normal

File Size: 7168 bytes

File: c:\windows\system32\sensor.dll

Product: ThinkVantage Active Protection System

Product Version: 1.54

Company: Lenovo.

Description: ThinkVantage Active Protection System - Shock Sensor Module

Original FileName: Sensor.dll

File Version Label: 1.54.0.0

File Version Number: 1.54.0.0

Page 952: Prev

SHA-1 Digest: 0xF536E41B173C23CEDDFFB81B3852721D42957D61

MD5 Digest: 0xA851D183453D80C34C4439469DF91871

CRC32 Digest: 0x935A8790

Rootkit Property: Normal

File Size: 20264 bytes

File: c:\windows\system32\services.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5755

Company: Microsoft Corporation

Description: Services and Controller app

Original FileName: services.exe

File Version Label: 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)

File Version Number: 5.1.2600.5755

SHA-1 Digest: 0xDE3701D2C03D9AE29B2D87ECCAFBBCADF1BFB7E3

MD5 Digest: 0x65DF52F5B8B6E9BBD183505225C37315

CRC32 Digest: 0x6D10AC3D

Rootkit Property: Normal

File Size: 110592 bytes

File: c:\windows\system32\sessmgr.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® Remote Desktop Help Session Manager

Page 953: Prev

Original FileName: SessMgr.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFCAA4B2EE3964183797BC8336B946E59E90D182A

MD5 Digest: 0x3C37BF86641BDA977C3BF8A840F3B7FA

CRC32 Digest: 0x10EABD87

Rootkit Property: Normal

File Size: 141312 bytes

File: c:\windows\system32\setupapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Setup API

Original FileName: SETUPAPI.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x8109DF4E050264532BB5757E9DA4AE12E29B800F

MD5 Digest: 0x24192246760E0E64435522E246B1D6C2

CRC32 Digest: 0xE6D51D9A

Rootkit Property: Normal

File Size: 985088 bytes

File: c:\windows\system32\sfc.dll

Product: Microsoft® Windows® Operating System

Page 954: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows File Protection

Original FileName: sfc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xEAC3E355EE3242743D2DFBBC12C47C34B4A13DAA

MD5 Digest: 0x96E1C926F22EE1BFBAE82901A35F6BF3

CRC32 Digest: 0x5058DDEF

Rootkit Property: Normal

File Size: 5120 bytes

File: c:\windows\system32\sfc_os.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows File Protection

Original FileName: sfc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x7E12051C5FAA2ABF0107A606B43A9A2528393224

MD5 Digest: 0x6B5DB6789177A4FD0DEBC248041D0739

CRC32 Digest: 0x296E5930

Rootkit Property: Normal

File Size: 140288 bytes

Page 955: Prev

File: c:\windows\system32\shdocvw.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.6003

Company: Microsoft Corporation

Description: Shell Doc Object and Control Library

Original FileName: SHDOCVW.DLL

File Version Label: 6.00.2900.6003 (xpsp_sp3_gdr.100623-1635)

File Version Number: 6.0.2900.6003

SHA-1 Digest: 0x6121EF8E4C16ED84E6E707C7F6911E4C2107F161

MD5 Digest: 0x900F427863AFA5634CB6ADF9604C735D

CRC32 Digest: 0xEA4A7032

Rootkit Property: Normal

File Size: 1509888 bytes

File: c:\windows\system32\shell32.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.6018

Company: Microsoft Corporation

Description: Windows Shell Common Dll

Original FileName: SHELL32.DLL

File Version Label: 6.00.2900.6018 (xpsp_sp3_gdr.100726-1746)

File Version Number: 6.0.2900.6018

SHA-1 Digest: 0x1C26A71195ED1158069E97BB826B317FD8DC5C57

MD5 Digest: 0x304CFF53C9C9BEB03607ABE94A8FC781

Page 956: Prev

CRC32 Digest: 0x73D4EFBD

Rootkit Property: Normal

File Size: 8462336 bytes

File: c:\windows\system32\shfolder.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Shell Folder Service

Original FileName: shfolder.dll

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x374CD24B1F7EF578EE9198D68BC34C3D7783A987

MD5 Digest: 0xC14AA05881A35B6D6BB8D55B117EE22D

CRC32 Digest: 0x8009EA65

Rootkit Property: Normal

File Size: 25088 bytes

File: c:\windows\system32\shgina.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Windows Shell User Logon

Original FileName: SHGINA.DLL

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

Page 957: Prev

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x4D1B73D14ADD580FDE84F452836CBDFBE2AA3189

MD5 Digest: 0xE5EDBD51476DB5001ABF5C82AE5C3DD1

CRC32 Digest: 0xBD6F53AD

Rootkit Property: Normal

File Size: 68096 bytes

File: c:\windows\system32\shimeng.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Shim Engine DLL

Original FileName: Shim Engine DLL (IAT)

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2AB219118AE324684EB7AAAF72EB4D9360ADE81F

MD5 Digest: 0x1F03103598BD817B1078DAB1326DDE11

CRC32 Digest: 0xD62E0F40

Rootkit Property: Normal

File Size: 65024 bytes

File: c:\windows\system32\shimgvw.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Page 958: Prev

Description: Windows Picture and Fax Viewer

Original FileName: shimgvw.dll

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x2E6B8B3277C0BDFEC7913CBE85EBD59DD684E355

MD5 Digest: 0xCC16718E92E558F22048D5C046D4DE6B

CRC32 Digest: 0x53A8D8C0

Rootkit Property: Normal

File Size: 438272 bytes

File: c:\windows\system32\shlwapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5912

Company: Microsoft Corporation

Description: Shell Light-weight Utility Library

Original FileName: SHLWAPI.DLL

File Version Label: 6.00.2900.5912 (xpsp_sp3_gdr.091207-1454)

File Version Number: 6.0.2900.5912

SHA-1 Digest: 0x81F36E4F58C0482984A58114A514C58666EEB791

MD5 Digest: 0xC448A248B743F5FB935C787A5D97268B

CRC32 Digest: 0xBDFA6F45

Rootkit Property: Normal

File Size: 474112 bytes

File: c:\windows\system32\shmgrate.exe

Page 959: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT User Data Migration Tool

Original FileName: shmgrate

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA758D0C6A98264BD0425AB4B5593E868C6BBCF9A

MD5 Digest: 0x2B86C9EEE08AF3B536203F1A13B464B5

CRC32 Digest: 0xE8FEED1B

Rootkit Property: Normal

File Size: 45056 bytes

File: c:\windows\system32\shscrap.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Shell scrap object handler

Original FileName: SHSCRAP.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xE93B4B76F5A733BE953D55C8A7F803859742B947

MD5 Digest: 0xBB6DF8EC2F2AAF61DE7CF7E721AF963A

CRC32 Digest: 0x4CC1DD4D

Rootkit Property: Normal

Page 960: Prev

File Size: 27648 bytes

File: c:\windows\system32\shsvcs.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Windows Shell Services Dll

Original FileName: SHSVCS.DLL

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x5738989E5C1300D3E4DE70FF1E5C91EBC025C825

MD5 Digest: 0x1926899BF9FFE2602B63074971700412

CRC32 Digest: 0xB07EEB13

Rootkit Property: Normal

File Size: 135168 bytes

File: c:\windows\system32\sl_anet.acm

Product: ACELP.net Audio Codec

Product Version: 3.02

Company: Sipro Lab Telecom Inc.

Description: Audio codec for MS ACM

Original FileName: sl_anet.acm

File Version Label: 3.02

File Version Number: 3.2.0.0

SHA-1 Digest: 0x147EFE268723A559A4C1552C4DB4C38C58824129

Page 961: Prev

MD5 Digest: 0x0DBB250A89E2E1C9281009AC269F0805

CRC32 Digest: 0x7C58F9A4

Rootkit Property: Normal

File Size: 86016 bytes

File: c:\windows\system32\smlogsvc.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Performance Logs and Alerts Service

Original FileName: SMLOGSVC.EXE

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x8CFB37BA72DA56B08EB5637732EFB10C1494320C

MD5 Digest: 0xC7ABBC59B43274B1109DF6B24D617051

CRC32 Digest: 0x3363558C

Rootkit Property: Normal

File Size: 89600 bytes

File: c:\windows\system32\smss.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT Session Manager

Original FileName: smss.exe

Page 962: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x406503E95E8BF9B387B201AAC141520E5F266FF4

MD5 Digest: 0x5F816C1F539266D2D4C78694239DA0B5

CRC32 Digest: 0xAA6D1970

Rootkit Property: Normal

File Size: 50688 bytes

File: c:\windows\system32\snmpapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: SNMP Utility Library

Original FileName: snmpapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x1D85CAE59C91F1EEC53266C3442E6EB6AF40F7E6

MD5 Digest: 0x5C1F0537E61F87B435F56E00B4F20EE8

CRC32 Digest: 0x849DBEB4

Rootkit Property: Normal

File Size: 18944 bytes

File: c:\windows\system32\spool\drivers\w32x86\3\mxdwdrv.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.0.6001.22204

Page 963: Prev

Company: Microsoft Corporation

Description: Microsoft XPS Document Writer

Original FileName: MXDWDRV.DLL

File Version Label: 6.0.6001.22204 (vistasp1_ldr.080616-1509)

File Version Number: 0.3.6001.22204

SHA-1 Digest: 0xCAF9532BC74B902B5D898D8F19926F82F8169BC9

MD5 Digest: 0x63B6E4C603FBDE9299BA77B721265712

CRC32 Digest: 0x3B0DE8D3

Rootkit Property: Normal

File Size: 765440 bytes

File: c:\windows\system32\spool\drivers\w32x86\3\ts#tsc-u.dll

Product: TSPL Driver

Product Version: 7.1.6 M-6

Company: Seagull Scientific, Inc.

