ListDLLs v2.25 - DLL lister for Win9x/NT Copyright (C) 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ System pid: 4 Command line: ------------------------------------------------------------------------------ smss.exe pid: 1228 Command line: \SystemRoot\System32\smss.exe Base Size Version Path 0x48580000 0xf000 \SystemRoot\System32\smss.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll ------------------------------------------------------------------------------ csrss.exe pid: 1280 Command line: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16 Base Size Version Path 0x4a680000 0x5000 \??\C:\WINDOWS\system32\csrss.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x75b40000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\CSRSRV.dll 0x75b50000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\basesrv.dll 0x75b60000 0x4b000 5.01.2600.3103 C:\WINDOWS\system32\winsrv.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\KERNEL32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\sxs.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\Apphelp.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll ------------------------------------------------------------------------------ winlogon.exe pid: 1304 Command line: winlogon.exe Base Size Version Path 0x01000000 0x80000 \??\C:\WINDOWS\system32\winlogon.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x776c0000 0x11000 5.01.2600.2622 C:\WINDOWS\system32\AUTHZ.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x75940000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\NDdeApi.dll 0x75930000 0xa000 5.01.2600.2180 C:\WINDOWS\system32\PROFMAP.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x76bc0000 0xf000 5.01.2600.2180 C:\WINDOWS\system32\REGAPI.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x75970000 0xf7000 5.01.2600.2180 C:\WINDOWS\system32\MSGINA.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x74320000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x20000000 0x17000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x776e0000 0x23000 6.00.2900.2180 C:\WINDOWS\system32\SHSVCS.dll 0x76bb0000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\sfc.dll 0x76c60000 0x2a000 5.01.2600.2180 C:\WINDOWS\system32\sfc_os.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\Apphelp.dll 0x723d0000 0x1c000 5.01.2600.2180 C:\WINDOWS\system32\WINSCARD.DLL 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WTSAPI32.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\sxs.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wsock32.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x74290000 0x4000 5.01.2600.2180 C:\WINDOWS\system32\icmp.dll 0x76d40000 0x18000 5.01.2600.2180 C:\WINDOWS\system32\MPRAPI.dll 0x77cc0000 0x32000 5.01.2600.2180 C:\WINDOWS\system32\ACTIVEDS.dll 0x76e10000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\adsldpc.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x013c0000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x75150000 0x14000 5.01.2600.2180 C:\WINDOWS\system32\Cabinet.dll 0x71cf0000 0x4b000 5.01.2600.2698 C:\WINDOWS\system32\kerberos.dll 0x76790000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\cryptdll.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.DLL 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76600000 0x1d000 5.01.2600.2180 C:\WINDOWS\system32\cscdll.dll 0x10000000 0x13000 C:\Program Files\iPass\Mobile Office 6\6.2.3.7\CBL\GoRemoteCBL.dll 0x75950000 0x1a000 5.01.2600.2180 C:\WINDOWS\system32\WlNotify.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x71b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MPR.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77a20000 0x54000 5.01.2600.2180 C:\WINDOWS\system32\cscui.dll 0x75f60000 0x7000 5.01.2600.2180 C:\WINDOWS\System32\drprov.dll 0x71c10000 0xe000 5.01.2600.2180 C:\WINDOWS\System32\ntlanman.dll 0x71cd0000 0x17000 5.01.2600.2180 C:\WINDOWS\System32\NETUI0.dll 0x71c90000 0x40000 5.01.2600.2180 C:\WINDOWS\System32\NETUI1.dll 0x71c80000 0x7000 5.01.2600.2180 C:\WINDOWS\System32\NETRAP.dll 0x75f70000 0x9000 5.01.2600.2180 C:\WINDOWS\System32\davclnt.dll 0x01870000 0xd000 8.00.1969.0001 C:\WINDOWS\system32\nfsnp.dll 0x01880000 0x15000 8.00.1969.0001 C:\WINDOWS\system32\nfsccfg.dll 0x72d20000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wdmaud.drv 0x72d10000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77bd0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\midimap.dll ------------------------------------------------------------------------------ services.exe pid: 1348 Command line: C:\WINDOWS\system32\services.exe Base Size Version Path 0x01000000 0x1c000 5.01.2600.2180 C:\WINDOWS\system32\services.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x758e0000 0x50000 5.01.2600.2180 C:\WINDOWS\system32\SCESRV.dll 0x776c0000 0x11000 5.01.2600.2622 C:\WINDOWS\system32\AUTHZ.dll 0x7dba0000 0x21000 5.01.2600.2744 C:\WINDOWS\system32\umpnpmgr.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x5f770000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\NCObjAPI.DLL 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x47260000 0xf000 5.01.2600.3008 C:\WINDOWS\AppPatch\AcAdProc.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\secur32.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\Apphelp.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x77b70000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\eventlog.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\wtsapi32.dll ------------------------------------------------------------------------------ lsass.exe pid: 1360 Command line: C:\WINDOWS\system32\lsass.exe Base Size Version Path 0x01000000 0x6000 5.01.2600.2180 C:\WINDOWS\system32\lsass.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x75730000 0xb4000 5.01.2600.2976 C:\WINDOWS\system32\LSASRV.dll 0x71b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MPR.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x74440000 0x6a000 5.01.2600.2180 C:\WINDOWS\system32\SAMSRV.dll 0x76790000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\cryptdll.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x20000000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\msprivs.dll 0x71cf0000 0x4b000 5.01.2600.2698 C:\WINDOWS\system32\kerberos.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x744b0000 0x65000 5.01.2600.2180 C:\WINDOWS\system32\netlogon.dll 0x767c0000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\w32time.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x767f0000 0x27000 5.01.2600.3126 C:\WINDOWS\system32\schannel.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x74380000 0xf000 5.01.2600.2180 C:\WINDOWS\system32\wdigest.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\setupapi.dll 0x74410000 0x2e000 5.01.2600.2180 C:\WINDOWS\system32\scecli.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x743a0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\pstorsvc.dll 0x743c0000 0x1b000 5.01.2600.2180 C:\WINDOWS\system32\psbase.dll 0x68100000 0x24000 5.01.2600.2133 C:\WINDOWS\system32\dssenh.dll 0x01010000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll ------------------------------------------------------------------------------ svchost.exe pid: 1568 Command line: C:\WINDOWS\system32\svchost -k DcomLaunch Base Size Version Path 0x01000000 0x6000 5.01.2600.2180 C:\WINDOWS\system32\svchost.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x76a80000 0x63000 5.01.2600.2726 c:\windows\system32\rpcss.dll 0x77fe0000 0x11000 5.01.2600.2180 c:\windows\system32\Secur32.dll 0x71ab0000 0x17000 5.01.2600.2180 c:\windows\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 c:\windows\system32\WS2HELP.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\Apphelp.dll 0x760f0000 0x53000 5.01.2600.2180 c:\windows\system32\termsrv.dll 0x74f70000 0x6000 5.01.2600.2180 c:\windows\system32\ICAAPI.dll 0x77920000 0xf3000 5.01.2600.2180 c:\windows\system32\SETUPAPI.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x776c0000 0x11000 5.01.2600.2622 c:\windows\system32\AUTHZ.dll 0x75110000 0x1f000 5.01.2600.2180 c:\windows\system32\mstlsapi.dll 0x77cc0000 0x32000 5.01.2600.2180 c:\windows\system32\ACTIVEDS.dll 0x76e10000 0x25000 5.01.2600.2180 c:\windows\system32\adsldpc.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x76b20000 0x11000 3.05.2284.0000 c:\windows\system32\ATL.DLL 0x76bc0000 0xf000 5.01.2600.2180 C:\WINDOWS\system32\REGAPI.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x72460000 0x18000 5.01.2600.2180 C:\WINDOWS\system32\rdpwsx.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll ------------------------------------------------------------------------------ svchost.exe pid: 1616 Command line: C:\WINDOWS\system32\svchost -k rpcss Base Size Version Path 0x01000000 0x6000 5.01.2600.2180 C:\WINDOWS\system32\svchost.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76a80000 0x63000 5.01.2600.2726 c:\windows\system32\rpcss.dll 0x77fe0000 0x11000 5.01.2600.2180 c:\windows\system32\Secur32.dll 0x71ab0000 0x17000 5.01.2600.2180 c:\windows\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 c:\windows\system32\WS2HELP.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll ------------------------------------------------------------------------------ svchost.exe pid: 1968 Command line: C:\WINDOWS\System32\svchost.exe -k netsvcs Base Size Version Path 0x01000000 0x6000 5.01.2600.2180 C:\WINDOWS\System32\svchost.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\System32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\System32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\System32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\System32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\System32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\System32\SAMLIB.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\System32\xpsp2res.dll 0x776e0000 0x23000 6.00.2900.2180 c:\windows\system32\shsvcs.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\System32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x76d80000 0x1e000 5.01.2600.2912 c:\windows\system32\dhcpcsvc.dll 0x76f20000 0x27000 5.01.2600.2938 c:\windows\system32\DNSAPI.dll 0x71ab0000 0x17000 5.01.2600.2180 c:\windows\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 c:\windows\system32\WS2HELP.dll 0x76d60000 0x19000 5.01.2600.2912 c:\windows\system32\iphlpapi.dll 0x77fe0000 0x11000 5.01.2600.2180 c:\windows\system32\Secur32.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\System32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x7db10000 0x8b000 5.01.2600.2977 c:\windows\system32\wzcsvc.dll 0x76e80000 0xe000 5.01.2600.2180 c:\windows\system32\rtutils.dll 0x76d30000 0x4000 5.01.2600.2180 c:\windows\system32\WMI.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x76f50000 0x8000 5.01.2600.2180 c:\windows\system32\WTSAPI32.dll 0x606b0000 0x10d000 5.01.2600.2780 c:\windows\system32\ESENT.dll 0x76b20000 0x11000 3.05.2284.0000 c:\windows\system32\ATL.DLL 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\System32\rsaenh.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\System32\SETUPAPI.DLL 0x76b70000 0x1f000 5.01.2600.2180 C:\WINDOWS\System32\rastls.dll 0x754d0000 0x80000 5.131.2600.2180 C:\WINDOWS\system32\CRYPTUI.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x76d40000 0x18000 5.01.2600.2180 C:\WINDOWS\System32\MPRAPI.dll 0x77cc0000 0x32000 5.01.2600.2180 C:\WINDOWS\System32\ACTIVEDS.dll 0x76e10000 0x25000 5.01.2600.2180 C:\WINDOWS\System32\adsldpc.dll 0x76ee0000 0x3c000 5.01.2600.2180 C:\WINDOWS\System32\RASAPI32.dll 0x76e90000 0x12000 5.01.2600.2180 C:\WINDOWS\System32\rasman.dll 0x76eb0000 0x2f000 5.01.2600.2180 C:\WINDOWS\System32\TAPI32.dll 0x767f0000 0x27000 5.01.2600.3126 C:\WINDOWS\System32\SCHANNEL.dll 0x723d0000 0x1c000 5.01.2600.2180 C:\WINDOWS\System32\WinSCard.dll 0x76bd0000 0x14000 5.01.2600.2180 C:\WINDOWS\System32\raschap.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\System32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\System32\COMRes.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x77300000 0x32000 5.01.2600.2180 c:\windows\system32\schedsvc.dll 0x767a0000 0x13000 5.01.2600.2180 c:\windows\system32\NTDSAPI.dll 0x74f50000 0x5000 6.00.2900.2180 C:\WINDOWS\System32\MSIDLE.DLL 0x708b0000 0xd000 5.01.2600.2180 c:\windows\system32\audiosrv.dll 0x76e40000 0x23000 5.01.2600.2976 c:\windows\system32\wkssvc.dll 0x76ce0000 0x12000 5.01.2600.2180 c:\windows\system32\cryptsvc.dll 0x77b90000 0x32000 5.01.2600.2180 c:\windows\system32\certcli.dll 0x74f90000 0x9000 2600.2180.0503.0000 c:\windows\system32\dmserver.dll 0x74f80000 0x9000 5.01.2600.2180 c:\windows\system32\ersvc.dll 0x77710000 0x41000 2001.12.4414.0308 c:\windows\system32\es.dll 0x74f40000 0xc000 5.01.2600.2180 c:\windows\pchealth\helpctr\binaries\pchsvc.dll 0x75090000 0x1a000 5.01.2600.2577 c:\windows\system32\srvsvc.dll 0x73d20000 0x8000 5.01.2600.2180 c:\windows\system32\seclogon.dll 0x722d0000 0xd000 5.01.2600.2180 c:\windows\system32\sens.dll 0x751a0000 0x2e000 5.01.2600.2180 c:\windows\system32\srsvc.dll 0x74ad0000 0x8000 6.00.2900.2180 c:\windows\system32\POWRPROF.dll 0x75070000 0x19000 5.01.2600.2180 c:\windows\system32\trkwks.dll 0x767c0000 0x2c000 5.01.2600.2180 c:\windows\system32\w32time.dll 0x76080000 0x65000 6.02.3104.0000 c:\windows\system32\MSVCP60.dll 0x59490000 0x28000 5.01.2600.2180 c:\windows\system32\wbem\wmisvc.dll 0x753e0000 0x6d000 5.01.2600.2180 C:\WINDOWS\system32\VSSAPI.DLL 0x50000000 0x5000 5.04.3790.2180 c:\windows\system32\wuauserv.dll 0x50040000 0x1bc000 7.02.6001.0788 C:\WINDOWS\system32\wuaueng.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\System32\WINSPOOL.DRV 0x4d4f0000 0x58000 5.01.2600.2180 C:\WINDOWS\System32\WINHTTP.dll 0x75150000 0x14000 5.01.2600.2180 C:\WINDOWS\System32\Cabinet.dll 0x600a0000 0xb000 5.01.2600.2180 C:\WINDOWS\System32\mspatcha.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76bb0000 0x5000 5.01.2600.2180 C:\WINDOWS\System32\sfc.dll 0x76c60000 0x2a000 5.01.2600.2180 C:\WINDOWS\System32\sfc_os.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\System32\SXS.DLL 0x76620000 0x13c000 2001.12.4414.0308 C:\WINDOWS\system32\comsvcs.dll 0x75130000 0x14000 2001.12.4414.0308 C:\WINDOWS\system32\colbact.DLL 0x750f0000 0x13000 2001.12.4414.0311 C:\WINDOWS\system32\MTXCLU.DLL 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x76d10000 0x11000 5.01.2600.2180 C:\WINDOWS\System32\CLUSAPI.DLL 0x750b0000 0x12000 5.01.2600.2180 C:\WINDOWS\System32\RESUTILS.DLL 0x76da0000 0x15000 5.01.2600.2180 c:\windows\system32\browser.dll 0x762c0000 0x85000 5.01.2600.2180 C:\WINDOWS\System32\Wbem\wbemcore.dll 0x75310000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\Wbem\esscli.dll 0x75290000 0x37000 5.01.2600.2180 C:\WINDOWS\System32\Wbem\wbemcomn.dll 0x75690000 0x76000 5.01.2600.2180 C:\WINDOWS\System32\Wbem\FastProx.dll 0x74ed0000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemsvc.dll 0x75020000 0x1b000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wmiutils.dll 0x75200000 0x2e000 5.01.2600.2180 C:\WINDOWS\system32\wbem\repdrvfs.dll 0x4c0a0000 0x17000 5.01.2600.2180 c:\windows\system32\wscsvc.dll 0x745e0000 0x2c6000 3.01.4000.2435 c:\windows\system32\msi.dll 0x76400000 0x1a5000 5.01.2600.2977 c:\windows\system32\netshell.dll 0x76c00000 0x2e000 5.01.2600.2180 c:\windows\system32\credui.dll 0x597f0000 0x6d000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wmiprvsd.dll 0x5f770000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\NCObjAPI.DLL 0x75390000 0x46000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemess.dll 0x5f740000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\wbem\ncprov.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\Apphelp.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\System32\rasadhlp.dll 0x733e0000 0x40000 5.01.2600.2716 c:\windows\system32\tapisrv.dll 0x76bf0000 0xb000 5.01.2600.2180 c:\windows\system32\PSAPI.DLL 0x7df30000 0x31000 5.01.2600.2936 c:\windows\system32\rasmans.dll 0x74370000 0xb000 5.01.2600.2180 c:\windows\system32\WINIPSEC.DLL 0x755f0000 0x9a000 5.01.2600.2180 c:\windows\system32\netcfgx.dll 0x75880000 0x11000 5.01.2600.2180 C:\WINDOWS\System32\rastapi.dll 0x57cc0000 0x36000 5.01.2600.2180 C:\WINDOWS\System32\unimdm.tsp 0x72000000 0x7000 5.01.2600.2180 C:\WINDOWS\System32\uniplat.dll 0x5b070000 0x14000 5.01.2600.2180 C:\WINDOWS\System32\unimdmat.dll 0x61650000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\modemui.dll 0x57d40000 0xb000 5.01.2600.2180 C:\WINDOWS\System32\kmddsp.tsp 0x57d20000 0x10000 5.01.2600.2180 C:\WINDOWS\System32\ndptsp.tsp 0x57d50000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\ipconf.tsp 0x57d70000 0x46000 5.01.2600.2180 C:\WINDOWS\System32\h323.tsp 0x57d60000 0xa000 5.01.2600.2180 C:\WINDOWS\System32\hidphone.tsp 0x688f0000 0x9000 5.01.2600.2180 C:\WINDOWS\System32\HID.DLL 0x72240000 0x35000 5.01.2600.2180 C:\WINDOWS\System32\rasppp.dll 0x724b0000 0x6000 5.01.2600.2180 C:\WINDOWS\System32\ntlsapi.dll 0x71cf0000 0x4b000 5.01.2600.2698 C:\WINDOWS\system32\kerberos.dll 0x76790000 0xc000 5.01.2600.2180 C:\WINDOWS\System32\cryptdll.dll 0x77d00000 0x33000 5.01.2600.2743 c:\windows\system32\netman.dll 0x73030000 0x10000 5.01.2600.2977 c:\windows\system32\WZCSAPI.DLL 0x76de0000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\upnp.dll 0x74f00000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\SSDPAPI.dll 0x768d0000 0xa4000 5.01.2600.2180 C:\WINDOWS\System32\RASDLG.dll ------------------------------------------------------------------------------ svchost.exe pid: 392 Command line: C:\WINDOWS\system32\svchost.exe -k NetworkService Base Size Version Path 0x01000000 0x6000 5.01.2600.2180 C:\WINDOWS\system32\svchost.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76770000 0xd000 5.01.2600.2180 c:\windows\system32\dnsrslvr.dll 0x76f20000 0x27000 5.01.2600.2938 c:\windows\system32\DNSAPI.dll 0x71ab0000 0x17000 5.01.2600.2180 c:\windows\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 c:\windows\system32\WS2HELP.dll 0x76d60000 0x19000 5.01.2600.2912 c:\windows\system32\iphlpapi.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll ------------------------------------------------------------------------------ svchost.exe pid: 508 Command line: C:\WINDOWS\system32\svchost.exe -k LocalService Base Size Version Path 0x01000000 0x6000 5.01.2600.2180 C:\WINDOWS\system32\svchost.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x74c40000 0x6000 5.01.2600.2180 c:\windows\system32\lmhsvc.dll 0x76d60000 0x19000 5.01.2600.2912 c:\windows\system32\iphlpapi.dll 0x71ab0000 0x17000 5.01.2600.2180 c:\windows\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 c:\windows\system32\WS2HELP.dll 0x5a6e0000 0x15000 5.01.2600.2821 c:\windows\system32\webclnt.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wsock32.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x76af0000 0x12000 5.01.2600.2180 c:\windows\system32\regsvc.dll 0x765e0000 0x14000 5.01.2600.2180 c:\windows\system32\ssdpsrv.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x76ee0000 0x3c000 5.01.2600.2180 C:\WINDOWS\system32\RASAPI32.DLL 0x76e90000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\rasman.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x76eb0000 0x2f000 5.01.2600.2180 C:\WINDOWS\system32\TAPI32.dll 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x722b0000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\sensapi.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x7e1e0000 0xa2000 6.00.2900.3314 C:\WINDOWS\system32\urlmon.dll 0x65af0000 0x7000 6.00.2900.3314 C:\WINDOWS\system32\jsproxy.dll 0x75c50000 0x6f000 5.06.0000.8835 C:\WINDOWS\system32\JScript.dll ------------------------------------------------------------------------------ spoolsv.exe pid: 732 Command line: C:\WINDOWS\system32\spoolsv.exe Base Size Version Path 0x01000000 0x10000 5.01.2600.2696 C:\WINDOWS\system32\spoolsv.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x742e0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\SPOOLSS.DLL 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x75bb0000 0x56000 5.01.2600.2180 C:\WINDOWS\system32\localspl.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x76c60000 0x2a000 5.01.2600.2180 C:\WINDOWS\system32\sfc_os.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\winspool.drv 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\netapi32.dll 0x742a0000 0xe000 0.03.0000.0000 C:\WINDOWS\system32\cnbjmon.dll 0x20000000 0xa000 1.00.0000.0000 C:\WINDOWS\system32\PT19L.DLL 0x00970000 0x8000 0.03.2175.0000 C:\WINDOWS\system32\mdimon.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x74280000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\pjlmon.dll 0x72400000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\tcpmon.dll 0x723f0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\usbmon.dll 0x00980000 0x8000 0.03.2175.0000 C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll 0x3f420000 0x1b000 6.01.2600.5635 C:\WINDOWS\System32\spool\PRTPROCS\W32X86\filterpipelineprintproc.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x75c10000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\win32spl.dll 0x71c80000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\NETRAP.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.dll 0x01010000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x74300000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\inetpp.dll ------------------------------------------------------------------------------ scardsvr.exe pid: 776 Command line: C:\WINDOWS\System32\SCardSvr.exe Base Size Version Path 0x01000000 0x1a000 5.01.2600.2180 C:\WINDOWS\System32\SCardSvr.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\System32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\System32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\System32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\System32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll ------------------------------------------------------------------------------ AGENTSRV.EXE pid: 916 Command line: "C:\Program Files\Connected\AgentSrv.EXE" -asv Base Size Version Path 0x00400000 0x43000 7.05.0003.2405 C:\Program Files\Connected\AgentSrv.EXE 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x10000000 0x15000 7.05.0003.2405 C:\Program Files\Connected\Launcher.dll ------------------------------------------------------------------------------ Apache.exe pid: 980 Command line: "C:\Program Files\Apache\Apache\Apache.exe" --ntservice Base Size Version Path 0x00400000 0x5000 C:\Program Files\Apache\Apache\Apache.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x6ff60000 0x58000 C:\Program Files\Apache\Apache\ApacheCore.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x1c0f0000 0x5000 C:\Program Files\Apache\Apache\Win9xConHook.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll ------------------------------------------------------------------------------ blackd.exe pid: 1020 Command line: "C:\Program Files\ISS\Proventia Desktop\blackd.exe" Base Size Version Path 0x00400000 0x214000 9.00.0226.2084 C:\Program Files\ISS\Proventia Desktop\blackd.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x12000000 0x170000 1.07.0000.0000 C:\Program Files\ISS\Proventia Desktop\xerces-c_1_7_0.dll 0x7c340000 0x56000 7.10.3052.0004 C:\Program Files\ISS\Proventia Desktop\MSVCR71.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x77cc0000 0x32000 5.01.2600.2180 C:\WINDOWS\system32\ACTIVEDS.dll 0x76e10000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\adsldpc.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x10000000 0x37000 9.00.0179.0000 C:\Program Files\ISS\Proventia Desktop\FileSec.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x00340000 0x23000 9.00.0179.0000 C:\Program Files\ISS\Proventia Desktop\AC_Base.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\imagehlp.dll 0x00620000 0xc1000 C:\Program Files\ISS\Proventia Desktop\libxml2.dll 0x00380000 0x27000 C:\Program Files\ISS\Proventia Desktop\libxslt.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x00a90000 0x26000 1000.00.0006.1006 C:\Program Files\ISS\Proventia Desktop\blackdll.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x5e000000 0x262000 1.10.0108.0223 C:\Program Files\ISS\Proventia Desktop\iss-pam1.dll 0x00e30000 0xc5000 3.01.0005.0001 C:\Program Files\ISS\Proventia Desktop\issLicenseSvcs3.dll 0x00f00000 0x92000 3.01.0005.0001 C:\Program Files\ISS\Proventia Desktop\issEventSvcs3.dll 0x00fa0000 0xe2000 3.01.0005.0001 C:\Program Files\ISS\Proventia Desktop\issSensorSvcs3.dll 0x010a0000 0x11e000 9.00.0226.2122 C:\Program Files\ISS\Proventia Desktop\PolicyXlate.dll 0x01290000 0x196000 3.01.0005.0001 C:\Program Files\ISS\Proventia Desktop\issSessionConfigSvcs3.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x01b30000 0xc3000 3.01.0005.0001 C:\Program Files\ISS\Proventia Desktop\issUpdateSvcs3.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x71cf0000 0x4b000 5.01.2600.2698 C:\WINDOWS\system32\kerberos.dll 0x76790000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\cryptdll.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x71290000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\adsldp.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x02520000 0x3b000 9.00.0226.0000 C:\Program Files\ISS\Proventia Desktop\Rapclient.dll 0x74c80000 0x2c000 4.02.5406.0000 C:\WINDOWS\system32\OLEACC.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x02590000 0x17000 9.00.0179.0000 C:\Program Files\ISS\Proventia Desktop\VpnICE.dll 0x74ae0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\cfgmgr32.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\setupapi.dll 0x76d40000 0x18000 5.01.2600.2180 C:\WINDOWS\system32\MPRAPI.dll 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x74ef0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemprox.dll 0x75290000 0x37000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemcomn.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x74ed0000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemsvc.dll 0x75690000 0x76000 5.01.2600.2180 C:\WINDOWS\system32\wbem\fastprox.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x06b00000 0x12000 9.00.0179.0000 C:\Program Files\ISS\Proventia Desktop\Comply\AC_BitDefender.dll 0x06b40000 0x12000 9.00.0179.0000 C:\Program Files\ISS\Proventia Desktop\Comply\AC_McAfee.dll 0x06b80000 0x13000 9.00.0179.0000 C:\Program Files\ISS\Proventia Desktop\Comply\AC_Norton.dll ------------------------------------------------------------------------------ nfsclnt.exe pid: 1056 Command line: C:\WINDOWS\system32\nfsclnt.exe Base Size Version Path 0x01000000 0xe000 8.00.1969.0001 C:\WINDOWS\system32\nfsclnt.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x71b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MPR.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x00400000 0x15000 8.00.1969.0001 C:\WINDOWS\system32\nfsccfg.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll ------------------------------------------------------------------------------ GCardSrvNT.exe pid: 1144 Command line: "C:\Program Files\GemPlus\GemSafe Libraries User\BIN\GCardSrvNT.exe" Base Size Version Path 0x00400000 0x48000 2.00.0002.0000 C:\Program Files\GemPlus\GemSafe Libraries User\BIN\GCardSrvNT.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x723d0000 0x1c000 5.01.2600.2180 C:\WINDOWS\system32\WinSCard.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WTSAPI32.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV ------------------------------------------------------------------------------ jqs.exe pid: 1224 Command line: "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf" Base Size Version Path 0x00400000 0x24000 6.00.0170.0004 C:\Program Files\Java\jre6\bin\jqs.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x7c340000 0x56000 7.10.3052.0004 C:\Program Files\Java\jre6\bin\MSVCR71.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\psapi.dll 0x74000000 0x56000 5.01.2600.2180 C:\WINDOWS\system32\pdh.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x74320000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x711a0000 0x6000 2000.85.1117.0000 C:\WINDOWS\system32\odbcbcp.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x20000000 0x17000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x5e760000 0xa000 5.01.2600.2180 C:\WINDOWS\system32\perfos.dll 0x5e790000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\perfdisk.dll ------------------------------------------------------------------------------ Apache.exe pid: 708 Command line: "C:\Program Files\Apache\Apache\Apache.exe" -z ap980_C1 -f "c:/program files/apache/apache/conf/httpd.conf" "-d" "c:/program files/apache/apache" "-f" "c:/program files/apache/apache/conf/httpd.conf" Base Size Version Path 0x00400000 0x5000 C:\Program Files\Apache\Apache\Apache.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x6ff60000 0x58000 C:\Program Files\Apache\Apache\ApacheCore.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x1c0f0000 0x5000 C:\Program Files\Apache\Apache\Win9xConHook.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll ------------------------------------------------------------------------------ engineserver.exe pid: 1816 Command line: "C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe" Base Size Version Path 0x00400000 0x6000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\engineserver.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x14710000 0x48000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll 0x76780000 0x9000 6.00.2900.2180 C:\WINDOWS\system32\SHFOLDER.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x14810000 0x19000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_server.dll 0x140e0000 0x9000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll 0x14100000 0x7000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll ------------------------------------------------------------------------------ FrameworkService.exe pid: 1988 Command line: "C:\Program Files\Network Associates\Common Framework\FrameworkService.exe" /ServiceStart Base Size Version Path 0x00400000 0x18000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\FrameworkService.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x64890000 0x7000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\nailog3.dll 0x7c340000 0x56000 7.10.3052.0004 C:\Program Files\Network Associates\Common Framework\MSVCR71.dll 0x64960000 0x23000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\naxml3_71.dll 0x7c3a0000 0x7b000 7.10.3077.0000 C:\Program Files\Network Associates\Common Framework\MSVCP71.dll 0x64840000 0x2f000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\naCmnLib3_71.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x64120000 0x45000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\applib.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x10000000 0x32e000 C:\Program Files\Network Associates\Common Framework\cryptocme2.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x64100000 0x19000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x64670000 0xf000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\Logging.dll 0x64b50000 0x13000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\UserSpace.Dll 0x64a50000 0x1f000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory3.dll 0x64690000 0x40000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\Management.dll 0x648f0000 0x35000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\naPolicyManager.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PsApi.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x64b00000 0x19000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\UpdateSubSys.Dll 0x64ab0000 0x50000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\updater.dll 0x64610000 0x1d000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\ipcchannel.dll 0x64170000 0xe000 C:\Program Files\Network Associates\Common Framework\boost_thread-vc71-mt-1_32.dll 0x646d0000 0x37000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\mfeCmnLib71.dll 0x64a00000 0x4a000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\Scheduler.dll 0x64000000 0x3d000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\Agent.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x648a0000 0x34000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\nainet.dll 0x64710000 0x40000 1.00.0000.0151 C:\Program Files\Network Associates\Common Framework\mfecurl.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x64750000 0x12000 1.00.0000.0151 C:\Program Files\Network Associates\Common Framework\mfezlib.dll 0x71b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MPR.dll 0x64590000 0x76000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\inetmgr.dll 0x64930000 0x2a000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\naSPIPE.dll 0x641c0000 0xa000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\cmalib.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x64630000 0x25000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\ListenServer.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x64a80000 0x2e000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\TCSubSys.dll 0x76ee0000 0x3c000 5.01.2600.2180 C:\WINDOWS\system32\Rasapi32.dll 0x76e90000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\rasman.dll 0x76eb0000 0x2f000 5.01.2600.2180 C:\WINDOWS\system32\TAPI32.dll 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x64560000 0x2f000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\Genevtinf3.dll 0x76d40000 0x18000 5.01.2600.2180 C:\WINDOWS\system32\MPRAPI.dll 0x77cc0000 0x32000 5.01.2600.2180 C:\WINDOWS\system32\ACTIVEDS.dll 0x76e10000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\adsldpc.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll ------------------------------------------------------------------------------ vstskmgr.exe pid: 2036 Command line: "C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe" Base Size Version Path 0x00400000 0xf000 8.07.0000.0767 C:\Program Files\McAfee\VirusScan Enterprise\vstskmgr.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x140e0000 0x9000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x14710000 0x48000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll 0x76780000 0x9000 6.00.2900.2180 C:\WINDOWS\system32\SHFOLDER.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x15de0000 0x34000 8.07.0000.0747 C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x16300000 0x6000 8.07.0000.0747 C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x73dc0000 0x3000 5.01.2600.0000 C:\WINDOWS\system32\LZ32.dll 0x150c0000 0x11000 8.07.0000.0570 C:\Program Files\McAfee\VirusScan Enterprise\condl.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x14100000 0x7000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x10000000 0x24000 8.07.0000.0133 C:\Program Files\McAfee\VirusScan Enterprise\MIDUtil.Dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x74ef0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemprox.dll 0x75290000 0x37000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemcomn.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x74ed0000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemsvc.dll 0x75690000 0x76000 5.01.2600.2180 C:\WINDOWS\system32\wbem\fastprox.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll ------------------------------------------------------------------------------ MDM.EXE pid: 164 Command line: "C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE" Base Size Version Path 0x00400000 0x4d000 7.00.9466.0000 C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\psapi.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x3f080000 0x22000 9.00.21022.0008 C:\Program Files\Common Files\Microsoft Shared\VS7Debug\csm.dll 0x3f0e0000 0x42000 9.00.30729.0001 C:\Program Files\Common Files\Microsoft Shared\VS7Debug\msdbg2.dll ------------------------------------------------------------------------------ mfevtps.exe pid: 204 Command line: C:\WINDOWS\system32\mfevtps.exe Base Size Version Path 0x00400000 0x13000 14.01.0000.0615 C:\WINDOWS\system32\mfevtps.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\userenv.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\secur32.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\netapi32.dll ------------------------------------------------------------------------------ minislv.exe pid: 284 Command line: "C:\Program Files\1E\SMSWakeup40\minislv.exe" Base Size Version Path 0x00400000 0x29000 4.00.0000.0015 C:\Program Files\1E\SMSWakeup40\minislv.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x74290000 0x4000 5.01.2600.2180 C:\WINDOWS\system32\ICMP.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll ------------------------------------------------------------------------------ sqlservr.exe pid: 348 Command line: "c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS Base Size Version Path 0x01000000 0x1c0a000 2005.90.3042.0000 c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x78130000 0x9b000 8.00.50727.3053 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7c420000 0x87000 8.00.50727.3053 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCP80.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\MSWSOCK.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x333e0000 0x7000 2005.90.1399.0000 c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\opends60.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\psapi.dll 0x48060000 0xa000 2005.90.1399.0000 c:\Program Files\Microsoft SQL Server\90\Shared\instapi.dll 0x4f610000 0x1a9000 2005.90.3042.0000 c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\Resources\1033\sqlevn70.RLL 0x344d0000 0x5000 2005.90.3042.0000 c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\SQLOS.DLL 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x776c0000 0x11000 5.01.2600.2622 C:\WINDOWS\system32\AUTHZ.DLL 0x79000000 0x46000 2.00.50727.3053 C:\WINDOWS\system32\MSCOREE.DLL 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x71cf0000 0x4b000 5.01.2600.2698 C:\WINDOWS\system32\kerberos.dll 0x76790000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\cryptdll.dll 0x767f0000 0x27000 5.01.2600.3126 C:\WINDOWS\system32\schannel.dll 0x71f80000 0x4000 5.01.2600.2180 C:\WINDOWS\system32\security.dll 0x68100000 0x24000 5.01.2600.2133 C:\WINDOWS\system32\dssenh.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x04d20000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\ntdsapi.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll ------------------------------------------------------------------------------ naPrdMgr.exe pid: 432 Command line: "C:\Program Files\Network Associates\Common Framework\naPrdMgr.exe" -Embedding Base Size Version Path 0x00400000 0x37000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\naPrdMgr.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x64960000 0x23000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\naxml3_71.dll 0x7c3a0000 0x7b000 7.10.3077.0000 C:\Program Files\Network Associates\Common Framework\MSVCP71.dll 0x7c340000 0x56000 7.10.3052.0004 C:\Program Files\Network Associates\Common Framework\MSVCR71.dll 0x64890000 0x7000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\nailog3.dll 0x64840000 0x2f000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\naCmnLib3_71.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x64120000 0x45000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\applib.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x10000000 0x32e000 C:\Program Files\Network Associates\Common Framework\cryptocme2.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x64100000 0x19000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x640c0000 0x39000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\agentplugin.dll 0x646d0000 0x37000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\mfeCmnLib71.dll 0x16140000 0x28000 8.07.0000.0747 C:\Program Files\McAfee\VirusScan Enterprise\VsPlugin.dll 0x64b20000 0xe000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\UpdPlug.Dll 0x64a50000 0x1f000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory3.dll ------------------------------------------------------------------------------ nvsvc32.exe pid: 448 Command line: C:\WINDOWS\system32\nvsvc32.exe Base Size Version Path 0x00400000 0x27000 6.14.0010.8437 C:\WINDOWS\system32\nvsvc32.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x74ad0000 0x8000 6.00.2900.2180 C:\WINDOWS\system32\POWRPROF.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\wtsapi32.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\secur32.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll ------------------------------------------------------------------------------ RapApp.exe pid: 468 Command line: "C:\Program Files\ISS\Proventia Desktop\RapApp.exe" Base Size Version Path 0x00400000 0x140000 9.00.0226.2212 C:\Program Files\ISS\Proventia Desktop\RapApp.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x10000000 0xcf000 9.00.0226.2252 C:\Program Files\ISS\Proventia Desktop\appcomply.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x71b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MPR.dll 0x003e0000 0x1c000 8.01.0006.0000 C:\Program Files\ISS\Proventia Desktop\RapKAPI.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x00590000 0x3b000 9.00.0226.0000 C:\Program Files\ISS\Proventia Desktop\RapClient.dll 0x74c80000 0x2c000 4.02.5406.0000 C:\WINDOWS\system32\OLEACC.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x005e0000 0x3e000 9.00.0179.0000 C:\Program Files\ISS\Proventia Desktop\phQM.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\imagehlp.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x01630000 0x22000 4.08.0000.0000 C:\Program Files\ISS\Proventia Desktop\IBE\IBEQM.dll 0x01680000 0x9b000 9.00.0226.2232 C:\Program Files\ISS\Proventia Desktop\phAVM.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WtsApi32.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x023e0000 0x140000 9.00.0226.2212 C:\Program Files\ISS\Proventia Desktop\BitDefenderEngine.dll 0x02530000 0xc1000 C:\Program Files\ISS\Proventia Desktop\libxml2.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x7c340000 0x56000 7.10.3052.0004 C:\Program Files\ISS\Proventia Desktop\MSVCR71.dll 0x02600000 0x27000 C:\Program Files\ISS\Proventia Desktop\libxslt.dll 0x02980000 0x66000 9.00.0226.2071 C:\Program Files\ISS\Proventia Desktop\IBEEngine.dll 0x06cf0000 0x5b000 9.00.0226.2132 C:\Program Files\ISS\Proventia Desktop\phScheduler.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x087b0000 0x38000 9.00.0179.0000 C:\Program Files\ISS\Proventia Desktop\IBE\InstLspDll.dll ------------------------------------------------------------------------------ sqlwriter.exe pid: 548 Command line: "c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe" Base Size Version Path 0x01000000 0x18000 2005.90.3042.0000 c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x78130000 0x9b000 8.00.50727.3053 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x4f880000 0x2e000 2005.90.3042.0000 c:\Program Files\Microsoft SQL Server\90\Shared\sqlwvss_xp.dll 0x7c420000 0x87000 8.00.50727.3053 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCP80.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x753e0000 0x6d000 5.01.2600.2180 C:\WINDOWS\system32\VSSAPI.DLL 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x77710000 0x41000 2001.12.4414.0308 C:\WINDOWS\system32\es.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\wtsapi32.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll ------------------------------------------------------------------------------ svchost.exe pid: 520 Command line: C:\WINDOWS\system32\svchost.exe -k imgsvc Base Size Version Path 0x01000000 0x6000 5.01.2600.2180 C:\WINDOWS\system32\svchost.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x75aa0000 0x55000 5.01.2600.2180 c:\windows\system32\wiaservc.dll 0x74ae0000 0x7000 5.01.2600.2180 c:\windows\system32\CFGMGR32.dll 0x77920000 0xf3000 5.01.2600.2180 c:\windows\system32\setupapi.DLL 0x73b30000 0x15000 5.01.2600.2709 c:\windows\system32\mscms.dll 0x73000000 0x26000 5.01.2600.2180 c:\windows\system32\WINSPOOL.DRV 0x76360000 0x10000 5.01.2600.2180 c:\windows\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x71d40000 0x1c000 6.00.2900.2180 C:\WINDOWS\system32\actxprxy.dll 0x73ba0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\sti.dll ------------------------------------------------------------------------------ uphclean.exe pid: 652 Command line: "C:\Program Files\UPHClean\uphclean.exe" Base Size Version Path 0x00400000 0x3b000 1.06.0030.0000 C:\Program Files\UPHClean\uphclean.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\MSVCRT.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll ------------------------------------------------------------------------------ vnxserv.exe pid: 900 Command line: C:\WINDOWS\system32\vnxserv.exe Base Size Version Path 0x00400000 0xb000 C:\WINDOWS\system32\vnxserv.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll ------------------------------------------------------------------------------ Vpatch.exe pid: 924 Command line: "C:\Program Files\ISS\Proventia Desktop\VPatch.exe" Base Size Version Path 0x00400000 0x65000 9.00.0226.2075 C:\Program Files\ISS\Proventia Desktop\VPatch.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x10000000 0x41000 9.00.0226.2242 C:\Program Files\ISS\Proventia Desktop\phBOEP.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x00b40000 0x3b000 9.00.0226.0000 C:\Program Files\ISS\Proventia Desktop\RapClient.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x74c80000 0x2c000 4.02.5406.0000 C:\WINDOWS\system32\OLEACC.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x00ea0000 0x56000 2.00.0000.0000 C:\Program Files\ISS\Proventia Desktop\issboep.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x71b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MPR.dll ------------------------------------------------------------------------------ Wuser32.exe pid: 1048 Command line: C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe Base Size Version Path 0x00400000 0x42000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\Wuser32.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x10000000 0x14000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\multprot.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x00240000 0x15000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\QUEUEBUF.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x00bd0000 0xf000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CLICOMP\RemCtrl\1033\_wuser32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x71f80000 0x4000 5.01.2600.2180 C:\WINDOWS\system32\SECURITY.DLL 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll ------------------------------------------------------------------------------ xElevate_b2cd.exe pid: 1212 Command line: C:\WINDOWS\system32\xElevate_b2cd.exe Base Size Version Path 0x00400000 0x10000 6.00.0001.0000 C:\WINDOWS\system32\xElevate_b2cd.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\secur32.dll ------------------------------------------------------------------------------ PSXRUN.EXE pid: 1860 Command line: C:\WINDOWS\system32\PSXRUN.EXE Base Size Version Path 0x01000000 0x14000 8.00.1969.0001 C:\WINDOWS\system32\PSXRUN.EXE 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll ------------------------------------------------------------------------------ PSXSS.EXE pid: 1940 Command line: C:\WINDOWS\system32\psxss.exe Base Size Version Path 0x4a780000 0x82000 \??\C:\WINDOWS\system32\psxss.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\MSVCRT.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x71b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MPR.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\Apphelp.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll ------------------------------------------------------------------------------ CcmExec.exe pid: 2052 Command line: C:\WINDOWS\system32\CCM\CcmExec.exe Base Size Version Path 0x01000000 0x8e000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CcmExec.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x18040000 0x53000 2.50.4160.2000 C:\WINDOWS\system32\ccmcore.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WTSAPI32.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x181c0000 0xe000 2.50.4160.2000 C:\WINDOWS\system32\CCM\ccmperf.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x18150000 0x15000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CCMGenCert.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x18200000 0x24000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CcmTask.dll 0x4d4f0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\WINHTTP.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x74ef0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemprox.dll 0x75290000 0x37000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemcomn.dll 0x74ed0000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemsvc.dll 0x75690000 0x76000 5.01.2600.2180 C:\WINDOWS\system32\wbem\fastprox.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\userenv.dll 0x75e60000 0x13000 5.131.2600.2180 C:\WINDOWS\system32\cryptnet.dll 0x722b0000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\SensApi.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\APPHELP.DLL 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x186c0000 0x12000 2.50.4160.2000 C:\WINDOWS\system32\CCM\PolicyAgent.dll 0x18920000 0x2d000 2.50.4160.2000 C:\WINDOWS\system32\CCM\SrcUpdateMgr.dll 0x18890000 0xd000 2.50.4160.2000 C:\WINDOWS\system32\CCM\smscore.dll 0x18240000 0x35000 2.50.4160.2000 C:\WINDOWS\system32\CCM\ContentAccess.dll 0x18680000 0x29000 2.50.4160.2000 C:\WINDOWS\system32\CCM\PatchUIMonitor.dll 0x180e0000 0x4f000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CcmDTS.dll 0x18290000 0x15000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CPApplet.dll 0x180a0000 0x25000 2.50.4160.2000 C:\WINDOWS\system32\CCM\CcmCTM.dll 0x18320000 0x47000 2.50.4160.2000 C:\WINDOWS\system32\CCM\execmgr.dll 0x692c0000 0x30000 5.01.2600.2180 C:\WINDOWS\System32\Wbem\framedyn.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x181a0000 0xc000 2.50.4160.2000 C:\WINDOWS\system32\CCM\ccmident.dll 0x76d40000 0x18000 5.01.2600.2180 C:\WINDOWS\system32\MPRAPI.dll 0x77cc0000 0x32000 5.01.2600.2180 C:\WINDOWS\system32\ACTIVEDS.dll 0x76e10000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\adsldpc.dll 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x18990000 0x12000 2.50.4160.2000 C:\WINDOWS\system32\CCM\StatusAgent.dll 0x59940000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wmidcprv.dll 0x75020000 0x1b000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wmiutils.dll 0x75310000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\wbem\esscli.dll 0x18540000 0x34000 2.50.4160.2000 C:\WINDOWS\system32\CCM\LSUtilities.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x71cf0000 0x4b000 5.01.2600.2698 C:\WINDOWS\system32\kerberos.dll 0x76790000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\cryptdll.dll 0x74980000 0x113000 8.90.1101.0000 C:\WINDOWS\system32\msxml3.dll 0x18620000 0x2a000 2.50.4160.2000 C:\WINDOWS\system32\CCM\MtrMgr.dll 0x71b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MPR.dll 0x18780000 0xa000 2.50.4160.2000 C:\WINDOWS\system32\CCM\Prep.dll 0x187e0000 0x28000 2.50.4160.2000 C:\WINDOWS\system32\CCM\Sched.dll 0x18650000 0x25000 2.50.4160.2000 C:\WINDOWS\system32\CCM\PatchInstall.dll 0x18000000 0xe000 2.50.4160.2000 C:\WINDOWS\system32\CCM\AdvertSched.dll 0x186e0000 0x65000 2.50.4160.2000 C:\WINDOWS\system32\CCM\PolicyAgentEndpoint.dll 0x18170000 0x1b000 2.50.4160.2000 C:\WINDOWS\system32\CCM\ccmhttp.dll 0x189b0000 0x6000 2.50.4160.2000 C:\WINDOWS\system32\CCM\StatusAgentProxy.dll 0x18870000 0x1d000 2.50.4160.2000 C:\WINDOWS\system32\CCM\smsclient.dll ------------------------------------------------------------------------------ mcshield.exe pid: 2236 Command line: "C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe" Base Size Version Path 0x00400000 0x28000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mcshield.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x73dc0000 0x3000 5.01.2600.0000 C:\WINDOWS\system32\LZ32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x140e0000 0x9000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x14180000 0x13000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3.dll 0x14710000 0x48000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll 0x76780000 0x9000 6.00.2900.2180 C:\WINDOWS\system32\SHFOLDER.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x14810000 0x19000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_server.dll 0x14100000 0x7000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll 0x14080000 0xd000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\FTL.Dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\psapi.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\Apphelp.dll 0x76c60000 0x2a000 5.01.2600.2180 C:\WINDOWS\system32\sfc_os.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WTSAPI32.Dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x12000000 0x31c000 5.400.0000.1158 C:\Program Files\Common Files\McAfee\Engine\mcscan32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x65490000 0x14000 14.01.0000.0615 C:\Program Files\McAfee\VirusScan Enterprise\mfeapfa.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x66240000 0x8000 14.01.0000.0615 C:\Program Files\McAfee\VirusScan Enterprise\mfehida.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\userenv.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x75e60000 0x13000 5.131.2600.2180 C:\WINDOWS\system32\cryptnet.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x4d4f0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\WINHTTP.dll 0x722b0000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\SensApi.dll 0x603d0000 0xe000 14.01.0000.0615 C:\Program Files\McAfee\VirusScan Enterprise\mfebopa.dll 0x6eff0000 0xd000 14.01.0000.0615 C:\Program Files\McAfee\VirusScan Enterprise\mfeavfa.dll ------------------------------------------------------------------------------ mapsvc.exe pid: 2428 Command line: C:\BIN\SFU\Mapper\mapsvc.exe Base Size Version Path 0x01000000 0x1e000 8.00.1969.0001 C:\BIN\SFU\Mapper\mapsvc.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x005e0000 0x1c000 8.00.1969.0001 C:\BIN\SFU\admin\mapper.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll ------------------------------------------------------------------------------ mfeann.exe pid: 2464 Command line: "C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe" 2236 Base Size Version Path 0x00400000 0x8000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x140e0000 0x9000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x158e0000 0x1b000 8.07.0000.0659 C:\Program Files\McAfee\VirusScan Enterprise\naiann.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x14180000 0x13000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3.dll 0x14710000 0x48000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll 0x76780000 0x9000 6.00.2900.2180 C:\WINDOWS\system32\SHFOLDER.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x15f00000 0x2c000 C:\Program Files\McAfee\VirusScan Enterprise\VsEvntUI.dll 0x14320000 0x18000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\NAEvent.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\MSWSOCK.dll 0x15de0000 0x34000 8.07.0000.0747 C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x16300000 0x6000 8.07.0000.0747 C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x73dc0000 0x3000 5.01.2600.0000 C:\WINDOWS\system32\LZ32.dll 0x14100000 0x7000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WTSAPI32.Dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x64560000 0x2f000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\Genevtinf3.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x76d40000 0x18000 5.01.2600.2180 C:\WINDOWS\system32\MPRAPI.dll 0x77cc0000 0x32000 5.01.2600.2180 C:\WINDOWS\system32\ACTIVEDS.dll 0x76e10000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\adsldpc.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll ------------------------------------------------------------------------------ init pid: 2556 Command line: Base Size Version Path 0x00400000 0x1b000 \??\C:\BIN\SFU\usr\sbin\init 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x77ea0000 0x4a000 8.00.1969.0001 C:\WINDOWS\system32\PSXDLL.dll ------------------------------------------------------------------------------ zzInterix pid: 2664 Command line: Base Size Version Path 0x00400000 0x15000 \??\C:\BIN\SFU\usr\sbin\zzInterix 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x77ea0000 0x4a000 8.00.1969.0001 C:\WINDOWS\system32\PSXDLL.dll ------------------------------------------------------------------------------ inetd pid: 2832 Command line: Base Size Version Path 0x00400000 0x20000 \??\C:\BIN\SFU\usr\sbin\inetd 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x77ea0000 0x4a000 8.00.1969.0001 C:\WINDOWS\system32\PSXDLL.dll ------------------------------------------------------------------------------ wmiprvse.exe pid: 3780 Command line: C:\WINDOWS\system32\wbem\wmiprvse.exe Base Size Version Path 0x01000000 0x38000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wmiprvse.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x75290000 0x37000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemcomn.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x75690000 0x76000 5.01.2600.2180 C:\WINDOWS\system32\wbem\FastProx.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x5f770000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\NCObjAPI.DLL 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x74ed0000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemsvc.dll 0x75020000 0x1b000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wmiutils.dll 0x18750000 0x17000 2.50.4160.2000 C:\WINDOWS\system32\CCM\PolicyAgentProvider.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x18040000 0x53000 2.50.4160.2000 C:\WINDOWS\system32\ccmcore.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WTSAPI32.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL ------------------------------------------------------------------------------ wmiprvse.exe pid: 2456 Command line: C:\WINDOWS\system32\wbem\wmiprvse.exe Base Size Version Path 0x01000000 0x38000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wmiprvse.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x75290000 0x37000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemcomn.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x75690000 0x76000 5.01.2600.2180 C:\WINDOWS\system32\wbem\FastProx.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x5f770000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\NCObjAPI.DLL 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x74ed0000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wbemsvc.dll 0x75020000 0x1b000 5.01.2600.2180 C:\WINDOWS\system32\wbem\wmiutils.dll 0x5bd90000 0x18000 5.01.2600.2180 C:\WINDOWS\system32\wbem\stdprov.dll 0x75310000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\wbem\esscli.dll ------------------------------------------------------------------------------ ssonsvr.exe pid: 3904 Command line: "C:\Program Files\Citrix\ICA Client\ssonsvr.exe" Base Size Version Path 0x00400000 0x6000 9.150.39151.0000 C:\Program Files\Citrix\ICA Client\ssonsvr.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\MSVCRT.dll 0x66680000 0x6000 9.150.39151.0000 C:\Program Files\Citrix\ICA Client\PNIPCN.dll 0x76390000 0x1d000 5.01.2600.2180 C:\WINDOWS\system32\Imm32.dll ------------------------------------------------------------------------------ explorer.exe pid: 1088 Command line: C:\WINDOWS\Explorer.EXE Base Size Version Path 0x01000000 0xff000 6.00.2900.2180 C:\WINDOWS\Explorer.EXE 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x75f80000 0xfd000 6.00.2900.3314 C:\WINDOWS\system32\BROWSEUI.dll 0x7e290000 0x171000 6.00.2900.3314 C:\WINDOWS\system32\SHDOCVW.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x754d0000 0x80000 5.131.2600.2180 C:\WINDOWS\system32\CRYPTUI.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\appHelp.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77a20000 0x54000 5.01.2600.2180 C:\WINDOWS\System32\cscui.dll 0x76600000 0x1d000 5.01.2600.2180 C:\WINDOWS\System32\CSCDLL.dll 0x5ba60000 0x71000 6.00.2900.2180 C:\WINDOWS\system32\themeui.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x76380000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\MSIMG32.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x76980000 0x8000 5.01.2600.2751 C:\WINDOWS\system32\LINKINFO.dll 0x76990000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\ntshrui.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x7e1e0000 0xa2000 6.00.2900.3314 C:\WINDOWS\system32\urlmon.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x74b30000 0x46000 6.00.2900.2180 C:\WINDOWS\system32\webcheck.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76280000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\stobject.dll 0x74af0000 0xa000 6.00.2900.2180 C:\WINDOWS\system32\BatMeter.dll 0x74ad0000 0x8000 6.00.2900.2180 C:\WINDOWS\system32\POWRPROF.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WTSAPI32.dll 0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll 0x4d4f0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\WINHTTP.dll 0x72d20000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wdmaud.drv 0x72d10000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x72410000 0x1a000 6.00.2900.2180 C:\WINDOWS\system32\mydocs.dll 0x77bd0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\midimap.dll 0x76400000 0x1a5000 5.01.2600.2977 C:\WINDOWS\system32\NETSHELL.dll 0x76c00000 0x2e000 5.01.2600.2180 C:\WINDOWS\system32\credui.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x016c0000 0x1a000 1.01.0008.0094 C:\Program Files\WinSCP\DragExt.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll 0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll 0x71b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MPR.dll 0x75f60000 0x7000 5.01.2600.2180 C:\WINDOWS\System32\drprov.dll 0x71c10000 0xe000 5.01.2600.2180 C:\WINDOWS\System32\ntlanman.dll 0x71cd0000 0x17000 5.01.2600.2180 C:\WINDOWS\System32\NETUI0.dll 0x71c90000 0x40000 5.01.2600.2180 C:\WINDOWS\System32\NETUI1.dll 0x71c80000 0x7000 5.01.2600.2180 C:\WINDOWS\System32\NETRAP.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\System32\SAMLIB.dll 0x75f70000 0x9000 5.01.2600.2180 C:\WINDOWS\System32\davclnt.dll 0x00ac0000 0xd000 8.00.1969.0001 C:\WINDOWS\system32\nfsnp.dll 0x00ad0000 0x15000 8.00.1969.0001 C:\WINDOWS\system32\nfsccfg.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x00b40000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x66900000 0x1b000 1.00.0000.0129 C:\Program Files\Network Associates\Common Framework\JrMac.dll 0x605d0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\mslbui.dll 0x01470000 0x12000 6.00.2900.2180 C:\WINDOWS\system32\browselc.dll 0x10000000 0xe000 7.00.0007.0142 C:\Program Files\Adobe\ActiveX\AcroIEHelper.dll 0x7c340000 0x56000 7.10.3052.0004 C:\WINDOWS\system32\MSVCR71.dll 0x016e0000 0x1f000 1.04.0008.0000 C:\WINDOWS\system32\dla\tfswshx.dll 0x01140000 0xf000 1.04.0008.0000 C:\WINDOWS\system32\tfswapi.dll 0x020b0000 0x3b000 1.04.0008.0000 C:\WINDOWS\system32\dla\tfswcres.dll 0x6d440000 0xc000 6.00.0170.0004 C:\Program Files\Java\jre6\bin\jp2ssv.dll 0x6dae0000 0x12000 6.00.0170.0004 C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x62860000 0x4d000 8.00.0000.9005 C:\Program Files\OpenOffice.org 2.0\program\shlxthdl.dll 0x60b30000 0x18000 8.00.0000.8975 C:\Program Files\OpenOffice.org 2.0\program\uwinapi.dll 0x4ec50000 0x1a3000 5.01.3102.2180 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll 0x62410000 0x8e000 4.05.2003.0120 C:\Program Files\OpenOffice.org 2.0\program\stlport_vc7145.dll 0x7c3a0000 0x7b000 7.10.3077.0000 C:\Program Files\OpenOffice.org 2.0\program\MSVCP71.dll 0x02180000 0x1c000 7.00.0000.0000 C:\Program Files\Adobe\ActiveX\PDFShell.dll 0x325c0000 0x12000 11.00.5510.0000 C:\Program Files\Microsoft Office\OFFICE11\msohev.dll 0x021f0000 0x88000 6.00.2900.2180 C:\WINDOWS\system32\shdoclc.dll 0x73ba0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\sti.dll 0x74ae0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\CFGMGR32.dll 0x75830000 0x45000 5.01.2600.2180 C:\WINDOWS\system32\mstask.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x16200000 0x6000 4.01.0000.0000 C:\PROGRA~1\WINZIP\WZSHLSTB.DLL 0x15d80000 0xc000 8.07.0000.0570 C:\Program Files\McAfee\VirusScan Enterprise\shext.dll 0x73dc0000 0x3000 5.01.2600.0000 C:\WINDOWS\system32\LZ32.dll 0x02280000 0xd000 1.00.0004.0000 C:\Program Files\textpad 4\System\shellext.dll 0x02f80000 0x11000 6.06.0002.0001 C:\WINDOWS\system32\DWRCShell.DLL 0x02ff0000 0x2f000 5.01.2600.2180 C:\WINDOWS\system32\xpsp1res.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x03020000 0x748000 6.14.0010.8437 C:\WINDOWS\system32\nvcpl.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x74c80000 0x2c000 4.02.5406.0000 C:\WINDOWS\system32\OLEACC.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x02b00000 0x73000 6.14.0010.11029 C:\WINDOWS\system32\nvshell.dll 0x71d40000 0x1c000 6.00.2900.2180 C:\WINDOWS\system32\actxprxy.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x73380000 0x57000 6.00.2900.2180 C:\WINDOWS\system32\zipfldr.dll 0x5cad0000 0x27000 6.00.2900.2180 C:\WINDOWS\system32\shmedia.dll 0x75a70000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\MSVFW32.dll 0x73b50000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\AVIFIL32.dll 0x15110000 0x25a000 11.00.5721.5145 C:\WINDOWS\system32\wmvcore.dll 0x11c70000 0x39000 11.00.5721.5145 C:\WINDOWS\system32\WMASF.DLL 0x75cf0000 0x91000 6.00.2900.2180 C:\WINDOWS\system32\mlang.dll ------------------------------------------------------------------------------ RegTool.exe pid: 1468 Command line: "C:\Program Files\GemPlus\GemSafe Libraries User\BIN\RegTool.exe" Base Size Version Path 0x00400000 0xb000 2.00.0008.0000 C:\Program Files\GemPlus\GemSafe Libraries User\BIN\RegTool.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x10000000 0x3d000 2.01.0003.0000 C:\Program Files\GemPlus\GemSafe Libraries User\BIN\GemPPM.dll 0x723d0000 0x1c000 5.01.2600.2180 C:\WINDOWS\system32\WinSCard.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WTSAPI32.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x73dd0000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x00ac0000 0x112000 1.00.0004.0000 C:\Program Files\Gemplus\Common\Resources\LocHub.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x00a20000 0x37000 1.00.0006.0000 C:\Program Files\GemPlus\GemSafe Libraries User\BIN\GUICore.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\userenv.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\secur32.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll ------------------------------------------------------------------------------ Update.exe pid: 3636 Command line: "C:\WINDOWS\system32\Help\Update.exe" Base Size Version Path 0x00400000 0x24000 1.01.0000.0003 C:\WINDOWS\system32\Help\Update.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x7e1e0000 0xa2000 6.00.2900.3314 C:\WINDOWS\system32\urlmon.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll ------------------------------------------------------------------------------ rundll32.exe pid: 1896 Command line: "C:\WINDOWS\system32\RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit Base Size Version Path 0x01000000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\RUNDLL32.EXE 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x10000000 0x17000 6.14.0010.8437 C:\WINDOWS\system32\NvMcTray.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll ------------------------------------------------------------------------------ stsystra.exe pid: 400 Command line: "C:\WINDOWS\stsystra.exe" Base Size Version Path 0x00400000 0x45000 1.00.4991.0000 C:\WINDOWS\stsystra.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x10000000 0x103000 1.06.4947.0000 C:\WINDOWS\system32\STLang.dll 0x72830000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42u.DLL 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x00950000 0x35000 1.00.4991.0000 C:\WINDOWS\system32\stacapi.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x72d20000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wdmaud.drv 0x72d10000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77bd0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\midimap.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll ------------------------------------------------------------------------------ DVDLauncher.exe pid: 3624 Command line: "C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe" Base Size Version Path 0x00400000 0xc000 3.00.0000.0000 C:\Program Files\CyberLink\PowerDVD\DVDLauncher.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x73dd0000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll ------------------------------------------------------------------------------ MyToolbar.exe pid: 1064 Command line: "C:\Program Files\MyToolbar\MyToolbar.exe" Base Size Version Path 0x00400000 0x84000 6.01.0005.0036 C:\Program Files\MyToolbar\MyToolbar.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x722b0000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\SensApi.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x72d20000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wdmaud.drv 0x72d10000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77bd0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\midimap.dll 0x42700000 0xa8000 6.01.0005.0036 C:\Program Files\MyToolbar\MyToolbarTBr.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x76980000 0x8000 5.01.2600.2751 C:\WINDOWS\system32\LINKINFO.dll 0x76990000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\ntshrui.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\appHelp.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x77a20000 0x54000 5.01.2600.2180 C:\WINDOWS\System32\cscui.dll 0x76600000 0x1d000 5.01.2600.2180 C:\WINDOWS\System32\CSCDLL.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wsock32.dll 0x76ee0000 0x3c000 5.01.2600.2180 C:\WINDOWS\system32\RASAPI32.DLL 0x76e90000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\rasman.dll 0x76eb0000 0x2f000 5.01.2600.2180 C:\WINDOWS\system32\TAPI32.dll 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x7e1e0000 0xa2000 6.00.2900.3314 C:\WINDOWS\system32\urlmon.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x65af0000 0x7000 6.00.2900.3314 C:\WINDOWS\system32\jsproxy.dll 0x75c50000 0x6f000 5.06.0000.8835 C:\WINDOWS\system32\JScript.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll ------------------------------------------------------------------------------ tfswctrl.exe pid: 3632 Command line: "C:\WINDOWS\system32\dla\tfswctrl.exe" Base Size Version Path 0x00400000 0x20000 1.04.0008.0000 C:\WINDOWS\system32\dla\tfswctrl.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x10000000 0xf000 1.04.0008.0000 C:\WINDOWS\system32\tfswapi.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x00320000 0x3b000 1.04.0008.0000 C:\WINDOWS\system32\dla\tfswcres.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\Wtsapi32.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll ------------------------------------------------------------------------------ shstat.exe pid: 3652 Command line: "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE Base Size Version Path 0x00400000 0x20000 8.07.0000.0767 C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x140e0000 0x9000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\LockDown.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x153e0000 0x1a000 8.07.0000.0659 C:\Program Files\McAfee\VirusScan Enterprise\ftcfg.dll 0x14180000 0x13000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3.dll 0x14710000 0x48000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll 0x76780000 0x9000 6.00.2900.2180 C:\WINDOWS\system32\SHFOLDER.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x16300000 0x6000 8.07.0000.0747 C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll 0x15de0000 0x34000 8.07.0000.0747 C:\Program Files\McAfee\VirusScan Enterprise\shutil.dll 0x745e0000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x73dc0000 0x3000 5.01.2600.0000 C:\WINDOWS\system32\LZ32.dll 0x14100000 0x7000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x154a0000 0x331000 8.07.0000.0570 C:\Program Files\McAfee\VirusScan Enterprise\Graphics.dll 0x00390000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x605d0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\mslbui.dll ------------------------------------------------------------------------------ jusched.exe pid: 948 Command line: "C:\Program Files\Java\jre6\bin\jusched.exe" Base Size Version Path 0x00400000 0x25000 6.00.0170.0004 C:\Program Files\Java\jre6\bin\jusched.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\Apphelp.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wsock32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76ee0000 0x3c000 5.01.2600.2180 C:\WINDOWS\system32\RASAPI32.DLL 0x76e90000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\rasman.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x76eb0000 0x2f000 5.01.2600.2180 C:\WINDOWS\system32\TAPI32.dll 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x722b0000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\sensapi.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x65af0000 0x7000 6.00.2900.3314 C:\WINDOWS\system32\jsproxy.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x75c50000 0x6f000 5.06.0000.8835 C:\WINDOWS\system32\JScript.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x7e1e0000 0xa2000 6.00.2900.3314 C:\WINDOWS\system32\urlmon.dll ------------------------------------------------------------------------------ UdaterUI.exe pid: 4064 Command line: "C:\Program Files\Network Associates\Common Framework\udaterui.exe" /StartedFromRunKey Base Size Version Path 0x00400000 0x21000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\udaterui.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x64890000 0x7000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\nailog3.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7c340000 0x56000 7.10.3052.0004 C:\Program Files\Network Associates\Common Framework\MSVCR71.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x64840000 0x2f000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\naCmnLib3_71.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x64960000 0x23000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\naxml3_71.dll 0x7c3a0000 0x7b000 7.10.3077.0000 C:\Program Files\Network Associates\Common Framework\MSVCP71.dll 0x64120000 0x45000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\applib.dll 0x641c0000 0xa000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\cmalib.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x10000000 0x32e000 C:\Program Files\Network Associates\Common Framework\cryptocme2.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\Apphelp.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x64b30000 0x14000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\0409\UpdRes.dll 0x64100000 0x19000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\0409\AgentRes.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\shell32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x00d90000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x64a50000 0x1f000 4.00.0000.1494 C:\Program Files\Network Associates\Common Framework\SecureFrameworkFactory3.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x605d0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\mslbui.dll ------------------------------------------------------------------------------ ctfmon.exe pid: 1132 Command line: "C:\WINDOWS\system32\ctfmon.exe" Base Size Version Path 0x00400000 0x6000 5.01.2600.2180 C:\WINDOWS\system32\ctfmon.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x5fc10000 0x33000 5.01.2600.2180 C:\WINDOWS\system32\MSUTB.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll ------------------------------------------------------------------------------ CBSysTray.exe pid: 4136 Command line: "C:\Program Files\Connected\CBSysTray.exe" Base Size Version Path 0x00400000 0x1d000 7.05.0003.2405 C:\Program Files\Connected\CBSysTray.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x605d0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\mslbui.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.DLL ------------------------------------------------------------------------------ blackice.exe pid: 4156 Command line: "C:\Program Files\ISS\Proventia Desktop\blackice.exe" -closed Base Size Version Path 0x00400000 0x21b000 9.00.0226.2034 C:\Program Files\ISS\Proventia Desktop\blackice.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x12000000 0x170000 1.07.0000.0000 C:\Program Files\ISS\Proventia Desktop\xerces-c_1_7_0.dll 0x7c340000 0x56000 7.10.3052.0004 C:\Program Files\ISS\Proventia Desktop\MSVCR71.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x10000000 0x37000 9.00.0179.0000 C:\Program Files\ISS\Proventia Desktop\FileSec.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x01a20000 0xe2000 3.01.0005.0001 C:\Program Files\ISS\Proventia Desktop\issSensorSvcs3.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x05960000 0x89000 5.02.3790.2847 C:\WINDOWS\system32\hhctrl.ocx ------------------------------------------------------------------------------ YahooWidgetEngine.exe pid: 4164 Command line: "C:\Program Files\Yahoo!\Widgets\YahooWidgetEngine.exe" Base Size Version Path 0x00400000 0x2cd000 4.00.0003.0000 C:\Program Files\Yahoo!\Widgets\YahooWidgetEngine.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\IPHLPAPI.DLL 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76380000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\MSIMG32.dll 0x74e30000 0x6c000 5.30.0023.1221 C:\WINDOWS\system32\RICHED20.dll 0x76390000 0x1d000 5.01.2600.2180 C:\WINDOWS\system32\IMM32.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x76bf0000 0xb000 5.01.2600.2180 C:\WINDOWS\system32\PSAPI.DLL 0x10000000 0x5d000 C:\Program Files\Yahoo!\Widgets\js32.dll 0x78130000 0x9b000 8.00.50727.3053 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca\MSVCR80.dll 0x60900000 0x4b000 C:\Program Files\Yahoo!\Widgets\sqlite3.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x71f60000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\snmpapi.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\COMDLG32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x4ec50000 0x1a3000 5.01.3102.2180 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x732e0000 0x5000 5.01.2600.0000 C:\WINDOWS\system32\RICHED32.DLL 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x75cf0000 0x91000 6.00.2900.2180 C:\WINDOWS\system32\mlang.dll 0x605d0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\mslbui.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x76ee0000 0x3c000 5.01.2600.2180 C:\WINDOWS\system32\RASAPI32.DLL 0x76e90000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\rasman.dll 0x76eb0000 0x2f000 5.01.2600.2180 C:\WINDOWS\system32\TAPI32.dll 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x77c70000 0x23000 5.01.2600.2180 C:\WINDOWS\system32\msv1_0.dll 0x722b0000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\sensapi.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x0ffd0000 0x28000 5.01.2600.2161 C:\WINDOWS\system32\rsaenh.dll 0x76d40000 0x18000 5.01.2600.2180 C:\WINDOWS\system32\MPRAPI.dll 0x77cc0000 0x32000 5.01.2600.2180 C:\WINDOWS\system32\ACTIVEDS.dll 0x76e10000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\adsldpc.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x75c50000 0x6f000 5.06.0000.8835 C:\WINDOWS\system32\JScript.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wsock32.dll ------------------------------------------------------------------------------ McTray.exe pid: 4416 Command line: /load Base Size Version Path 0x00400000 0x15000 1.00.0000.0129 C:\Program Files\Network Associates\Common Framework\McTray.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x66900000 0x1b000 1.00.0000.0129 C:\Program Files\Network Associates\Common Framework\JrMac.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll ------------------------------------------------------------------------------ Defraggler.exe pid: 2440 Command line: "C:\Program Files\Defraggler\Defraggler.exe" Base Size Version Path 0x00400000 0x1b8000 1.16.0000.0165 C:\Program Files\Defraggler\Defraggler.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\COMDLG32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x76380000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\MSIMG32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\appHelp.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77a20000 0x54000 5.01.2600.2180 C:\WINDOWS\System32\cscui.dll 0x76600000 0x1d000 5.01.2600.2180 C:\WINDOWS\System32\CSCDLL.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x7e290000 0x171000 6.00.2900.3314 C:\WINDOWS\system32\shdocvw.dll 0x754d0000 0x80000 5.131.2600.2180 C:\WINDOWS\system32\CRYPTUI.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x605d0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\mslbui.dll ------------------------------------------------------------------------------ OUTLOOK.EXE pid: 2672 Command line: "C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE" /recycle Base Size Version Path 0x30000000 0x32000 11.00.8206.0000 C:\Program Files\Microsoft Office\OFFICE11\OUTLOOK.EXE 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x30040000 0x749000 11.00.8206.0000 C:\Program Files\Microsoft Office\OFFICE11\OUTLLIB.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\MSVCRT.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x30c90000 0xbbc000 11.00.8202.0000 C:\Program Files\Common Files\Microsoft Shared\office11\mso.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x308e0000 0x2ec000 11.00.6565.0000 C:\Program Files\Microsoft Office\OFFICE11\1033\outllibr.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x35f70000 0x15c000 11.00.8002.0000 C:\Program Files\Common Files\System\MSMAPI\1033\msmapi32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x61dd0000 0x21000 1.00.2536.0000 C:\Program Files\Common Files\System\MSMAPI\1033\mapi32.dll 0x35e80000 0xc0000 11.00.6550.0000 C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\MAPIR.DLL 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x746f0000 0x2a000 5.01.2600.2180 C:\WINDOWS\system32\msimtf.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x5c2c0000 0x40000 5.01.2600.2180 C:\WINDOWS\ime\sptip.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x74c80000 0x2c000 4.02.5406.0000 C:\WINDOWS\system32\OLEACC.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll 0x605d0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\mslbui.dll 0x20000000 0x11000 5.01.2600.2180 C:\WINDOWS\IME\SPGRMR.DLL 0x01670000 0x2c6000 3.01.4000.2435 C:\WINDOWS\system32\msi.dll 0x10000000 0x5b000 1.00.1038.0000 C:\Program Files\Common Files\Microsoft Shared\INK\SKCHUI.DLL 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x3e000000 0x11e000 11.00.5113.0000 C:\Program Files\Microsoft Office\OFFICE11\1033\srintl.dll 0x39700000 0xeb000 5.50.0099.2010 C:\Program Files\Common Files\Microsoft Shared\office11\riched20.dll 0x35440000 0x1f000 11.00.6550.0000 C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\contab32.dll 0x35ae0000 0x43000 11.00.6550.0000 C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\EMSABP32.DLL 0x35c30000 0x27000 11.00.8000.0000 C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\EMSUI32.DLL 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76d40000 0x18000 5.01.2600.2180 C:\WINDOWS\system32\MPRAPI.dll 0x77cc0000 0x32000 5.01.2600.2180 C:\WINDOWS\system32\ACTIVEDS.dll 0x76e10000 0x25000 5.01.2600.2180 C:\WINDOWS\system32\adsldpc.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76b20000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x76e80000 0xe000 5.01.2600.2180 C:\WINDOWS\system32\rtutils.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76c00000 0x2e000 5.01.2600.2180 C:\WINDOWS\system32\credui.dll 0x767a0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\NTDSAPI.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x71cf0000 0x4b000 5.01.2600.2698 C:\WINDOWS\system32\kerberos.dll 0x76790000 0xc000 5.01.2600.2180 C:\WINDOWS\system32\cryptdll.dll 0x02600000 0x32000 9.00.0226.2072 C:\Program Files\ISS\Proventia Desktop\IBE\ICEemh32.dll 0x35b70000 0xaf000 11.00.8000.0000 C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\EMSMDB32.DLL 0x76380000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\msimg32.dll 0x35cb0000 0xb2000 11.00.8001.0000 C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\mspst32.dll 0x039c0000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x35420000 0x13000 11.00.8202.0000 C:\Program Files\Microsoft Office\OFFICE11\OUTLRPC.dll 0x359a0000 0x59000 11.00.8205.0000 C:\Program Files\Microsoft Office\OFFICE11\exsec32.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x76390000 0x1d000 5.01.2600.2180 C:\WINDOWS\system32\IMM32.dll 0x355c0000 0x9000 11.00.6550.0000 C:\PROGRA~1\MICROS~2\OFFICE11\OUTLACCT.DLL 0x608a0000 0xf000 6.00.2900.2180 C:\WINDOWS\system32\msident.dll 0x60890000 0x6000 6.00.2600.0000 C:\WINDOWS\system32\msidntld.dll 0x5e0c0000 0xd000 5.01.2600.2180 C:\WINDOWS\system32\PSTOREC.DLL 0x36c30000 0x9000 11.00.5510.0000 C:\Program Files\Microsoft Office\OFFICE11\msostyle.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x75cf0000 0x91000 6.00.2900.2180 C:\WINDOWS\system32\mlang.dll 0x35950000 0x27000 11.00.8202.0000 C:\Program Files\Microsoft Office\OFFICE11\outlph.dll 0x35db0000 0xa2000 11.00.8000.0000 C:\Program Files\Common Files\SYSTEM\MSMAPI\1033\OUTEX.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x72d20000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wdmaud.drv 0x72d10000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77bd0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\midimap.dll 0x35510000 0x60000 11.00.5515.0000 C:\Program Files\Microsoft Office\OFFICE11\RTFHTML.DLL 0x74d90000 0x6b000 1.420.2600.2180 C:\WINDOWS\system32\usp10.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\appHelp.dll 0x7e290000 0x171000 6.00.2900.3314 C:\WINDOWS\system32\shdocvw.dll 0x754d0000 0x80000 5.131.2600.2180 C:\WINDOWS\system32\CRYPTUI.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\Comdlg32.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x5dff0000 0x25000 0.03.3790.3959 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PS5UI.DLL ------------------------------------------------------------------------------ firefox.exe pid: 5568 Command line: "C:\Program Files\Mozilla Firefox\firefox.exe" Base Size Version Path 0x00400000 0xdf000 1.09.0001.3685 C:\Program Files\Mozilla Firefox\firefox.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x10000000 0xa60000 1.09.0001.3685 C:\Program Files\Mozilla Firefox\xul.dll 0x00270000 0x73000 3.06.0016.0001 C:\Program Files\Mozilla Firefox\sqlite3.dll 0x78130000 0xaf000 8.00.0000.0000 C:\Program Files\Mozilla Firefox\MOZCRT19.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x002f0000 0xe4000 4.00.0000.0000 C:\Program Files\Mozilla Firefox\js3250.dll 0x004e0000 0x29000 4.08.0003.0000 C:\Program Files\Mozilla Firefox\nspr4.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x003e0000 0x18000 3.12.0004.0000 C:\Program Files\Mozilla Firefox\smime3.dll 0x00510000 0x9b000 3.12.0004.0000 C:\Program Files\Mozilla Firefox\nss3.dll 0x005b0000 0x14000 3.12.0004.0000 C:\Program Files\Mozilla Firefox\nssutil3.dll 0x005d0000 0x7000 4.08.0003.0000 C:\Program Files\Mozilla Firefox\plc4.dll 0x005e0000 0x7000 4.08.0003.0000 C:\Program Files\Mozilla Firefox\plds4.dll 0x005f0000 0x20000 3.12.0004.0000 C:\Program Files\Mozilla Firefox\ssl3.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\COMDLG32.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll 0x76390000 0x1d000 5.01.2600.2180 C:\WINDOWS\system32\IMM32.dll 0x76380000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\MSIMG32.dll 0x74d90000 0x6b000 1.420.2600.2180 C:\WINDOWS\system32\USP10.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x00610000 0x7000 1.09.0001.3685 C:\Program Files\Mozilla Firefox\xpcom.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\uxtheme.dll 0x59a60000 0xa1000 5.01.2600.2180 C:\WINDOWS\system32\dbghelp.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\system32\mswsock.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x76d60000 0x19000 5.01.2600.2912 C:\WINDOWS\system32\iphlpapi.dll 0x01850000 0x8000 1.09.0001.3685 C:\Program Files\Mozilla Firefox\components\browserdirprovider.dll 0x01860000 0x24000 1.09.0001.3685 C:\Program Files\Mozilla Firefox\components\brwsrcmp.dll 0x14490000 0x8000 14.01.0000.0496 C:\Program Files\Mozilla Firefox\components\Scriptff.dll 0x01890000 0x9000 C:\Documents and Settings\pt830a\Application Data\Mozilla\Firefox\Profiles\rdczrt0a.default\extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}\platform\WINNT_x86-msvc\components\SSSLauncher.dll 0x018a0000 0x17000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll 0x14180000 0x13000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3.dll 0x14710000 0x48000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\mytilus3_worker.dll 0x76780000 0x9000 6.00.2900.2180 C:\WINDOWS\system32\SHFOLDER.dll 0x14100000 0x7000 14.01.0000.0515 C:\Program Files\McAfee\VirusScan Enterprise\RES0900\McShield.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x73ce0000 0x20000 5.01.2600.2777 C:\WINDOWS\system32\t2embed.dll 0x73dc0000 0x3000 5.01.2600.0000 C:\WINDOWS\system32\LZ32.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x03640000 0x26000 3.12.0004.0000 C:\Program Files\Mozilla Firefox\softokn3.dll 0x03670000 0x18000 3.12.0004.0000 C:\Program Files\Mozilla Firefox\nssdbm3.dll 0x03690000 0x41000 3.12.0004.0000 C:\Program Files\Mozilla Firefox\freebl3.dll 0x036e0000 0x52000 1.77.0000.0000 C:\Program Files\Mozilla Firefox\nssckbi.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\netapi32.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x7e1e0000 0xa2000 6.00.2900.3314 C:\WINDOWS\system32\urlmon.dll 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x73b30000 0x15000 5.01.2600.2709 C:\WINDOWS\system32\mscms.dll 0x7e290000 0x171000 6.00.2900.3314 C:\WINDOWS\system32\shdocvw.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x754d0000 0x80000 5.131.2600.2180 C:\WINDOWS\system32\CRYPTUI.dll 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x771b0000 0xaa000 6.00.2900.3314 C:\WINDOWS\system32\WININET.dll 0x605d0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\mslbui.dll 0x72d20000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wdmaud.drv 0x72d10000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77bd0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\midimap.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\appHelp.dll 0x77a20000 0x54000 5.01.2600.2180 C:\WINDOWS\System32\cscui.dll 0x76600000 0x1d000 5.01.2600.2180 C:\WINDOWS\System32\CSCDLL.dll 0x506a0000 0x8a000 7.02.6001.0788 C:\WINDOWS\system32\wuapi.dll 0x75150000 0x14000 5.01.2600.2180 C:\WINDOWS\system32\Cabinet.dll ------------------------------------------------------------------------------ mmc.exe pid: 5748 Command line: "C:\WINDOWS\system32\mmc.exe" "C:\Documents and Settings\pt830a\REMOTE.MSC" Base Size Version Path 0x01000000 0x15d000 5.02.3790.2612 C:\WINDOWS\system32\mmc.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77b40000 0x22000 5.01.2600.2180 C:\WINDOWS\system32\apphelp.dll 0x6c1b0000 0x4d000 5.01.2600.2180 C:\WINDOWS\system32\DUSER.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x72830000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42u.dll 0x47c30000 0x2c000 5.02.3790.2612 C:\WINDOWS\system32\mmcbase.DLL 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x76080000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\msvcp60.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x76380000 0x5000 5.01.2600.2180 C:\WINDOWS\system32\MSIMG32.dll 0x74c80000 0x2c000 4.02.5406.0000 C:\WINDOWS\system32\OLEACC.dll 0x7e1e0000 0xa2000 6.00.2900.3314 C:\WINDOWS\system32\urlmon.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x74720000 0x4b000 5.01.2600.2180 C:\WINDOWS\system32\MSCTF.dll 0x76fd0000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77050000 0xc5000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x47c60000 0x1d6000 5.02.3790.2612 C:\WINDOWS\System32\mmcndmgr.dll 0x20000000 0x2c5000 5.01.2600.2180 C:\WINDOWS\system32\xpsp2res.dll 0x77920000 0xf3000 5.01.2600.2180 C:\WINDOWS\system32\SETUPAPI.dll 0x75cf0000 0x91000 6.00.2900.2180 C:\WINDOWS\system32\mlang.dll 0x74980000 0x113000 8.90.1101.0000 C:\WINDOWS\system32\msxml3.dll 0x02000000 0x2a000 5.02.3790.1830 C:\WINDOWS\system32\mstsmmc.dll 0x77a80000 0x94000 5.131.2600.2180 C:\WINDOWS\system32\CRYPT32.dll 0x77b20000 0x12000 5.01.2600.2180 C:\WINDOWS\system32\MSASN1.dll 0x71ad0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\WSOCK32.dll 0x71ab0000 0x17000 5.01.2600.2180 C:\WINDOWS\system32\WS2_32.dll 0x71aa0000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WS2HELP.dll 0x605d0000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\mslbui.dll 0x01b50000 0x1f000 5.02.3790.1830 C:\WINDOWS\system32\mstsmhst.dll 0x6a600000 0xa4000 5.01.2600.2180 C:\WINDOWS\system32\mstscax.dll 0x73000000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\WINSPOOL.DRV 0x76390000 0x1d000 5.01.2600.2180 C:\WINDOWS\system32\IMM32.DLL 0x77fe0000 0x11000 5.01.2600.2180 C:\WINDOWS\system32\Secur32.dll 0x71a50000 0x3f000 5.01.2600.2180 C:\WINDOWS\System32\mswsock.dll 0x76f20000 0x27000 5.01.2600.2938 C:\WINDOWS\system32\DNSAPI.dll 0x76fb0000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\winrnr.dll 0x76f60000 0x2c000 5.01.2600.2180 C:\WINDOWS\system32\WLDAP32.dll 0x76fc0000 0x6000 5.01.2600.2938 C:\WINDOWS\system32\rasadhlp.dll 0x662b0000 0x58000 5.01.2600.2180 C:\WINDOWS\system32\hnetcfg.dll 0x71a90000 0x8000 5.01.2600.2180 C:\WINDOWS\System32\wshtcpip.dll 0x723d0000 0x1c000 5.01.2600.2180 C:\WINDOWS\system32\winscard.dll 0x76f50000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\WTSAPI32.dll 0x76360000 0x10000 5.01.2600.2180 C:\WINDOWS\system32\WINSTA.dll 0x5b860000 0x54000 5.01.2600.2976 C:\WINDOWS\system32\NETAPI32.dll 0x77690000 0x21000 5.01.2600.2180 C:\WINDOWS\system32\NTMARTA.DLL 0x71bf0000 0x13000 5.01.2600.2180 C:\WINDOWS\system32\SAMLIB.dll 0x75e90000 0xb0000 5.01.2600.3019 C:\WINDOWS\system32\SXS.DLL 0x76c30000 0x2e000 5.131.2600.2180 C:\WINDOWS\system32\WINTRUST.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\IMAGEHLP.dll 0x72d20000 0x9000 5.01.2600.2180 C:\WINDOWS\system32\wdmaud.drv 0x72d10000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msacm32.drv 0x77bd0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\midimap.dll 0x72cf0000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\msadp32.acm 0x58420000 0x7000 5.01.2600.2180 C:\WINDOWS\system32\imaadp32.acm 0x58300000 0x8000 5.01.2600.0000 C:\WINDOWS\system32\msgsm32.acm ------------------------------------------------------------------------------ cmd.exe pid: 5196 Command line: "C:\WINDOWS\system32\cmd.exe" Base Size Version Path 0x4ad00000 0x61000 5.01.2600.2180 C:\WINDOWS\system32\cmd.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x5cb70000 0x26000 5.01.2600.2180 C:\WINDOWS\system32\ShimEng.dll 0x6f880000 0x1ca000 5.01.2600.2180 C:\WINDOWS\AppPatch\AcGenral.DLL 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x76b40000 0x2d000 5.01.2600.2180 C:\WINDOWS\system32\WINMM.dll 0x774e0000 0x13d000 5.01.2600.2726 C:\WINDOWS\system32\ole32.dll 0x77120000 0x8b000 5.01.2600.3266 C:\WINDOWS\system32\OLEAUT32.dll 0x77be0000 0x15000 5.01.2600.2180 C:\WINDOWS\system32\MSACM32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x769c0000 0xb3000 5.01.2600.2180 C:\WINDOWS\system32\USERENV.dll 0x5ad70000 0x38000 6.00.2900.2180 C:\WINDOWS\system32\UxTheme.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll ------------------------------------------------------------------------------ Listdlls.exe pid: 2800 Command line: Listdlls.exe Base Size Version Path 0x00400000 0x29000 2.25.0000.0000 C:\BIN\SOURCE\MICROSOFT_TOOLS\Listdlls.exe 0x7c900000 0xb0000 5.01.2600.2180 C:\WINDOWS\system32\ntdll.dll 0x7c800000 0xf5000 5.01.2600.3119 C:\WINDOWS\system32\kernel32.dll 0x7e410000 0x90000 5.01.2600.3099 C:\WINDOWS\system32\USER32.dll 0x77f10000 0x47000 5.01.2600.3316 C:\WINDOWS\system32\GDI32.dll 0x77c00000 0x8000 5.01.2600.2180 C:\WINDOWS\system32\VERSION.dll 0x763b0000 0x49000 6.00.2900.2180 C:\WINDOWS\system32\comdlg32.dll 0x77f60000 0x76000 6.00.2900.3314 C:\WINDOWS\system32\SHLWAPI.dll 0x77dd0000 0x9b000 5.01.2600.2180 C:\WINDOWS\system32\ADVAPI32.dll 0x77e70000 0x91000 5.01.2600.2180 C:\WINDOWS\system32\RPCRT4.dll 0x77c10000 0x58000 7.00.2600.2180 C:\WINDOWS\system32\msvcrt.dll 0x5d090000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x7c9c0000 0x816000 6.00.2900.2951 C:\WINDOWS\system32\SHELL32.dll 0x76c90000 0x28000 5.01.2600.2180 C:\WINDOWS\system32\imagehlp.dll 0x773d0000 0x103000 6.00.2900.2982 C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll