ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
System pid: 4
Command line: <no command line>
------------------------------------------------------------------------------
smss.exe pid: 1228
Command line: \SystemRoot\System32\smss.exe

  Base        Size      Version	        Path
  0x48580000  0xf000                    \SystemRoot\System32\smss.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
------------------------------------------------------------------------------
csrss.exe pid: 1280
Command line: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

  Base        Size      Version	        Path
  0x4a680000  0x5000                    \??\C:\WINDOWS\system32\csrss.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x75b40000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\CSRSRV.dll
  0x75b50000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\basesrv.dll
  0x75b60000  0x4b000   5.01.2600.3103  C:\WINDOWS\system32\winsrv.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\KERNEL32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\sxs.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
------------------------------------------------------------------------------
winlogon.exe pid: 1304
Command line: winlogon.exe

  Base        Size      Version	        Path
  0x01000000  0x80000                   \??\C:\WINDOWS\system32\winlogon.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x776c0000  0x11000   5.01.2600.2622  C:\WINDOWS\system32\AUTHZ.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x75940000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\NDdeApi.dll
  0x75930000  0xa000    5.01.2600.2180  C:\WINDOWS\system32\PROFMAP.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x76bc0000  0xf000    5.01.2600.2180  C:\WINDOWS\system32\REGAPI.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x75970000  0xf7000   5.01.2600.2180  C:\WINDOWS\system32\MSGINA.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x74320000  0x3d000   3.525.1117.0000  C:\WINDOWS\system32\ODBC32.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x20000000  0x17000   3.525.1117.0000  C:\WINDOWS\system32\odbcint.dll
  0x776e0000  0x23000   6.00.2900.2180  C:\WINDOWS\system32\SHSVCS.dll
  0x76bb0000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\sfc.dll
  0x76c60000  0x2a000   5.01.2600.2180  C:\WINDOWS\system32\sfc_os.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x723d0000  0x1c000   5.01.2600.2180  C:\WINDOWS\system32\WINSCARD.DLL
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\sxs.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wsock32.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x74290000  0x4000    5.01.2600.2180  C:\WINDOWS\system32\icmp.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\MPRAPI.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\adsldpc.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x013c0000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x75150000  0x14000   5.01.2600.2180  C:\WINDOWS\system32\Cabinet.dll
  0x71cf0000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x76790000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\cryptdll.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.DLL
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76600000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\cscdll.dll
  0x10000000  0x13000                   C:\Program Files\iPass\Mobile Office 6\6.2.3.7\CBL\GoRemoteCBL.dll
  0x75950000  0x1a000   5.01.2600.2180  C:\WINDOWS\system32\WlNotify.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77a20000  0x54000   5.01.2600.2180  C:\WINDOWS\system32\cscui.dll
  0x75f60000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\drprov.dll
  0x71c10000  0xe000    5.01.2600.2180  C:\WINDOWS\System32\ntlanman.dll
  0x71cd0000  0x17000   5.01.2600.2180  C:\WINDOWS\System32\NETUI0.dll
  0x71c90000  0x40000   5.01.2600.2180  C:\WINDOWS\System32\NETUI1.dll
  0x71c80000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\NETRAP.dll
  0x75f70000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\davclnt.dll
  0x01870000  0xd000    8.00.1969.0001  C:\WINDOWS\system32\nfsnp.dll
  0x01880000  0x15000   8.00.1969.0001  C:\WINDOWS\system32\nfsccfg.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
------------------------------------------------------------------------------
services.exe pid: 1348
Command line: C:\WINDOWS\system32\services.exe

  Base        Size      Version	        Path
  0x01000000  0x1c000   5.01.2600.2180  C:\WINDOWS\system32\services.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x758e0000  0x50000   5.01.2600.2180  C:\WINDOWS\system32\SCESRV.dll
  0x776c0000  0x11000   5.01.2600.2622  C:\WINDOWS\system32\AUTHZ.dll
  0x7dba0000  0x21000   5.01.2600.2744  C:\WINDOWS\system32\umpnpmgr.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x5f770000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\NCObjAPI.DLL
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x47260000  0xf000    5.01.2600.3008  C:\WINDOWS\AppPatch\AcAdProc.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\secur32.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x77b70000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\eventlog.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wtsapi32.dll
------------------------------------------------------------------------------
lsass.exe pid: 1360
Command line: C:\WINDOWS\system32\lsass.exe

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\lsass.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x75730000  0xb4000   5.01.2600.2976  C:\WINDOWS\system32\LSASRV.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x74440000  0x6a000   5.01.2600.2180  C:\WINDOWS\system32\SAMSRV.dll
  0x76790000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\cryptdll.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x20000000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\msprivs.dll
  0x71cf0000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x744b0000  0x65000   5.01.2600.2180  C:\WINDOWS\system32\netlogon.dll
  0x767c0000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\w32time.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x767f0000  0x27000   5.01.2600.3126  C:\WINDOWS\system32\schannel.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x74380000  0xf000    5.01.2600.2180  C:\WINDOWS\system32\wdigest.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\setupapi.dll
  0x74410000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\scecli.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x743a0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\pstorsvc.dll
  0x743c0000  0x1b000   5.01.2600.2180  C:\WINDOWS\system32\psbase.dll
  0x68100000  0x24000   5.01.2600.2133  C:\WINDOWS\system32\dssenh.dll
  0x01010000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
------------------------------------------------------------------------------
svchost.exe pid: 1568
Command line: C:\WINDOWS\system32\svchost -k DcomLaunch

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x76a80000  0x63000   5.01.2600.2726  c:\windows\system32\rpcss.dll
  0x77fe0000  0x11000   5.01.2600.2180  c:\windows\system32\Secur32.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x760f0000  0x53000   5.01.2600.2180  c:\windows\system32\termsrv.dll
  0x74f70000  0x6000    5.01.2600.2180  c:\windows\system32\ICAAPI.dll
  0x77920000  0xf3000   5.01.2600.2180  c:\windows\system32\SETUPAPI.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x776c0000  0x11000   5.01.2600.2622  c:\windows\system32\AUTHZ.dll
  0x75110000  0x1f000   5.01.2600.2180  c:\windows\system32\mstlsapi.dll
  0x77cc0000  0x32000   5.01.2600.2180  c:\windows\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  c:\windows\system32\adsldpc.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76b20000  0x11000   3.05.2284.0000  c:\windows\system32\ATL.DLL
  0x76bc0000  0xf000    5.01.2600.2180  C:\WINDOWS\system32\REGAPI.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x72460000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\rdpwsx.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
------------------------------------------------------------------------------
svchost.exe pid: 1616
Command line: C:\WINDOWS\system32\svchost -k rpcss

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x76a80000  0x63000   5.01.2600.2726  c:\windows\system32\rpcss.dll
  0x77fe0000  0x11000   5.01.2600.2180  c:\windows\system32\Secur32.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
------------------------------------------------------------------------------
svchost.exe pid: 1968
Command line: C:\WINDOWS\System32\svchost.exe -k netsvcs