Description: TSPL Driver

Original FileName: tsc-u.dll

File Version Label: 7.1.6.6

File Version Number: 7.1.6.6

SHA-1 Digest: 0xF071F090E93CB2A4F9473C668F67234BC1A99821

MD5 Digest: 0x82D774E89BBBC7FD2640A6147844A036

CRC32 Digest: 0x67640DC1

Rootkit Property: Normal

File Size: 1988752 bytes

Page 964: Prev

File: c:\windows\system32\spool\drivers\w32x86\3\unidrvui.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.0.6001.22116

Company: Microsoft Corporation

Description: UniDriver User Interface

Original FileName: UNIDRVUI.DLL

File Version Label: 6.0.6001.22116 (vistasp1_ldr.080215-1730)

File Version Number: 0.3.6001.22116

SHA-1 Digest: 0x1CB16CACF32C7EA7FAC5A6F4B0AB949232B5528E

MD5 Digest: 0x3182F47A67F86B5DD991E0FB7659D0E3

CRC32 Digest: 0x1BD47B11

Rootkit Property: Normal

File Size: 744960 bytes

File: c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.1.2600.5635

Company: Microsoft Corporation

Description: Print Filter Pipeline Proxy

Original FileName: PrintFilterPipelinePrxy.dll

File Version Label: 6.1.2600.5635 (xpsp_sp3_qfe.080704-1744)

File Version Number: 6.1.2600.5635

SHA-1 Digest: 0x9509730862C86C7CBB74527BE332ACD5BAF4A97E

MD5 Digest: 0xEEE7F12D9FF46F68FBC0DA059A359E9E

CRC32 Digest: 0x5472E43E

Page 965: Prev

Rootkit Property: Normal

File Size: 89088 bytes

File: c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll

Product: Microsoft Office Document Imaging

Product Version: 11.3.8166.2

Company: Microsoft Corporation

Description: Microsoft® Document Imaging

Original FileName: MSPCORE.DLL

File Version Label: 11.3.8166.2

File Version Number: 0.3.8166.2

SHA-1 Digest: 0x057910EFEB333D960CB1F1A23F4A7054B916DBC5

MD5 Digest: 0xEA8647A21BCB56C5F15712D4B7407501

CRC32 Digest: 0x128A032C

Rootkit Property: Normal

File Size: 28552 bytes

File: c:\windows\system32\spoolss.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Spooler SubSystem DLL

Original FileName: spoolss.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

Page 966: Prev

SHA-1 Digest: 0xFF496883F453E05C7266C817D167CD6BFE510309

MD5 Digest: 0x79E3A8C328E7E569C32B0998377D9742

CRC32 Digest: 0x8CA02048

Rootkit Property: Normal

File Size: 75264 bytes

File: c:\windows\system32\spoolsv.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.6024

Company: Microsoft Corporation

Description: Spooler SubSystem App

Original FileName: spoolsv.exe

File Version Label: 5.1.2600.6024 (xpsp_sp3_gdr.100817-1626)

File Version Number: 5.1.2600.6024

SHA-1 Digest: 0xE6E904B84332191D44DE729DEB7BFED9BCEF2CE9

MD5 Digest: 0x60784F891563FB1B767F70117FC2428F

CRC32 Digest: 0x913C6AAE

Rootkit Property: Normal

File Size: 58880 bytes

File: c:\windows\system32\srsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: System Restore Service

Page 967: Prev

Original FileName: SERVICE.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x09746DBE84432BA54C6DC0B363BA716331C10975

MD5 Digest: 0x3805DF0AC4296A34BA4BF93B346CC378

CRC32 Digest: 0xE6103E47

Rootkit Property: Normal

File Size: 171008 bytes

File: c:\windows\system32\srvsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.6031

Company: Microsoft Corporation

Description: Server Service DLL

Original FileName: SRVSVC.DLL

File Version Label: 5.1.2600.6031 (xpsp_sp3_gdr.100826-1646)

File Version Number: 5.1.2600.6031

SHA-1 Digest: 0x064DEE60E5F82259247A665B59214C14496A2730

MD5 Digest: 0x3A7C3CBE5D96B8AE96CE81F0B22FB527

CRC32 Digest: 0x1E5B488A

Rootkit Property: Normal

File Size: 99840 bytes

File: c:\windows\system32\ssdpsrv.dll

Product: Microsoft® Windows® Operating System

Page 968: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: SSDP Service DLL

Original FileName: ssdpsrv.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x8E9F64025F2A29CB7BC933DD2306C40BFD5FD04E

MD5 Digest: 0x0A5679B3714EDAB99E357057EE88FCA6

CRC32 Digest: 0xD5853B1F

Rootkit Property: Normal

File Size: 71680 bytes

File: c:\windows\system32\ssnetmon.dll

Product: Seagull Printer Drivers

Product Version: 7.1.6

Company: Seagull Scientific, Inc.

Description: Seagull Network Monitor

Original FileName: ssnetmon.dll

File Version Label: 7.1.6

File Version Number: 7.1.6.0

SHA-1 Digest: 0xA2B707B65CC5F05870DB5D050F49B948A1A69C65

MD5 Digest: 0x1F19FD17ABED39CBC8132BB976B5410D

CRC32 Digest: 0xF355FC61

Rootkit Property: Normal

File Size: 666768 bytes

Page 969: Prev

File: c:\windows\system32\sti.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Still Image Devices client DLL

Original FileName: STI.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x707EF7D5DE7FF952D76703F113FF69920E4F56AA

MD5 Digest: 0x3CAEAE7608F1BD7BA873A3B02895B106

CRC32 Digest: 0x1E67ACB2

Rootkit Property: Normal

File Size: 68096 bytes

File: c:\windows\system32\stobject.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Systray shell service object

Original FileName: stobject.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x28AB6FCB581D93488B826473EC57B9D9C485EFCB

MD5 Digest: 0x50512FC9B7878E3C2C147BC17326A7DB

Page 970: Prev

CRC32 Digest: 0xE1DE7115

Rootkit Property: Normal

File Size: 121856 bytes

File: c:\windows\system32\svchost.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Generic Host Process for Win32 Services

Original FileName: svchost.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x49083AE3725A0488E0A8FBBE1335C745F70C4667

MD5 Digest: 0x27C6D03BCDB8CFEB96B716F3D8BE3E18

CRC32 Digest: 0x6EF02438

Rootkit Property: Normal

File Size: 14336 bytes

File: c:\windows\system32\sxs.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Fusion 2.5

Original FileName: SXS.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

Page 971: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xC7C0702F8EE09D5D5DA9B9A2995E41B15622E619

MD5 Digest: 0x694503348B586E99D56C0E30AB5B3EF8

CRC32 Digest: 0x62C7C517

Rootkit Property: Normal

File Size: 713216 bytes

File: c:\windows\system32\symneti.dll

Product: Symantec Security Drivers

Product Version: 6.0

Company: Symantec Corporation

Description: Symantec Network Driver Interface

Original FileName: SymNeti.dll

File Version Label: 6.0.4.402

File Version Number: 6.0.4.402

SHA-1 Digest: 0x63D01F94B352CEF3B7A4314C563221028F7A8127

MD5 Digest: 0xFED2AD326C4F022F11150C9185AFB664

CRC32 Digest: 0xBDACDBE7

Rootkit Property: Normal

File Size: 534208 bytes

File: c:\windows\system32\symredir.dll

Product: Symantec Security Drivers

Product Version: 6.0

Company: Symantec Corporation

Page 972: Prev

Description: Redirector Interface DLL

Original FileName: SYMREDIR

File Version Label: 6.0.4.402

File Version Number: 6.0.4.402

SHA-1 Digest: 0x89EF87316FB73449C8B7E35F2B332152E7A28F84

MD5 Digest: 0xB8AB01047192F91E828FE965E69DCFBC

CRC32 Digest: 0x802CBC3D

Rootkit Property: Normal

File Size: 161472 bytes

File: c:\windows\system32\syncom.dll

Product: COM SDK

Product Version: 7.5.17.25 10Aug07

Company: Synaptics, Inc.

Description: SynCOM

Original FileName: SynCOM.dll

File Version Label: 7.5.17.25 10Aug07

File Version Number: 7.5.17.25

SHA-1 Digest: 0x0FA9E31ED7F78EF92A67E3BF7F8EA93FEF92921F

MD5 Digest: 0x35AB3ECD0E2060A470AA02E0EE0B653A

CRC32 Digest: 0xE5469C45

Rootkit Property: Normal

File Size: 73728 bytes

File: c:\windows\system32\syntpapi.dll

Page 973: Prev

Product: Progressive Touch

Product Version: 7.5.17.25 10Aug07

Company: Synaptics, Inc.

Description: SynTPAPI

Original FileName: SynTPAPI.dll

File Version Label: 7.5.17.25 10Aug07

File Version Number: 7.5.17.25

SHA-1 Digest: 0xE6E749109D87304DBA37DFB87076628839D742AF

MD5 Digest: 0xD09E6A7AEF03459FC782364496F3963C

CRC32 Digest: 0x2217B8F7

Rootkit Property: Normal

File Size: 94208 bytes

File: c:\windows\system32\syntpfcs.dll

Product: Progressive Touch

Product Version: 7.5.17.25 10Aug07

Company: Synaptics, Inc.

Description: SynTPFcs

Original FileName: SynTPFcs.dll

File Version Label: 7.5.17.25 10Aug07

File Version Number: 7.5.17.25

SHA-1 Digest: 0xBBEA45AA6663CCB02C4668383F3BAEC919AA5F57

MD5 Digest: 0x833562F810720A242063FAD354C3A602

CRC32 Digest: 0x844498C8

Rootkit Property: Normal

Page 974: Prev

File Size: 65536 bytes

File: c:\windows\system32\tapi32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® Windows(TM) Telephony API Client DLL

Original FileName: TAPI32.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xDCC43381656ECEC8CA33D202A078ED766DCE9CBF

MD5 Digest: 0x00AABF131B4823785818DB99A075A313

CRC32 Digest: 0xD3D0A559

Rootkit Property: Normal

File Size: 181760 bytes

File: c:\windows\system32\tapisrv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® Windows(TM) Telephony Server

Original FileName: TAPISRV.EXE

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x16876B6B89618DC2FDA408B9A1BD2BD7C7FC547A

Page 975: Prev

MD5 Digest: 0x3CB78C17BB664637787C9A1C98F79C38

CRC32 Digest: 0x5797C77E

Rootkit Property: Normal

File Size: 249856 bytes

File: c:\windows\system32\tcpmib.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Standard TCP/IP Port Monitor Helper DLL

Original FileName: tcpmib.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2F98B13B18CB26187B3F3F39894E87F9E4249CF7

MD5 Digest: 0x8357809E111E09393633039769D96281

CRC32 Digest: 0x13843F38

Rootkit Property: Normal

File Size: 14848 bytes

File: c:\windows\system32\tcpmon.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Standard TCP/IP Port Monitor DLL

Original FileName: tcpmon.dll

Page 976: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xED3EE1054E98AC224CE9662E469C6386FB515253

MD5 Digest: 0xAE0382AD9C73D343D85E1A50C80B7C20

CRC32 Digest: 0x8ABC138C

Rootkit Property: Normal

File Size: 45568 bytes

File: c:\windows\system32\termsrv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Terminal Server Service

Original FileName: termsrv.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x86773AED393573D4BD59481185910BBAAF85790F

MD5 Digest: 0xFF3477C03BE7201C294C35F684B3479F

CRC32 Digest: 0xE086DA80

Rootkit Property: Normal

File Size: 295424 bytes

File: c:\windows\system32\themeui.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Page 977: Prev

Company: Microsoft Corporation

Description: Windows Theme API

Original FileName: ThemeUI.DLL

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x0B9C56F1184DE6E775AE176D0D82102D62C721B5

MD5 Digest: 0xA314EEA2A503A8E04085201E436384A5

CRC32 Digest: 0xB793D462

Rootkit Property: Normal

File Size: 385536 bytes

File: c:\windows\system32\tlntsvr.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Telnet

Original FileName: tlntsvr.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x1B4296B3D7B5DA0ED84239F1344196486F912276

MD5 Digest: 0xDB7205804759FF62C34E3EFD8A4CC76A

CRC32 Digest: 0x3F2843EE

Rootkit Property: Normal

File Size: 73216 bytes

Page 978: Prev

File: c:\windows\system32\tp4ex.exe

Product: TrackPoint Accessibility Features

Product Version: 1.11

Company: Lenovo Group Limited

Description: TrackPoint Accessibility Features

Original FileName: TP4EX.EXE

File Version Label: 1.11.00

File Version Number: 1.1.1.0

SHA-1 Digest: 0xAF67A473EB1ECF3003719E5CC86D9E518738A780

MD5 Digest: 0x38F143A10A8E723026499041501B9563

CRC32 Digest: 0xC2A89077

Rootkit Property: Normal

File Size: 65536 bytes

File: c:\windows\system32\tphdexlg.exe

Product: ThinkVantage Active Protection System

Product Version: 1.54

Company: Lenovo.

Description: ThinkVantage Active Protection System - HDD Logger Module

Original FileName: TPHDEXLG.exe

File Version Label: 1.54.0.0

File Version Number: 1.54.0.0

SHA-1 Digest: 0x9DFDDE33B7EDABB92F6A68D4FCEB9A627F320EAA

MD5 Digest: 0x3663C0F611711DAC453636AF562F0831

CRC32 Digest: 0xDDCEC38B

Page 979: Prev

Rootkit Property: Normal

File Size: 37424 bytes

File: c:\windows\system32\tpkmpsvc.exe

Product:

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 0.0.0.0

SHA-1 Digest: 0xF7B36CD2437205018F44F3C71F858F4C49462CA9

MD5 Digest: 0xDFB268FF0A6DCB9280015FF527F892FF

CRC32 Digest: 0xD4046A5C

Rootkit Property: Normal

File Size: 32768 bytes

File: c:\windows\system32\tpshocks.exe

Product: ThinkVantage Active Protection System

Product Version: 1.54

Company: Lenovo.

Description: ThinkVantage Active Protection System

Original FileName: TpShocks.exe

File Version Label: 1.54.0.1

File Version Number: 1.54.0.1

Page 980: Prev

SHA-1 Digest: 0xC3B6DEA18A3F598AE6691590CD810ABEF12312EA

MD5 Digest: 0x686CD234BF4B816291A858782C71269B

CRC32 Digest: 0xED0AEC48

Rootkit Property: Normal

File Size: 181536 bytes

File: c:\windows\system32\trkwks.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Distributed Link Tracking Client

Original FileName: trkwks.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFB900E3DF8FCBD98C3D45414C6F6B67534C5F5FB

MD5 Digest: 0x55BCA12F7F523D35CA3CB833C725F54E

CRC32 Digest: 0x8B7DDB03

Rootkit Property: Normal

File Size: 90112 bytes

File: c:\windows\system32\tsbyuv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5908

Company: Microsoft Corporation

Description: Toshiba Video Codec

Page 981: Prev

Original FileName: tsbyuv.dll

File Version Label: 5.1.2600.5908 (xpsp_sp3_gdr.091127-0541)

File Version Number: 5.1.2600.5908

SHA-1 Digest: 0xA9F1AB1581D48C0D29E1E6E9A16B217E2F58BD45

MD5 Digest: 0xB08F8FFBA4570E21A71C38E00CC678E7

CRC32 Digest: 0xE6036469

Rootkit Property: Normal

File Size: 8704 bytes

File: c:\windows\system32\tsccvid.dll

Product: TechSmith Screen Capture Codec

Product Version: 7.0.0

Company: TechSmith Corporation

Description: TechSmith Screen Capture Codec

Original FileName: tsccvid.dll

File Version Label: 3.0.0

File Version Number: 3.0.0.0

SHA-1 Digest: 0x282A6F0BB43C2AC7B1DC699AA5ECDD8964C4819F

MD5 Digest: 0x81C6C0F6A05BF06EC001360A9C7EF476

CRC32 Digest: 0x4FEDA0E9

Rootkit Property: Normal

File Size: 594944 bytes

File: c:\windows\system32\tsd32.dll

Product:

Page 982: Prev

Product Version:

Company:

Description:

Original FileName:

File Version Label:

File Version Number: 1.3.3.7

SHA-1 Digest: 0x397EBA5DD6DC8C6FF30E9A6A730750BFC70AA028

MD5 Digest: 0x735F504DEEFE4E2AD06360FCE2842DD4

CRC32 Digest: 0x399070E0

Rootkit Property: Normal

File Size: 15360 bytes

File: c:\windows\system32\tssoft32.acm

Product: DSP GROUP Windows NT(TM) TrueSpeech CODEC

Product Version: 1.01

Company: DSP GROUP, INC.

Description: DSP Group TrueSpeech(TM) Audio Codec for MSACM V3.50

Original FileName: tssoft32.acm

File Version Label: 1.01

File Version Number: 1.1.1.5

SHA-1 Digest: 0x65C82447B37A808BD9664558155F3250CE9B68AE

MD5 Digest: 0xE8CD0D7E169ECCE2D4FD829DAAB786ED

CRC32 Digest: 0xDD78F4D9

Rootkit Property: Normal

File Size: 8192 bytes

Page 983: Prev

File: c:\windows\system32\umpnpmgr.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: User-mode Plug-and-Play Service

Original FileName: Umpnpmgr.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x65AE55788D0CAD92E165889C154AC64D9F0598B6

MD5 Digest: 0x2EDFC2A8893435723AD80481803C6D5C

CRC32 Digest: 0x0AADB901

Rootkit Property: Normal

File Size: 123392 bytes

File: c:\windows\system32\unimdm.tsp

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Unimodem 5 Service Provider

Original FileName: UNIMDM.TSP

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x309282CE45344FA38508CFD6420E7E66E701FA5C

MD5 Digest: 0xAACE07FE34FADDDF973CE068A6424957

Page 984: Prev

CRC32 Digest: 0xE03B2B3B

Rootkit Property: Normal

File Size: 206848 bytes

File: c:\windows\system32\unimdmat.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Unimodem Service Provider AT Mini Driver

Original FileName: UNIMDMAT.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x53970EBE28B093890C124A1B416E3378DA91FEFE

MD5 Digest: 0x19AE6CBA05B9005698A6DEDCC88F202E

CRC32 Digest: 0xFCC0FADE

Rootkit Property: Normal

File Size: 74240 bytes

File: c:\windows\system32\uniplat.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Unimodem AT Mini Driver Platform Driver for Windows NT

Original FileName: UNIPLAT.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

Page 985: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xC639AC75DA5D2DFAF0C6A7A590E4F2FB6A5FFF84

MD5 Digest: 0x995252FCC4692B5B97EE17D596C9386E

CRC32 Digest: 0xF849DCB1

Rootkit Property: Normal

File Size: 13824 bytes

File: c:\windows\system32\upnphost.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: UPnP Device Host

Original FileName: unpnhost.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xB54F93D7B07C96FFA5AEFA30365763A1F569901D

MD5 Digest: 0x1EBAFEB9A3FBDC41B8D9C7F0F687AD91

CRC32 Digest: 0x0988B487

Rootkit Property: Normal

File Size: 185856 bytes

File: c:\windows\system32\ups.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Page 986: Prev

Description: UPS Service

Original FileName: ups.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xC60CB7CB3BDFE65D162D8BA35DD84CE44EE61504

MD5 Digest: 0x05365FB38FCA1E98F7A566AAAF5D1815

CRC32 Digest: 0x65AF3E64

Rootkit Property: Normal

File Size: 18432 bytes

File: c:\windows\system32\urlmon.dll

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Company: Microsoft Corporation

Description: OLE32 Extensions for Win32

Original FileName: UrlMon.dll

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

SHA-1 Digest: 0xB41BAC558EA3C4B4D13FA0597D4CE598D4CEA748

MD5 Digest: 0x4B4059E49AE0927E67E44E86A3C31C73

CRC32 Digest: 0x3B97518C

Rootkit Property: Normal

File Size: 1168384 bytes

File: c:\windows\system32\usbmon.dll

Page 987: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Standard Dynamic Printing Port Monitor DLL

Original FileName: DynaMon.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x9400D205FEE7C9312D614679C3D581857F2A5851

MD5 Digest: 0xF26385E8BA4549B5186B774EC0E45D86

CRC32 Digest: 0x7365B2C9

Rootkit Property: Normal

File Size: 16896 bytes

File: c:\windows\system32\usbui.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: USB UI Dll

Original FileName: Usbui.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x78896647934DA856A458F65BD16D5AA2090BFF3F

MD5 Digest: 0xC2D7189CDD37453234A9BBCB58E50883

CRC32 Digest: 0x1625B212

Rootkit Property: Normal

Page 988: Prev

File Size: 74240 bytes

File: c:\windows\system32\user32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows XP USER API Client DLL

Original FileName: user32

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x08FE9FF1FE9B8FD237ADEDB10D65FB0447B91FE5

MD5 Digest: 0xB26B135FF1B9F60C9388B4A7D16F600B

CRC32 Digest: 0xF7C72264

Rootkit Property: Normal

File Size: 578560 bytes

File: c:\windows\system32\userenv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Userenv

Original FileName: userenv.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xC7264E1FE77EA0E6D615077DD7CC6CC06AAA02CD

Page 989: Prev

MD5 Digest: 0x43D13C80EBEC0135A3611E0F616F179B

CRC32 Digest: 0x1BA99286

Rootkit Property: Normal

File Size: 727040 bytes

File: c:\windows\system32\userinit.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Userinit Logon Application

Original FileName: USERINIT.EXE

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x513F8BDF67A5A9E09803CFB61F590B39F2683853

MD5 Digest: 0xA93AEE1928A9D7CE3E16D24EC7380F89

CRC32 Digest: 0x32EB2C8E

Rootkit Property: Normal

File Size: 26112 bytes

File: c:\windows\system32\usp10.dll

Product: Microsoft(R) Uniscribe Unicode script processor

Product Version: 1.0420.2600.5969

Company: Microsoft Corporation

Description: Uniscribe Unicode script processor

Original FileName: Uniscribe

Page 990: Prev

File Version Label: 1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716)

File Version Number: 1.420.2600.5969

SHA-1 Digest: 0x78867CCDA82084335552D02621D82F94822CB324

MD5 Digest: 0x9E03DC5AB51CFD0190541CE2038D819D

CRC32 Digest: 0x80584A23

Rootkit Property: Normal

File Size: 406016 bytes

File: c:\windows\system32\uxtheme.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Microsoft UxTheme Library

Original FileName: UxTheme.dll

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x16C4D24A172BFBC67F488D6B4086B9E10F8EAF4B

MD5 Digest: 0x7A2CC3719B255E6B5D74396183B7715B

CRC32 Digest: 0xA4A915A5

Rootkit Property: Normal

File Size: 218624 bytes

File: c:\windows\system32\version.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 991: Prev

Company: Microsoft Corporation

Description: Version Checking and File Installation Libraries

Original FileName: VERSION.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2105)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xADF263B658136CCB3CDE72D0E6DD634C5A5E5143

MD5 Digest: 0xC7CE131408739B0B3A318BE2D0032719

CRC32 Digest: 0x558B1DAF

Rootkit Property: Normal

File Size: 18944 bytes

File: c:\windows\system32\vssapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® Volume Shadow Copy Requestor/Writer Services API DLL

Original FileName: VSSAPI.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x17AC2A72BD6ABA372FEE767E07D5BF8601FB9D60

MD5 Digest: 0xACACB8B14E66109B8ACD6644B5574B9A

CRC32 Digest: 0x59064B5D

Rootkit Property: Normal

File Size: 430592 bytes

Page 992: Prev

File: c:\windows\system32\vssvc.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft® Volume Shadow Copy Service

Original FileName: VSSVC.EXE

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD299FC4D44B5B6DA61B6E7D68A9191B22378A9DD

MD5 Digest: 0x7A9DB3A67C333BF0BD42E42B8596854B

CRC32 Digest: 0x03D2EDCF

Rootkit Property: Normal

File Size: 289792 bytes

File: c:\windows\system32\w32time.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Time Service

Original FileName: w32time.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFCFC8C04B5C33C149EB9126D7FB5291E79247B2E

MD5 Digest: 0x54AF4B1D5459500EF0937F6D33B1914F

CRC32 Digest: 0x6FF7344F

Page 993: Prev

Rootkit Property: Normal

File Size: 175104 bytes

File: c:\windows\system32\w3ssl.dll

Product: Internet Information Services

Product Version: 6.0.2600.5512

Company: Microsoft Corporation

Description: SSL service for HTTP

Original FileName: w3ssl.dll

File Version Label: 6.0.2600.5512 (xpsp.080413-0852)

File Version Number: 6.0.2600.5512

SHA-1 Digest: 0xF064FB73806387C553992E246CDE51AE79288C3C

MD5 Digest: 0x6100A808600F44D999CEBDEF8841C7A3

CRC32 Digest: 0xEE56DBA7

Rootkit Property: Normal

File Size: 15872 bytes

File: c:\windows\system32\wbem\esscli.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI

Original FileName: esscli.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

Page 994: Prev

SHA-1 Digest: 0xB2D0E8A7B6896438EE491C51E2FA56612C9951A6

MD5 Digest: 0xE4616430709F440CF1809D88DC2366EA

CRC32 Digest: 0xF1412F08

Rootkit Property: Normal

File Size: 247808 bytes

File: c:\windows\system32\wbem\fastprox.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5755

Company: Microsoft Corporation

Description: WMI

Original FileName: fastprox.dll

File Version Label: 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)

File Version Number: 5.1.2600.5755

SHA-1 Digest: 0x29F6E565319817ADA1C7EDA8E3F506F38F4C23F7

MD5 Digest: 0x378A0AEFB11D8B0DC8C27B9F7604B88D

CRC32 Digest: 0x56F7CD3F

Rootkit Property: Normal

File Size: 473600 bytes

File: c:\windows\system32\wbem\ncprov.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Non-COM WMI Event Provision APIs

Page 995: Prev

Original FileName: NCObjAPI.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xA885FD4C17709D7FBC0A9F9971F7C4DB43BF4136

MD5 Digest: 0xD26451B540720A7313A9BCBE794DAF62

CRC32 Digest: 0x458C52A1

Rootkit Property: Normal

File Size: 47104 bytes

File: c:\windows\system32\wbem\repdrvfs.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI

Original FileName: repdrvfs.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x488B362891A75E52484980B3B39248EFC86DE31E

MD5 Digest: 0x942A17D2901A31EA68627CBFFCD268CC

CRC32 Digest: 0x199FF2AC

Rootkit Property: Normal

File Size: 178176 bytes

File: c:\windows\system32\wbem\wbemcomn.dll

Product: Microsoft® Windows® Operating System

Page 996: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI

Original FileName: wbemcomn.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x787787CE23BC188AEC19CD26E30EE5C19D5CDF45

MD5 Digest: 0xD95C71052E5EF63B55997FB31483D02F

CRC32 Digest: 0x8748D13B

Rootkit Property: Normal

File Size: 214528 bytes

File: c:\windows\system32\wbem\wbemcons.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI Standard Event Consumers

Original FileName: WbemCons

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x35BD4FE60CF1F35853E45FBA9A61491A686E8264

MD5 Digest: 0x6404807ABC7AF52FA3792697AE638B50

CRC32 Digest: 0x57BD7FA2

Rootkit Property: Normal

File Size: 71680 bytes

Page 997: Prev

File: c:\windows\system32\wbem\wbemcore.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI

Original FileName: wbemcore.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x89EAE0D9E00C6961F79AE8E3A82773A77B8C0598

MD5 Digest: 0xF0BF811622F2DD6C8E26EE4600D83731

CRC32 Digest: 0x4DC5C4D1

Rootkit Property: Normal

File Size: 531456 bytes

File: c:\windows\system32\wbem\wbemess.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI

Original FileName: wbemess.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD86D974398E3814809239B6B5190A43CBD95B96A

MD5 Digest: 0x26D881D27CBE51D3614E68D7313EA026

Page 998: Prev

CRC32 Digest: 0x212AB120

Rootkit Property: Normal

File Size: 273920 bytes

File: c:\windows\system32\wbem\wbemprox.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI

Original FileName: wbemprox.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xF2F0ED82F75364F090C2865AA2F9EFE1B9C13B20

MD5 Digest: 0x205ADD80FF8099B1A8101EB490B933D1

CRC32 Digest: 0x342D1851

Rootkit Property: Normal

File Size: 18944 bytes

File: c:\windows\system32\wbem\wbemsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI

Original FileName: wbemsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

Page 999: Prev

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xC92A0767EEE0B90644EA6968AAE3F7E0CD623D47

MD5 Digest: 0x010472D0AE758227C6F6E6933549C219

CRC32 Digest: 0xBC47F53D

Rootkit Property: Normal

File Size: 43520 bytes

File: c:\windows\system32\wbem\wmiapsrv.exe

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI Performance Adapter Service

Original FileName: WmiApSrv.exe

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x683EB00945019F3BCB86EA2BEDF7780DEE41450F

MD5 Digest: 0xE0673F1106E62A68D2257E376079F821

CRC32 Digest: 0xFEE03383

Rootkit Property: Normal

File Size: 126464 bytes

File: c:\windows\system32\wbem\wmiprov.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Page 1000: Prev

Description: WMI

Original FileName: mofd.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x89521E4DBB4CBBF5B335F9792D1C93955CE1FD37

MD5 Digest: 0x960F6D3CD9A1BA6435D7AADD102B297F

CRC32 Digest: 0x06512A58

Rootkit Property: Normal

File Size: 144896 bytes

File: c:\windows\system32\wbem\wmiprvsd.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5755

Company: Microsoft Corporation

Description: WMI

Original FileName: Wmiprvsd.dll

File Version Label: 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)

File Version Number: 5.1.2600.5755

SHA-1 Digest: 0x8594FD790439CC9AC2749EA85013628C8DBBB83A

MD5 Digest: 0x071143F687B4F887E21461CA6CC7EB29

CRC32 Digest: 0xD1C4D4CF

Rootkit Property: Normal

File Size: 453120 bytes

File: c:\windows\system32\wbem\wmiprvse.exe

Page 1001: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5755

Company: Microsoft Corporation

Description: WMI

Original FileName: Wmiprvse.exe

File Version Label: 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234)

File Version Number: 5.1.2600.5755

SHA-1 Digest: 0xF36CE7091903B73A6905460069877DDC209AD2E7

MD5 Digest: 0x798A9E6828997EEF4517ADA8A2259831

CRC32 Digest: 0x60E9934F

Rootkit Property: Normal

File Size: 227840 bytes

File: c:\windows\system32\wbem\wmisvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI

Original FileName: wmisvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFAB0423A2441D4D432F3E697E057BFD0B017E202

MD5 Digest: 0x2D0E4ED081963804CCC196A0929275B5

CRC32 Digest: 0x9D5A6F61

Rootkit Property: Normal

Page 1002: Prev

File Size: 144896 bytes

File: c:\windows\system32\wbem\wmiutils.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI

Original FileName: wmiutils.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFC506460954CC16DBF5036D26A422A1407E60914

MD5 Digest: 0x3273D1565BF30225C115B480A3BB2C9D

CRC32 Digest: 0x8A24AD87

Rootkit Property: Normal

File Size: 95232 bytes

File: c:\windows\system32\wbtapi.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: WBTApi DLL

Original FileName: WBTApi.dll

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0xEF540FADBF412F8495BD2E492F4FEEB6AB3D0422

Page 1003: Prev

MD5 Digest: 0x29AFBC3B4D46C1598E6015772B16503B

CRC32 Digest: 0x7209D53D

Rootkit Property: Normal

File Size: 507965 bytes

File: c:\windows\system32\wdigest.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5834

Company: Microsoft Corporation

Description: Microsoft Digest Access

Original FileName: WDIGEST.DLL

File Version Label: 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305)

File Version Number: 5.1.2600.5834

SHA-1 Digest: 0x7C117E3A5D78D0DEEBB0BE67D80AC8C9A25F6915

MD5 Digest: 0x3AAF9B35939FF9E58CCD18D41655C2FC

CRC32 Digest: 0x919B5C15

Rootkit Property: Normal

File Size: 54272 bytes

File: c:\windows\system32\wdmaud.drv

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WDM Audio driver mapper

Original FileName: WDMAUD.DRV

Page 1004: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x0F20A07D39C5E746C24A070E0C52093B987023CD

MD5 Digest: 0x680B56A8B62D1BCF4A0B2AAAD03D88E4

CRC32 Digest: 0xEEB914CA

Rootkit Property: Normal

File Size: 23552 bytes

File: c:\windows\system32\webcheck.dll

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Company: Microsoft Corporation

Description: Web Site Monitor

Original FileName: WEBCHECK.DLL

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

SHA-1 Digest: 0xB24D935424268E63F52B258E53425008A67E6F06

MD5 Digest: 0x579692ADC654211931DCFF96192F7439

CRC32 Digest: 0xB6EF6D7B

Rootkit Property: Normal

File Size: 233472 bytes

File: c:\windows\system32\webclnt.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 1005: Prev

Company: Microsoft Corporation

Description: Web DAV Service DLL

Original FileName: davsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFFDE670E2DDBFB23AD67761943EBA76740033668

MD5 Digest: 0x77A354E28153AD2D5E120A5A8687BC06

CRC32 Digest: 0xE5967737

Rootkit Property: Normal

File Size: 68096 bytes

File: c:\windows\system32\wiascr.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WIA Scripting Layer

Original FileName: WIAScr.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x4D4897DA84FC31F75C557D3A7C77B28A13AC4ACE

MD5 Digest: 0x477BB51076B926E1A68840C267540042

CRC32 Digest: 0x5BC5B7EC

Rootkit Property: Normal

File Size: 75776 bytes

Page 1006: Prev

File: c:\windows\system32\wiaservc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Still Image Devices Service

Original FileName: WIASERVC.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x931D552F15F4FCF94B006AD82708FAB817370AD3

MD5 Digest: 0x8BAD69CBAC032D4BBACFCE0306174C30

CRC32 Digest: 0x1F28CA15

Rootkit Property: Normal

File Size: 333824 bytes

File: c:\windows\system32\wiashext.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Imaging Devices Shell Folder UI

Original FileName: wiashext.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x9496F9056DDA5C47E51FCFA391031BEC2E4A011C

MD5 Digest: 0xBF67AC2C1F41BE892B98E9B8E91C0CB8

CRC32 Digest: 0x41002C82

Page 1007: Prev

Rootkit Property: Normal

File Size: 589312 bytes

File: c:\windows\system32\widcommsdk.dll

Product: Bluetooth Software

Product Version: 5.1.0.4700

Company: Broadcom Corporation.

Description: WidcommSdk DLL

Original FileName: WidcommSdk.dll

File Version Label: 5.1.0.4700

File Version Number: 5.1.0.4700

SHA-1 Digest: 0x462374F055F17A5F5A6C9370262699E3B743E564

MD5 Digest: 0x9E1EDA1A44EE69305AF96452FD54ECAA

CRC32 Digest: 0xC5BFA5A7

Rootkit Property: Normal

File Size: 573440 bytes

File: c:\windows\system32\win32spl.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: 32-bit Spooler API DLL

Original FileName: win32spl.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

Page 1008: Prev

SHA-1 Digest: 0xF07F806296C25CCFF4EA993B9BF80A59B45C1D44

MD5 Digest: 0x22DD6D7D4BFE2B8CE705CC950C8AEA4C

CRC32 Digest: 0xD75ED312

Rootkit Property: Normal

File Size: 102400 bytes

File: c:\windows\system32\winhttp.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5868

Company: Microsoft Corporation

Description: Windows HTTP Services

Original FileName: winhttp.dll

File Version Label: 5.1.2600.5868 (xpsp_sp3_gdr.090824-1328)

File Version Number: 5.1.2600.5868

SHA-1 Digest: 0x101FAF266CBBC95C9DFBDAAA26E0CEEDC97982CD

MD5 Digest: 0x8C77ECF3C7DCBB926312B7ECED6ECA75

CRC32 Digest: 0x9374C4AD

Rootkit Property: Normal

File Size: 354816 bytes

File: c:\windows\system32\wininet.dll

Product: Windows® Internet Explorer

Product Version: 7.00.6000.17093

Company: Microsoft Corporation

Description: Internet Extensions for Win32

Page 1009: Prev

Original FileName: wininet.dll

File Version Label: 7.00.6000.17093 (vista_gdr.101017-1200)

File Version Number: 7.0.6000.17093

SHA-1 Digest: 0x00BEBE028CC59D5EAC636831BAE0781A637C7C05

MD5 Digest: 0x67CD1C036ECC93B1B45B07A4AFDA1D96

CRC32 Digest: 0x7DB3A695

Rootkit Property: Normal

File Size: 832512 bytes

File: c:\windows\system32\winipsec.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows IPSec SPD Client DLL

Original FileName: winipsec.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x95D91D817E081ADE8EB653A907A31A17E2CD1D84

MD5 Digest: 0x248712EA6BA17B9FF0C542A3828375DD

CRC32 Digest: 0xABAEACB0

Rootkit Property: Normal

File Size: 32256 bytes

File: c:\windows\system32\winlogon.exe

Product: Microsoft® Windows® Operating System

Page 1010: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows NT Logon Application

Original FileName: WINLOGON.EXE

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xF77A7CD78877527023EBFB35E83B75EF59D3DF07

MD5 Digest: 0xED0EF0A136DEC83DF69F04118870003E

CRC32 Digest: 0xB74C262F

Rootkit Property: Normal

File Size: 507904 bytes

File: c:\windows\system32\winmm.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: MCI API DLL

Original FileName: WINMM.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-0845)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x51F42782ACDC790E4CABF402D71EF0FE24F9AD1B

MD5 Digest: 0xF1300D0B4C40754A01DF16F350F0EF60

CRC32 Digest: 0x9676D976

Rootkit Property: Normal

File Size: 176128 bytes

Page 1011: Prev

File: c:\windows\system32\winrnr.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: LDAP RnR Provider DLL

Original FileName: winrnr

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD8FCAAD1C1EB0E3ECEED691F93BA269D834AD22E

MD5 Digest: 0xD72B9EC3337B247A666F098F3D6B43DE

CRC32 Digest: 0xA73F0F7A

Rootkit Property: Normal

File Size: 16896 bytes

File: c:\windows\system32\winscard.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft Smart Card API

Original FileName: winscard.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xB0F303EF25ACBF33112F46BCC9A228C879A4264D

MD5 Digest: 0x02988B904C386B500CD08639C4C20EEA

Page 1012: Prev

CRC32 Digest: 0xB6678208

Rootkit Property: Normal

File Size: 99328 bytes

File: c:\windows\system32\winspool.drv

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Spooler Driver

Original FileName: winspool.drv

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xE413855355EA0C254B38BA85451A843E1FA526C5

MD5 Digest: 0xBD83ABA61E8ACCC8D9FFB869F29418CE

CRC32 Digest: 0x5915D447

Rootkit Property: Normal

File Size: 146432 bytes

File: c:\windows\system32\winsrv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.6001

Company: Microsoft Corporation

Description: Windows Server DLL

Original FileName: winsrv.dll

File Version Label: 5.1.2600.6001 (xpsp_sp3_gdr.100618-1712)

Page 1013: Prev

File Version Number: 5.1.2600.6001

SHA-1 Digest: 0x9A39B9F97C6EA8984B9971D8C6ADC7C28A0E67E7

MD5 Digest: 0x42B5427FAC23BF6F1F31E466B7FEB084

CRC32 Digest: 0x933D8E6E

Rootkit Property: Normal

File Size: 293376 bytes

File: c:\windows\system32\winsta.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Winstation Library

Original FileName: winsta.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x9BBCF260E84B31F633490D5624E828AFAA8D3FF1

MD5 Digest: 0x430CEB794F6E6EF8AC86958C242366D6

CRC32 Digest: 0xC86AD254

Rootkit Property: Normal

File Size: 53760 bytes

File: c:\windows\system32\wintrust.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.131.2600.5922

Company: Microsoft Corporation

Page 1014: Prev

Description: Microsoft Trust Verification APIs

Original FileName: WINTRUST.DLL

File Version Label: 5.131.2600.5922 (xpsp_sp3_gdr.091223-1907)

File Version Number: 5.131.2600.5922

SHA-1 Digest: 0x2BB151BFEEAB65C5A32387DA67B1AFE41D76F6B6

MD5 Digest: 0xAEADC4FE32D6D60F36D9B9ACE5C642A2

CRC32 Digest: 0x10F114B4

Rootkit Property: Normal

File Size: 177664 bytes

File: c:\windows\system32\wkssvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5826

Company: Microsoft Corporation

Description: Workstation Service DLL

Original FileName: WKSSVC.DLL

File Version Label: 5.1.2600.5826 (xpsp_sp3_gdr.090609-1434)

File Version Number: 5.1.2600.5826

SHA-1 Digest: 0xB59C7B01D6704B096B757BF34B23F1E00473EA30

MD5 Digest: 0xA8888A5327621856C0CEC4E385F69309

CRC32 Digest: 0x3CF92023

Rootkit Property: Normal

File Size: 132096 bytes

File: c:\windows\system32\wldap32.dll

Page 1015: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Win32 LDAP API DLL

Original FileName: WLDAP32.DLL

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x03269DF70BC4FF939F87EF528F8A5FCF2A708624

MD5 Digest: 0x0492CF5870F0E616B0C71695A433D162

CRC32 Digest: 0xC4516D53

Rootkit Property: Normal

File Size: 172032 bytes

File: c:\windows\system32\wlnotify.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Common DLL to receive Winlogon notifications

Original FileName: WlNotify.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x792629CB140A25F17D340091101FE43B5DE60A39

MD5 Digest: 0x2CC34E8BB667EEF78899546E12649196

CRC32 Digest: 0x762786A3

Rootkit Property: Normal

Page 1016: Prev

File Size: 92672 bytes

File: c:\windows\system32\wmadmoe.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Audio 10 Encoder/Transcoder

Original FileName: wmadmoe.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x4D80C2E474976147FCC3F46762C164829DC18943

MD5 Digest: 0x98BCCC6D116C8330A6FA3C3AF73DC659

CRC32 Digest: 0x93214848

Rootkit Property: Normal

File Size: 1117696 bytes

File: c:\windows\system32\wmasf.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media ASF DLL

Original FileName: wmasf.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x37F931BFAC263EB9FB13D1930A8DBD993A82E8E2

Page 1017: Prev

MD5 Digest: 0xC77A18954C448DD9F87585247851501A

CRC32 Digest: 0xF2D7594B

Rootkit Property: Normal

File Size: 222208 bytes

File: c:\windows\system32\wmdmps.dll

Product: Windows Media Device Manager

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Device Manager Proxy Stub

Original FileName: WMDMPS.dll

File Version Label: 11.0.5721.5262

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0xA175B31F9FD23AD20A41AED8D75A5014B3D34B5A

MD5 Digest: 0x4DBB48FFE1F5E33429F5F5F6CBC2F1EF

CRC32 Digest: 0x6EF71A90

Rootkit Property: Normal

File Size: 37376 bytes

File: c:\windows\system32\wmi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: WMI DC and DP functionality

Original FileName: wmi.DLL

Page 1018: Prev

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFE9DD79573EDC9EC420F4563811B1863D50D0751

MD5 Digest: 0x7B0770526801F05D58C51A3DFB87B4BD

CRC32 Digest: 0xD515E233

Rootkit Property: Normal

File Size: 5632 bytes

File: c:\windows\system32\wmnetmgr.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Network Plugin Manager DLL

Original FileName: WMNetMgr.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x68E017A2DE393499FE0C65B1CE6CFC8530EA637B

MD5 Digest: 0x0629690449F2EB0B46F2E74702436718

CRC32 Digest: 0xF52F9140

Rootkit Property: Normal

File Size: 938496 bytes

File: c:\windows\system32\wmp.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5280

Page 1019: Prev

Company: Microsoft Corporation

Description: Windows Media Player

Original FileName: wmp.dll

File Version Label: 11.0.5721.5280 (WMP_11.100825-0734)

File Version Number: 11.0.5721.5280

SHA-1 Digest: 0x26648A3BB98B58759B9ED99F0D9FB9115B7E9F19

MD5 Digest: 0x77B4BE0C9AA0AC78884D8E7CFB315463

CRC32 Digest: 0xCDBEAF40

Rootkit Property: Normal

File Size: 10841088 bytes

File: c:\windows\system32\wmpasf.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player Filter Shim

Original FileName: wmpasf.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x7F41110D4ECA33F9FA6C448889D66F9041DBC69E

MD5 Digest: 0xE8A033F8C7BB24E3AB7EA2837E07B840

CRC32 Digest: 0xC01E3588

Rootkit Property: Normal

File Size: 211456 bytes

Page 1020: Prev

File: c:\windows\system32\wmpeffects.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player Effects

Original FileName: wmpeffects.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x3876F6AB346E2E8A50A12373859A76E095920D4A

MD5 Digest: 0xD071C2DF93C0984591C5340E3F197273

CRC32 Digest: 0x480632FF

Rootkit Property: Normal

File Size: 295936 bytes

File: c:\windows\system32\wmpencen.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player Encoding Module

Original FileName: WMPEncEn.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x21B23C2BB2253DC98B7E5EF1BDF1C94DF7728DC1

MD5 Digest: 0x5B31E409DBE04CB2A1AE93127BE0C272

CRC32 Digest: 0x8E892CB3

Page 1021: Prev

Rootkit Property: Normal

File Size: 1661952 bytes

File: c:\windows\system32\wmploc.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player Resources

Original FileName: wmploc.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0xBEB1EE9D1CB3BA5A8F88934CFA4493C21D20FB92

MD5 Digest: 0x3F476505B239F65C5D67B6686AF097D4

CRC32 Digest: 0xBD936DCB

Rootkit Property: Normal

File Size: 8231936 bytes

File: c:\windows\system32\wmpps.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player Proxy Stub Dll

Original FileName: wmpps.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

Page 1022: Prev

SHA-1 Digest: 0x36AFE73B370AE70CC2339898C36CD21A30327B5C

MD5 Digest: 0x4FB452BB899F99849716B6565CB8A29E

CRC32 Digest: 0xB010C3DF

Rootkit Property: Normal

File Size: 130048 bytes

File: c:\windows\system32\wmpshell.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Player Launcher

Original FileName: wmpshell.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x6A903BC7930D0D7AE45965734C6E324107DF7786

MD5 Digest: 0x6B3951BF5DB63D0CD27DBFD51EC0B6FA

CRC32 Digest: 0x7106B2F1

Rootkit Property: Normal

File Size: 99840 bytes

File: c:\windows\system32\wmpsrcwp.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: WMPSrcWp Module

Page 1023: Prev

Original FileName: WMPSrcWp.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0xDE6A41ED0396F6BB3B7B44E5AC0E523269A995AD

MD5 Digest: 0x4225471AF97AD206C1705DD8B10828CE

CRC32 Digest: 0x89485657

Rootkit Property: Normal

File Size: 204288 bytes

File: c:\windows\system32\wmsdmoe.dll

Product: Microsoft® Windows Media Services

Product Version: 9.00.00.4503

Company: Microsoft Corporation

Description: Windows Media Screen Encoder

Original FileName: wmsdmoe.dll

File Version Label: 9.00.00.4503

File Version Number: 9.0.0.4503

SHA-1 Digest: 0xC8EB7919CEBDFAEC79AF378CCBF188F42030500E

MD5 Digest: 0x22091EFAB019A725FF7FA195A2DBDD43

CRC32 Digest: 0x23CE91C9

Rootkit Property: Normal

File Size: 115200 bytes

File: c:\windows\system32\wmspdmoe.dll

Product: Microsoft® Windows® Operating System

Page 1024: Prev

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Audio Voice Encoder

Original FileName: wmspdmoe.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x085FAB5B31FBCA888CE521420A55AB6B20450BA9

MD5 Digest: 0x386C27FC2DAF7805103F13E18C676BB4

CRC32 Digest: 0x4961DD88

Rootkit Property: Normal

File Size: 1329152 bytes

File: c:\windows\system32\wmvcore.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5275

Company: Microsoft Corporation

Description: Windows Media Playback/Authoring DLL

Original FileName: wmvcore.dll

File Version Label: 11.0.5721.5275 (WMP_11.100405-1047)

File Version Number: 11.0.5721.5275

SHA-1 Digest: 0xBFA6DD4C3BF596E28E226A7801C45A13A1EC743F

MD5 Digest: 0xDFFEC6479C5E00A103A44AC33A1058AA

CRC32 Digest: 0x38DE796F

Rootkit Property: Normal

File Size: 2462720 bytes

Page 1025: Prev

File: c:\windows\system32\wmvdmoe.dll

Product: Microsoft® Windows Media Services

Product Version: 7.01.00.3055

Company: Microsoft Corporation

Description: Windows Media Video Encoder DMO

Original FileName: wmvdmoe.dll

File Version Label: 7.01.00.3055

File Version Number: 7.1.0.3055

SHA-1 Digest: 0x89D5C0E3004AF2C9C5C8FBD1DF2047170CAA3DCA

MD5 Digest: 0x0C46AB46339F1B338550E8D03BAF9737

CRC32 Digest: 0x054C8BF0

Rootkit Property: Normal

File Size: 446464 bytes

File: c:\windows\system32\wmvencod.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Video 9 Encoder

Original FileName: wmvencod.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x9B446601973E4468798707FB7A55F9332D9E96D5

MD5 Digest: 0xC61B0714F75B725AFBB0966E8E7BEF59

Page 1026: Prev

CRC32 Digest: 0xDEF0ED7D

Rootkit Property: Normal

File Size: 1575424 bytes

File: c:\windows\system32\wmvsencd.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Screen Encoder

Original FileName: wmvsencd.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0x5EE912AC56DDC6F12A6AC0DC4ED6C41DBC7411F7

MD5 Digest: 0xC768144617EC06AC0E471ED31EF45BD1

CRC32 Digest: 0xF8397FA1

Rootkit Property: Normal

File Size: 767488 bytes

File: c:\windows\system32\wmvxencd.dll

Product: Microsoft® Windows® Operating System

Product Version: 11.0.5721.5262

Company: Microsoft Corporation

Description: Windows Media Video Encoder

Original FileName: wmvxencd.dll

File Version Label: 11.0.5721.5262 (WMP_11.090130-1421)

Page 1027: Prev

File Version Number: 11.0.5721.5262

SHA-1 Digest: 0xFBE1B50F0423A051FA7619F15D63D3C2A25C999B

MD5 Digest: 0xF8828B8EBDB9A2536D5270377D586755

CRC32 Digest: 0x7683D76C

Rootkit Property: Normal

File Size: 656896 bytes

File: c:\windows\system32\wpcap.dll

Product: WinPcap

Product Version: 4.1.0.2001

Company: CACE Technologies, Inc.

Description: wpcap.dll Dynamic Link Library - based on libpcap 1.0rel0b branch (20091008)

Original FileName: wpcap.dll

File Version Label: 4.1.0.2001

File Version Number: 4.1.0.2001

SHA-1 Digest: 0xD2AFB08D0379BD96E423857963791E2BA00C9645

MD5 Digest: 0x190FB481D293D85B507D071E75BCB05C

CRC32 Digest: 0x44B64C18

Rootkit Property: Normal

File Size: 281104 bytes

File: c:\windows\system32\wpdshext.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.2.5721.5262

Company: Microsoft Corporation

Page 1028: Prev

Description: Portable Devices Shell Extension

Original FileName: wpdshext.dll

File Version Label: 5.2.5721.5262 (WMP_11.090130-1421)

File Version Number: 5.2.5721.5262

SHA-1 Digest: 0x7F1644F3DD196FB021D3DB1E4E751274FB76B84D

MD5 Digest: 0x0B7D7D73E1BE7B8742B1EBFA3D4DCC49

CRC32 Digest: 0x2C711B6A

Rootkit Property: Normal

File Size: 2603008 bytes

File: c:\windows\system32\ws2_32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Socket 2.0 32-Bit DLL

Original FileName: ws2_32.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x7CF3366C68E402EB3678046FE97651A586044560

MD5 Digest: 0x2CCC474EB85CEAA3E1FA1726580A3E5A

CRC32 Digest: 0x7C519ECA

Rootkit Property: Normal

File Size: 82432 bytes

File: c:\windows\system32\ws2help.dll

Page 1029: Prev

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Socket 2.0 Helper for Windows NT

Original FileName: ws2help.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x317CC14A94FCF3D10749EFBCAB330B97F516FFFB

MD5 Digest: 0x9789E95E1D88EEB4B922BF3EA7779C28

CRC32 Digest: 0x3F24E096

Rootkit Property: Normal

File Size: 19968 bytes

File: c:\windows\system32\wscsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Security Center Service

Original FileName: wscsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2108)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x4D59E3FFA335317E5ECB253C81EFEF67F507C15C

MD5 Digest: 0x7C278E6408D1DCE642230C0585A854D5

CRC32 Digest: 0xE07687CC

Rootkit Property: Normal

Page 1030: Prev

File Size: 80896 bytes

File: c:\windows\system32\wsfwds.dll

Product: wsfwds

Product Version: 5.2.0.117

Company: Atheros Communications, Inc.

Description: Atheros Wireless Supplicant Framework(DS)

Original FileName: wsfwDs.dll

File Version Label: 5.2.0.117

File Version Number: 5.2.0.117

SHA-1 Digest: 0x2F6A3F3F7BBA94B859659F15D0A952BA625C6736

MD5 Digest: 0x075EA2FF30B19A365A556E5529BEBB1A

CRC32 Digest: 0xCB0F65FB

Rootkit Property: Normal

File Size: 254023 bytes

File: c:\windows\system32\wshirda.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Sockets Helper DLL

Original FileName: wshirda.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xD63893C712F9A53FF7B3F072B37FB29E04A06941

Page 1031: Prev

MD5 Digest: 0x52778FCE46E510B60F513B8882A65CD6

CRC32 Digest: 0x28758E22

Rootkit Property: Normal

File Size: 8192 bytes

File: c:\windows\system32\wshtcpip.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Sockets Helper DLL

Original FileName: wshtcpip.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x209A11D3D9078E8A334D9154355ED6129ACE0ABC

MD5 Digest: 0x4E3D06D6E68EEDB52565080F55B460D3

CRC32 Digest: 0xF5533E87

Rootkit Property: Normal

File Size: 19456 bytes

File: c:\windows\system32\wsimd.dll

Product: wsimd

Product Version: 5.2.0.117

Company: Atheros Communications, Inc.

Description: Atheros Intermediate Driver Interface

Original FileName: wsimd.dll

Page 1032: Prev

File Version Label: 5.2.0.117

File Version Number: 5.2.0.117

SHA-1 Digest: 0x7CBB25AF3B142398AA087A16F8649F951336EE22

MD5 Digest: 0x38A0B747FF3A637A7EED86CEBAEFDDED

CRC32 Digest: 0xFA12F60C

Rootkit Property: Normal

File Size: 249925 bytes

File: c:\windows\system32\wsnmp32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Microsoft WinSNMP v2.0 Manager API

Original FileName: wsnmp32.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x2BFCD05C5D6EA095A557A77930D8F68D114E4D98

MD5 Digest: 0x277F3E3333F1D10CA428568197FCCE70

CRC32 Digest: 0xA0DB6B23

Rootkit Property: Normal

File Size: 41984 bytes

File: c:\windows\system32\wsock32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Page 1033: Prev

Company: Microsoft Corporation

Description: Windows Socket 32-Bit DLL

Original FileName: wsock32.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x42E1C04CE06976A15D87A8B9C8C8F2475FF90C2B

MD5 Digest: 0x67156D5A9AC356DC99D7BCCB388E3316

CRC32 Digest: 0xABED57E0

Rootkit Property: Normal

File Size: 22528 bytes

File: c:\windows\system32\wtsapi32.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Windows Terminal Server SDK APIs

Original FileName: wtsapi32.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2111)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x61732C75B38443875C53C6019771AAEF31791478

MD5 Digest: 0x0E2735281FBB9A764D5584C2A5DCBA59

CRC32 Digest: 0x2C62BB24

Rootkit Property: Normal

File Size: 18432 bytes

Page 1034: Prev

File: c:\windows\system32\wuaueng.dll

Product: Microsoft® Windows® Operating System

Product Version: 7.4.7600.226

Company: Microsoft Corporation

Description: Windows Update Agent

Original FileName: wuaueng.dll

File Version Label: 7.4.7600.226 (winmain_wtr_wsus3sp2(wmbla).090806-1834)

File Version Number: 7.4.7600.226

SHA-1 Digest: 0x25FB0FBDD2F8C3B425AF38C2676BBE39A2ED2A9B

MD5 Digest: 0x6298277B73C77FA99106B271A7525163

CRC32 Digest: 0x0517D206

Rootkit Property: Normal

File Size: 1929952 bytes

File: c:\windows\system32\wuauserv.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.4.3790.5512

Company: Microsoft Corporation

Description: Windows Update AutoUpdate Service

Original FileName: wuauserv.dll

File Version Label: 5.4.3790.5512 (xpsp.080413-0852)

File Version Number: 5.4.3790.5512

SHA-1 Digest: 0x069934C7356080B8ECE307CC63F870D12E30A84C

MD5 Digest: 0x35321FB577CDC98CE3EB3A3EB9E4610A

CRC32 Digest: 0xE2B219C4

Page 1035: Prev

Rootkit Property: Normal

File Size: 6656 bytes

File: c:\windows\system32\wudfplatform.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.0.6001.18000

Company: Microsoft Corporation

Description: Windows Driver Foundation - User-mode Platform Library

Original FileName: WUDFPlatform.dll

File Version Label: 6.0.6001.18000 (longhorn_rtm.080118-1840)

File Version Number: 6.0.6001.18000

SHA-1 Digest: 0xC65A0FD051C0B7D741C9D4C0606E9902E16AEAF5

MD5 Digest: 0xEED1B6C2B6DD5C2FC1F6709102DC3191

CRC32 Digest: 0x7B0A4C4C

Rootkit Property: Normal

File Size: 163840 bytes

File: c:\windows\system32\wudfsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.0.6001.18000

Company: Microsoft Corporation

Description: Windows Driver Foundation - User-mode Driver Framework Service

Original FileName: WUDFSvc.dll

File Version Label: 6.0.6001.18000 (longhorn_rtm.080118-1840)

File Version Number: 6.0.6001.18000

Page 1036: Prev

SHA-1 Digest: 0x9EA10F99E1C467BE12FE78F2F516FF7142E15DCF

MD5 Digest: 0x575A4190D989F64732119E4114045A4F

CRC32 Digest: 0xA71F3F4A

Rootkit Property: Normal

File Size: 55296 bytes

File: c:\windows\system32\wweb32.dll

Product: WordWeb

Product Version: 5.0.0.0

Company: Antony Lewis

Description: WordWeb thesaurus/dictionary

Original FileName:

File Version Label: 5.0.0.0

File Version Number: 5.0.0.0

SHA-1 Digest: 0xA5891BC509D29C548743835B35AF0410729C401D

MD5 Digest: 0xDA4314371E5171F7AC474A191A6D78A2

CRC32 Digest: 0xBEB43B56

Rootkit Property: Normal

File Size: 1050296 bytes

File: c:\windows\system32\wzcsapi.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Wireless Zero Configuration service API

Page 1037: Prev

Original FileName: wzcsapi.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0xFA885EFCB1DB0B465470B21516C6D461DCBEE99A

MD5 Digest: 0x767FF54A552732CE772C2302025FA82F

CRC32 Digest: 0x94ABA9C6

Rootkit Property: Normal

File Size: 52736 bytes

File: c:\windows\system32\wzcsvc.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Wireless Zero Configuration Service

Original FileName: wzcsvc.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x5A4EECDA0E985C6F6876897D02D45B806B3F926F

MD5 Digest: 0x81DC3F549F44B1C1FFF022DEC9ECF30B

CRC32 Digest: 0xAC33DDD7

Rootkit Property: Normal

File Size: 483840 bytes

File: c:\windows\system32\xmlprov.dll

Product: Microsoft® Windows® Operating System

Page 1038: Prev

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Network Provisioning Service

Original FileName: xmlprov.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-0852)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x090E95953F71D654EA885AF74D491AD1E6A0F8C7

MD5 Digest: 0x295D21F14C335B53CB8154E5B1F892B9

CRC32 Digest: 0x6A8A2C79

Rootkit Property: Normal

File Size: 129024 bytes

File: c:\windows\system32\xpsp2res.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.1.2600.5512

Company: Microsoft Corporation

Description: Service Pack 2 Messages

Original FileName: xpsp2res.dll

File Version Label: 5.1.2600.5512 (xpsp.080413-2113)

File Version Number: 5.1.2600.5512

SHA-1 Digest: 0x55401355585FAC03B5D6991AF85ABF8DB8FC9042

MD5 Digest: 0x16403217AB6FC5C30C14C6B12098AD4B

CRC32 Digest: 0xBF6C4351

Rootkit Property: Normal

File Size: 2897920 bytes

Page 1039: Prev

File: c:\windows\system32\zipfldr.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.5512

Company: Microsoft Corporation

Description: Compressed (zipped) Folders

Original FileName: ZIPFLDR.DLL

File Version Label: 6.00.2900.5512 (xpsp.080413-2105)

File Version Number: 6.0.2900.5512

SHA-1 Digest: 0x18DB98F46FCDFCDD823517CC5A73E209FCA138DA

MD5 Digest: 0xC444B433A340C24B51A2DACE9D13FC70

CRC32 Digest: 0xE01D7834

Rootkit Property: Normal

File Size: 338432 bytes

File: c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll

Product: Microsoft® Visual Studio® 2005

Product Version: 8.00.50727.4053

Company: Microsoft Corporation

Description: Microsoft® C++ Runtime Library

Original FileName: MSVCP80.DLL

File Version Label: 8.00.50727.4053

File Version Number: 8.0.50727.4053

SHA-1 Digest: 0xBC7CE60270A58450596AA3E3E5D0A99F731333D9

MD5 Digest: 0x8C53CCD787C381CD535D8DCCA12584D8

Page 1040: Prev

CRC32 Digest: 0x4EA826D3

Rootkit Property: Normal

File Size: 554832 bytes

File: c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll

Product: Microsoft® Visual Studio® 2005

Product Version: 8.00.50727.4053

Company: Microsoft Corporation

Description: Microsoft® C Runtime Library

Original FileName: MSVCR80.DLL

File Version Label: 8.00.50727.4053

File Version Number: 8.0.50727.4053

SHA-1 Digest: 0x4CCD15BF2C1B1D541AC883B0F42497E8CED6A5A3

MD5 Digest: 0x1169436EE42F860C7DB37A4692B38F0E

CRC32 Digest: 0xF4376274

Rootkit Property: Normal

File Size: 632656 bytes

File: c:\windows\winsxs\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll

Product: Microsoft® Visual Studio® 2005

Product Version: 8.00.50727.4053

Company: Microsoft Corporation

Description: MFCDLL Shared Library - Retail Version

Original FileName: MFC80.DLL

Page 1041: Prev

File Version Label: 8.00.50727.4053

File Version Number: 8.0.50727.4053

SHA-1 Digest: 0x24C80500A18CB7E60E0FFB37EB623F2AEF9512AB

MD5 Digest: 0x4928AB3A304DDF05C354DE3807A4A66B

CRC32 Digest: 0xE8DDF49E

Rootkit Property: Normal

File Size: 1105920 bytes

File: c:\windows\winsxs\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_0ccc058c\mfc80enu.dll

Product: Microsoft® Visual Studio® 2005

Product Version: 8.00.50727.4053

Company: Microsoft Corporation

Description: MFC Language Specific Resources

Original FileName: MFC80ENU.DLL

File Version Label: 8.00.50727.4053

File Version Number: 8.0.50727.4053

SHA-1 Digest: 0xF8364B57D585FDAAA21F209E895CE50FA118553A

MD5 Digest: 0xD8584C7FB9A1BA8480F9000C1CA1B415

CRC32 Digest: 0x9BB86966

Rootkit Property: Normal

File Size: 57344 bytes

File: c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcp90.dll

Product: Microsoft® Visual Studio® 2008

Page 1042: Prev

Product Version: 9.00.30729.4148

Company: Microsoft Corporation

Description: Microsoft® C++ Runtime Library

Original FileName: MSVCP90.DLL

File Version Label: 9.00.30729.4148

File Version Number: 9.0.30729.4148

SHA-1 Digest: 0x3322840FEF43C92FB55DC31E682D19970DAF159D

MD5 Digest: 0xB2EEE3DEE31F50E082E9C720A6D7757D

CRC32 Digest: 0xDC8BFAFD

Rootkit Property: Normal

File Size: 569664 bytes

File: c:\windows\winsxs\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e\msvcr90.dll

Product: Microsoft® Visual Studio® 2008

Product Version: 9.00.30729.4148

Company: Microsoft Corporation

Description: Microsoft® C Runtime Library

Original FileName: MSVCR90.DLL

File Version Label: 9.00.30729.4148

File Version Number: 9.0.30729.4148

SHA-1 Digest: 0xF825C40FEE87CC9952A61C8C34E9F6EEE8DA742D

MD5 Digest: 0x7538050656FE5D63CB4B80349DD1CFE3

CRC32 Digest: 0x60CFF652

Rootkit Property: Normal

File Size: 653120 bytes

Page 1043: Prev

File: c:\windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll

Product: Microsoft® Windows® Operating System

Product Version: 6.00.2900.6028

Company: Microsoft Corporation

Description: User Experience Controls Library

Original FileName: comctl32.DLL

File Version Label: 6.0 (xpsp_sp3_qfe.100823-1643)

File Version Number: 6.0.2900.6028

SHA-1 Digest: 0x3B0B0A531468DE08C11B2EEA2E37E34325CDC3B7

MD5 Digest: 0x736B12B725AEB2B07F0241A9F680CB10

CRC32 Digest: 0x350BBD1B

Rootkit Property: Normal

File Size: 1054208 bytes

File: c:\windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\gdiplus.dll

Product: Microsoft® Windows® Operating System

Product Version: 5.2.6001.22319

Company: Microsoft Corporation

Description: Microsoft GDI+

Original FileName: gdiplus

File Version Label: 5.2.6001.22319 (vistasp1_ldr.081126-1506)

File Version Number: 5.2.6001.22319

SHA-1 Digest: 0x16492BFE4C4E0D2A374934E00A80B8934BD01CA3

Page 1044: Prev

MD5 Digest: 0x4721AB485E0C29CD1617A5F296B9CC47

CRC32 Digest: 0x0F8A29EA

Rootkit Property: Normal

File Size: 1748992 bytes

+-----------------------------------------------

|AV Products

+-----------------------------------------------

+-----------------------------------------------

|Disk drive(s) Boot Record

+-----------------------------------------------

Drive [-C-] Boot Record:

0000 EB 52 90 4E-54 46 53 20-20 20 20 00-02 08 00 00 .R.NTFS .....

0010 00 00 00 00-00 F8 00 00-3F 00 F0 00-3F 00 00 00 ........?...?...

0020 00 00 00 00-80 00 80 00-50 0A A5 0B-00 00 00 00 ........P.......

0030 00 00 0C 00-00 00 00 00-10 00 00 00-00 00 00 00 ................

0040 F6 00 00 00-01 00 00 00-BD AB 06 68-DD 06 68 66 ...........h..hf

0050 00 00 00 00-FA 33 C0 8E-D0 BC 00 7C-FB B8 C0 07 .....3.....|....

0060 8E D8 E8 16-00 B8 00 0D-8E C0 33 DB-C6 06 0E 00 ..........3.....

0070 10 E8 53 00-68 00 0D 68-6A 02 CB 8A-16 24 00 B4 ..S.h..hj....$..

0080 08 CD 13 73-05 B9 FF FF-8A F1 66 0F-B6 C6 40 66 ...s......f...@f

Page 1045: Prev

0090 0F B6 D1 80-E2 3F F7 E2-86 CD C0 ED-06 41 66 0F .....?.......Af.

00A0 B7 C9 66 F7-E1 66 A3 20-00 C3 B4 41-BB AA 55 8A ..f..f. ...A..U.

00B0 16 24 00 CD-13 72 0F 81-FB 55 AA 75-09 F6 C1 01 .$...r...U.u....

00C0 74 04 FE 06-14 00 C3 66-60 1E 06 66-A1 10 00 66 t......f`..f...f

00D0 03 06 1C 00-66 3B 06 20-00 0F 82 3A-00 1E 66 6A ....f;. ...:..fj

00E0 00 66 50 06-53 66 68 10-00 01 00 80-3E 14 00 00 .fP.Sfh.....>...

00F0 0F 85 0C 00-E8 B3 FF 80-3E 14 00 00-0F 84 61 00 ........>.....a.

0100 B4 42 8A 16-24 00 16 1F-8B F4 CD 13-66 58 5B 07 .B..$.......fX[.

0110 66 58 66 58-1F EB 2D 66-33 D2 66 0F-B7 0E 18 00 fXfX..-f3.f.....

0120 66 F7 F1 FE-C2 8A CA 66-8B D0 66 C1-EA 10 F7 36 f......f..f....6

0130 1A 00 86 D6-8A 16 24 00-8A E8 C0 E4-06 0A CC B8 ......$.........

0140 01 02 CD 13-0F 82 19 00-8C C0 05 20-00 8E C0 66 ........... ...f

0150 FF 06 10 00-FF 0E 0E 00-0F 85 6F FF-07 1F 66 61 ..........o...fa

0160 C3 A0 F8 01-E8 09 00 A0-FB 01 E8 03-00 FB EB FE ................

0170 B4 01 8B F0-AC 3C 00 74-09 B4 0E BB-07 00 CD 10 .....<.t........

0180 EB F2 C3 0D-0A 41 20 64-69 73 6B 20-72 65 61 64 .....A disk read

0190 20 65 72 72-6F 72 20 6F-63 63 75 72-72 65 64 00 error occurred.

01A0 0D 0A 4E 54-4C 44 52 20-69 73 20 6D-69 73 73 69 ..NTLDR is missi

01B0 6E 67 00 0D-0A 4E 54 4C-44 52 20 69-73 20 63 6F ng...NTLDR is co

01C0 6D 70 72 65-73 73 65 64-00 0D 0A 50-72 65 73 73 mpressed...Press

01D0 20 43 74 72-6C 2B 41 6C-74 2B 44 65-6C 20 74 6F Ctrl+Alt+Del to

01E0 20 72 65 73-74 61 72 74-0D 0A 00 00-00 00 00 00 restart........

01F0 00 00 00 00-00 00 00 00-83 A0 B3 C9-00 00 55 AA ..............U.

+-----------------------------------------------

Page 1046: Prev

|Running additional SIC components

+-----------------------------------------------

Successfully executed : C:\Documents and Settings\Administrator\My Documents\eBooks\Certifications\virus guides\IMP Virus books\virus removal tools\SIC\SIC_SLR.bin -d=.\SICLOG -o=.\Retrieve.lst

+-----------------------------------------------

|Logging Hidden Files

+-----------------------------------------------