All pastes #366855 Raw Edit

Someone

public text v1 · immutable
#366855 ·published 2007-02-21 23:25 UTC
rendered paste body

ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com

------------------------------------------------------------------------------
System pid: 4
Command line: <no command line>
------------------------------------------------------------------------------
smss.exe pid: 444
Command line: \SystemRoot\System32\smss.exe

  Base        Size      Version	        Path
  0x48580000  0xf000                    \SystemRoot\System32\smss.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
------------------------------------------------------------------------------
csrss.exe pid: 500
Command line: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

  Base        Size      Version	        Path
  0x4a680000  0x5000                    \??\C:\WINDOWS\system32\csrss.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x75b40000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\CSRSRV.dll
  0x75b50000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\basesrv.dll
  0x75b60000  0x4a000   5.01.2600.2751  C:\WINDOWS\system32\winsrv.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\KERNEL32.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\sxs.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
------------------------------------------------------------------------------
winlogon.exe pid: 524
Command line: winlogon.exe

  Base        Size      Version	        Path
  0x01000000  0x80000                   \??\C:\WINDOWS\system32\winlogon.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x776c0000  0x11000   5.01.2600.2622  C:\WINDOWS\system32\AUTHZ.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x75940000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\NDdeApi.dll
  0x75930000  0xa000    5.01.2600.2180  C:\WINDOWS\system32\PROFMAP.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x76bc0000  0xf000    5.01.2600.2180  C:\WINDOWS\system32\REGAPI.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x75970000  0xf7000   5.01.2600.2180  C:\WINDOWS\system32\MSGINA.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x74320000  0x3d000   3.525.1117.0000  C:\WINDOWS\system32\ODBC32.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x20000000  0x17000   3.525.1117.0000  C:\WINDOWS\system32\odbcint.dll
  0x776e0000  0x23000   6.00.2900.3051  C:\WINDOWS\system32\SHSVCS.dll
  0x76bb0000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\sfc.dll
  0x76c60000  0x2a000   5.01.2600.2180  C:\WINDOWS\system32\sfc_os.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\sxs.dll
  0x723d0000  0x1c000   5.01.2600.2180  C:\WINDOWS\system32\WINSCARD.DLL
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x76600000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\cscdll.dll
  0x75950000  0x1a000   5.01.2600.2180  C:\WINDOWS\system32\WlNotify.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x01210000  0xae000   1.05.0540.0000  C:\WINDOWS\system32\WgaLogon.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x76ee0000  0x3c000   5.01.2600.2180  C:\WINDOWS\system32\RASAPI32.dll
  0x76e90000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\rasman.dll
  0x76eb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\TAPI32.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x77a20000  0x54000   5.01.2600.2180  C:\WINDOWS\system32\cscui.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\system32\MPRAPI.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\adsldpc.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x01480000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
------------------------------------------------------------------------------
services.exe pid: 568
Command line: C:\WINDOWS\system32\services.exe

  Base        Size      Version	        Path
  0x01000000  0x1c000   5.01.2600.2180  C:\WINDOWS\system32\services.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x758e0000  0x50000   5.01.2600.2180  C:\WINDOWS\system32\SCESRV.dll
  0x776c0000  0x11000   5.01.2600.2622  C:\WINDOWS\system32\AUTHZ.dll
  0x7dba0000  0x21000   5.01.2600.2744  C:\WINDOWS\system32\umpnpmgr.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x5f770000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\NCObjAPI.DLL
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\secur32.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x77b70000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\eventlog.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wtsapi32.dll
------------------------------------------------------------------------------
lsass.exe pid: 580
Command line: C:\WINDOWS\system32\lsass.exe

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\lsass.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x75730000  0xb4000   5.01.2600.2976  C:\WINDOWS\system32\LSASRV.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x74440000  0x6a000   5.01.2600.2180  C:\WINDOWS\system32\SAMSRV.dll
  0x76790000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\cryptdll.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x20000000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\msprivs.dll
  0x71cf0000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x744b0000  0x65000   5.01.2600.2180  C:\WINDOWS\system32\netlogon.dll
  0x767c0000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\w32time.dll
  0x76080000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x767f0000  0x27000   5.01.2600.2180  C:\WINDOWS\system32\schannel.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x74380000  0xf000    5.01.2600.2874  C:\WINDOWS\system32\wdigest.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x74410000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\scecli.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x743e0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\ipsecsvc.dll
  0x776c0000  0x11000   5.01.2600.2622  C:\WINDOWS\system32\AUTHZ.dll
  0x75d90000  0xce000   5.01.2600.2180  C:\WINDOWS\system32\oakley.DLL
  0x74370000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\WINIPSEC.DLL
  0x743a0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\pstorsvc.dll
  0x743c0000  0x1b000   5.01.2600.2180  C:\WINDOWS\system32\psbase.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x68100000  0x24000   5.01.2600.2133  C:\WINDOWS\system32\dssenh.dll
------------------------------------------------------------------------------
svchost.exe pid: 736
Command line: C:\WINDOWS\system32\svchost -k DcomLaunch

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x76a80000  0x63000   5.01.2600.2726  c:\windows\system32\rpcss.dll
  0x77fe0000  0x11000   5.01.2600.2180  c:\windows\system32\Secur32.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x760f0000  0x53000   5.01.2600.2180  c:\windows\system32\termsrv.dll
  0x74f70000  0x6000    5.01.2600.2180  c:\windows\system32\ICAAPI.dll
  0x77920000  0xf3000   5.01.2600.2180  c:\windows\system32\SETUPAPI.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x776c0000  0x11000   5.01.2600.2622  c:\windows\system32\AUTHZ.dll
  0x75110000  0x1f000   5.01.2600.2180  c:\windows\system32\mstlsapi.dll
  0x77cc0000  0x32000   5.01.2600.2180  c:\windows\system32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  c:\windows\system32\adsldpc.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76b20000  0x11000   3.05.2284.0000  c:\windows\system32\ATL.DLL
  0x76bc0000  0xf000    5.01.2600.2180  C:\WINDOWS\system32\REGAPI.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
------------------------------------------------------------------------------
svchost.exe pid: 784
Command line: C:\WINDOWS\system32\svchost -k rpcss

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x76a80000  0x63000   5.01.2600.2726  c:\windows\system32\rpcss.dll
  0x77fe0000  0x11000   5.01.2600.2180  c:\windows\system32\Secur32.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
------------------------------------------------------------------------------
svchost.exe pid: 852
Command line: C:\WINDOWS\System32\svchost.exe -k netsvcs

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\System32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\System32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\System32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\System32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\System32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\System32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\System32\SAMLIB.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\System32\xpsp2res.dll
  0x776e0000  0x23000   6.00.2900.3051  c:\windows\system32\shsvcs.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\System32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x76d80000  0x1e000   5.01.2600.2912  c:\windows\system32\dhcpcsvc.dll
  0x76f20000  0x27000   5.01.2600.2938  c:\windows\system32\DNSAPI.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x76d60000  0x19000   5.01.2600.2912  c:\windows\system32\iphlpapi.dll
  0x77fe0000  0x11000   5.01.2600.2180  c:\windows\system32\Secur32.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\System32\rsaenh.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\System32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x77620000  0x6e000   5.01.2600.2180  c:\windows\system32\wzcsvc.dll
  0x76e80000  0xe000    5.01.2600.2180  c:\windows\system32\rtutils.dll
  0x76d30000  0x4000    5.01.2600.2180  c:\windows\system32\WMI.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76f50000  0x8000    5.01.2600.2180  c:\windows\system32\WTSAPI32.dll
  0x606b0000  0x10d000  5.01.2600.2780  c:\windows\system32\ESENT.dll
  0x76b20000  0x11000   3.05.2284.0000  c:\windows\system32\ATL.DLL
  0x76b70000  0x1f000   5.01.2600.2180  C:\WINDOWS\System32\rastls.dll
  0x754d0000  0x80000   5.131.2600.2180  C:\WINDOWS\system32\CRYPTUI.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x771b0000  0xcf000   7.00.6000.16414  C:\WINDOWS\system32\WININET.dll
  0x00890000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x6e850000  0x45000   7.00.6000.16414  C:\WINDOWS\system32\iertutil.dll
  0x76d40000  0x18000   5.01.2600.2180  C:\WINDOWS\System32\MPRAPI.dll
  0x77cc0000  0x32000   5.01.2600.2180  C:\WINDOWS\System32\ACTIVEDS.dll
  0x76e10000  0x25000   5.01.2600.2180  C:\WINDOWS\System32\adsldpc.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\System32\SETUPAPI.dll
  0x76ee0000  0x3c000   5.01.2600.2180  C:\WINDOWS\System32\RASAPI32.dll
  0x76e90000  0x12000   5.01.2600.2180  C:\WINDOWS\System32\rasman.dll
  0x76eb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\System32\TAPI32.dll
  0x767f0000  0x27000   5.01.2600.2180  C:\WINDOWS\System32\SCHANNEL.dll
  0x723d0000  0x1c000   5.01.2600.2180  C:\WINDOWS\System32\WinSCard.dll
  0x76bd0000  0x14000   5.01.2600.2180  C:\WINDOWS\System32\raschap.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\System32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\System32\COMRes.dll
  0x77300000  0x32000   5.01.2600.2180  c:\windows\system32\schedsvc.dll
  0x767a0000  0x13000   5.01.2600.2180  c:\windows\system32\NTDSAPI.dll
  0x74f50000  0x5000    6.00.2900.2180  C:\WINDOWS\System32\MSIDLE.DLL
  0x708b0000  0xd000    5.01.2600.2180  c:\windows\system32\audiosrv.dll
  0x76e40000  0x23000   5.01.2600.2976  c:\windows\system32\wkssvc.dll
  0x5b9f0000  0x64000   6.06.2600.2180  c:\windows\system32\qmgr.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x76780000  0x9000    6.00.2900.2180  c:\windows\system32\SHFOLDER.dll
  0x4d4f0000  0x58000   5.01.2600.2180  c:\windows\system32\WINHTTP.dll
  0x751a0000  0x2e000   5.01.2600.2180  c:\windows\system32\srsvc.dll
  0x74ad0000  0x8000    6.00.2900.2180  c:\windows\system32\POWRPROF.dll
  0x73d20000  0x8000    5.01.2600.2180  c:\windows\system32\seclogon.dll
  0x77d00000  0x33000   5.01.2600.2743  c:\windows\system32\netman.dll
  0x76400000  0x1a6000  5.01.2600.2180  c:\windows\system32\netshell.dll
  0x76c00000  0x2e000   5.01.2600.2180  c:\windows\system32\credui.dll
  0x73030000  0x10000   5.01.2600.2180  c:\windows\system32\WZCSAPI.DLL
  0x75090000  0x1a000   5.01.2600.2577  c:\windows\system32\srvsvc.dll
  0x688e0000  0x9000    5.01.2600.2180  c:\windows\system32\hidserv.dll
  0x688f0000  0x9000    5.01.2600.2180  c:\windows\system32\HID.DLL
  0x74f40000  0xc000    5.01.2600.2180  c:\windows\pchealth\helpctr\binaries\pchsvc.dll
  0x77710000  0x41000   2001.12.4414.0308  c:\windows\system32\es.dll
  0x74f80000  0x9000    5.01.2600.2180  c:\windows\system32\ersvc.dll
  0x76ce0000  0x12000   5.01.2600.2180  c:\windows\system32\cryptsvc.dll
  0x77b90000  0x32000   5.01.2600.2180  c:\windows\system32\certcli.dll
  0x75070000  0x19000   5.01.2600.2180  c:\windows\system32\trkwks.dll
  0x50000000  0x5000    5.04.3790.2180  c:\windows\system32\wuauserv.dll
  0x59490000  0x28000   5.01.2600.2180  c:\windows\system32\wbem\wmisvc.dll
  0x753e0000  0x6d000   5.01.2600.2180  C:\WINDOWS\system32\VSSAPI.DLL
  0x50040000  0x14a000  5.08.0000.2469  C:\WINDOWS\system32\wuaueng.dll
  0x6d690000  0x2e000   7.00.6000.16414  C:\WINDOWS\System32\ADVPACK.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\System32\WINSPOOL.DRV
  0x75150000  0x14000   5.01.2600.2180  C:\WINDOWS\System32\Cabinet.dll
  0x600a0000  0xb000    5.01.2600.2180  C:\WINDOWS\System32\mspatcha.dll
  0x76bb0000  0x5000    5.01.2600.2180  C:\WINDOWS\System32\sfc.dll
  0x76c60000  0x2a000   5.01.2600.2180  C:\WINDOWS\System32\sfc_os.dll
  0x767c0000  0x2c000   5.01.2600.2180  c:\windows\system32\w32time.dll
  0x76080000  0x65000   6.02.3104.0000  c:\windows\system32\MSVCP60.dll
  0x722d0000  0xd000    5.01.2600.2180  c:\windows\system32\sens.dll
  0x76da0000  0x15000   5.01.2600.2180  c:\windows\system32\browser.dll
  0x66460000  0x55000   5.01.2600.2180  c:\windows\system32\ipnathlp.dll
  0x776c0000  0x11000   5.01.2600.2622  c:\windows\system32\AUTHZ.dll
  0x4c0a0000  0x17000   5.01.2600.2180  c:\windows\system32\wscsvc.dll
  0x745e0000  0x2c6000  3.01.4000.2435  c:\windows\system32\msi.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\System32\SXS.DLL
  0x75290000  0x37000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemcomn.dll
  0x762c0000  0x85000   5.01.2600.2180  C:\WINDOWS\System32\Wbem\wbemcore.dll
  0x75310000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\Wbem\esscli.dll
  0x75690000  0x76000   5.01.2600.2180  C:\WINDOWS\System32\Wbem\FastProx.dll
  0x76620000  0x13c000  2001.12.4414.0308  C:\WINDOWS\system32\comsvcs.dll
  0x75130000  0x14000   2001.12.4414.0308  C:\WINDOWS\system32\colbact.DLL
  0x750f0000  0x13000   2001.12.4414.0311  C:\WINDOWS\system32\MTXCLU.DLL
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x76d10000  0x11000   5.01.2600.2180  C:\WINDOWS\System32\CLUSAPI.DLL
  0x750b0000  0x12000   5.01.2600.2180  C:\WINDOWS\System32\RESUTILS.DLL
  0x74ed0000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemsvc.dll
  0x733e0000  0x40000   5.01.2600.2716  c:\windows\system32\tapisrv.dll
  0x76bf0000  0xb000    5.01.2600.2180  c:\windows\system32\PSAPI.DLL
  0x75020000  0x1b000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmiutils.dll
  0x7df30000  0x31000   5.01.2600.2908  c:\windows\system32\rasmans.dll
  0x74370000  0xb000    5.01.2600.2180  c:\windows\system32\WINIPSEC.DLL
  0x755f0000  0x9a000   5.01.2600.2180  c:\windows\system32\netcfgx.dll
  0x75200000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\wbem\repdrvfs.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\System32\rasadhlp.dll
  0x597f0000  0x6d000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wmiprvsd.dll
  0x5f770000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\NCObjAPI.DLL
  0x75390000  0x46000   5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemess.dll
  0x75880000  0x11000   5.01.2600.2180  C:\WINDOWS\System32\rastapi.dll
  0x57cc0000  0x36000   5.01.2600.2180  C:\WINDOWS\System32\unimdm.tsp
  0x72000000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\uniplat.dll
  0x57d40000  0xb000    5.01.2600.2180  C:\WINDOWS\System32\kmddsp.tsp
  0x5f740000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\ncprov.dll
  0x57d20000  0x10000   5.01.2600.2180  C:\WINDOWS\System32\ndptsp.tsp
  0x57d50000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\ipconf.tsp
  0x57d70000  0x46000   5.01.2600.2180  C:\WINDOWS\System32\h323.tsp
  0x57d60000  0xa000    5.01.2600.2180  C:\WINDOWS\System32\hidphone.tsp
  0x72240000  0x35000   5.01.2600.2180  C:\WINDOWS\System32\rasppp.dll
  0x724b0000  0x6000    5.01.2600.2180  C:\WINDOWS\System32\ntlsapi.dll
  0x71cf0000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x76790000  0xc000    5.01.2600.2180  C:\WINDOWS\System32\cryptdll.dll
  0x76de0000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\upnp.dll
  0x74f00000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\SSDPAPI.dll
  0x768d0000  0xa4000   5.01.2600.2180  C:\WINDOWS\System32\RASDLG.dll
  0x74980000  0x10e000  8.70.1113.0000  C:\WINDOWS\system32\msxml3.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x68100000  0x24000   5.01.2600.2133  C:\WINDOWS\System32\dssenh.dll
------------------------------------------------------------------------------
svchost.exe pid: 900
Command line: C:\WINDOWS\system32\svchost.exe -k NetworkService

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x76770000  0xd000    5.01.2600.2180  c:\windows\system32\dnsrslvr.dll
  0x76f20000  0x27000   5.01.2600.2938  c:\windows\system32\DNSAPI.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x76d60000  0x19000   5.01.2600.2912  c:\windows\system32\iphlpapi.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
svchost.exe pid: 940
Command line: C:\WINDOWS\system32\svchost.exe -k LocalService

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x74c40000  0x6000    5.01.2600.2180  c:\windows\system32\lmhsvc.dll
  0x76d60000  0x19000   5.01.2600.2912  c:\windows\system32\iphlpapi.dll
  0x71ab0000  0x17000   5.01.2600.2180  c:\windows\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  c:\windows\system32\WS2HELP.dll
  0x5a6e0000  0x15000   5.01.2600.2821  c:\windows\system32\webclnt.dll
  0x771b0000  0xcf000   7.00.6000.16414  C:\WINDOWS\system32\WININET.dll
  0x006f0000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x6e850000  0x45000   7.00.6000.16414  C:\WINDOWS\system32\iertutil.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x70f80000  0x8000    5.01.2600.2180  c:\windows\system32\alrsvc.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x765e0000  0x14000   5.01.2600.2180  c:\windows\system32\ssdpsrv.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
vsmon.exe pid: 964
Command line: C:\WINDOWS\system32\ZoneLabs\vsmon.exe -service

------------------------------------------------------------------------------
spoolsv.exe pid: 1300
Command line: C:\WINDOWS\system32\spoolsv.exe

  Base        Size      Version	        Path
  0x01000000  0x10000   5.01.2600.2696  C:\WINDOWS\system32\spoolsv.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x742e0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\SPOOLSS.DLL
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x75bb0000  0x56000   5.01.2600.2180  C:\WINDOWS\system32\localspl.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x76c60000  0x2a000   5.01.2600.2180  C:\WINDOWS\system32\sfc_os.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\winspool.drv
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\netapi32.dll
  0x742a0000  0xe000    0.03.0000.0000  C:\WINDOWS\system32\cnbjmon.dll
  0x74280000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\pjlmon.dll
  0x72400000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\tcpmon.dll
  0x723f0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\usbmon.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x75c10000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\win32spl.dll
  0x71c80000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\NETRAP.dll
  0x767a0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x74300000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\inetpp.dll
------------------------------------------------------------------------------
nvsvc32.exe pid: 1516
Command line: C:\WINDOWS\system32\nvsvc32.exe

  Base        Size      Version	        Path
  0x00400000  0x2c000   6.14.0010.9371  C:\WINDOWS\system32\nvsvc32.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x74ad0000  0x8000    6.00.2900.2180  C:\WINDOWS\system32\POWRPROF.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wtsapi32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x007e0000  0x36000   6.14.0010.9371  C:\WINDOWS\system32\nvapi.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\secur32.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x77690000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\NTMARTA.DLL
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\SAMLIB.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
------------------------------------------------------------------------------
svchost.exe pid: 1544
Command line: C:\WINDOWS\system32\svchost.exe -k imgsvc

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x75aa0000  0x55000   5.01.2600.3051  c:\windows\system32\wiaservc.dll
  0x74ae0000  0x7000    5.01.2600.2180  c:\windows\system32\CFGMGR32.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\setupapi.dll
  0x73b30000  0x15000   5.01.2600.2709  c:\windows\system32\mscms.dll
  0x73000000  0x26000   5.01.2600.2180  c:\windows\system32\WINSPOOL.DRV
  0x76360000  0x10000   5.01.2600.2180  c:\windows\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x71d40000  0x1c000   6.00.2900.2180  C:\WINDOWS\system32\actxprxy.dll
  0x73ba0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\sti.dll
------------------------------------------------------------------------------
wdfmgr.exe pid: 1572
Command line: C:\WINDOWS\system32\wdfmgr.exe

  Base        Size      Version	        Path
  0x01000000  0xc000    5.02.3790.1230  C:\WINDOWS\system32\wdfmgr.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
------------------------------------------------------------------------------
alg.exe pid: 2040
Command line: C:\WINDOWS\System32\alg.exe

  Base        Size      Version	        Path
  0x01000000  0xd000    5.01.2600.2180  C:\WINDOWS\System32\alg.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\System32\ATL.DLL
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\System32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\WS2HELP.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\System32\MSWSOCK.DLL
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\System32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\System32\WINMM.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\System32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\System32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\System32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\System32\COMRes.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\System32\xpsp2res.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
explorer.exe pid: 1064
Command line: C:\WINDOWS\Explorer.EXE

  Base        Size      Version	        Path
  0x01000000  0xff000   6.00.2900.2180  C:\WINDOWS\Explorer.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x75f80000  0xfd000   6.00.2900.2995  C:\WINDOWS\system32\BROWSEUI.dll
  0x77760000  0x170000  6.00.2900.2987  C:\WINDOWS\system32\SHDOCVW.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x754d0000  0x80000   5.131.2600.2180  C:\WINDOWS\system32\CRYPTUI.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x771b0000  0xcf000   7.00.6000.16414  C:\WINDOWS\system32\WININET.dll
  0x00400000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x6e850000  0x45000   7.00.6000.16414  C:\WINDOWS\system32\iertutil.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\appHelp.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x77a20000  0x54000   5.01.2600.2180  C:\WINDOWS\System32\cscui.dll
  0x76600000  0x1d000   5.01.2600.2180  C:\WINDOWS\System32\CSCDLL.dll
  0x5ba60000  0x71000   6.00.2900.2180  C:\WINDOWS\system32\themeui.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x76380000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x61410000  0x124000  7.00.6000.16414  C:\WINDOWS\system32\urlmon.dll
  0x7e1e0000  0x5ca000  7.00.6000.16414  C:\WINDOWS\system32\ieframe.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x745e0000  0x2c6000  3.01.4000.2435  C:\WINDOWS\system32\msi.dll
  0x76980000  0x8000    5.01.2600.2751  C:\WINDOWS\system32\LINKINFO.dll
  0x76990000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\ntshrui.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x75cf0000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\MLANG.dll
  0x015f0000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x74b30000  0x3c000   7.00.6000.16414  C:\WINDOWS\system32\webcheck.dll
  0x76280000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\stobject.dll
  0x74af0000  0xa000    6.00.2900.2180  C:\WINDOWS\system32\BatMeter.dll
  0x74ad0000  0x8000    6.00.2900.2180  C:\WINDOWS\system32\POWRPROF.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
  0x76400000  0x1a6000  5.01.2600.2180  C:\WINDOWS\system32\NETSHELL.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x76c00000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\credui.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x10100000  0xe000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x10d00000  0xd000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x75f60000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\drprov.dll
  0x71c10000  0xe000    5.01.2600.2180  C:\WINDOWS\System32\ntlanman.dll
  0x71cd0000  0x17000   5.01.2600.2180  C:\WINDOWS\System32\NETUI0.dll
  0x71c90000  0x40000   5.01.2600.2180  C:\WINDOWS\System32\NETUI1.dll
  0x71c80000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\NETRAP.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\System32\SAMLIB.dll
  0x75f70000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\davclnt.dll
  0x01d40000  0x1b9000  2.00.0000.0008  C:\Program Files\Common Files\Ahead\Lib\NeroDigitalExt.dll
  0x7c140000  0x103000  7.10.3077.0000  C:\Program Files\Common Files\Ahead\Lib\MFC71.DLL
  0x10000000  0x1c000   7.00.0000.0000  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
  0x00e40000  0x12000   6.00.2900.2180  C:\WINDOWS\system32\browselc.dll
  0x02200000  0x3d000   5.02.0000.0003  C:\Program Files\GetRight\xx2gr.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x75970000  0xf7000   5.01.2600.2180  C:\WINDOWS\system32\MSGINA.dll
  0x74320000  0x3d000   3.525.1117.0000  C:\WINDOWS\system32\ODBC32.dll
  0x025c0000  0x17000   3.525.1117.0000  C:\WINDOWS\system32\odbcint.dll
  0x6c1b0000  0x4d000   5.01.2600.2180  C:\WINDOWS\system32\DUSER.dll
  0x4ec50000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x73b30000  0x15000   5.01.2600.2709  C:\WINDOWS\system32\mscms.dll
  0x086d0000  0x247000  10.00.0000.4054  C:\WINDOWS\system32\wmvcore.dll
  0x070d0000  0x3a000   10.00.0000.3802  C:\WINDOWS\system32\WMASF.DLL
  0x736b0000  0x7000    6.05.2600.2180  C:\WINDOWS\system32\msdmo.dll
  0x58390000  0x8a000   1.09.0000.0305  C:\WINDOWS\system32\l3codeca.acm
  0x73760000  0x49000   5.03.2600.2180  C:\WINDOWS\system32\ddraw.dll
  0x73bc0000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\DCIMAN32.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wsock32.dll
  0x03c00000  0x2c5000  2.00.0004.3031  C:\Program Files\Common Files\Ahead\lib\AdvrCntr2.dll
  0x00e80000  0x14000   2.00.0000.0006  C:\Program Files\Nero\Nero 7\Nero BackItUp\NBShell.dll
  0x02280000  0x102000  7.10.3077.0000  C:\Program Files\Nero\Nero 7\Nero BackItUp\MFC71U.DLL
  0x16200000  0x6000    4.01.0000.0000  C:\PROGRA~1\WINZIP\WZSHLSTB.DLL
  0x023d0000  0x2c000                   C:\Program Files\WinRAR\rarext.dll
  0x00ea0000  0x19000   1.00.0201.0000  C:\WINDOWS\system32\CmdLineExt.dll
  0x085c0000  0x15000   10.00.0000.3802  C:\WINDOWS\system32\wmpshell.dll
  0x72410000  0x1a000   6.00.2900.2180  C:\WINDOWS\system32\mydocs.dll
  0x012f0000  0x12000   1.00.0002.0001  C:\Program Files\SmartFTP Client 2.0\smarthook.dll
------------------------------------------------------------------------------
zlclient.exe pid: 1512
Command line: "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" 

------------------------------------------------------------------------------
rundll32.exe pid: 1840
Command line: "C:\WINDOWS\system32\RUNDLL32.EXE" C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit

  Base        Size      Version	        Path
  0x01000000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\RUNDLL32.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x10000000  0x17000   6.14.0010.9371  C:\WINDOWS\system32\NvMcTray.dll
  0x009f0000  0x36000   6.14.0010.9371  C:\WINDOWS\system32\nvapi.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x10100000  0xe000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x10d00000  0xd000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
------------------------------------------------------------------------------
ctfmon.exe pid: 1852
Command line: "C:\WINDOWS\system32\ctfmon.exe" 

  Base        Size      Version	        Path
  0x00400000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\ctfmon.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x5fc10000  0x33000   5.01.2600.2180  C:\WINDOWS\system32\MSUTB.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x10100000  0xe000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x10d00000  0xd000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
------------------------------------------------------------------------------
SetPoint.exe pid: 1236
Command line: "C:\Program Files\Logitech\SetPoint\SetPoint.exe" 

  Base        Size      Version	        Path
  0x00400000  0x6e000   2.40.0849.0000  C:\Program Files\Logitech\SetPoint\SetPoint.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x10700000  0x19000   2.40.0849.0000  C:\Program Files\Logitech\SetPoint\KemUtil.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c250000  0x102000  7.10.3077.0000  C:\WINDOWS\system32\MFC71U.DLL
  0x00320000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x10f00000  0x9000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\SetPointCOM.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x10800000  0x24000   2.40.0849.0000  C:\Program Files\Logitech\SetPoint\kemutb.dll
  0x10e00000  0xf000    1.00.0000.0001  C:\Program Files\Logitech\SetPoint\KGame.dll
  0x10b00000  0x15000   2.40.0849.0000  C:\Program Files\Logitech\SetPoint\KemWnd.dll
  0x76380000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x4ec50000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x10d00000  0xd000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
  0x10900000  0x10000   2.40.0849.0000  C:\Program Files\Logitech\SetPoint\KemXML.dll
  0x10100000  0xe000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x10600000  0xb7000   2.40.0849.0000  C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x7c120000  0x19000   7.10.3077.0000  C:\WINDOWS\system32\ATL71.DLL
  0x10000000  0x33000   2.40.0849.0000  C:\Program Files\Common Files\Logitech\KHAL\KhalApi.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\netapi32.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\appHelp.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x6e850000  0x45000   7.00.6000.16414  C:\WINDOWS\system32\iertutil.dll
  0x61410000  0x124000  7.00.6000.16414  C:\WINDOWS\system32\urlmon.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x10a00000  0x1e000   2.40.0849.0000  C:\Program Files\Logitech\SetPoint\LCabHandler.dll
  0x10300000  0x7000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\KEMHook.dll
------------------------------------------------------------------------------
KHALMNPR.EXE pid: 820
Command line: KHALMNPR.EXE /API

  Base        Size      Version	        Path
  0x00400000  0xa000    2.40.0840.0000  C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x10000000  0x33000   2.40.0849.0000  C:\Program Files\Common Files\Logitech\KHAL\KHALAPI.DLL
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10d00000  0xd000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
  0x10100000  0xe000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wtsapi32.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x74ae0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\cfgmgr32.dll
  0x688f0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\hid.dll
  0x00e00000  0x11000   2.40.0849.0000  C:\Program Files\Common Files\Logitech\KHAL\KHALITCH.DLL
  0x00f40000  0x19000   2.40.0849.0000  C:\Program Files\Common Files\Logitech\KHAL\KHALMW.DLL
  0x00f70000  0x22000   2.40.0849.0000  C:\Program Files\Common Files\Logitech\KHAL\KHALHPP.DLL
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
------------------------------------------------------------------------------
aim.exe pid: 2720
Command line: "C:\Program Files\AIM\aim.exe" 

  Base        Size      Version	        Path
  0x00400000  0xf000    0.00.0000.0000  C:\Program Files\AIM\aim.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x20000000  0x19000                   C:\Program Files\AIM\AIM_xmlp.dll
  0x40000000  0x23000   3.06.0008.2277  C:\Program Files\AIM\Xprt.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x12180000  0x2e000   0.00.0000.0000  C:\Program Files\AIM\oscore.dll
  0x40040000  0x8000    3.06.0008.2277  C:\Program Files\AIM\Xpcs.dll
  0x40080000  0x6000    3.06.0008.2277  C:\Program Files\AIM\Xptl.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x1c000000  0x6000    0.00.0000.0000  C:\Program Files\AIM\idlemon.dll
  0x12000000  0x31000   2.05.0018.0000  C:\Program Files\AIM\ATE32.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.dll
  0x12300000  0x7000                    C:\Program Files\AIM\oscres.dll
  0x30000000  0x23000   5.00.0000.0000  C:\Program Files\AIM\DUNZIP32.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x7c000000  0x54000   7.00.9466.0000  C:\WINDOWS\system32\MSVCR70.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10d00000  0xd000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
  0x10100000  0xe000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x40240000  0x12000   3.06.0008.2277  C:\Program Files\AIM\CoolSocket.dll
  0x12980000  0x166000  0.00.0000.0000  C:\Program Files\AIM\aimres.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x40140000  0x1c000   3.06.0008.2277  C:\Program Files\AIM\CoolBucky.dll
  0x12880000  0x2f000   0.00.0000.0000  C:\Program Files\AIM\AimCoreSvcs.dll
  0x40100000  0x2d000   3.06.0008.2277  C:\Program Files\AIM\CoolBos.dll
  0x12900000  0x37000   0.00.0000.0000  C:\Program Files\AIM\AimSecondarySvcs.dll
  0x12200000  0x24000   0.00.0000.0000  C:\Program Files\AIM\oscarui.dll
  0x12280000  0x38000   0.00.0000.0000  C:\Program Files\AIM\WNDUTILS.dll
  0x12480000  0x19000                   C:\Program Files\AIM\AIMAX.dll
  0x11080000  0xc000    0.00.0000.0000  C:\Program Files\AIM\proto.ocm
  0x402c0000  0xf000    3.06.0008.2277  C:\Program Files\AIM\CoolHttp.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x11a80000  0xe000    0.00.0000.0000  C:\Program Files\AIM\startup.ocm
  0x76f50000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WTSAPI32.DLL
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x12800000  0x18000   0.00.0000.0000  C:\Program Files\AIM\aimapi.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x00c10000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x11280000  0x33000   0.00.0000.0000  C:\Program Files\AIM\buddyui.ocm
  0x11380000  0x3b000   0.00.0000.0000  C:\Program Files\AIM\icbmui.ocm
  0x10000000  0x2a000   1.00.0001.0001  C:\Program Files\AIM\rtvideo.dll
  0x11480000  0x21000   0.00.0000.0000  C:\Program Files\AIM\locateui.ocm
  0x11500000  0xa000    0.00.0000.0000  C:\Program Files\AIM\browse.ocm
  0x11b00000  0x1c000   0.00.0000.0000  C:\Program Files\AIM\chatui.ocm
  0x11f00000  0x17000   0.00.0000.0000  C:\Program Files\AIM\ticker.ocm
  0x12500000  0xf000    0.00.0000.0000  C:\Program Files\AIM\alertui.ocm
  0x76980000  0x8000    5.01.2600.2751  C:\WINDOWS\system32\LINKINFO.dll
  0x76990000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\ntshrui.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x11000000  0x6000    0.00.0000.0000  C:\Program Files\AIM\oscmain.ocm
  0x11680000  0x2e000   0.00.0000.0000  C:\Program Files\AIM\miscui.ocm
  0x11e00000  0x5000                    C:\Program Files\AIM\stats.ocm
  0x11100000  0x11000   0.00.0000.0000  C:\Program Files\AIM\osclogin.ocm
  0x11880000  0x8000    0.00.0000.0000  C:\Program Files\AIM\popup.ocm
  0x11d80000  0x14000   0.00.0000.0000  C:\Program Files\AIM\oscsrch.ocm
  0x11e80000  0xd000    0.00.0000.0000  C:\Program Files\AIM\rvapps.ocm
  0x12680000  0x13000   0.00.0000.0000  C:\Program Files\AIM\oscmail.ocm
  0x12600000  0x8000    0.00.0000.0000  C:\Program Files\AIM\NTP.ocm
  0x76ee0000  0x3c000   5.01.2600.2180  C:\WINDOWS\system32\RASAPI32.DLL
  0x76e90000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\rasman.dll
  0x76eb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\TAPI32.dll
  0x76e80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\rtutils.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\secur32.dll
  0x77c70000  0x23000   5.01.2600.2180  C:\WINDOWS\system32\msv1_0.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x12080000  0x20000   0.00.0000.0000  C:\Program Files\AIM\ateima32.dll
  0x40280000  0xe000    3.06.0008.2277  C:\Program Files\AIM\CoolSecNss.dll
  0x01240000  0x55000   3.09.0000.0000  C:\Program Files\AIM\nss3.dll
  0x012a0000  0x5b000   3.09.0000.0000  C:\Program Files\AIM\softokn3.dll
  0x01110000  0x7000    4.04.0001.0000  C:\Program Files\AIM\plc4.dll
  0x01300000  0x27000   4.04.0001.0000  C:\Program Files\AIM\nspr4.dll
  0x01330000  0x6000    4.04.0001.0000  C:\Program Files\AIM\plds4.dll
  0x01340000  0x1b000   3.09.0000.0000  C:\Program Files\AIM\ssl3.dll
  0x01360000  0x1a000   3.09.0000.0000  C:\Program Files\AIM\smime3.dll
  0x01480000  0x2b000                   C:\PROGRA~1\AIM\nssckbi.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x771b0000  0xcf000   7.00.6000.16414  C:\WINDOWS\system32\WININET.dll
  0x01d00000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x6e850000  0x45000   7.00.6000.16414  C:\WINDOWS\system32\iertutil.dll
  0x5b6f0000  0x5a000   5.01.2600.2180  C:\WINDOWS\system32\termmgr.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x74810000  0x16c000  6.05.2600.2749  C:\WINDOWS\system32\quartz.dll
  0x4d550000  0xe8000   5.02.4949.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Networking.DxmRtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\dxmrtp.dll
  0x75a70000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\MSVFW32.dll
  0x73f10000  0x5c000   5.03.2600.2180  C:\WINDOWS\system32\DSOUND.dll
  0x75f40000  0x11000   6.05.2600.2180  C:\WINDOWS\system32\devenum.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
  0x736b0000  0x7000    6.05.2600.2180  C:\WINDOWS\system32\msdmo.dll
  0x6c6d0000  0x12000   5.03.2600.2180  C:\WINDOWS\system32\dpnhupnp.dll
  0x0ffd0000  0x28000   5.01.2600.2161  C:\WINDOWS\system32\rsaenh.dll
  0x7e830000  0x36f000  7.00.6000.16414  C:\WINDOWS\system32\mshtml.dll
  0x746c0000  0x29000   3.10.0349.0000  C:\WINDOWS\system32\msls31.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x61410000  0x124000  7.00.6000.16414  C:\WINDOWS\system32\urlmon.dll
  0x746f0000  0x2a000   5.01.2600.2180  C:\WINDOWS\system32\msimtf.dll
  0x7e1e0000  0x5ca000  7.00.6000.16414  C:\WINDOWS\system32\ieframe.dll
  0x722b0000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\sensapi.dll
  0x12400000  0x3a000   1.00.0000.0001  C:\Program Files\AIM\inetsocket.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x63380000  0x78000   5.07.0000.5730  C:\WINDOWS\system32\jscript.dll
  0x73300000  0x65000   5.07.0000.5730  C:\WINDOWS\system32\vbscript.dll
  0x03500000  0x2ee000  9.00.0028.0000  C:\WINDOWS\system32\Macromed\Flash\Flash9b.ocx
  0x58760000  0x32000   7.00.5730.0011  C:\WINDOWS\system32\iepeers.dll
  0x75e90000  0xb0000   5.01.2600.3019  C:\WINDOWS\system32\SXS.DLL
  0x767f0000  0x27000   5.01.2600.2180  C:\WINDOWS\system32\schannel.dll
  0x75cf0000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\MLANG.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\appHelp.dll
------------------------------------------------------------------------------
mirc.exe pid: 3256
Command line: "C:\Program Files\mIRC\mirc.exe"

  Base        Size      Version	        Path
  0x00400000  0x244000  6.21.0000.0000  C:\Program Files\mIRC\mirc.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10d00000  0xd000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
  0x10100000  0xe000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x74e30000  0x6c000   5.30.0023.1228  C:\WINDOWS\system32\riched20.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x71190000  0xe000    2.00.0000.3422  C:\WINDOWS\msagent\agentmpx.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\netapi32.dll
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x61410000  0x124000  7.00.6000.16414  C:\WINDOWS\system32\urlmon.dll
  0x6e850000  0x45000   7.00.6000.16414  C:\WINDOWS\system32\iertutil.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
------------------------------------------------------------------------------
firefox.exe pid: 1912
Command line: "C:\PROGRA~1\MOZILL~1\FIREFOX.EXE" http://pastebin.ca

  Base        Size      Version	        Path
  0x00400000  0x75a000  1.08.20061.20418  C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x600d0000  0x71000   4.00.0000.0000  C:\PROGRA~1\MOZILL~1\js3250.dll
  0x601a0000  0x27000   4.06.0004.0000  C:\PROGRA~1\MOZILL~1\nspr4.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x71ad0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\WSOCK32.dll
  0x71ab0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\WS2_32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x71aa0000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\WS2HELP.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x60350000  0x6a000   1.08.20061.20418  C:\PROGRA~1\MOZILL~1\xpcom_core.dll
  0x60270000  0x7000    4.06.0004.0000  C:\PROGRA~1\MOZILL~1\plc4.dll
  0x60280000  0x6000    4.06.0004.0000  C:\PROGRA~1\MOZILL~1\plds4.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x602a0000  0x1a000   3.11.0004.0000  C:\PROGRA~1\MOZILL~1\smime3.dll
  0x601d0000  0x5b000   3.11.0004.0000  C:\PROGRA~1\MOZILL~1\nss3.dll
  0x602c0000  0x3f000   3.11.0004.0000  C:\PROGRA~1\MOZILL~1\softokn3.dll
  0x60300000  0x20000   3.11.0004.0000  C:\PROGRA~1\MOZILL~1\ssl3.dll
  0x60330000  0x14000   1.08.20061.20418  C:\PROGRA~1\MOZILL~1\xpcom_compat.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x73000000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\WINSPOOL.DRV
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10d00000  0xd000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
  0x10100000  0xe000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x77920000  0xf3000   5.01.2600.2180  C:\WINDOWS\system32\SETUPAPI.dll
  0x76fd0000  0x7f000   2001.12.4414.0308  C:\WINDOWS\system32\CLBCATQ.DLL
  0x77050000  0xc5000   2001.12.4414.0258  C:\WINDOWS\system32\COMRes.dll
  0x60040000  0xa000    1.08.20061.20418  C:\PROGRA~1\MOZILL~1\components\myspell.dll
  0x71a50000  0x3f000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x662b0000  0x58000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71a90000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76d60000  0x19000   5.01.2600.2912  C:\WINDOWS\system32\iphlpapi.dll
  0x60010000  0x12000   1.08.20061.20418  C:\PROGRA~1\MOZILL~1\components\jar50.dll
  0x10000000  0x6000    1.08.20061.20418  C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\qfaservices.dll
  0x01750000  0x25000   2.02.0000.0000  C:\Program Files\Mozilla Firefox\extensions\talkback@mozilla.org\components\FULLSOFT.DLL
  0x76f20000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x76fb0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\winrnr.dll
  0x76f60000  0x2c000   5.01.2600.2180  C:\WINDOWS\system32\WLDAP32.dll
  0x746f0000  0x2a000   5.01.2600.2180  C:\WINDOWS\system32\msimtf.dll
  0x20000000  0x2c5000  5.01.2600.2180  C:\WINDOWS\system32\xpsp2res.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\uxtheme.dll
  0x60090000  0x31000   3.11.0004.0000  C:\PROGRA~1\MOZILL~1\freebl3.dll
  0x60230000  0x3e000   1.62.0000.0000  C:\Program Files\Mozilla Firefox\nssckbi.dll
  0x60050000  0xe000    1.08.20061.20418  C:\PROGRA~1\MOZILL~1\components\spellchk.dll
  0x76380000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\msimg32.dll
  0x76fc0000  0x6000    5.01.2600.2938  C:\WINDOWS\system32\rasadhlp.dll
  0x01310000  0x1c000   1.00.0000.0004  C:\PROGRA~1\MOZILL~1\plugins\npmozax.dll
  0x61410000  0x124000  7.00.6000.16414  C:\WINDOWS\system32\urlmon.dll
  0x6e850000  0x45000   7.00.6000.16414  C:\WINDOWS\system32\iertutil.dll
  0x771b0000  0xcf000   7.00.6000.16414  C:\WINDOWS\system32\WININET.dll
  0x01a50000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x77a80000  0x94000   5.131.2600.2180  C:\WINDOWS\system32\CRYPT32.dll
  0x77b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MSASN1.dll
  0x75cf0000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\mlang.dll
  0x76c30000  0x2e000   5.131.2600.2180  C:\WINDOWS\system32\WINTRUST.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\IMAGEHLP.dll
  0x72d20000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\wdmaud.drv
  0x72d10000  0x8000    5.01.2600.0000  C:\WINDOWS\system32\msacm32.drv
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77bd0000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\midimap.dll
  0x77fe0000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\Secur32.dll
  0x767f0000  0x27000   5.01.2600.2180  C:\WINDOWS\system32\schannel.dll
  0x5b860000  0x54000   5.01.2600.2976  C:\WINDOWS\system32\NETAPI32.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\appHelp.dll
  0x77a20000  0x54000   5.01.2600.2180  C:\WINDOWS\System32\cscui.dll
  0x76600000  0x1d000   5.01.2600.2180  C:\WINDOWS\System32\CSCDLL.dll
  0x75f80000  0xfd000   6.00.2900.2995  C:\WINDOWS\system32\browseui.dll
  0x76990000  0x25000   5.01.2600.2180  C:\WINDOWS\system32\ntshrui.dll
  0x76b20000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x77760000  0x170000  6.00.2900.2987  C:\WINDOWS\system32\shdocvw.dll
  0x754d0000  0x80000   5.131.2600.2180  C:\WINDOWS\system32\CRYPTUI.dll
  0x71b20000  0x12000   5.01.2600.2180  C:\WINDOWS\system32\MPR.dll
  0x75f60000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\drprov.dll
  0x71c10000  0xe000    5.01.2600.2180  C:\WINDOWS\System32\ntlanman.dll
  0x71cd0000  0x17000   5.01.2600.2180  C:\WINDOWS\System32\NETUI0.dll
  0x71c90000  0x40000   5.01.2600.2180  C:\WINDOWS\System32\NETUI1.dll
  0x71c80000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\NETRAP.dll
  0x71bf0000  0x13000   5.01.2600.2180  C:\WINDOWS\System32\SAMLIB.dll
  0x75f70000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\davclnt.dll
  0x75970000  0xf7000   5.01.2600.2180  C:\WINDOWS\system32\MSGINA.dll
  0x76360000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\WINSTA.dll
  0x74320000  0x3d000   3.525.1117.0000  C:\WINDOWS\system32\ODBC32.dll
  0x033f0000  0x17000   3.525.1117.0000  C:\WINDOWS\system32\odbcint.dll
  0x76980000  0x8000    5.01.2600.2751  C:\WINDOWS\system32\LINKINFO.dll
  0x7e1e0000  0x5ca000  7.00.6000.16414  C:\WINDOWS\system32\ieframe.dll
  0x76bf0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\PSAPI.DLL
  0x30000000  0x2c9000  9.00.0028.0000  C:\PROGRA~1\MOZILL~1\plugins\NPSWF32.dll
------------------------------------------------------------------------------
cmd.exe pid: 1624
Command line: "C:\WINDOWS\system32\cmd.exe" 

  Base        Size      Version	        Path
  0x4ad00000  0x61000   5.01.2600.2180  C:\WINDOWS\system32\cmd.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x5cb70000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x6f880000  0x1ca000  5.01.2600.2180  C:\WINDOWS\AppPatch\AcGenral.DLL
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x76b40000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\WINMM.dll
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.dll
  0x77be0000  0x15000   5.01.2600.2180  C:\WINDOWS\system32\MSACM32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x769c0000  0xb3000   5.01.2600.2180  C:\WINDOWS\system32\USERENV.dll
  0x5ad70000  0x38000   6.00.2900.2180  C:\WINDOWS\system32\UxTheme.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\comctl32.dll
  0x77b40000  0x22000   5.01.2600.2180  C:\WINDOWS\system32\Apphelp.dll
------------------------------------------------------------------------------
Listdlls.exe pid: 1748
Command line: listdlls  

  Base        Size      Version	        Path
  0x00400000  0x29000   2.25.0000.0000  C:\WINDOWS\Listdlls.exe
  0x7c900000  0xb0000   5.01.2600.2180  C:\WINDOWS\system32\ntdll.dll
  0x7c800000  0xf4000   5.01.2600.2945  C:\WINDOWS\system32\kernel32.dll
  0x77d40000  0x90000   5.01.2600.2622  C:\WINDOWS\system32\USER32.dll
  0x77f10000  0x47000   5.01.2600.2818  C:\WINDOWS\system32\GDI32.dll
  0x77c00000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\VERSION.dll
  0x763b0000  0x49000   6.00.2900.2180  C:\WINDOWS\system32\comdlg32.dll
  0x77f60000  0x76000   6.00.2900.2995  C:\WINDOWS\system32\SHLWAPI.dll
  0x77dd0000  0x9b000   5.01.2600.2180  C:\WINDOWS\system32\ADVAPI32.dll
  0x77e70000  0x91000   5.01.2600.2180  C:\WINDOWS\system32\RPCRT4.dll
  0x77c10000  0x58000   7.00.2600.2180  C:\WINDOWS\system32\msvcrt.dll
  0x5d090000  0x9a000   5.82.2900.2982  C:\WINDOWS\system32\COMCTL32.dll
  0x7c9c0000  0x815000  6.00.2900.3051  C:\WINDOWS\system32\SHELL32.dll
  0x76c90000  0x28000   5.01.2600.2180  C:\WINDOWS\system32\imagehlp.dll
  0x76390000  0x1d000   5.01.2600.2180  C:\WINDOWS\system32\IMM32.DLL
  0x773d0000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x732e0000  0x5000    5.01.2600.0000  C:\WINDOWS\system32\Riched32.dll
  0x74e30000  0x6c000   5.30.0023.1228  C:\WINDOWS\system32\RICHED20.dll
  0x74720000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10d00000  0xd000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
  0x10100000  0xe000    2.40.0849.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x755c0000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x774e0000  0x13d000  5.01.2600.2726  C:\WINDOWS\system32\ole32.dll
  0x74d90000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x746c0000  0x29000   3.10.0349.0000  C:\WINDOWS\system32\msls31.dll
  0x77120000  0x8c000   5.01.2600.2180  C:\WINDOWS\system32\OLEAUT32.DLL