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\System32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\System32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\System32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\System32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\System32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\System32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\System32\SAMLIB.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\System32\xpsp2res.dll
  0x776e0000  0x23000   6.00.2900.2180  c:\windows\system32\shsvcs.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\System32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76d80000  0x1e000   5.01.2600.2912  c:\windows\system32\dhcpcsvc.dll
  0x76f20000  0x27000   5.01.2600.2938  c:\windows\system32\DNSAPI.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x76d60000  0x19000   5.01.2600.2912  c:\windows\system32\iphlpapi.dll
  0x77fe0000  0x11000   5.01.2600.2180  c:\windows\system32\Secur32.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\System32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x7db10000  0x8b000   5.01.2600.2977  c:\windows\system32\wzcsvc.dll
  0x76e80000  0xe000    5.01.2600.2180  c:\windows\system32\rtutils.dll
  0x76d30000  0x4000    5.01.2600.2180  c:\windows\system32\WMI.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76f50000  0x8000    5.01.2600.2180  c:\windows\system32\WTSAPI32.dll
  0x606b0000  0x10d000  5.01.2600.2780  c:\windows\system32\ESENT.dll
  0x76b20000  0x11000   3.05.2284.0000  c:\windows\system32\ATL.DLL
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\System32\rsaenh.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\System32\SETUPAPI.DLL
  0x76b70000  0x1f000   5.01.2600.2180  C:\WINDOWS\System32\rastls.dll
  0x754d0000  0x80000   5.131.2600.2180  C:\WINDOWS\system32\CRYPTUI.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\System32\MPRAPI.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\System32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\System32\adsldpc.dll
  0x76ee0000  0x3c000   5.01.2600.2180  C:\WINDOWS\System32\RASAPI32.dll
  0x76e90000  0x12000   5.01.2600.2180  C:\WINDOWS\System32\rasman.dll
  0x76eb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\System32\TAPI32.dll
  0x767f0000  0x27000   5.01.2600.3126  C:\WINDOWS\System32\SCHANNEL.dll
  0x723d0000  0x1c000   5.01.2600.2180  C:\WINDOWS\System32\WinSCard.dll
  0x76bd0000  0x14000   5.01.2600.2180  C:\WINDOWS\System32\raschap.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\System32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\System32\COMRes.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x77300000  0x32000   5.01.2600.2180  c:\windows\system32\schedsvc.dll
  0x767a0000  0x13000   5.01.2600.2180  c:\windows\system32\NTDSAPI.dll
  0x74f50000  0x5000    6.00.2900.2180  C:\WINDOWS\System32\MSIDLE.DLL
  0x708b0000  0xd000    5.01.2600.2180  c:\windows\system32\audiosrv.dll
  0x76e40000  0x23000   5.01.2600.2976  c:\windows\system32\wkssvc.dll
  0x76ce0000  0x12000   5.01.2600.2180  c:\windows\system32\cryptsvc.dll
  0x77b90000  0x32000   5.01.2600.2180  c:\windows\system32\certcli.dll
  0x74f90000  0x9000    2600.2180.0503.0000  c:\windows\system32\dmserver.dll
  0x74f80000  0x9000    5.01.2600.2180  c:\windows\system32\ersvc.dll
  0x77710000  0x41000   2001.12.4414.0308  c:\windows\system32\es.dll
  0x74f40000  0xc000    5.01.2600.2180  c:\windows\pchealth\helpctr\binaries\pchsvc.dll
  0x75090000  0x1a000   5.01.2600.2577  c:\windows\system32\srvsvc.dll
  0x73d20000  0x8000    5.01.2600.2180  c:\windows\system32\seclogon.dll
  0x722d0000  0xd000    5.01.2600.2180  c:\windows\system32\sens.dll
  0x751a0000  0x2e000   5.01.2600.2180  c:\windows\system32\srsvc.dll
  0x74ad0000  0x8000    6.00.2900.2180  c:\windows\system32\POWRPROF.dll
  0x75070000  0x19000   5.01.2600.2180  c:\windows\system32\trkwks.dll
  0x767c0000  0x2c000   5.01.2600.2180  c:\windows\system32\w32time.dll
  0x76080000  0x65000   6.02.3104.0000  c:\windows\system32\MSVCP60.dll
  0x59490000  0x28000   5.01.2600.2180  c:\windows\system32\wbem\wmisvc.dll
  0x753e0000  0x6d000   5.01.2600.2180  C:\WINDOWS\system32\VSSAPI.DLL
  0x50000000  0x5000    5.04.3790.2180  c:\windows\system32\wuauserv.dll
  0x50040000  0x1bc000  7.02.6001.0788  C:\WINDOWS\system32\wuaueng.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\System32\WINSPOOL.DRV
  0x4d4f0000  0x58000   5.01.2600.2180  C:\WINDOWS\System32\WINHTTP.dll
  0x75150000  0x14000   5.01.2600.2180  C:\WINDOWS\System32\Cabinet.dll
  0x600a0000  0xb000    5.01.2600.2180  C:\WINDOWS\System32\mspatcha.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76bb0000  0x5000    5.01.2600.2180  C:\WINDOWS\System32\sfc.dll
  0x76c60000  0x2a000   5.01.2600.2180  C:\WINDOWS\System32\sfc_os.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\System32\SXS.DLL
  0x76620000  0x13c000  2001.12.4414.0308  C:\WINDOWS\system32\comsvcs.dll
  0x75130000  0x14000   2001.12.4414.0308  C:\WINDOWS\system32\colbact.DLL
  0x750f0000  0x13000   2001.12.4414.0311  C:\WINDOWS\system32\MTXCLU.DLL
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x76d10000  0x11000   5.01.2600.2180  C:\WINDOWS\System32\CLUSAPI.DLL
  0x750b0000  0x12000   5.01.2600.2180  C:\WINDOWS\System32\RESUTILS.DLL
  0x76da0000  0x15000   5.01.2600.2180  c:\windows\system32\browser.dll
  0x762c0000  0x85000   5.01.2600.2180  C:\WINDOWS\System32\Wbem\wbemcore.dll
  0x75310000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\Wbem\esscli.dll
  0x75290000  0x37000   5.01.2600.2180  C:\WINDOWS\System32\Wbem\wbemcomn.dll
  0x75690000  0x76000   5.01.2600.2180  C:\WINDOWS\System32\Wbem\FastProx.dll
  0x74ed0000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemsvc.dll
  0x75020000  0x1b000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmiutils.dll
  0x75200000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\wbem\repdrvfs.dll
  0x4c0a0000  0x17000   5.01.2600.2180  c:\windows\system32\wscsvc.dll
  0x745e0000  0x2c6000  3.01.4000.2435  c:\windows\system32\msi.dll
  0x76400000  0x1a5000  5.01.2600.2977  c:\windows\system32\netshell.dll
  0x76c00000  0x2e000   5.01.2600.2180  c:\windows\system32\credui.dll
  0x597f0000  0x6d000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmiprvsd.dll
  0x5f770000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\NCObjAPI.DLL
  0x75390000  0x46000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemess.dll
  0x5f740000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\ncprov.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\System32\rasadhlp.dll
  0x733e0000  0x40000   5.01.2600.2716  c:\windows\system32\tapisrv.dll
  0x76bf0000  0xb000    5.01.2600.2180  c:\windows\system32\PSAPI.DLL
  0x7df30000  0x31000   5.01.2600.2936  c:\windows\system32\rasmans.dll
  0x74370000  0xb000    5.01.2600.2180  c:\windows\system32\WINIPSEC.DLL
  0x755f0000  0x9a000   5.01.2600.2180  c:\windows\system32\netcfgx.dll
  0x75880000  0x11000   5.01.2600.2180  C:\WINDOWS\System32\rastapi.dll
  0x57cc0000  0x36000   5.01.2600.2180  C:\WINDOWS\System32\unimdm.tsp
  0x72000000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\uniplat.dll
  0x5b070000  0x14000   5.01.2600.2180  C:\WINDOWS\System32\unimdmat.dll
  0x61650000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\modemui.dll
  0x57d40000  0xb000    5.01.2600.2180  C:\WINDOWS\System32\kmddsp.tsp
  0x57d20000  0x10000   5.01.2600.2180  C:\WINDOWS\System32\ndptsp.tsp
  0x57d50000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\ipconf.tsp
  0x57d70000  0x46000   5.01.2600.2180  C:\WINDOWS\System32\h323.tsp
  0x57d60000  0xa000    5.01.2600.2180  C:\WINDOWS\System32\hidphone.tsp
  0x688f0000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\HID.DLL
  0x72240000  0x35000   5.01.2600.2180  C:\WINDOWS\System32\rasppp.dll
  0x724b0000  0x6000    5.01.2600.2180  C:\WINDOWS\System32\ntlsapi.dll
  0x71cf0000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x76790000  0xc000    5.01.2600.2180  C:\WINDOWS\System32\cryptdll.dll
  0x77d00000  0x33000   5.01.2600.2743  c:\windows\system32\netman.dll
  0x73030000  0x10000   5.01.2600.2977  c:\windows\system32\WZCSAPI.DLL
  0x76de0000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\upnp.dll
  0x74f00000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\SSDPAPI.dll
  0x768d0000  0xa4000   5.01.2600.2180  C:\WINDOWS\System32\RASDLG.dll
------------------------------------------------------------------------------
svchost.exe pid: 392
Command line: C:\WINDOWS\system32\svchost.exe -k NetworkService

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x76770000  0xd000    5.01.2600.2180  c:\windows\system32\dnsrslvr.dll
  0x76f20000  0x27000   5.01.2600.2938  c:\windows\system32\DNSAPI.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x76d60000  0x19000   5.01.2600.2912  c:\windows\system32\iphlpapi.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
svchost.exe pid: 508
Command line: C:\WINDOWS\system32\svchost.exe -k LocalService

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x74c40000  0x6000    5.01.2600.2180  c:\windows\system32\lmhsvc.dll
  0x76d60000  0x19000   5.01.2600.2912  c:\windows\system32\iphlpapi.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x5a6e0000  0x15000   5.01.2600.2821  c:\windows\system32\webclnt.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wsock32.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x76af0000  0x12000   5.01.2600.2180  c:\windows\system32\regsvc.dll
  0x765e0000  0x14000   5.01.2600.2180  c:\windows\system32\ssdpsrv.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76ee0000  0x3c000   5.01.2600.2180  C:\WINDOWS\system32\RASAPI32.DLL
  0x76e90000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\rasman.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76eb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\TAPI32.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x722b0000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\sensapi.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x7e1e0000  0xa2000   6.00.2900.3314  C:\WINDOWS\system32\urlmon.dll
  0x65af0000  0x7000    6.00.2900.3314  C:\WINDOWS\system32\jsproxy.dll
  0x75c50000  0x6f000   5.06.0000.8835  C:\WINDOWS\system32\JScript.dll
------------------------------------------------------------------------------
spoolsv.exe pid: 732
Command line: C:\WINDOWS\system32\spoolsv.exe

  Base        Size      Version	        Path
  0x01000000  0x10000   5.01.2600.2696  C:\WINDOWS\system32\spoolsv.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x742e0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\SPOOLSS.DLL
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x75bb0000  0x56000   5.01.2600.2180  C:\WINDOWS\system32\localspl.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x76c60000  0x2a000   5.01.2600.2180  C:\WINDOWS\system32\sfc_os.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\winspool.drv
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\netapi32.dll
  0x742a0000  0xe000    0.03.0000.0000  C:\WINDOWS\system32\cnbjmon.dll
  0x20000000  0xa000    1.00.0000.0000  C:\WINDOWS\system32\PT19L.DLL
  0x00970000  0x8000    0.03.2175.0000  C:\WINDOWS\system32\mdimon.dll
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x74280000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\pjlmon.dll
  0x72400000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\tcpmon.dll
  0x723f0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\usbmon.dll
  0x00980000  0x8000    0.03.2175.0000  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll
  0x3f420000  0x1b000   6.01.2600.5635  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x75c10000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\win32spl.dll
  0x71c80000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\NETRAP.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x01010000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x74300000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\inetpp.dll
------------------------------------------------------------------------------
scardsvr.exe pid: 776
Command line: C:\WINDOWS\System32\SCardSvr.exe

  Base        Size      Version	        Path
  0x01000000  0x1a000   5.01.2600.2180  C:\WINDOWS\System32\SCardSvr.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\System32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\System32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\System32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\System32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
------------------------------------------------------------------------------
AGENTSRV.EXE pid: 916
Command line: "C:\Program Files\Connected\AgentSrv.EXE" -asv

  Base        Size      Version	        Path
  0x00400000  0x43000   7.05.0003.2405  C:\Program Files\Connected\AgentSrv.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x10000000  0x15000   7.05.0003.2405  C:\Program Files\Connected\Launcher.dll
------------------------------------------------------------------------------
Apache.exe pid: 980
Command line: "C:\Program Files\Apache\Apache\Apache.exe" --ntservice

  Base        Size      Version	        Path
  0x00400000  0x5000                    C:\Program Files\Apache\Apache\Apache.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x6ff60000  0x58000                   C:\Program Files\Apache\Apache\ApacheCore.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x1c0f0000  0x5000                    C:\Program Files\Apache\Apache\Win9xConHook.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
blackd.exe pid: 1020
Command line: "C:\Program Files\ISS\Proventia Desktop\blackd.exe"

  Base        Size      Version	        Path
  0x00400000  0x214000  9.00.0226.2084  C:\Program Files\ISS\Proventia Desktop\blackd.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x12000000  0x170000  1.07.0000.0000  C:\Program Files\ISS\Proventia Desktop\xerces-c_1_7_0.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\ISS\Proventia Desktop\MSVCR71.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\adsldpc.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x10000000  0x37000   9.00.0179.0000  C:\Program Files\ISS\Proventia Desktop\FileSec.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x00340000  0x23000   9.00.0179.0000  C:\Program Files\ISS\Proventia Desktop\AC_Base.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\imagehlp.dll
  0x00620000  0xc1000                   C:\Program Files\ISS\Proventia Desktop\libxml2.dll
  0x00380000  0x27000                   C:\Program Files\ISS\Proventia Desktop\libxslt.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x00a90000  0x26000   1000.00.0006.1006  C:\Program Files\ISS\Proventia Desktop\blackdll.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x5e000000  0x262000  1.10.0108.0223  C:\Program Files\ISS\Proventia Desktop\iss-pam1.dll
  0x00e30000  0xc5000   3.01.0005.0001  C:\Program Files\ISS\Proventia Desktop\issLicenseSvcs3.dll
  0x00f00000  0x92000   3.01.0005.0001  C:\Program Files\ISS\Proventia Desktop\issEventSvcs3.dll
  0x00fa0000  0xe2000   3.01.0005.0001  C:\Program Files\ISS\Proventia Desktop\issSensorSvcs3.dll
  0x010a0000  0x11e000  9.00.0226.2122  C:\Program Files\ISS\Proventia Desktop\PolicyXlate.dll
  0x01290000  0x196000  3.01.0005.0001  C:\Program Files\ISS\Proventia Desktop\issSessionConfigSvcs3.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x01b30000  0xc3000   3.01.0005.0001  C:\Program Files\ISS\Proventia Desktop\issUpdateSvcs3.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x71cf0000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x76790000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\cryptdll.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x71290000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\adsldp.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x02520000  0x3b000   9.00.0226.0000  C:\Program Files\ISS\Proventia Desktop\Rapclient.dll
  0x74c80000  0x2c000   4.02.5406.0000  C:\WINDOWS\system32\OLEACC.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x02590000  0x17000   9.00.0179.0000  C:\Program Files\ISS\Proventia Desktop\VpnICE.dll
  0x74ae0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\cfgmgr32.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\setupapi.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\MPRAPI.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x74ef0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemprox.dll
  0x75290000  0x37000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemcomn.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x74ed0000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemsvc.dll
  0x75690000  0x76000   5.01.2600.2180  C:\WINDOWS\system32\wbem\fastprox.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x06b00000  0x12000   9.00.0179.0000  C:\Program Files\ISS\Proventia Desktop\Comply\AC_BitDefender.dll
  0x06b40000  0x12000   9.00.0179.0000  C:\Program Files\ISS\Proventia Desktop\Comply\AC_McAfee.dll
  0x06b80000  0x13000   9.00.0179.0000  C:\Program Files\ISS\Proventia Desktop\Comply\AC_Norton.dll
------------------------------------------------------------------------------
nfsclnt.exe pid: 1056
Command line: C:\WINDOWS\system32\nfsclnt.exe

  Base        Size      Version	        Path
  0x01000000  0xe000    8.00.1969.0001  C:\WINDOWS\system32\nfsclnt.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x00400000  0x15000   8.00.1969.0001  C:\WINDOWS\system32\nfsccfg.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
GCardSrvNT.exe pid: 1144
Command line: "C:\Program Files\GemPlus\GemSafe Libraries User\BIN\GCardSrvNT.exe"

  Base        Size      Version	        Path
  0x00400000  0x48000   2.00.0002.0000  C:\Program Files\GemPlus\GemSafe Libraries User\BIN\GCardSrvNT.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x723d0000  0x1c000   5.01.2600.2180  C:\WINDOWS\system32\WinSCard.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
------------------------------------------------------------------------------
jqs.exe pid: 1224
Command line: "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"

  Base        Size      Version	        Path
  0x00400000  0x24000   6.00.0170.0004  C:\Program Files\Java\jre6\bin\jqs.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\Java\jre6\bin\MSVCR71.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\psapi.dll
  0x74000000  0x56000   5.01.2600.2180  C:\WINDOWS\system32\pdh.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x74320000  0x3d000   3.525.1117.0000  C:\WINDOWS\system32\ODBC32.dll
  0x711a0000  0x6000    2000.85.1117.0000  C:\WINDOWS\system32\odbcbcp.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x20000000  0x17000   3.525.1117.0000  C:\WINDOWS\system32\odbcint.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x5e760000  0xa000    5.01.2600.2180  C:\WINDOWS\system32\perfos.dll
  0x5e790000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\perfdisk.dll
------------------------------------------------------------------------------
Apache.exe pid: 708
Command line: "C:\Program Files\Apache\Apache\Apache.exe" -z ap980_C1 -f "c:/program files/apache/apache/conf/httpd.conf" "-d" "c:/program files/apache/apache" "-f" "c:/program files/apache/apache/conf/httpd.conf"

  Base        Size      Version	        Path
  0x00400000  0x5000                    C:\Program Files\Apache\Apache\Apache.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x6ff60000  0x58000                   C:\Program Files\Apache\Apache\ApacheCore.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x1c0f0000  0x5000                    C:\Program Files\Apache\Apache\Win9xConHook.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
engineserver.exe pid: 1816
Command line: "C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe"

  Base        Size      Version	        Path
  0x00400000  0x6000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x14710000  0x48000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll
  0x76780000  0x9000    6.00.2900.2180  C:\WINDOWS\system32\SHFOLDER.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x14810000  0x19000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_server.dll
  0x140e0000  0x9000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll
  0x14100000  0x7000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll
------------------------------------------------------------------------------
FrameworkService.exe pid: 1988
Command line: "C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart

  Base        Size      Version	        Path
  0x00400000  0x18000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x64890000  0x7000    4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\nailog3.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\Network Associates\Common Framework\MSVCR71.dll
  0x64960000  0x23000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\naxml3_71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\Program Files\Network Associates\Common Framework\MSVCP71.dll
  0x64840000  0x2f000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\naCmnLib3_71.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x64120000  0x45000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\applib.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x10000000  0x32e000                  C:\Program Files\Network Associates\Common Framework\cryptocme2.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x64100000  0x19000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x64670000  0xf000    4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\Logging.dll
  0x64b50000  0x13000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\UserSpace.Dll
  0x64a50000  0x1f000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory3.dll
  0x64690000  0x40000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\Management.dll
  0x648f0000  0x35000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\naPolicyManager.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PsApi.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x64b00000  0x19000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\UpdateSubSys.Dll
  0x64ab0000  0x50000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\updater.dll
  0x64610000  0x1d000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\ipcchannel.dll
  0x64170000  0xe000                    C:\Program Files\Network Associates\Common Framework\boost_thread-vc71-mt-1_32.dll
  0x646d0000  0x37000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\mfeCmnLib71.dll
  0x64a00000  0x4a000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\Scheduler.dll
  0x64000000  0x3d000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\Agent.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x648a0000  0x34000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\nainet.dll
  0x64710000  0x40000   1.00.0000.0151  C:\Program Files\Network Associates\Common Framework\mfecurl.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x64750000  0x12000   1.00.0000.0151  C:\Program Files\Network Associates\Common Framework\mfezlib.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x64590000  0x76000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\inetmgr.dll
  0x64930000  0x2a000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\naSPIPE.dll
  0x641c0000  0xa000    4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\cmalib.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x64630000  0x25000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\ListenServer.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x64a80000  0x2e000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\TCSubSys.dll
  0x76ee0000  0x3c000   5.01.2600.2180  C:\WINDOWS\system32\Rasapi32.dll
  0x76e90000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\rasman.dll
  0x76eb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\TAPI32.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x64560000  0x2f000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\Genevtinf3.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\MPRAPI.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\adsldpc.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
------------------------------------------------------------------------------
vstskmgr.exe pid: 2036
Command line: "C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe"

  Base        Size      Version	        Path
  0x00400000  0xf000    8.07.0000.0767  C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x140e0000  0x9000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x14710000  0x48000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll
  0x76780000  0x9000    6.00.2900.2180  C:\WINDOWS\system32\SHFOLDER.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x15de0000  0x34000   8.07.0000.0747  C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x16300000  0x6000    8.07.0000.0747  C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x73dc0000  0x3000    5.01.2600.0000  C:\WINDOWS\system32\LZ32.dll
  0x150c0000  0x11000   8.07.0000.0570  C:\Program Files\McAfee\VirusScan Enterprise\condl.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x14100000  0x7000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x10000000  0x24000   8.07.0000.0133  C:\Program Files\McAfee\VirusScan Enterprise\MIDUtil.Dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x74ef0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemprox.dll
  0x75290000  0x37000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemcomn.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x74ed0000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemsvc.dll
  0x75690000  0x76000   5.01.2600.2180  C:\WINDOWS\system32\wbem\fastprox.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
------------------------------------------------------------------------------
MDM.EXE pid: 164
Command line: "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE"

  Base        Size      Version	        Path
  0x00400000  0x4d000   7.00.9466.0000  C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\psapi.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x3f080000  0x22000   9.00.21022.0008  C:\Program Files\Common Files\Microsoft Shared\VS7Debug\csm.dll
  0x3f0e0000  0x42000   9.00.30729.0001  C:\Program Files\Common Files\Microsoft Shared\VS7Debug\msdbg2.dll
------------------------------------------------------------------------------
mfevtps.exe pid: 204
Command line: C:\WINDOWS\system32\mfevtps.exe

  Base        Size      Version	        Path
  0x00400000  0x13000   14.01.0000.0615  C:\WINDOWS\system32\mfevtps.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\userenv.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\secur32.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\netapi32.dll
------------------------------------------------------------------------------
minislv.exe pid: 284
Command line: "C:\Program Files\1E\SMSWakeup40\minislv.exe"

  Base        Size      Version	        Path
  0x00400000  0x29000   4.00.0000.0015  C:\Program Files\1E\SMSWakeup40\minislv.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x74290000  0x4000    5.01.2600.2180  C:\WINDOWS\system32\ICMP.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
sqlservr.exe pid: 348
Command line: "c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS

  Base        Size      Version	        Path
  0x01000000  0x1c0a000  2005.90.3042.0000  c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x78130000  0x9b000   8.00.50727.3053  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7c420000  0x87000   8.00.50727.3053  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCP80.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\MSWSOCK.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x333e0000  0x7000    2005.90.1399.0000  c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\opends60.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\psapi.dll
  0x48060000  0xa000    2005.90.1399.0000  c:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll
  0x4f610000  0x1a9000  2005.90.3042.0000  c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.RLL
  0x344d0000  0x5000    2005.90.3042.0000  c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLOS.DLL
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x776c0000  0x11000   5.01.2600.2622  C:\WINDOWS\system32\AUTHZ.DLL
  0x79000000  0x46000   2.00.50727.3053  C:\WINDOWS\system32\MSCOREE.DLL
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x71cf0000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x76790000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\cryptdll.dll
  0x767f0000  0x27000   5.01.2600.3126  C:\WINDOWS\system32\schannel.dll
  0x71f80000  0x4000    5.01.2600.2180  C:\WINDOWS\system32\security.dll
  0x68100000  0x24000   5.01.2600.2133  C:\WINDOWS\system32\dssenh.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x04d20000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\ntdsapi.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
------------------------------------------------------------------------------
naPrdMgr.exe pid: 432
Command line: "C:\Program Files\Network Associates\Common Framework\naPrdMgr.exe" -Embedding

  Base        Size      Version	        Path
  0x00400000  0x37000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\naPrdMgr.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x64960000  0x23000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\naxml3_71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\Program Files\Network Associates\Common Framework\MSVCP71.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\Network Associates\Common Framework\MSVCR71.dll
  0x64890000  0x7000    4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\nailog3.dll
  0x64840000  0x2f000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\naCmnLib3_71.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x64120000  0x45000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\applib.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x10000000  0x32e000                  C:\Program Files\Network Associates\Common Framework\cryptocme2.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x64100000  0x19000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x640c0000  0x39000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\agentplugin.dll
  0x646d0000  0x37000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\mfeCmnLib71.dll
  0x16140000  0x28000   8.07.0000.0747  C:\Program Files\McAfee\VirusScan Enterprise\VsPlugin.dll
  0x64b20000  0xe000    4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\UpdPlug.Dll
  0x64a50000  0x1f000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory3.dll
------------------------------------------------------------------------------
nvsvc32.exe pid: 448
Command line: C:\WINDOWS\system32\nvsvc32.exe

  Base        Size      Version	        Path
  0x00400000  0x27000   6.14.0010.8437  C:\WINDOWS\system32\nvsvc32.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x74ad0000  0x8000    6.00.2900.2180  C:\WINDOWS\system32\POWRPROF.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wtsapi32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\secur32.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
------------------------------------------------------------------------------
RapApp.exe pid: 468
Command line: "C:\Program Files\ISS\Proventia Desktop\RapApp.exe"

  Base        Size      Version	        Path
  0x00400000  0x140000  9.00.0226.2212  C:\Program Files\ISS\Proventia Desktop\RapApp.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x10000000  0xcf000   9.00.0226.2252  C:\Program Files\ISS\Proventia Desktop\appcomply.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x003e0000  0x1c000   8.01.0006.0000  C:\Program Files\ISS\Proventia Desktop\RapKAPI.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x00590000  0x3b000   9.00.0226.0000  C:\Program Files\ISS\Proventia Desktop\RapClient.dll
  0x74c80000  0x2c000   4.02.5406.0000  C:\WINDOWS\system32\OLEACC.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x005e0000  0x3e000   9.00.0179.0000  C:\Program Files\ISS\Proventia Desktop\phQM.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\imagehlp.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x01630000  0x22000   4.08.0000.0000  C:\Program Files\ISS\Proventia Desktop\IBE\IBEQM.dll
  0x01680000  0x9b000   9.00.0226.2232  C:\Program Files\ISS\Proventia Desktop\phAVM.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WtsApi32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x023e0000  0x140000  9.00.0226.2212  C:\Program Files\ISS\Proventia Desktop\BitDefenderEngine.dll
  0x02530000  0xc1000                   C:\Program Files\ISS\Proventia Desktop\libxml2.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\ISS\Proventia Desktop\MSVCR71.dll
  0x02600000  0x27000                   C:\Program Files\ISS\Proventia Desktop\libxslt.dll
  0x02980000  0x66000   9.00.0226.2071  C:\Program Files\ISS\Proventia Desktop\IBEEngine.dll
  0x06cf0000  0x5b000   9.00.0226.2132  C:\Program Files\ISS\Proventia Desktop\phScheduler.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x087b0000  0x38000   9.00.0179.0000  C:\Program Files\ISS\Proventia Desktop\IBE\InstLspDll.dll
------------------------------------------------------------------------------
sqlwriter.exe pid: 548
Command line: "c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe"

  Base        Size      Version	        Path
  0x01000000  0x18000   2005.90.3042.0000  c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x78130000  0x9b000   8.00.50727.3053  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x4f880000  0x2e000   2005.90.3042.0000  c:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss_xp.dll
  0x7c420000  0x87000   8.00.50727.3053  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCP80.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x753e0000  0x6d000   5.01.2600.2180  C:\WINDOWS\system32\VSSAPI.DLL
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x77710000  0x41000   2001.12.4414.0308  C:\WINDOWS\system32\es.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wtsapi32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
------------------------------------------------------------------------------
svchost.exe pid: 520
Command line: C:\WINDOWS\system32\svchost.exe -k imgsvc

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x75aa0000  0x55000   5.01.2600.2180  c:\windows\system32\wiaservc.dll
  0x74ae0000  0x7000    5.01.2600.2180  c:\windows\system32\CFGMGR32.dll
  0x77920000  0xf3000   5.01.2600.2180  c:\windows\system32\setupapi.DLL
  0x73b30000  0x15000   5.01.2600.2709  c:\windows\system32\mscms.dll
  0x73000000  0x26000   5.01.2600.2180  c:\windows\system32\WINSPOOL.DRV
  0x76360000  0x10000   5.01.2600.2180  c:\windows\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x71d40000  0x1c000   6.00.2900.2180  C:\WINDOWS\system32\actxprxy.dll
  0x73ba0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\sti.dll
------------------------------------------------------------------------------
uphclean.exe pid: 652
Command line: "C:\Program Files\UPHClean\uphclean.exe"

  Base        Size      Version	        Path
  0x00400000  0x3b000   1.06.0030.0000  C:\Program Files\UPHClean\uphclean.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\MSVCRT.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
------------------------------------------------------------------------------
vnxserv.exe pid: 900
Command line: C:\WINDOWS\system32\vnxserv.exe

  Base        Size      Version	        Path
  0x00400000  0xb000                    C:\WINDOWS\system32\vnxserv.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
------------------------------------------------------------------------------
Vpatch.exe pid: 924
Command line: "C:\Program Files\ISS\Proventia Desktop\VPatch.exe"

  Base        Size      Version	        Path
  0x00400000  0x65000   9.00.0226.2075  C:\Program Files\ISS\Proventia Desktop\VPatch.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x10000000  0x41000   9.00.0226.2242  C:\Program Files\ISS\Proventia Desktop\phBOEP.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x00b40000  0x3b000   9.00.0226.0000  C:\Program Files\ISS\Proventia Desktop\RapClient.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x74c80000  0x2c000   4.02.5406.0000  C:\WINDOWS\system32\OLEACC.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x00ea0000  0x56000   2.00.0000.0000  C:\Program Files\ISS\Proventia Desktop\issboep.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
------------------------------------------------------------------------------
Wuser32.exe pid: 1048
Command line: C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe

  Base        Size      Version	        Path
  0x00400000  0x42000   2.50.4160.2000  C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x10000000  0x14000   2.50.4160.2000  C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\multprot.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x00240000  0x15000   2.50.4160.2000  C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\QUEUEBUF.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x00bd0000  0xf000    2.50.4160.2000  C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\1033\_wuser32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x71f80000  0x4000    5.01.2600.2180  C:\WINDOWS\system32\SECURITY.DLL
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
------------------------------------------------------------------------------
xElevate_b2cd.exe pid: 1212
Command line: C:\WINDOWS\system32\xElevate_b2cd.exe

  Base        Size      Version	        Path
  0x00400000  0x10000   6.00.0001.0000  C:\WINDOWS\system32\xElevate_b2cd.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\secur32.dll
------------------------------------------------------------------------------
PSXRUN.EXE pid: 1860
Command line: C:\WINDOWS\system32\PSXRUN.EXE

  Base        Size      Version	        Path
  0x01000000  0x14000   8.00.1969.0001  C:\WINDOWS\system32\PSXRUN.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
------------------------------------------------------------------------------
PSXSS.EXE pid: 1940
Command line: C:\WINDOWS\system32\psxss.exe

  Base        Size      Version	        Path
  0x4a780000  0x82000                   \??\C:\WINDOWS\system32\psxss.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\MSVCRT.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
------------------------------------------------------------------------------
CcmExec.exe pid: 2052
Command line: C:\WINDOWS\system32\CCM\CcmExec.exe

  Base        Size      Version	        Path
  0x01000000  0x8e000   2.50.4160.2000  C:\WINDOWS\system32\CCM\CcmExec.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x18040000  0x53000   2.50.4160.2000  C:\WINDOWS\system32\ccmcore.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x181c0000  0xe000    2.50.4160.2000  C:\WINDOWS\system32\CCM\ccmperf.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x18150000  0x15000   2.50.4160.2000  C:\WINDOWS\system32\CCM\CCMGenCert.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x18200000  0x24000   2.50.4160.2000  C:\WINDOWS\system32\CCM\CcmTask.dll
  0x4d4f0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\WINHTTP.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x74ef0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemprox.dll
  0x75290000  0x37000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemcomn.dll
  0x74ed0000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemsvc.dll
  0x75690000  0x76000   5.01.2600.2180  C:\WINDOWS\system32\wbem\fastprox.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\userenv.dll
  0x75e60000  0x13000   5.131.2600.2180  C:\WINDOWS\system32\cryptnet.dll
  0x722b0000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\SensApi.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\APPHELP.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x186c0000  0x12000   2.50.4160.2000  C:\WINDOWS\system32\CCM\PolicyAgent.dll
  0x18920000  0x2d000   2.50.4160.2000  C:\WINDOWS\system32\CCM\SrcUpdateMgr.dll
  0x18890000  0xd000    2.50.4160.2000  C:\WINDOWS\system32\CCM\smscore.dll
  0x18240000  0x35000   2.50.4160.2000  C:\WINDOWS\system32\CCM\ContentAccess.dll
  0x18680000  0x29000   2.50.4160.2000  C:\WINDOWS\system32\CCM\PatchUIMonitor.dll
  0x180e0000  0x4f000   2.50.4160.2000  C:\WINDOWS\system32\CCM\CcmDTS.dll
  0x18290000  0x15000   2.50.4160.2000  C:\WINDOWS\system32\CCM\CPApplet.dll
  0x180a0000  0x25000   2.50.4160.2000  C:\WINDOWS\system32\CCM\CcmCTM.dll
  0x18320000  0x47000   2.50.4160.2000  C:\WINDOWS\system32\CCM\execmgr.dll
  0x692c0000  0x30000   5.01.2600.2180  C:\WINDOWS\System32\Wbem\framedyn.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x181a0000  0xc000    2.50.4160.2000  C:\WINDOWS\system32\CCM\ccmident.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\MPRAPI.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\adsldpc.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x18990000  0x12000   2.50.4160.2000  C:\WINDOWS\system32\CCM\StatusAgent.dll
  0x59940000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmidcprv.dll
  0x75020000  0x1b000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmiutils.dll
  0x75310000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\wbem\esscli.dll
  0x18540000  0x34000   2.50.4160.2000  C:\WINDOWS\system32\CCM\LSUtilities.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x71cf0000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x76790000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\cryptdll.dll
  0x74980000  0x113000  8.90.1101.0000  C:\WINDOWS\system32\msxml3.dll
  0x18620000  0x2a000   2.50.4160.2000  C:\WINDOWS\system32\CCM\MtrMgr.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x18780000  0xa000    2.50.4160.2000  C:\WINDOWS\system32\CCM\Prep.dll
  0x187e0000  0x28000   2.50.4160.2000  C:\WINDOWS\system32\CCM\Sched.dll
  0x18650000  0x25000   2.50.4160.2000  C:\WINDOWS\system32\CCM\PatchInstall.dll
  0x18000000  0xe000    2.50.4160.2000  C:\WINDOWS\system32\CCM\AdvertSched.dll
  0x186e0000  0x65000   2.50.4160.2000  C:\WINDOWS\system32\CCM\PolicyAgentEndpoint.dll
  0x18170000  0x1b000   2.50.4160.2000  C:\WINDOWS\system32\CCM\ccmhttp.dll
  0x189b0000  0x6000    2.50.4160.2000  C:\WINDOWS\system32\CCM\StatusAgentProxy.dll
  0x18870000  0x1d000   2.50.4160.2000  C:\WINDOWS\system32\CCM\smsclient.dll
------------------------------------------------------------------------------
mcshield.exe pid: 2236
Command line: "C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe"

  Base        Size      Version	        Path
  0x00400000  0x28000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x73dc0000  0x3000    5.01.2600.0000  C:\WINDOWS\system32\LZ32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x140e0000  0x9000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x14180000  0x13000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3.dll
  0x14710000  0x48000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll
  0x76780000  0x9000    6.00.2900.2180  C:\WINDOWS\system32\SHFOLDER.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x14810000  0x19000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_server.dll
  0x14100000  0x7000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll
  0x14080000  0xd000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\FTL.Dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\psapi.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x76c60000  0x2a000   5.01.2600.2180  C:\WINDOWS\system32\sfc_os.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.Dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x12000000  0x31c000  5.400.0000.1158  C:\Program Files\Common Files\McAfee\Engine\mcscan32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x65490000  0x14000   14.01.0000.0615  C:\Program Files\McAfee\VirusScan Enterprise\mfeapfa.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x66240000  0x8000    14.01.0000.0615  C:\Program Files\McAfee\VirusScan Enterprise\mfehida.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\userenv.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x75e60000  0x13000   5.131.2600.2180  C:\WINDOWS\system32\cryptnet.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x4d4f0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\WINHTTP.dll
  0x722b0000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\SensApi.dll
  0x603d0000  0xe000    14.01.0000.0615  C:\Program Files\McAfee\VirusScan Enterprise\mfebopa.dll
  0x6eff0000  0xd000    14.01.0000.0615  C:\Program Files\McAfee\VirusScan Enterprise\mfeavfa.dll
------------------------------------------------------------------------------
mapsvc.exe pid: 2428
Command line: C:\BIN\SFU\Mapper\mapsvc.exe

  Base        Size      Version	        Path
  0x01000000  0x1e000   8.00.1969.0001  C:\BIN\SFU\Mapper\mapsvc.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x005e0000  0x1c000   8.00.1969.0001  C:\BIN\SFU\admin\mapper.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
------------------------------------------------------------------------------
mfeann.exe pid: 2464
Command line: "C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe" 2236

  Base        Size      Version	        Path
  0x00400000  0x8000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x140e0000  0x9000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x158e0000  0x1b000   8.07.0000.0659  C:\Program Files\McAfee\VirusScan Enterprise\naiann.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x14180000  0x13000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3.dll
  0x14710000  0x48000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll
  0x76780000  0x9000    6.00.2900.2180  C:\WINDOWS\system32\SHFOLDER.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x15f00000  0x2c000                   C:\Program Files\McAfee\VirusScan Enterprise\VsEvntUI.dll
  0x14320000  0x18000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\NAEvent.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\MSWSOCK.dll
  0x15de0000  0x34000   8.07.0000.0747  C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x16300000  0x6000    8.07.0000.0747  C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x73dc0000  0x3000    5.01.2600.0000  C:\WINDOWS\system32\LZ32.dll
  0x14100000  0x7000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.Dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x64560000  0x2f000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\Genevtinf3.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\MPRAPI.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\adsldpc.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
------------------------------------------------------------------------------
init pid: 2556
Command line: 
  Base        Size      Version	        Path
  0x00400000  0x1b000                   \??\C:\BIN\SFU\usr\sbin\init
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x77ea0000  0x4a000   8.00.1969.0001  C:\WINDOWS\system32\PSXDLL.dll
------------------------------------------------------------------------------
zzInterix pid: 2664
Command line: 
  Base        Size      Version	        Path
  0x00400000  0x15000                   \??\C:\BIN\SFU\usr\sbin\zzInterix
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x77ea0000  0x4a000   8.00.1969.0001  C:\WINDOWS\system32\PSXDLL.dll
------------------------------------------------------------------------------
inetd pid: 2832
Command line: 
  Base        Size      Version	        Path
  0x00400000  0x20000                   \??\C:\BIN\SFU\usr\sbin\inetd
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x77ea0000  0x4a000   8.00.1969.0001  C:\WINDOWS\system32\PSXDLL.dll
------------------------------------------------------------------------------
wmiprvse.exe pid: 3780
Command line: C:\WINDOWS\system32\wbem\wmiprvse.exe

  Base        Size      Version	        Path
  0x01000000  0x38000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmiprvse.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x75290000  0x37000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemcomn.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x75690000  0x76000   5.01.2600.2180  C:\WINDOWS\system32\wbem\FastProx.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x5f770000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\NCObjAPI.DLL
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x74ed0000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemsvc.dll
  0x75020000  0x1b000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmiutils.dll
  0x18750000  0x17000   2.50.4160.2000  C:\WINDOWS\system32\CCM\PolicyAgentProvider.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x18040000  0x53000   2.50.4160.2000  C:\WINDOWS\system32\ccmcore.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
------------------------------------------------------------------------------
wmiprvse.exe pid: 2456
Command line: C:\WINDOWS\system32\wbem\wmiprvse.exe

  Base        Size      Version	        Path
  0x01000000  0x38000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmiprvse.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x75290000  0x37000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemcomn.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x75690000  0x76000   5.01.2600.2180  C:\WINDOWS\system32\wbem\FastProx.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x5f770000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\NCObjAPI.DLL
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x74ed0000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemsvc.dll
  0x75020000  0x1b000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmiutils.dll
  0x5bd90000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\wbem\stdprov.dll
  0x75310000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\wbem\esscli.dll
------------------------------------------------------------------------------
ssonsvr.exe pid: 3904
Command line: "C:\Program Files\Citrix\ICA Client\ssonsvr.exe"

  Base        Size      Version	        Path
  0x00400000  0x6000    9.150.39151.0000  C:\Program Files\Citrix\ICA Client\ssonsvr.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\MSVCRT.dll
  0x66680000  0x6000    9.150.39151.0000  C:\Program Files\Citrix\ICA Client\PNIPCN.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\Imm32.dll
------------------------------------------------------------------------------
explorer.exe pid: 1088
Command line: C:\WINDOWS\Explorer.EXE

  Base        Size      Version	        Path
  0x01000000  0xff000   6.00.2900.2180  C:\WINDOWS\Explorer.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x75f80000  0xfd000   6.00.2900.3314  C:\WINDOWS\system32\BROWSEUI.dll
  0x7e290000  0x171000  6.00.2900.3314  C:\WINDOWS\system32\SHDOCVW.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x754d0000  0x80000   5.131.2600.2180  C:\WINDOWS\system32\CRYPTUI.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\appHelp.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77a20000  0x54000   5.01.2600.2180  C:\WINDOWS\System32\cscui.dll
  0x76600000  0x1d000   5.01.2600.2180  C:\WINDOWS\System32\CSCDLL.dll
  0x5ba60000  0x71000   6.00.2900.2180  C:\WINDOWS\system32\themeui.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x76380000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76980000  0x8000    5.01.2600.2751  C:\WINDOWS\system32\LINKINFO.dll
  0x76990000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\ntshrui.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x7e1e0000  0xa2000   6.00.2900.3314  C:\WINDOWS\system32\urlmon.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x74b30000  0x46000   6.00.2900.2180  C:\WINDOWS\system32\webcheck.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76280000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\stobject.dll
  0x74af0000  0xa000    6.00.2900.2180  C:\WINDOWS\system32\BatMeter.dll
  0x74ad0000  0x8000    6.00.2900.2180  C:\WINDOWS\system32\POWRPROF.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x164a0000  0x23000   5.02.5721.5145  C:\WINDOWS\system32\WPDShServiceObj.dll
  0x4d4f0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\WINHTTP.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x72410000  0x1a000   6.00.2900.2180  C:\WINDOWS\system32\mydocs.dll
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
  0x76400000  0x1a5000  5.01.2600.2977  C:\WINDOWS\system32\NETSHELL.dll
  0x76c00000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\credui.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x016c0000  0x1a000   1.01.0008.0094  C:\Program Files\WinSCP\DragExt.dll
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x109c0000  0x2c000   5.02.5721.5145  C:\WINDOWS\system32\PortableDeviceTypes.dll
  0x10930000  0x49000   5.02.5721.5145  C:\WINDOWS\system32\PortableDeviceApi.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x75f60000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\drprov.dll
  0x71c10000  0xe000    5.01.2600.2180  C:\WINDOWS\System32\ntlanman.dll
  0x71cd0000  0x17000   5.01.2600.2180  C:\WINDOWS\System32\NETUI0.dll
  0x71c90000  0x40000   5.01.2600.2180  C:\WINDOWS\System32\NETUI1.dll
  0x71c80000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\NETRAP.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\System32\SAMLIB.dll
  0x75f70000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\davclnt.dll
  0x00ac0000  0xd000    8.00.1969.0001  C:\WINDOWS\system32\nfsnp.dll
  0x00ad0000  0x15000   8.00.1969.0001  C:\WINDOWS\system32\nfsccfg.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x00b40000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x66900000  0x1b000   1.00.0000.0129  C:\Program Files\Network Associates\Common Framework\JrMac.dll
  0x605d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x01470000  0x12000   6.00.2900.2180  C:\WINDOWS\system32\browselc.dll
  0x10000000  0xe000    7.00.0007.0142  C:\Program Files\Adobe\ActiveX\AcroIEHelper.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x016e0000  0x1f000   1.04.0008.0000  C:\WINDOWS\system32\dla\tfswshx.dll
  0x01140000  0xf000    1.04.0008.0000  C:\WINDOWS\system32\tfswapi.dll
  0x020b0000  0x3b000   1.04.0008.0000  C:\WINDOWS\system32\dla\tfswcres.dll
  0x6d440000  0xc000    6.00.0170.0004  C:\Program Files\Java\jre6\bin\jp2ssv.dll
  0x6dae0000  0x12000   6.00.0170.0004  C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x62860000  0x4d000   8.00.0000.9005  C:\Program Files\OpenOffice.org 2.0\program\shlxthdl.dll
  0x60b30000  0x18000   8.00.0000.8975  C:\Program Files\OpenOffice.org 2.0\program\uwinapi.dll
  0x4ec50000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x62410000  0x8e000   4.05.2003.0120  C:\Program Files\OpenOffice.org 2.0\program\stlport_vc7145.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\Program Files\OpenOffice.org 2.0\program\MSVCP71.dll
  0x02180000  0x1c000   7.00.0000.0000  C:\Program Files\Adobe\ActiveX\PDFShell.dll
  0x325c0000  0x12000   11.00.5510.0000  C:\Program Files\Microsoft Office\OFFICE11\msohev.dll
  0x021f0000  0x88000   6.00.2900.2180  C:\WINDOWS\system32\shdoclc.dll
  0x73ba0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\sti.dll
  0x74ae0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
  0x75830000  0x45000   5.01.2600.2180  C:\WINDOWS\system32\mstask.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x16200000  0x6000    4.01.0000.0000  C:\PROGRA~1\WINZIP\WZSHLSTB.DLL
  0x15d80000  0xc000    8.07.0000.0570  C:\Program Files\McAfee\VirusScan Enterprise\shext.dll
  0x73dc0000  0x3000    5.01.2600.0000  C:\WINDOWS\system32\LZ32.dll
  0x02280000  0xd000    1.00.0004.0000  C:\Program Files\textpad 4\System\shellext.dll
  0x02f80000  0x11000   6.06.0002.0001  C:\WINDOWS\system32\DWRCShell.DLL
  0x02ff0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\xpsp1res.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x03020000  0x748000  6.14.0010.8437  C:\WINDOWS\system32\nvcpl.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x74c80000  0x2c000   4.02.5406.0000  C:\WINDOWS\system32\OLEACC.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x02b00000  0x73000   6.14.0010.11029  C:\WINDOWS\system32\nvshell.dll
  0x71d40000  0x1c000   6.00.2900.2180  C:\WINDOWS\system32\actxprxy.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x73380000  0x57000   6.00.2900.2180  C:\WINDOWS\system32\zipfldr.dll
  0x5cad0000  0x27000   6.00.2900.2180  C:\WINDOWS\system32\shmedia.dll
  0x75a70000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\MSVFW32.dll
  0x73b50000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\AVIFIL32.dll
  0x15110000  0x25a000  11.00.5721.5145  C:\WINDOWS\system32\wmvcore.dll
  0x11c70000  0x39000   11.00.5721.5145  C:\WINDOWS\system32\WMASF.DLL
  0x75cf0000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\mlang.dll
------------------------------------------------------------------------------
RegTool.exe pid: 1468
Command line: "C:\Program Files\GemPlus\GemSafe Libraries User\BIN\RegTool.exe" 

  Base        Size      Version	        Path
  0x00400000  0xb000    2.00.0008.0000  C:\Program Files\GemPlus\GemSafe Libraries User\BIN\RegTool.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x10000000  0x3d000   2.01.0003.0000  C:\Program Files\GemPlus\GemSafe Libraries User\BIN\GemPPM.dll
  0x723d0000  0x1c000   5.01.2600.2180  C:\WINDOWS\system32\WinSCard.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x73dd0000  0xfe000   6.02.4131.0000  C:\WINDOWS\system32\MFC42.DLL
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x00ac0000  0x112000  1.00.0004.0000  C:\Program Files\Gemplus\Common\Resources\LocHub.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x00a20000  0x37000   1.00.0006.0000  C:\Program Files\GemPlus\GemSafe Libraries User\BIN\GUICore.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\userenv.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\secur32.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
------------------------------------------------------------------------------
Update.exe pid: 3636
Command line: "C:\WINDOWS\system32\Help\Update.exe" 

  Base        Size      Version	        Path
  0x00400000  0x24000   1.01.0000.0003  C:\WINDOWS\system32\Help\Update.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x7e1e0000  0xa2000   6.00.2900.3314  C:\WINDOWS\system32\urlmon.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
------------------------------------------------------------------------------
rundll32.exe pid: 1896
Command line: "C:\WINDOWS\system32\RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

  Base        Size      Version	        Path
  0x01000000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\RUNDLL32.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x10000000  0x17000   6.14.0010.8437  C:\WINDOWS\system32\NvMcTray.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
------------------------------------------------------------------------------
stsystra.exe pid: 400
Command line: "C:\WINDOWS\stsystra.exe" 

  Base        Size      Version	        Path
  0x00400000  0x45000   1.00.4991.0000  C:\WINDOWS\stsystra.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x10000000  0x103000  1.06.4947.0000  C:\WINDOWS\system32\STLang.dll
  0x72830000  0xfe000   6.02.4131.0000  C:\WINDOWS\system32\MFC42u.DLL
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x00950000  0x35000   1.00.4991.0000  C:\WINDOWS\system32\stacapi.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
------------------------------------------------------------------------------
DVDLauncher.exe pid: 3624
Command line: "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" 

  Base        Size      Version	        Path
  0x00400000  0xc000    3.00.0000.0000  C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x73dd0000  0xfe000   6.02.4131.0000  C:\WINDOWS\system32\MFC42.DLL
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
------------------------------------------------------------------------------
MyToolbar.exe pid: 1064
Command line: "C:\Program Files\MyToolbar\MyToolbar.exe" 

  Base        Size      Version	        Path
  0x00400000  0x84000   6.01.0005.0036  C:\Program Files\MyToolbar\MyToolbar.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x722b0000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\SensApi.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
  0x42700000  0xa8000   6.01.0005.0036  C:\Program Files\MyToolbar\MyToolbarTBr.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76980000  0x8000    5.01.2600.2751  C:\WINDOWS\system32\LINKINFO.dll
  0x76990000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\ntshrui.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\appHelp.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x77a20000  0x54000   5.01.2600.2180  C:\WINDOWS\System32\cscui.dll
  0x76600000  0x1d000   5.01.2600.2180  C:\WINDOWS\System32\CSCDLL.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wsock32.dll
  0x76ee0000  0x3c000   5.01.2600.2180  C:\WINDOWS\system32\RASAPI32.DLL
  0x76e90000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\rasman.dll
  0x76eb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\TAPI32.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x7e1e0000  0xa2000   6.00.2900.3314  C:\WINDOWS\system32\urlmon.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x65af0000  0x7000    6.00.2900.3314  C:\WINDOWS\system32\jsproxy.dll
  0x75c50000  0x6f000   5.06.0000.8835  C:\WINDOWS\system32\JScript.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
------------------------------------------------------------------------------
tfswctrl.exe pid: 3632
Command line: "C:\WINDOWS\system32\dla\tfswctrl.exe" 

  Base        Size      Version	        Path
  0x00400000  0x20000   1.04.0008.0000  C:\WINDOWS\system32\dla\tfswctrl.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x10000000  0xf000    1.04.0008.0000  C:\WINDOWS\system32\tfswapi.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x00320000  0x3b000   1.04.0008.0000  C:\WINDOWS\system32\dla\tfswcres.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\Wtsapi32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
------------------------------------------------------------------------------
shstat.exe pid: 3652
Command line: "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE

  Base        Size      Version	        Path
  0x00400000  0x20000   8.07.0000.0767  C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x140e0000  0x9000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x153e0000  0x1a000   8.07.0000.0659  C:\Program Files\McAfee\VirusScan Enterprise\ftcfg.dll
  0x14180000  0x13000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3.dll
  0x14710000  0x48000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll
  0x76780000  0x9000    6.00.2900.2180  C:\WINDOWS\system32\SHFOLDER.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x16300000  0x6000    8.07.0000.0747  C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll
  0x15de0000  0x34000   8.07.0000.0747  C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x73dc0000  0x3000    5.01.2600.0000  C:\WINDOWS\system32\LZ32.dll
  0x14100000  0x7000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x154a0000  0x331000  8.07.0000.0570  C:\Program Files\McAfee\VirusScan Enterprise\Graphics.dll
  0x00390000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x605d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
------------------------------------------------------------------------------
jusched.exe pid: 948
Command line: "C:\Program Files\Java\jre6\bin\jusched.exe" 

  Base        Size      Version	        Path
  0x00400000  0x25000   6.00.0170.0004  C:\Program Files\Java\jre6\bin\jusched.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wsock32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76ee0000  0x3c000   5.01.2600.2180  C:\WINDOWS\system32\RASAPI32.DLL
  0x76e90000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\rasman.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76eb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\TAPI32.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x722b0000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\sensapi.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x65af0000  0x7000    6.00.2900.3314  C:\WINDOWS\system32\jsproxy.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x75c50000  0x6f000   5.06.0000.8835  C:\WINDOWS\system32\JScript.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x7e1e0000  0xa2000   6.00.2900.3314  C:\WINDOWS\system32\urlmon.dll
------------------------------------------------------------------------------
UdaterUI.exe pid: 4064
Command line: "C:\Program Files\Network Associates\Common Framework\udaterui.exe" /StartedFromRunKey

  Base        Size      Version	        Path
  0x00400000  0x21000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\udaterui.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x64890000  0x7000    4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\nailog3.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\Network Associates\Common Framework\MSVCR71.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x64840000  0x2f000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\naCmnLib3_71.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x64960000  0x23000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\naxml3_71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\Program Files\Network Associates\Common Framework\MSVCP71.dll
  0x64120000  0x45000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\applib.dll
  0x641c0000  0xa000    4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\cmalib.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x10000000  0x32e000                  C:\Program Files\Network Associates\Common Framework\cryptocme2.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x64b30000  0x14000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\0409\UpdRes.dll
  0x64100000  0x19000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\shell32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x00d90000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x64a50000  0x1f000   4.00.0000.1494  C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory3.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x605d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
------------------------------------------------------------------------------
ctfmon.exe pid: 1132
Command line: "C:\WINDOWS\system32\ctfmon.exe" 

  Base        Size      Version	        Path
  0x00400000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\ctfmon.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x5fc10000  0x33000   5.01.2600.2180  C:\WINDOWS\system32\MSUTB.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
------------------------------------------------------------------------------
CBSysTray.exe pid: 4136
Command line: "C:\Program Files\Connected\CBSysTray.exe" 

  Base        Size      Version	        Path
  0x00400000  0x1d000   7.05.0003.2405  C:\Program Files\Connected\CBSysTray.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x605d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.DLL
------------------------------------------------------------------------------
blackice.exe pid: 4156
Command line: "C:\Program Files\ISS\Proventia Desktop\blackice.exe" -closed

  Base        Size      Version	        Path
  0x00400000  0x21b000  9.00.0226.2034  C:\Program Files\ISS\Proventia Desktop\blackice.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x12000000  0x170000  1.07.0000.0000  C:\Program Files\ISS\Proventia Desktop\xerces-c_1_7_0.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\ISS\Proventia Desktop\MSVCR71.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x10000000  0x37000   9.00.0179.0000  C:\Program Files\ISS\Proventia Desktop\FileSec.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x01a20000  0xe2000   3.01.0005.0001  C:\Program Files\ISS\Proventia Desktop\issSensorSvcs3.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x05960000  0x89000   5.02.3790.2847  C:\WINDOWS\system32\hhctrl.ocx
------------------------------------------------------------------------------
YahooWidgetEngine.exe pid: 4164
Command line: "C:\Program Files\Yahoo!\Widgets\YahooWidgetEngine.exe" 

  Base        Size      Version	        Path
  0x00400000  0x2cd000  4.00.0003.0000  C:\Program Files\Yahoo!\Widgets\YahooWidgetEngine.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\IPHLPAPI.DLL
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76380000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x74e30000  0x6c000   5.30.0023.1221  C:\WINDOWS\system32\RICHED20.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x10000000  0x5d000                   C:\Program Files\Yahoo!\Widgets\js32.dll
  0x78130000  0x9b000   8.00.50727.3053  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll
  0x60900000  0x4b000                   C:\Program Files\Yahoo!\Widgets\sqlite3.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x71f60000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\snmpapi.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\COMDLG32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x4ec50000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x732e0000  0x5000    5.01.2600.0000  C:\WINDOWS\system32\RICHED32.DLL
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x75cf0000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\mlang.dll
  0x605d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x76ee0000  0x3c000   5.01.2600.2180  C:\WINDOWS\system32\RASAPI32.DLL
  0x76e90000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\rasman.dll
  0x76eb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\TAPI32.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x722b0000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\sensapi.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\MPRAPI.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\adsldpc.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x75c50000  0x6f000   5.06.0000.8835  C:\WINDOWS\system32\JScript.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wsock32.dll
------------------------------------------------------------------------------
McTray.exe pid: 4416
Command line: /load

  Base        Size      Version	        Path
  0x00400000  0x15000   1.00.0000.0129  C:\Program Files\Network Associates\Common Framework\McTray.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x66900000  0x1b000   1.00.0000.0129  C:\Program Files\Network Associates\Common Framework\JrMac.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
------------------------------------------------------------------------------
Defraggler.exe pid: 2440
Command line: "C:\Program Files\Defraggler\Defraggler.exe" 

  Base        Size      Version	        Path
  0x00400000  0x1b8000  1.16.0000.0165  C:\Program Files\Defraggler\Defraggler.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\COMDLG32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x76380000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\appHelp.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77a20000  0x54000   5.01.2600.2180  C:\WINDOWS\System32\cscui.dll
  0x76600000  0x1d000   5.01.2600.2180  C:\WINDOWS\System32\CSCDLL.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x7e290000  0x171000  6.00.2900.3314  C:\WINDOWS\system32\shdocvw.dll
  0x754d0000  0x80000   5.131.2600.2180  C:\WINDOWS\system32\CRYPTUI.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x605d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
------------------------------------------------------------------------------
OUTLOOK.EXE pid: 2672
Command line: "C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE"  /recycle

  Base        Size      Version	        Path
  0x30000000  0x32000   11.00.8206.0000  C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x30040000  0x749000  11.00.8206.0000  C:\Program Files\Microsoft Office\OFFICE11\OUTLLIB.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\MSVCRT.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x30c90000  0xbbc000  11.00.8202.0000  C:\Program Files\Common Files\Microsoft Shared\office11\mso.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x308e0000  0x2ec000  11.00.6565.0000  C:\Program Files\Microsoft Office\OFFICE11\1033\outllibr.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x35f70000  0x15c000  11.00.8002.0000  C:\Program Files\Common Files\System\MSMAPI\1033\msmapi32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x61dd0000  0x21000   1.00.2536.0000  C:\Program Files\Common Files\System\MSMAPI\1033\mapi32.dll
  0x35e80000  0xc0000   11.00.6550.0000  C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MAPIR.DLL
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x746f0000  0x2a000   5.01.2600.2180  C:\WINDOWS\system32\msimtf.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x5c2c0000  0x40000   5.01.2600.2180  C:\WINDOWS\ime\sptip.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x74c80000  0x2c000   4.02.5406.0000  C:\WINDOWS\system32\OLEACC.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x605d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x20000000  0x11000   5.01.2600.2180  C:\WINDOWS\IME\SPGRMR.DLL
  0x01670000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x10000000  0x5b000   1.00.1038.0000  C:\Program Files\Common Files\Microsoft Shared\INK\SKCHUI.DLL
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x3e000000  0x11e000  11.00.5113.0000  C:\Program Files\Microsoft Office\OFFICE11\1033\srintl.dll
  0x39700000  0xeb000   5.50.0099.2010  C:\Program Files\Common Files\Microsoft Shared\office11\riched20.dll
  0x35440000  0x1f000   11.00.6550.0000  C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\contab32.dll
  0x35ae0000  0x43000   11.00.6550.0000  C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\EMSABP32.DLL
  0x35c30000  0x27000   11.00.8000.0000  C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\EMSUI32.DLL
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\MPRAPI.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\adsldpc.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76c00000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\credui.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x71cf0000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x76790000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\cryptdll.dll
  0x02600000  0x32000   9.00.0226.2072  C:\Program Files\ISS\Proventia Desktop\IBE\ICEemh32.dll
  0x35b70000  0xaf000   11.00.8000.0000  C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\EMSMDB32.DLL
  0x76380000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\msimg32.dll
  0x35cb0000  0xb2000   11.00.8001.0000  C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\mspst32.dll
  0x039c0000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x35420000  0x13000   11.00.8202.0000  C:\Program Files\Microsoft Office\OFFICE11\OUTLRPC.dll
  0x359a0000  0x59000   11.00.8205.0000  C:\Program Files\Microsoft Office\OFFICE11\exsec32.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.dll
  0x355c0000  0x9000    11.00.6550.0000  C:\PROGRA~1\MICROS~2\OFFICE11\OUTLACCT.DLL
  0x608a0000  0xf000    6.00.2900.2180  C:\WINDOWS\system32\msident.dll
  0x60890000  0x6000    6.00.2600.0000  C:\WINDOWS\system32\msidntld.dll
  0x5e0c0000  0xd000    5.01.2600.2180  C:\WINDOWS\system32\PSTOREC.DLL
  0x36c30000  0x9000    11.00.5510.0000  C:\Program Files\Microsoft Office\OFFICE11\msostyle.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x75cf0000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\mlang.dll
  0x35950000  0x27000   11.00.8202.0000  C:\Program Files\Microsoft Office\OFFICE11\outlph.dll
  0x35db0000  0xa2000   11.00.8000.0000  C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\OUTEX.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
  0x35510000  0x60000   11.00.5515.0000  C:\Program Files\Microsoft Office\OFFICE11\RTFHTML.DLL
  0x74d90000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\usp10.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\appHelp.dll
  0x7e290000  0x171000  6.00.2900.3314  C:\WINDOWS\system32\shdocvw.dll
  0x754d0000  0x80000   5.131.2600.2180  C:\WINDOWS\system32\CRYPTUI.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\Comdlg32.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x5dff0000  0x25000   0.03.3790.3959  C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DLL
------------------------------------------------------------------------------
firefox.exe pid: 5568
Command line: "C:\Program Files\Mozilla Firefox\firefox.exe"

  Base        Size      Version	        Path
  0x00400000  0xdf000   1.09.0001.3685  C:\Program Files\Mozilla Firefox\firefox.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x10000000  0xa60000  1.09.0001.3685  C:\Program Files\Mozilla Firefox\xul.dll
  0x00270000  0x73000   3.06.0016.0001  C:\Program Files\Mozilla Firefox\sqlite3.dll
  0x78130000  0xaf000   8.00.0000.0000  C:\Program Files\Mozilla Firefox\MOZCRT19.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x002f0000  0xe4000   4.00.0000.0000  C:\Program Files\Mozilla Firefox\js3250.dll
  0x004e0000  0x29000   4.08.0003.0000  C:\Program Files\Mozilla Firefox\nspr4.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x003e0000  0x18000   3.12.0004.0000  C:\Program Files\Mozilla Firefox\smime3.dll
  0x00510000  0x9b000   3.12.0004.0000  C:\Program Files\Mozilla Firefox\nss3.dll
  0x005b0000  0x14000   3.12.0004.0000  C:\Program Files\Mozilla Firefox\nssutil3.dll
  0x005d0000  0x7000    4.08.0003.0000  C:\Program Files\Mozilla Firefox\plc4.dll
  0x005e0000  0x7000    4.08.0003.0000  C:\Program Files\Mozilla Firefox\plds4.dll
  0x005f0000  0x20000   3.12.0004.0000  C:\Program Files\Mozilla Firefox\ssl3.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\COMDLG32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.dll
  0x76380000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x74d90000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x00610000  0x7000    1.09.0001.3685  C:\Program Files\Mozilla Firefox\xpcom.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x59a60000  0xa1000   5.01.2600.2180  C:\WINDOWS\system32\dbghelp.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x01850000  0x8000    1.09.0001.3685  C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll
  0x01860000  0x24000   1.09.0001.3685  C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll
  0x14490000  0x8000    14.01.0000.0496  C:\Program Files\Mozilla Firefox\components\Scriptff.dll
  0x01890000  0x9000                    C:\Documents and Settings\pt830a\Application Data\Mozilla\Firefox\Profiles\rdczrt0a.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\platform\WINNT_x86-msvc\components\SSSLauncher.dll
  0x018a0000  0x17000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll
  0x14180000  0x13000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3.dll
  0x14710000  0x48000   14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll
  0x76780000  0x9000    6.00.2900.2180  C:\WINDOWS\system32\SHFOLDER.dll
  0x14100000  0x7000    14.01.0000.0515  C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x73ce0000  0x20000   5.01.2600.2777  C:\WINDOWS\system32\t2embed.dll
  0x73dc0000  0x3000    5.01.2600.0000  C:\WINDOWS\system32\LZ32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x03640000  0x26000   3.12.0004.0000  C:\Program Files\Mozilla Firefox\softokn3.dll
  0x03670000  0x18000   3.12.0004.0000  C:\Program Files\Mozilla Firefox\nssdbm3.dll
  0x03690000  0x41000   3.12.0004.0000  C:\Program Files\Mozilla Firefox\freebl3.dll
  0x036e0000  0x52000   1.77.0000.0000  C:\Program Files\Mozilla Firefox\nssckbi.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\netapi32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x7e1e0000  0xa2000   6.00.2900.3314  C:\WINDOWS\system32\urlmon.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x73b30000  0x15000   5.01.2600.2709  C:\WINDOWS\system32\mscms.dll
  0x7e290000  0x171000  6.00.2900.3314  C:\WINDOWS\system32\shdocvw.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x754d0000  0x80000   5.131.2600.2180  C:\WINDOWS\system32\CRYPTUI.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x771b0000  0xaa000   6.00.2900.3314  C:\WINDOWS\system32\WININET.dll
  0x605d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\appHelp.dll
  0x77a20000  0x54000   5.01.2600.2180  C:\WINDOWS\System32\cscui.dll
  0x76600000  0x1d000   5.01.2600.2180  C:\WINDOWS\System32\CSCDLL.dll
  0x506a0000  0x8a000   7.02.6001.0788  C:\WINDOWS\system32\wuapi.dll
  0x75150000  0x14000   5.01.2600.2180  C:\WINDOWS\system32\Cabinet.dll
------------------------------------------------------------------------------
mmc.exe pid: 5748
Command line: "C:\WINDOWS\system32\mmc.exe" "C:\Documents and Settings\pt830a\REMOTE.MSC" 

  Base        Size      Version	        Path
  0x01000000  0x15d000  5.02.3790.2612  C:\WINDOWS\system32\mmc.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\apphelp.dll
  0x6c1b0000  0x4d000   5.01.2600.2180  C:\WINDOWS\system32\DUSER.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x72830000  0xfe000   6.02.4131.0000  C:\WINDOWS\system32\MFC42u.dll
  0x47c30000  0x2c000   5.02.3790.2612  C:\WINDOWS\system32\mmcbase.DLL
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\msvcp60.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x76380000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x74c80000  0x2c000   4.02.5406.0000  C:\WINDOWS\system32\OLEACC.dll
  0x7e1e0000  0xa2000   6.00.2900.3314  C:\WINDOWS\system32\urlmon.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x47c60000  0x1d6000  5.02.3790.2612  C:\WINDOWS\System32\mmcndmgr.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x75cf0000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\mlang.dll
  0x74980000  0x113000  8.90.1101.0000  C:\WINDOWS\system32\msxml3.dll
  0x02000000  0x2a000   5.02.3790.1830  C:\WINDOWS\system32\mstsmmc.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x605d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x01b50000  0x1f000   5.02.3790.1830  C:\WINDOWS\system32\mstsmhst.dll
  0x6a600000  0xa4000   5.01.2600.2180  C:\WINDOWS\system32\mstscax.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x723d0000  0x1c000   5.01.2600.2180  C:\WINDOWS\system32\winscard.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
  0x72cf0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\msadp32.acm
  0x58420000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\imaadp32.acm
  0x58300000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msgsm32.acm
------------------------------------------------------------------------------
cmd.exe pid: 5196
Command line: "C:\WINDOWS\system32\cmd.exe" 

  Base        Size      Version	        Path
  0x4ad00000  0x61000   5.01.2600.2180  C:\WINDOWS\system32\cmd.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8b000   5.01.2600.3266  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
------------------------------------------------------------------------------
Listdlls.exe pid: 2800
Command line: Listdlls.exe 

  Base        Size      Version	        Path
  0x00400000  0x29000   2.25.0000.0000  C:\BIN\SOURCE\MICROSOFT_TOOLS\Listdlls.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf5000   5.01.2600.3119  C:\WINDOWS\system32\kernel32.dll
  0x7e410000  0x90000   5.01.2600.3099  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.3316  C:\WINDOWS\system32\GDI32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x77f60000  0x76000   6.00.2900.3314  C:\WINDOWS\system32\SHLWAPI.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x7c9c0000  0x816000  6.00.2900.2951  C:\WINDOWS\system32\SHELL32.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\imagehlp.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll