Sie sind auf Seite 1von 64

System Information report written at: 03/20/13 09:25:45 System Name: GZ891RP9 [System Summary] Item Value OS Name

Microsoft Windows XP Professional Version 5.1.2600 Service Pack 3 Build 2600 OS Manufacturer Microsoft Corporation System Name GZ891RP9 System Manufacturer ECS System Model GF6100-M754 System Type X86-based PC Processor x86 Family 15 Model 44 Stepping 2 AuthenticAMD ~2209 Mhz BIOS Version/Date Phoenix Technologies, LTD 6.00 PG, 6/19/2008 SMBIOS Version 2.5 Windows Directory C:\WINDOWS System Directory C:\WINDOWS\system32 Boot Device \Device\HarddiskVolume1 Locale United States Hardware Abstraction Layer Version = "5.1.2600.5512 (xpsp.080413-2111)" User Name GZ891RP9\Walter Time Zone Eastern Daylight Time Total Physical Memory 2,048.00 MB Available Physical Memory 930.56 MB Total Virtual Memory 2.00 GB Available Virtual Memory 1.95 GB Page File Space 3.85 GB Page File C:\pagefile.sys [Hardware Resources]

[Conflicts/Sharing] Resource Device I/O Port 0x00000000-0x000003AF PCI bus I/O Port 0x00000000-0x000003AF Direct memory access controller I/O Port 0x000003C0-0x000003DF PCI standard PCI-to-PCI bridge I/O Port 0x000003C0-0x000003DF NVIDIA GeForce GT 520 IRQ 20 Standard OpenHCD USB Host Controller IRQ 20 NVIDIA Network Bus Enumerator Memory Address 0xD8000000-0xE7FFFFFF Memory Address 0xD8000000-0xE7FFFFFF PCI standard PCI-to-PCI bridge NVIDIA GeForce GT 520

I/O Port 0x00009000-0x0000FFFF PCI bus I/O Port 0x00009000-0x0000FFFF PCI standard PCI-to-PCI bridge Memory Address 0xFB000000-0xFCFFFFFF Memory Address 0xFB000000-0xFCFFFFFF Memory Address 0xFEFF0000-0xFEFF03FF Memory Address 0xFEFF0000-0xFEFF03FF PCI standard PCI-to-PCI bridge NVIDIA GeForce GT 520 High precision event timer System board

IRQ 16 NVIDIA GeForce GT 520 IRQ 16 Microsoft UAA Bus Driver for High Definition Audio

I/O Port 0x00001C00-0x00001C80 PCI bus I/O Port 0x00001C00-0x00001C80 NVIDIA nForce PCI System Management Memory Address 0xA0000-0xBFFFF PCI bus Memory Address 0xA0000-0xBFFFF PCI standard PCI-to-PCI bridge Memory Address 0xA0000-0xBFFFF NVIDIA GeForce GT 520 I/O Port 0x000003B0-0x000003DF PCI bus I/O Port 0x000003B0-0x000003DF PCI standard PCI-to-PCI bridge I/O Port 0x000003B0-0x000003DF NVIDIA GeForce GT 520 I/O Port 0x00000290-0x0000030F Motherboard resources I/O Port 0x00000290-0x0000030F Motherboard resources [DMA] Resource Channel 4 Channel 2 Device Status Direct memory access controller OK Standard floppy disk controller OK

[Forced Hardware] Device PNP Device ID [I/O] Resource Device 0x00000000-0x000003AF 0x00000000-0x000003AF 0x000003B0-0x000003DF 0x000003B0-0x000003DF 0x000003B0-0x000003DF 0x000003E0-0x00000CF7 0x00001C00-0x00001C80 0x00001C00-0x00001C80 0x00009000-0x0000FFFF 0x00009000-0x0000FFFF 0x00000A79-0x00000A79 0x00000279-0x00000279 0x00000274-0x00000277 0x00000010-0x0000001F 0x00000022-0x0000003F 0x00000044-0x0000005F 0x00000062-0x00000063 0x00000065-0x0000006F 0x00000074-0x0000007F 0x00000091-0x00000093 0x000000A2-0x000000BF 0x000000E0-0x000000EF 0x000004D0-0x000004D1 0x00000800-0x0000087F 0x00000290-0x0000030F 0x00000290-0x0000030F 0x00000020-0x00000021 0x000000A0-0x000000A1 0x00000080-0x00000090 0x00000094-0x0000009F 0x000000C0-0x000000DF 0x00000040-0x00000043 Status PCI bus OK Direct memory access controller OK PCI bus OK PCI standard PCI-to-PCI bridge OK NVIDIA GeForce GT 520 OK PCI bus OK PCI bus OK NVIDIA nForce PCI System Management PCI bus OK PCI standard PCI-to-PCI bridge OK ISAPNP Read Data Port OK ISAPNP Read Data Port OK ISAPNP Read Data Port OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Programmable interrupt controller Programmable interrupt controller Direct memory access controller OK Direct memory access controller OK Direct memory access controller OK System timer OK

OK

OK OK

0x00000070-0x00000073 0x00000061-0x00000061 0x000000F0-0x000000FF 0x000003F0-0x000003F5 0x000003F7-0x000003F7 0x000003F8-0x000003FF 0x00000378-0x0000037F 0x00000060-0x00000060 0x00000064-0x00000064 0x0000FC00-0x0000FC3F 0x0000F400-0x0000F43F 0x0000F000-0x0000F00F 0x000001F0-0x000001F7 0x000003F6-0x000003F6 0x00000170-0x00000177 0x00000376-0x00000376 0x0000EC00-0x0000EC07 0x000009F0-0x000009F7 0x00000BF0-0x00000BF3 0x00000970-0x00000977 0x00000B70-0x00000B73 0x0000D800-0x0000D80F 0x0000B000-0x0000BFFF 0x000003C0-0x000003DF 0x000003C0-0x000003DF 0x0000BC00-0x0000BC7F 0x0000A000-0x0000AFFF 0x00001000-0x0000107F 0x00001080-0x000010FF 0x00001400-0x0000147F 0x00001480-0x000014FF 0x00001800-0x0000187F 0x00001880-0x000018FF 0x00002000-0x0000207F 0x00002080-0x000020FF [IRQs]

System CMOS/real time clock OK System speaker OK Numeric data processor OK Standard floppy disk controller OK Standard floppy disk controller OK Communications Port (COM1) OK Printer Port (LPT1) OK PS/2 Compatible Mouse OK PS/2 Compatible Mouse OK NVIDIA nForce PCI System Management OK NVIDIA nForce PCI System Management OK Standard Dual Channel PCI IDE Controller Primary IDE Channel OK Primary IDE Channel OK Secondary IDE Channel OK Secondary IDE Channel OK NVIDIA Network Bus Enumerator OK NVIDIA MCP61 Serial ATA Controller OK NVIDIA MCP61 Serial ATA Controller OK NVIDIA MCP61 Serial ATA Controller OK NVIDIA MCP61 Serial ATA Controller OK NVIDIA MCP61 Serial ATA Controller OK PCI standard PCI-to-PCI bridge OK PCI standard PCI-to-PCI bridge OK NVIDIA GeForce GT 520 OK NVIDIA GeForce GT 520 OK PCI standard PCI-to-PCI bridge OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK Motherboard resources OK

OK

Resource Device Status IRQ 9 Microsoft ACPI-Compliant System OK IRQ 0 High precision event timer OK IRQ 8 High precision event timer OK IRQ 13 Numeric data processor OK IRQ 6 Standard floppy disk controller OK IRQ 4 Communications Port (COM1) OK IRQ 12 PS/2 Compatible Mouse OK IRQ 5 NVIDIA nForce PCI System Management OK IRQ 20 Standard OpenHCD USB Host Controller OK IRQ 20 NVIDIA Network Bus Enumerator OK IRQ 22 Standard Enhanced PCI to USB Host Controller OK IRQ 21 Microsoft UAA Bus Driver for High Definition Audio IRQ 14 Primary IDE Channel OK IRQ 23 NVIDIA MCP61 Serial ATA Controller OK IRQ 16 NVIDIA GeForce GT 520 OK IRQ 16 Microsoft UAA Bus Driver for High Definition Audio [Memory] Resource Device Status 0xA0000-0xBFFFF PCI bus OK

OK

OK

0xA0000-0xBFFFF PCI standard PCI-to-PCI bridge OK 0xA0000-0xBFFFF NVIDIA GeForce GT 520 OK 0x80000000-0xEFFFFFFF PCI bus OK 0xF4000000-0xFE02FFFF PCI bus OK 0xFEC80000-0xFECBFFFF PCI bus OK 0xFEFF0000-0xFEFF03FF High precision event timer OK 0xFEFF0000-0xFEFF03FF System board OK 0xFE02F000-0xFE02FFFF Standard OpenHCD USB Host Controller OK 0xFE02E000-0xFE02E0FF Standard Enhanced PCI to USB Host Controller OK 0xFE028000-0xFE02BFFF Microsoft UAA Bus Driver for High Definition Audio OK 0xFE02D000-0xFE02DFFF NVIDIA Network Bus Enumerator OK 0xFE02C000-0xFE02CFFF NVIDIA MCP61 Serial ATA Controller OK 0xFB000000-0xFCFFFFFF PCI standard PCI-to-PCI bridge OK 0xFB000000-0xFCFFFFFF NVIDIA GeForce GT 520 OK 0xD8000000-0xE7FFFFFF PCI standard PCI-to-PCI bridge OK 0xD8000000-0xE7FFFFFF NVIDIA GeForce GT 520 OK 0xE6000000-0xE7FFFFFF NVIDIA GeForce GT 520 OK 0xFCFFC000-0xFCFFFFFF Microsoft UAA Bus Driver for High Definition Audio OK 0xFDC00000-0xFDCFFFFF PCI standard PCI-to-PCI bridge OK 0xFDB00000-0xFDBFFFFF PCI standard PCI-to-PCI bridge OK 0xFDA00000-0xFDAFFFFF PCI standard PCI-to-PCI bridge OK 0xFD900000-0xFD9FFFFF PCI standard PCI-to-PCI bridge OK 0xF0000000-0xF3FFFFFF Motherboard resources OK 0xF0000-0xFFFFF System board OK 0x7FEE0000-0x7FEFFFFF System board OK 0xFFFF0000-0xFFFFFFFF System board OK 0x0000-0x9FFFF System board OK 0x100000-0x7FEDFFFF System board OK 0xFEC00000-0xFEC00FFF System board OK 0xFEE00000-0xFEEFFFFF System board OK 0xFEFFF000-0xFEFFFFFF System board OK 0xFFF80000-0xFFF80FFF System board OK 0xFFF90000-0xFFFBFFFF System board OK 0xFFFED000-0xFFFEFFFF System board OK [Components]

[Multimedia]

[Audio Codecs] CODEC Manufacturer Description Status File Version Size Creation Date c:\windows\system32\msaud32.acm Microsoft Corporation Windows Media Audio Code c OK C:\WINDOWS\system32\MSAUD32.ACM 8.00.00.4502 276.03 KB (282,6 54 bytes) 4/14/2008 12:40 AM c:\windows\system32\sl_anet.acm Sipro Lab Telecom Inc. Sipro Lab Telecom Audio Codec OK C:\WINDOWS\system32\SL_ANET.ACM 3.02 84.00 KB (86,016 bytes) 4/14/2008 12:40 AM c:\windows\system32\iac25_32.ax Intel Corporation Indeo audio software OK C:\WINDOWS\system32\IAC25_32.AX 2.05.53 195.00 KB (199,680 bytes) 4/14/2008 12:42 AM c:\windows\system32\l3codeca.acm Fraunhofer Institut Integrierte Schaltun gen IIS Fraunhofer IIS MPEG Layer-3 Codec OK C:\WINDOWS\system32\L3CO

DECA.ACM 1, 9, 0, 0306 300.06 KB (307,260 bytes) 4/14/2008 12:39 AM c:\windows\system32\msg723.acm Microsoft Corporation msg723.acm OK C:\WINDOWS\system32\MSG723.ACM 4.4.3400 116.00 KB (118,784 bytes) 3/10/2013 8:19 PM c:\windows\system32\ac3fil~1.acm Not Available AC3Filter ACM codec OK C:\WINDOWS\system32\AC3FILTER.ACM 2.5b 942.50 KB (965,120 bytes ) 3/10/2013 11:33 PM c:\windows\system32\tssoft32.acm DSP GROUP, INC. tssoft32.acm OK C:\WINDOWS\system32\TSSOFT32.ACM 1.01 8.00 KB (8,192 bytes) 8/23/200 1 7:00 AM c:\windows\system32\msg711.acm Microsoft Corporation msg711.acm OK C:\WINDOWS\system32\MSG711.ACM 5.1.2600.0 (xpclient.010817-1148) 9.00 KB (9,216 bytes) 8/23/2001 7:00 AM c:\windows\system32\msgsm32.acm Microsoft Corporation msgsm32.acm OK C:\WINDOWS\system32\MSGSM32.ACM 5.1.2600.0 (xpclient.010817-1148) 19.50 KB (19,968 bytes) 8/23/2001 7:00 AM c:\windows\system32\imaadp32.acm Microsoft Corporation imaadp32.acm OK C:\WINDOWS\system32\IMAADP32.ACM 5.1.2600.5512 (xpsp.080413-0845) 16.00 KB (16,384 bytes) 4/14/2008 12:39 AM c:\windows\system32\msadp32.acm Microsoft Corporation msadp32.acm OK C:\WINDOWS\system32\MSADP32.ACM 5.1.2600.5512 (xpsp.080413-0845) 14.50 KB (14,848 bytes) 4/14/2008 12:40 AM [Video Codecs] CODEC Manufacturer Description Status File Version Size Creation Date c:\windows\system32\vp6vfw.dll On2.com vp6vfw.dll OK C:\WINDOWS\syste m32\VP6VFW.DLL 6,2,6,0 428.00 KB (438,272 bytes) 3/10/2013 9:29 PM c:\windows\system32\ir50_32.dll Intel Corporation Indeo video 5.10 OK C:\WINDOWS\system32\IR50_32.DLL R.5.10.15.2.55 737.50 KB (755,200 bytes) 4/14/2008 12:41 AM c:\windows\system32\msh261.drv Microsoft Corporation msh261 OK C:\WINDO WS\system32\MSH261.DRV 5.1.2600.5512 184.00 KB (188,416 bytes) 3/10/201 3 8:18 PM c:\windows\system32\tsbyuv.dll Microsoft Corporation tsbyuv.dll OK C:\WINDOWS\system32\TSBYUV.DLL 5.1.2600.5908 (xpsp_sp3_gdr.091127-0541) 8.50 KB (8,704 bytes) 8/17/2001 6:36 PM c:\windows\system32\msyuv.dll Microsoft Corporation msyuv.dll OK C:\WINDOWS\system32\MSYUV.DLL 5.3.2600.5908 (xpsp_sp3_gdr.091127-0541) 17.50 KB (17,920 bytes) 4/14/2008 1:42 AM c:\windows\system32\msvidc32.dll Microsoft Corporation msvidc32.dll OK C:\WINDOWS\system32\MSVIDC32.DLL 5.1.2600.5908 (xpsp_sp3_gdr.0911 27-0541) 28.00 KB (28,672 bytes) 8/23/2001 7:00 AM c:\windows\system32\iccvid.dll Radius Inc. iccvid.dll OK C:\WINDO WS\system32\ICCVID.DLL 1.10.0.11 78.50 KB (80,384 bytes) 4/14/2008 12:41 AM c:\windows\system32\msh263.drv Microsoft Corporation msh263 OK C:\WINDO WS\system32\MSH263.DRV 5.1.2600.5512 288.00 KB (294,912 bytes) 4/14/200 8 1:42 AM c:\windows\system32\iyuv_32.dll Microsoft Corporation iyuv_32.dll OK C:\WINDOWS\system32\IYUV_32.DLL 5.1.2600.5908 (xpsp_sp3_gdr.091127-0541) 47.00 KB (48,128 bytes) 4/14/2008 1:41 AM c:\windows\system32\ir41_32.ax Intel Corporation ir41_32.ax OK C:\WINDOWS\system32\IR41_32.AX 4.51.16.03 828.50 KB (848,384 bytes) 4/14/2008 12:42 AM c:\windows\system32\msrle32.dll Microsoft Corporation msrle32.dll OK C:\WINDOWS\system32\MSRLE32.DLL 5.1.2600.5908 (xpsp_sp3_gdr.091127-0541) 11.00 KB (11,264 bytes) 4/14/2008 12:42 AM

c:\windows\system32\ir32_32.dll Intel(R) Corporation ir32_32.dll OK C:\WINDOWS\system32\IR32_32.DLL Not Available 194.50 KB (199,168 bytes) 8/23/2001 7:00 AM [CD-ROM] Item Value Drive D: Description CD-ROM Drive Media Loaded No Media Type CD-ROM Name LITE-ON DVDRW SOHW-1693S Manufacturer (Standard CD-ROM drives) Status OK Transfer Rate Not Available SCSI Target ID 0 PNP Device ID IDE\CDROMLITE-ON_DVDRW_SOHW-1693S________________KS0B____\5&2A1E 388B&0&0.0.0 Driver c:\windows\system32\drivers\cdrom.sys (5.1.2600.5512 (xpsp.080413-2108), 61.50 KB (62,976 bytes), 4/13/2008 7:10 PM) [Sound Device] Item Value Name USB Audio Device Manufacturer (Generic USB Audio) Status OK PNP Device ID USB\VID_0471&PID_082F&MI_00\7&1C10DA88&0&0000 Driver c:\windows\system32\drivers\usbaudio.sys (5.1.2600.5512 (xpsp.080413-210 8), 58.63 KB (60,032 bytes), 3/11/2013 12:47 PM) Name Realtek High Definition Audio Manufacturer Realtek Status OK PNP Device ID HDAUDIO\FUNC_01&VEN_10EC&DEV_0662&SUBSYS_10192151&REV_1001\4&385 A275D&0&0001 Driver c:\windows\system32\drivers\rtkhdaud.sys (5.10.0.5618 built by: WinDDK, 4.52 MB (4,739,072 bytes), 3/11/2013 10:20 PM) Name NVIDIA High Definition Audio Manufacturer NVIDIA Status OK PNP Device ID HDAUDIO\FUNC_01&VEN_10DE&DEV_001C&SUBSYS_00000000&REV_1001\5&D97 A0CC&0&0001 Driver c:\windows\system32\drivers\nvhda32.sys (1.2.24.0 built by: WinDDK, 116. 85 KB (119,656 bytes), 3/10/2013 8:28 PM) [Display] Item Value Name NVIDIA GeForce GT 520 PNP Device ID PCI\VEN_10DE&DEV_1040&SUBSYS_00000000&REV_A1\4&228469D0&0&0048 Adapter Type GeForce GT 520, NVIDIA compatible Adapter Description NVIDIA GeForce GT 520 Adapter RAM 1.00 GB (1,073,741,824 bytes) Installed Drivers nv4_disp.dll Driver Version 6.14.12.8558 INF File oem11.inf (Section005 section) Color Planes 1 Color Table Entries 4294967296

Resolution 1024 x 768 x 60 hertz Bits/Pixel 32 Memory Address 0xFB000000-0xFCFFFFFF Memory Address 0xD8000000-0xE7FFFFFF Memory Address 0xE6000000-0xE7FFFFFF I/O Port 0x0000BC00-0x0000BC7F IRQ Channel IRQ 16 I/O Port 0x000003B0-0x000003DF I/O Port 0x000003C0-0x000003DF Memory Address 0xA0000-0xBFFFF Driver c:\windows\system32\drivers\nv4_mini.sys (6.14.12.8558, 12.20 MB (12,791 ,488 bytes), 3/10/2013 8:27 PM) [Infrared] Item [Input] Value

[Keyboard] Item Value Description USB Human Interface Device Name Enhanced (101- or 102-key) Layout 00000409 PNP Device ID USB\VID_046D&PID_C31C&MI_00\6&237324B8&0&0000 Number of Function Keys 12 Driver c:\windows\system32\drivers\hidusb.sys (5.1.2600.5512 (xpsp.080413-2108) , 10.13 KB (10,368 bytes), 4/13/2008 7:15 PM) [Pointing Device] Item Value Hardware Type PS/2 Compatible Mouse Number of Buttons 3 Status OK PNP Device ID ACPI\PNP0F13\4&31AD995D&0 Power Management Supported No Double Click Threshold 6 Handedness Right Handed Operation I/O Port 0x00000060-0x00000060 I/O Port 0x00000064-0x00000064 IRQ Channel IRQ 12 Driver c:\windows\system32\drivers\i8042prt.sys (5.1.2600.5512 (xpsp.080413-210 8), 51.25 KB (52,480 bytes), 4/13/2008 7:48 PM) [Modem] Item Value

[Network]

[Adapter] Item Name Value [00000001] RAS Async Adapter

Adapter Type Not Available Product Type RAS Async Adapter Installed Yes PNP Device ID Not Available Last Reset 3/19/2013 5:13 PM Index 1 Service Name AsyncMac IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Name [00000002] WAN Miniport (L2TP) Adapter Type Not Available Product Type WAN Miniport (L2TP) Installed Yes PNP Device ID ROOT\MS_L2TPMINIPORT\0000 Last Reset 3/19/2013 5:13 PM Index 2 Service Name Rasl2tp IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\rasl2tp.sys (5.1.2600.5512 (xpsp.080413-0852 ), 50.13 KB (51,328 bytes), 4/13/2008 7:49 PM) Name [00000003] WAN Miniport (PPTP) Adapter Type Wide Area Network (WAN) Product Type WAN Miniport (PPTP) Installed Yes PNP Device ID ROOT\MS_PPTPMINIPORT\0000 Last Reset 3/19/2013 5:13 PM Index 3 Service Name PptpMiniport IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address 50:50:54:50:30:30 Driver c:\windows\system32\drivers\raspptp.sys (5.1.2600.5512 (xpsp.080413-0852 ), 47.25 KB (48,384 bytes), 4/13/2008 7:49 PM) Name [00000004] WAN Miniport (PPPOE) Adapter Type Wide Area Network (WAN) Product Type WAN Miniport (PPPOE) Installed Yes PNP Device ID ROOT\MS_PPPOEMINIPORT\0000 Last Reset 3/19/2013 5:13 PM

Index 4 Service Name RasPppoe IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address 33:50:6F:45:30:30 Driver c:\windows\system32\drivers\raspppoe.sys (5.1.2600.5512 (xpsp.080413-085 2), 40.50 KB (41,472 bytes), 4/13/2008 7:27 PM) Name [00000005] Direct Parallel Adapter Type Not Available Product Type Direct Parallel Installed Yes PNP Device ID ROOT\MS_PTIMINIPORT\0000 Last Reset 3/19/2013 5:13 PM Index 5 Service Name Raspti IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\raspti.sys (5.1.2600.0 (xpclient.010817-1148 ), 16.13 KB (16,512 bytes), 8/23/2001 7:00 AM) Name [00000006] WAN Miniport (IP) Adapter Type Not Available Product Type WAN Miniport (IP) Installed Yes PNP Device ID ROOT\MS_NDISWANIP\0000 Last Reset 3/19/2013 5:13 PM Index 6 Service Name NdisWan IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\ndiswan.sys (5.1.2600.5512 (xpsp.080413-0852 ), 89.38 KB (91,520 bytes), 4/13/2008 7:50 PM) Name [00000007] Packet Scheduler Miniport Adapter Type Ethernet 802.3 Product Type Packet Scheduler Miniport Installed Yes PNP Device ID ROOT\MS_PSCHEDMP\0000 Last Reset 3/19/2013 5:13 PM Index 7 Service Name IP Address Not Available

IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address 52:96:20:52:41:53 Driver c:\windows\system32\drivers\psched.sys (5.1.2600.5512 (xpsp.080413-0852) , 67.50 KB (69,120 bytes), 4/13/2008 7:26 PM) Name [00000008] NVIDIA nForce Networking Controller Adapter Type Ethernet 802.3 Product Type NVIDIA nForce Networking Controller Installed Yes PNP Device ID {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\NVNET_DEV03EF\4&195A0546& 0&00 Last Reset 3/19/2013 5:13 PM Index 8 Service Name NVENETFD IP Address 192.168.0.100 IP Subnet 255.255.255.0 Default IP Gateway 192.168.0.1 DHCP Enabled Yes DHCP Server 192.168.0.1 DHCP Lease Expires 3/20/2013 10:44 PM DHCP Lease Obtained 3/19/2013 10:44 PM MAC Address 00:1E:90:FB:F7:CF Driver c:\windows\system32\drivers\nvenetfd.sys (1.00.03.06548, 57.00 KB (58,36 8 bytes), 11/27/2006 4:33 PM) Name [00000009] Packet Scheduler Miniport Adapter Type Ethernet 802.3 Product Type Packet Scheduler Miniport Installed Yes PNP Device ID ROOT\MS_PSCHEDMP\0001 Last Reset 3/19/2013 5:13 PM Index 9 Service Name IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available DHCP Enabled No DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address 00:1E:90:FB:F7:CF Driver c:\windows\system32\drivers\psched.sys (5.1.2600.5512 (xpsp.080413-0852) , 67.50 KB (69,120 bytes), 4/13/2008 7:26 PM) Name [00000010] Hamachi Network Interface Adapter Type Not Available Product Type Hamachi Network Interface Installed Yes PNP Device ID ROOT\NET\0000 Last Reset 3/19/2013 5:13 PM Index 10 Service Name hamachi IP Address Not Available IP Subnet Not Available Default IP Gateway Not Available

DHCP Enabled Yes DHCP Server Not Available DHCP Lease Expires Not Available DHCP Lease Obtained Not Available MAC Address Not Available Driver c:\windows\system32\drivers\hamachi.sys (6.0.2.2, 24.69 KB (25,280 bytes ), 3/10/2013 10:31 PM) [Protocol] Item Value Name MSAFD Tcpip [TCP/IP] Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 16 bytes Maximum Message Size 0 bytes Message Oriented No Minimum Address Size 16 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data Yes Supports Graceful Closing Yes Supports Guaranteed Bandwidth Yes Supports Multicasting No Name MSAFD Tcpip [UDP/IP] Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 16 bytes Maximum Message Size 63.93 KB (65,467 bytes) Message Oriented Yes Minimum Address Size 16 bytes Pseudo Stream Oriented No Supports Broadcasting Yes Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth Yes Supports Multicasting Yes Name RSVP UDP Service Provider Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 16 bytes Maximum Message Size 63.93 KB (65,467 bytes) Message Oriented Yes Minimum Address Size 16 bytes Pseudo Stream Oriented No Supports Broadcasting Yes Supports Connect Data No Supports Disconnect Data No Supports Encryption Yes

Supports Supports Supports Supports

Expedited Data No Graceful Closing Guaranteed Bandwidth Multicasting Yes

No Yes

Name RSVP TCP Service Provider Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 16 bytes Maximum Message Size 0 bytes Message Oriented No Minimum Address Size 16 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption Yes Supports Expedited Data Yes Supports Graceful Closing Yes Supports Guaranteed Bandwidth Yes Supports Multicasting No Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{7DEFF4C2-916D-449D-907D-A9FC532A1840 }] SEQPACKET 0 Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 20 bytes Maximum Message Size 62.50 KB (64,000 bytes) Message Oriented Yes Minimum Address Size 20 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth Yes Supports Multicasting No Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{7DEFF4C2-916D-449D-907D-A9FC532A1840 }] DATAGRAM 0 Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 20 bytes Maximum Message Size 62.50 KB (64,000 bytes) Message Oriented Yes Minimum Address Size 20 bytes Pseudo Stream Oriented No Supports Broadcasting Yes Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth Yes Supports Multicasting No

Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{BCDAF74D-D108-4224-9980-0AF5CCC68FD6 }] SEQPACKET 1 Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 20 bytes Maximum Message Size 62.50 KB (64,000 bytes) Message Oriented Yes Minimum Address Size 20 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth Yes Supports Multicasting No Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{BCDAF74D-D108-4224-9980-0AF5CCC68FD6 }] DATAGRAM 1 Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 20 bytes Maximum Message Size 62.50 KB (64,000 bytes) Message Oriented Yes Minimum Address Size 20 bytes Pseudo Stream Oriented No Supports Broadcasting Yes Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth Yes Supports Multicasting No Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{EEEE08DC-9EE5-4898-BE04-151050D0D5BB }] SEQPACKET 2 Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 20 bytes Maximum Message Size 62.50 KB (64,000 bytes) Message Oriented Yes Minimum Address Size 20 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth Yes Supports Multicasting No Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{EEEE08DC-9EE5-4898-BE04-151050D0D5BB }] DATAGRAM 2

Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 20 bytes Maximum Message Size 62.50 KB (64,000 bytes) Message Oriented Yes Minimum Address Size 20 bytes Pseudo Stream Oriented No Supports Broadcasting Yes Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth Yes Supports Multicasting No Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{BEF1485E-5B47-49BE-B164-F0C05C8CEC9D }] SEQPACKET 3 Connectionless Service No Guarantees Delivery Yes Guarantees Sequencing Yes Maximum Address Size 20 bytes Maximum Message Size 62.50 KB (64,000 bytes) Message Oriented Yes Minimum Address Size 20 bytes Pseudo Stream Oriented No Supports Broadcasting No Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth Yes Supports Multicasting No Name MSAFD NetBIOS [\Device\NetBT_Tcpip_{BEF1485E-5B47-49BE-B164-F0C05C8CEC9D }] DATAGRAM 3 Connectionless Service Yes Guarantees Delivery No Guarantees Sequencing No Maximum Address Size 20 bytes Maximum Message Size 62.50 KB (64,000 bytes) Message Oriented Yes Minimum Address Size 20 bytes Pseudo Stream Oriented No Supports Broadcasting Yes Supports Connect Data No Supports Disconnect Data No Supports Encryption No Supports Expedited Data No Supports Graceful Closing No Supports Guaranteed Bandwidth Yes Supports Multicasting No [WinSock] Item File Size Value c:\windows\system32\winsock.dll 2.80 KB (2,864 bytes)

Version 3.10 File c:\windows\system32\wsock32.dll Size 22.00 KB (22,528 bytes) Version 5.1.2600.5512 (xpsp.080413-0852) [Ports]

[Serial] Item Value Name Communications Port (COM1) Status OK PNP Device ID ACPI\PNP0501\1 Maximum Input Buffer Size 0 Maximum Output Buffer Size No Settable Baud Rate Yes Settable Data Bits Yes Settable Flow Control Yes Settable Parity Yes Settable Parity Check Yes Settable Stop Bits Yes Settable RLSD Yes Supports RLSD Yes Supports 16 Bit Mode No Supports Special Characters No Baud Rate 9600 Bits/Byte 8 Stop Bits 1 Parity None Busy No Abort Read/Write on Error No Binary Mode Enabled Yes Continue XMit on XOff No CTS Outflow Control No Discard NULL Bytes No DSR Outflow Control 0 DSR Sensitivity 0 DTR Flow Control Type Enable EOF Character 0 Error Replace Character 0 Error Replacement Enabled No Event Character 0 Parity Check Enabled No RTS Flow Control Type Enable XOff Character 19 XOffXMit Threshold 512 XOn Character 17 XOnXMit Threshold 2048 XOnXOff InFlow Control 0 XOnXOff OutFlow Control 0 I/O Port 0x000003F8-0x000003FF IRQ Channel IRQ 4 Driver c:\windows\system32\drivers\serial.sys (5.1.2600.5512 (xpsp.080413-2108) , 63.00 KB (64,512 bytes), 4/13/2008 7:45 PM) [Parallel]

Item Value Name LPT1 PNP Device ID ACPI\PNP0400\1 I/O Port 0x00000378-0x0000037F Driver c:\windows\system32\drivers\parport.sys (5.1.2600.5512 (xpsp.080413-2108 ), 78.25 KB (80,128 bytes), 4/13/2008 8:10 PM) [Storage]

[Drives] Item Value Drive C: Description Local Fixed Disk Compressed No File System NTFS Size 111.78 GB (120,023,252,992 bytes) Free Space 94.61 GB (101,581,488,128 bytes) Volume Name Barracuda I Volume Serial Number 0862875E Drive D: Description CD-ROM Disc

Drive E: Description Local Fixed Disk Compressed No File System NTFS Size 698.64 GB (750,154,412,032 bytes) Free Space 643.66 GB (691,119,497,216 bytes) Volume Name Barracuda II Volume Serial Number 87CA292A [Disks] Item Value Description Disk drive Manufacturer (Standard disk drives) Model ST3120827AS Bytes/Sector 512 Media Loaded Yes Media Type Fixed	hard disk media Partitions 1 SCSI Bus 0 SCSI Logical Unit 0 SCSI Port 2 SCSI Target ID 0 Sectors/Track 63 Size 111.79 GB (120,031,511,040 bytes) Total Cylinders 14,593 Total Sectors 234,436,545 Total Tracks 3,721,215 Tracks/Cylinder 255 Partition Disk #0, Partition #0 Partition Size 111.78 GB (120,023,253,504 bytes) Partition Starting Offset 32,256 bytes Description Disk drive

Manufacturer (Standard disk drives) Model ST3750528AS Bytes/Sector 512 Media Loaded Yes Media Type Fixed	hard disk media Partitions 1 SCSI Bus 0 SCSI Logical Unit 0 SCSI Port 2 SCSI Target ID 2 Sectors/Track 63 Size 698.64 GB (750,156,374,016 bytes) Total Cylinders 1,453,521 Total Sectors 1,465,149,168 Total Tracks 23,256,336 Tracks/Cylinder 16 Partition Disk #1, Partition #0 Partition Size 698.64 GB (750,154,416,128 bytes) Partition Starting Offset 1,048,576 bytes [SCSI] Item [IDE] Item Value Name Standard Dual Channel PCI IDE Controller Manufacturer (Standard IDE ATA/ATAPI controllers) Status OK PNP Device ID PCI\VEN_10DE&DEV_03EC&SUBSYS_21511019&REV_A2\3&2411E6FE&0&30 I/O Port 0x0000F000-0x0000F00F Driver c:\windows\system32\drivers\pciide.sys (5.1.2600.0 (XPClient.010817-1148 ), 3.25 KB (3,328 bytes), 8/23/2001 7:00 AM) Name Primary IDE Channel Manufacturer (Standard IDE ATA/ATAPI controllers) Status OK PNP Device ID PCIIDE\IDECHANNEL\4&158D6C7E&0&0 I/O Port 0x000001F0-0x000001F7 I/O Port 0x000003F6-0x000003F6 IRQ Channel IRQ 14 Driver c:\windows\system32\drivers\atapi.sys (5.1.2600.5512 (xpsp.080413-2108), 94.25 KB (96,512 bytes), 4/13/2008 7:10 PM) Name Secondary IDE Channel Manufacturer (Standard IDE ATA/ATAPI controllers) Status OK PNP Device ID PCIIDE\IDECHANNEL\4&158D6C7E&0&1 I/O Port 0x00000170-0x00000177 I/O Port 0x00000376-0x00000376 Driver c:\windows\system32\drivers\atapi.sys (5.1.2600.5512 (xpsp.080413-2108), 94.25 KB (96,512 bytes), 4/13/2008 7:10 PM) Name NVIDIA Manufacturer Status OK PNP Device ID I/O Port I/O Port MCP61 Serial ATA Controller NVIDIA Corporation PCI\VEN_10DE&DEV_03F6&SUBSYS_21511019&REV_A2\3&2411E6FE&0&40 0x000009F0-0x000009F7 0x00000BF0-0x00000BF3 Value

I/O Port 0x00000970-0x00000977 I/O Port 0x00000B70-0x00000B73 I/O Port 0x0000D800-0x0000D80F Memory Address 0xFE02C000-0xFE02CFFF IRQ Channel IRQ 23 Driver c:\windows\system32\drivers\nvata.sys (5.10.2600.0677 built by: WinDDK, 102.63 KB (105,088 bytes), 6/28/2006 6:38 PM) [Printing] Name Driver Port Name Microsoft XPS Document Writer [Problem Devices] Device PNP Device ID Error Code Hamachi Network Interface ROOT\NET\0000 [USB] Device PNP Device ID Standard OpenHCD USB Host Controller PCI\VEN_10DE&DEV_03F1&SUBSYS_21511019&RE V_A3\3&2411E6FE&0&10 USB Root Hub USB\ROOT_HUB\4&7C08A0A&0 USB Composite Device USB\VID_046D&PID_C31C\5&2628F3C5&0&4 USB Human Interface Device USB\VID_046D&PID_C31C&MI_00\6&237324B8&0&0000 HID Keyboard Device HID\VID_046D&PID_C31C&MI_00\7&1B61C0E9&0&0000 USB Human Interface Device USB\VID_046D&PID_C31C&MI_01\6&237324B8&0&0001 HID-compliant consumer control device HID\VID_046D&PID_C31C&MI_01&COL01\7&3325 4D2E&0&0000 HID-compliant device HID\VID_046D&PID_C31C&MI_01&COL02\7&33254D2E&0&0001 HID-compliant consumer control device HID\VID_046D&PID_C31C&MI_01&COL03\7&3325 4D2E&0&0002 USB Composite Device USB\VID_0471&PID_082F\USBGAP00000000000000000001871756C2 USB Audio Device USB\VID_0471&PID_082F&MI_00\7&1C10DA88&0&0000 USB Human Interface Device USB\VID_0471&PID_082F&MI_03\7&1C10DA88&0&0003 HID-compliant device HID\VID_0471&PID_082F&MI_03\8&2FFB8217&0&0000 Standard Enhanced PCI to USB Host Controller PCI\VEN_10DE&DEV_03F2&SUBSYS_215 11019&REV_A3\3&2411E6FE&0&11 USB Root Hub USB\ROOT_HUB20\4&2FFFCF6E&0 [Software Environment] This device is disabled. Server Name Microsoft XPS Document Writer XPSPort:

[System Drivers] Name Description File Type Started Start Mode State Status Error Control Accept Pause Accept Stop abiosdsk Abiosdsk Not Available Kernel Driver No Disabled Stopped OK Ignore No No abp480n5 abp480n5 Not Available Kernel Driver No Disabled Stopped OK Normal No No acpi Microsoft ACPI Driver c:\windows\system32\drivers\acpi.sys Kernel D river Yes Boot Running OK Normal No Yes acpiec ACPIEC c:\windows\system32\drivers\acpiec.sys Kernel Driver No Disabled Stopped OK Normal No No adpu160m adpu160m Not Available Kernel Driver No Disabled Stopped OK Normal No No aec Microsoft Kernel Acoustic Echo Canceller c:\windows\system32\driv

ers\aec.sys Kernel Driver No Manual Stopped OK Normal No No afd AFD c:\windows\system32\drivers\afd.sys Kernel Driver Yes System Running OK Normal No Yes aha154x Aha154x Not Available Kernel Driver No Disabled Stopped OK Normal No No aic78u2 aic78u2 Not Available Kernel Driver No Disabled Stopped OK Normal No No aic78xx aic78xx Not Available Kernel Driver No Disabled Stopped OK Normal No No aliide AliIde Not Available Kernel Driver No Disabled Stopped OK Normal No No amsint amsint Not Available Kernel Driver No Disabled Stopped OK Normal No No asc asc Not Available Kernel Driver No Disabled Stopped OK Normal No No asc3350p asc3350p Not Available Kernel Driver No Disabled Stopped OK Normal No No asc3550 asc3550 Not Available Kernel Driver No Disabled Stopped OK Normal No No asyncmac RAS Asynchronous Media Driver c:\windows\system32\drivers\asyn cmac.sys Kernel Driver No Manual Stopped OK Normal No No atapi Standard IDE/ESDI Hard Disk Controller c:\windows\system32\drivers\atap i.sys Kernel Driver Yes Boot Running OK Normal No Yes atdisk Atdisk Not Available Kernel Driver No Disabled Stopped OK Ignore No No atmarpc ATM ARP Client Protocol c:\windows\system32\drivers\atmarpc.sys Kernel D river No Manual Stopped OK Normal No No audstub Audio Stub Driver c:\windows\system32\drivers\audstub.sys Kernel D river Yes Manual Running OK Normal No Yes bantext Belarc SMBios Access c:\windows\system32\drivers\bantext.sys Kernel D river Yes System Running OK Normal No Yes beep Beep c:\windows\system32\drivers\beep.sys Kernel Driver Yes System Running OK Normal No Yes bhdrvx86 BHDrvx86 \??\c:\documents and settings\all users\applicat ion data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definition s\bashdefs\20130301.001\bhdrvx86.sys Kernel Driver Yes System Running OK Normal No Yes cbidf2k cbidf2k c:\windows\system32\drivers\cbidf2k.sys Kernel Driver No Disabled Stopped OK Normal No No ccset_n360 Norton Security Suite Settings Manager c:\windows\system32\driv ers\n360\1402000.013\ccsetx86.sys Kernel Driver Yes System Running OK Normal No Yes cd20xrnt cd20xrnt Not Available Kernel Driver No Disabled Stopped OK Normal No No cdaudio Cdaudio c:\windows\system32\drivers\cdaudio.sys Kernel Driver No System Stopped OK Ignore No No cdfs Cdfs c:\windows\system32\drivers\cdfs.sys File System Driver Yes Disabled Running OK Normal No Yes cdrom CD-ROM Driver c:\windows\system32\drivers\cdrom.sys Kernel Driver Yes System Running OK Normal No Yes changer Changer Not Available Kernel Driver No System Stopped OK Ignore No No cmdide CmdIde Not Available Kernel Driver No Disabled Stopped OK Normal No No cmudaxp ASUS Xonar DG Audio Interface c:\windows\system32\drivers\cmudaxp.sys Kernel Driver No Manual Stopped OK Normal No No cpqarray Cpqarray Not Available Kernel Driver No Disabled Stopped OK Normal No No

dac960nt dac960nt Not Available Kernel Driver No Disabled Stopped OK Normal No No disk Disk Driver c:\windows\system32\drivers\disk.sys Kernel Driver Yes Boot Running OK Normal No Yes dkrtwrt DKRtWrt c:\windows\system32\drivers\dkrtwrt.sys File System Driver Yes Manual Running OK Normal No Yes dmboot dmboot c:\windows\system32\drivers\dmboot.sys Kernel Driver No Disabled Stopped OK Normal No No dmio Logical Disk Manager Driver c:\windows\system32\drivers\dmio.sys Kernel Driver Yes Boot Running OK Normal No Yes dmload dmload c:\windows\system32\drivers\dmload.sys Kernel Driver Yes Boot Running OK Normal No Yes dmusic Microsoft Kernel DLS Syntheiszer c:\windows\system32\drivers\dmus ic.sys Kernel Driver No Manual Stopped OK Normal No No dpti2o dpti2o Not Available Kernel Driver No Disabled Stopped OK Normal No No drmkaud Microsoft Kernel DRM Audio Descrambler c:\windows\system32\drivers\drmk aud.sys Kernel Driver No Manual Stopped OK Normal No No ecsiodriver_1_1_0_0 ECSIoDriver_1_1_0_0 \??\d:\ecsiodriver.sys Kernel D river No Manual Stopped OK Normal No No eectrl Symantec Eraser Control driver \??\c:\program files\common files\symant ec shared\eengine\eectrl.sys Kernel Driver Yes System Running OK Normal No Yes eraserutilrebootdrv EraserUtilRebootDrv \??\c:\program files\common file s\symantec shared\eengine\eraserutilrebootdrv.sys Kernel Driver Yes Manual Running OK Normal No Yes fastfat Fastfat c:\windows\system32\drivers\fastfat.sys File System Driver No Disabled Stopped OK Normal No No fdc Floppy Disk Controller Driver c:\windows\system32\drivers\fdc.sys Kernel Driver Yes Manual Running OK Normal No Yes fips Fips c:\windows\system32\drivers\fips.sys Kernel Driver Yes System Running OK Normal No Yes flpydisk Flpydisk c:\windows\system32\drivers\flpydisk.sys Kernel Driver No System Stopped OK Ignore No No fltmgr FltMgr c:\windows\system32\drivers\fltmgr.sys File System Driver Yes Boot Running OK Normal No Yes ftdisk Volume Manager Driver c:\windows\system32\drivers\ftdisk.sys Kernel D river Yes Boot Running OK Normal No Yes gpc Generic Packet Classifier c:\windows\system32\drivers\msgpc.sys Kernel Driver Yes Manual Running OK Normal No Yes hamachi Hamachi Network Interface c:\windows\system32\drivers\hamachi.sys Kernel Driver No Manual Stopped OK Normal No No hdaudbus Microsoft UAA Bus Driver for High Definition Audio c:\windo ws\system32\drivers\hdaudbus.sys Kernel Driver Yes Manual Running OK Normal No Yes hidusb Microsoft HID Class Driver c:\windows\system32\drivers\hidusb.sys Kernel Driver Yes Manual Running OK Ignore No Yes hpn hpn Not Available Kernel Driver No Disabled Stopped OK Normal No No http HTTP c:\windows\system32\drivers\http.sys Kernel Driver Yes Manual Running OK Normal No Yes i2omgmt i2omgmt Not Available Kernel Driver No System Stopped OK Normal No No i2omp i2omp Not Available Kernel Driver No Disabled Stopped OK Normal No No i8042prt i8042 Keyboard and PS/2 Mouse Port Driver c:\windows\syste m32\drivers\i8042prt.sys Kernel Driver Yes System Running OK Normal No Yes idsxpx86 IDSxpx86 \??\c:\documents and settings\all users\applicat ion data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definition

s\ipsdefs\20130319.002\idsxpx86.sys Kernel Driver Yes Manual Running OK Normal No Yes imapi CD-Burning Filter Driver c:\windows\system32\drivers\imapi.sys Kernel Driver Yes System Running OK Normal No Yes ini910u ini910u Not Available Kernel Driver No Disabled Stopped OK Normal No No intcazaudaddservice Service for Realtek HD Audio (WDM) c:\windows\syste m32\drivers\rtkhdaud.sys Kernel Driver Yes Manual Running OK Normal No Yes intelide IntelIde Not Available Kernel Driver No Disabled Stopped OK Normal No No ip6fw IPv6 Windows Firewall Driver c:\windows\system32\drivers\ip6fw.sys Kernel Driver No Manual Stopped OK Normal No No ipfilterdriver IP Traffic Filter Driver c:\windows\system32\drivers\ipfl tdrv.sys Kernel Driver No Manual Stopped OK Normal No No ipinip IP in IP Tunnel Driver c:\windows\system32\drivers\ipinip.sys Kernel D river No Manual Stopped OK Normal No No ipnat IP Network Address Translator c:\windows\system32\drivers\ipnat.sys Kernel Driver Yes Manual Running OK Normal No Yes ipsec IPSEC driver c:\windows\system32\drivers\ipsec.sys Kernel Driver Yes System Running OK Normal No Yes irenum IR Enumerator Service c:\windows\system32\drivers\irenum.sys Kernel D river No Manual Stopped OK Normal No No isapnp PnP ISA/EISA Bus Driver c:\windows\system32\drivers\isapnp.sys Kernel D river Yes Boot Running OK Critical No Yes kbdclass Keyboard Class Driver c:\windows\system32\drivers\kbdclass.sys Kernel Driver Yes System Running OK Normal No Yes kbdhid Keyboard HID Driver c:\windows\system32\drivers\kbdhid.sys Kernel D river Yes System Running OK Ignore No Yes kmixer Microsoft Kernel Wave Audio Mixer c:\windows\system32\drivers\kmix er.sys Kernel Driver Yes Manual Running OK Normal No Yes ksecdd KSecDD c:\windows\system32\drivers\ksecdd.sys Kernel Driver Yes Boot Running OK Normal No Yes lbrtfdc lbrtfdc Not Available Kernel Driver No System Stopped OK Ignore No No mnmdd mnmdd c:\windows\system32\drivers\mnmdd.sys Kernel Driver Yes System Running OK Ignore No Yes modem Modem c:\windows\system32\drivers\modem.sys Kernel Driver No Manual Stopped OK Ignore No No mouclass Mouse Class Driver c:\windows\system32\drivers\mouclass.sys Kernel Driver Yes System Running OK Normal No Yes mouhid Mouse HID Driver c:\windows\system32\drivers\mouhid.sys Kernel D river No Manual Stopped OK Ignore No No mountmgr MountMgr c:\windows\system32\drivers\mountmgr.sys Kernel Driver Yes Boot Running OK Normal No Yes mraid35x mraid35x Not Available Kernel Driver No Disabled Stopped OK Normal No No mrxdav WebDav Client Redirector c:\windows\system32\drivers\mrxdav.sys File System Driver Yes Manual Running OK Normal No Yes mrxsmb MRXSMB c:\windows\system32\drivers\mrxsmb.sys File System Driver Yes System Running OK Normal No Yes msfs Msfs c:\windows\system32\drivers\msfs.sys File System Driver Yes System Running OK Normal No Yes mskssrv Microsoft Streaming Service Proxy c:\windows\system32\drivers\msks srv.sys Kernel Driver No Manual Stopped OK Normal No No mspclock Microsoft Streaming Clock Proxy c:\windows\system32\drivers\mspc lock.sys Kernel Driver No Manual Stopped OK Normal No No mspqm Microsoft Streaming Quality Manager Proxy c:\windows\system32\driv

ers\mspqm.sys Kernel Driver No Manual Stopped OK Normal No No mssmbios Microsoft System Management BIOS Driver c:\windows\system32\driv ers\mssmbios.sys Kernel Driver Yes Manual Running OK Normal No Yes mup Mup c:\windows\system32\drivers\mup.sys File System Driver Yes Boot Running OK Normal No Yes naveng NAVENG \??\c:\documents and settings\all users\application data\norton\ {0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definitions\virusdefs\2013 0319.025\naveng.sys Kernel Driver Yes Manual Running OK Normal No Yes navex15 NAVEX15 \??\c:\documents and settings\all users\application data\norton\ {0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definitions\virusdefs\2013 0319.025\navex15.sys Kernel Driver Yes Manual Running OK Normal No Yes ndis NDIS System Driver c:\windows\system32\drivers\ndis.sys Kernel D river Yes Boot Running OK Normal No Yes ndistapi Remote Access NDIS TAPI Driver c:\windows\system32\drivers\ndis tapi.sys Kernel Driver Yes Manual Running OK Normal No Yes ndisuio NDIS Usermode I/O Protocol c:\windows\system32\drivers\ndisuio.sys Kernel Driver Yes Manual Running OK Normal No Yes ndiswan Remote Access NDIS WAN Driver c:\windows\system32\drivers\ndiswan.sys Kernel Driver Yes Manual Running OK Normal No Yes ndproxy NDIS Proxy c:\windows\system32\drivers\ndproxy.sys Kernel Driver Yes Manual Running OK Normal No Yes netbios NetBIOS Interface c:\windows\system32\drivers\netbios.sys File Sys tem Driver Yes System Running OK Normal No Yes netbt NetBios over Tcpip c:\windows\system32\drivers\netbt.sys Kernel D river Yes System Running OK Normal No Yes npfs Npfs c:\windows\system32\drivers\npfs.sys File System Driver Yes System Running OK Normal No Yes ntfs Ntfs c:\windows\system32\drivers\ntfs.sys File System Driver Yes Disabled Running OK Normal No Yes null Null c:\windows\system32\drivers\null.sys Kernel Driver Yes System Running OK Normal No Yes nv nv c:\windows\system32\drivers\nv4_mini.sys Kernel Driver Yes Manual Running OK Ignore No Yes nvata nvata c:\windows\system32\drivers\nvata.sys Kernel Driver Yes Boot Running OK Critical No Yes nvenetfd NVIDIA nForce Networking Controller Driver c:\windows\syste m32\drivers\nvenetfd.sys Kernel Driver Yes Manual Running OK Normal No Yes nvhda Service for NVIDIA High Definition Audio Driver c:\windows\system32\driv ers\nvhda32.sys Kernel Driver Yes Manual Running OK Normal No Yes nvnetbus NVIDIA Network Bus Enumerator c:\windows\system32\drivers\nvne tbus.sys Kernel Driver Yes Manual Running OK Normal No Yes nwlnkflt IPX Traffic Filter Driver c:\windows\system32\drivers\nwln kflt.sys Kernel Driver No Manual Stopped OK Normal No No nwlnkfwd IPX Traffic Forwarder Driver c:\windows\system32\drivers\nwln kfwd.sys Kernel Driver No Manual Stopped OK Normal No No parport Parallel port driver c:\windows\system32\drivers\parport.sys Kernel D river Yes Manual Running OK Normal No Yes partmgr PartMgr c:\windows\system32\drivers\partmgr.sys Kernel Driver Yes Boot Running OK Normal No Yes parvdm ParVdm c:\windows\system32\drivers\parvdm.sys Kernel Driver Yes

Auto Running OK Ignore No Yes pci PCI Bus Driver c:\windows\system32\drivers\pci.sys Kernel Driver Yes Boot Running OK Critical No Yes pcidump PCIDump Not Available Kernel Driver No System Stopped OK Ignore No No pciide PCIIde c:\windows\system32\drivers\pciide.sys Kernel Driver Yes Boot Running OK Normal No Yes pcmcia Pcmcia c:\windows\system32\drivers\pcmcia.sys Kernel Driver No Disabled Stopped OK Normal No No pdcomp PDCOMP Not Available Kernel Driver No Manual Stopped OK Ignore No No pdframe PDFRAME Not Available Kernel Driver No Manual Stopped OK Ignore No No pdreli PDRELI Not Available Kernel Driver No Manual Stopped OK Ignore No No pdrframe PDRFRAME Not Available Kernel Driver No Manual Stopped OK Ignore No No perc2 perc2 Not Available Kernel Driver No Disabled Stopped OK Normal No No perc2hib perc2hib Not Available Kernel Driver No Disabled Stopped OK Normal No No pptpminiport WAN Miniport (PPTP) c:\windows\system32\drivers\raspptp.sys Kernel Driver Yes Manual Running OK Normal No Yes processor Processor Driver c:\windows\system32\drivers\processr.sys Kernel Driver Yes System Running OK Normal No Yes psched QoS Packet Scheduler c:\windows\system32\drivers\psched.sys Kernel D river Yes Manual Running OK Normal No Yes ptilink Direct Parallel Link Driver c:\windows\system32\drivers\ptilink.sys Kernel Driver Yes Manual Running OK Normal No Yes ql1080 ql1080 Not Available Kernel Driver No Disabled Stopped OK Normal No No ql10wnt Ql10wnt Not Available Kernel Driver No Disabled Stopped OK Normal No No ql12160 ql12160 Not Available Kernel Driver No Disabled Stopped OK Normal No No ql1240 ql1240 Not Available Kernel Driver No Disabled Stopped OK Normal No No ql1280 ql1280 Not Available Kernel Driver No Disabled Stopped OK Normal No No rasacd Remote Access Auto Connection Driver c:\windows\system32\drivers\rasa cd.sys Kernel Driver Yes System Running OK Normal No Yes rasl2tp WAN Miniport (L2TP) c:\windows\system32\drivers\rasl2tp.sys Kernel D river Yes Manual Running OK Normal No Yes raspppoe Remote Access PPPOE Driver c:\windows\system32\drivers\rasp ppoe.sys Kernel Driver Yes Manual Running OK Normal No Yes raspti Direct Parallel c:\windows\system32\drivers\raspti.sys Kernel Driver Yes Manual Running OK Normal No Yes rdbss Rdbss c:\windows\system32\drivers\rdbss.sys File System Driver Yes System Running OK Normal No Yes rdpcdd RDPCDD c:\windows\system32\drivers\rdpcdd.sys Kernel Driver Yes System Running OK Ignore No Yes rdpdr Terminal Server Device Redirector Driver c:\windows\system32\driv ers\rdpdr.sys Kernel Driver Yes Manual Running OK Normal No Yes rdpwd RDPWD c:\windows\system32\drivers\rdpwd.sys Kernel Driver No Manual Stopped OK Ignore No No redbook Digital CD Audio Playback Filter Driver c:\windows\system32\drivers\redb ook.sys Kernel Driver Yes System Running OK Normal No Yes secdrv Secdrv c:\windows\system32\drivers\secdrv.sys Kernel Driver Yes

Auto Running OK Normal No Yes serenum Serenum Filter Driver c:\windows\system32\drivers\serenum.sys Kernel D river Yes Manual Running OK Normal No Yes serial Serial port driver c:\windows\system32\drivers\serial.sys Kernel D river Yes System Running OK Ignore No Yes sfloppy Sfloppy c:\windows\system32\drivers\sfloppy.sys Kernel Driver No System Stopped OK Ignore No No simbad Simbad Not Available Kernel Driver No Disabled Stopped OK Normal No No sparrow Sparrow Not Available Kernel Driver No Disabled Stopped OK Normal No No splitter Microsoft Kernel Audio Splitter c:\windows\system32\drivers\spli tter.sys Kernel Driver No Manual Stopped OK Normal No No sr System Restore Filter Driver c:\windows\system32\drivers\sr.sys File System Driver Yes Boot Running OK Normal No Yes srtsp Symantec Real Time Storage Protection c:\windows\system32\drivers\n360 \1402000.013\srtsp.sys File System Driver Yes Manual Running OK Normal No Yes srtspx Symantec Real Time Storage Protection (PEL) c:\windows\system32\driv ers\n360\1402000.013\srtspx.sys Kernel Driver Yes System Running OK Normal No Yes srv Srv c:\windows\system32\drivers\srv.sys File System Driver Yes Manual Running OK Normal No Yes swenum Software Bus Driver c:\windows\system32\drivers\swenum.sys Kernel D river Yes Manual Running OK Normal No Yes swmidi Microsoft Kernel GS Wavetable Synthesizer c:\windows\system32\driv ers\swmidi.sys Kernel Driver No Manual Stopped OK Normal No No symc810 symc810 Not Available Kernel Driver No Disabled Stopped OK Normal No No symc8xx symc8xx Not Available Kernel Driver No Disabled Stopped OK Normal No No symds Symantec Data Store c:\windows\system32\drivers\n360\1402000.013\sym ds.sys Kernel Driver Yes Boot Running OK Normal No Yes symefa Symantec Extended File Attributes c:\windows\system32\drivers\n360 \1402000.013\symefa.sys File System Driver Yes Boot Running OK Normal No Yes symevent SymEvent \??\c:\windows\system32\drivers\symevent.sys Kernel Driver Yes Manual Running OK Normal No Yes symiron Symantec Iron Driver c:\windows\system32\drivers\n360\1402000.013\iro nx86.sys Kernel Driver Yes System Running OK Normal No Yes symtdi Symantec Network Dispatch Driver c:\windows\system32\drivers\n360 \1402000.013\symtdi.sys Kernel Driver Yes System Running OK Normal No Yes sym_hi sym_hi Not Available Kernel Driver No Disabled Stopped OK Normal No No sym_u3 sym_u3 Not Available Kernel Driver No Disabled Stopped OK Normal No No sysaudio Microsoft Kernel System Audio Device c:\windows\system32\driv ers\sysaudio.sys Kernel Driver Yes Manual Running OK Normal No Yes tcpip TCP/IP Protocol Driver c:\windows\system32\drivers\tcpip.sys Kernel D river Yes System Running OK Normal No Yes tdpipe TDPIPE c:\windows\system32\drivers\tdpipe.sys Kernel Driver No Manual Stopped OK Ignore No No tdtcp TDTCP c:\windows\system32\drivers\tdtcp.sys Kernel Driver No Manual Stopped OK Ignore No No termdd Terminal Device Driver c:\windows\system32\drivers\termdd.sys Kernel D

river Yes System Running OK Normal No Yes toside TosIde Not Available Kernel Driver No Disabled Stopped OK Normal No No udfs Udfs c:\windows\system32\drivers\udfs.sys File System Driver No Disabled Stopped OK Normal No No ultra ultra Not Available Kernel Driver No Disabled Stopped OK Normal No No update Microcode Update Driver c:\windows\system32\drivers\update.sys Kernel D river Yes Manual Running OK Normal No Yes usbaudio USB Audio Driver (WDM) c:\windows\system32\drivers\usbaudio.sys Kernel Driver Yes Manual Running OK Normal No Yes usbccgp Microsoft USB Generic Parent Driver c:\windows\system32\drivers\usbc cgp.sys Kernel Driver Yes Manual Running OK Normal No Yes usbehci Microsoft USB 2.0 Enhanced Host Controller Miniport Driver c:\windo ws\system32\drivers\usbehci.sys Kernel Driver Yes Manual Running OK Normal No Yes usbhub USB2 Enabled Hub c:\windows\system32\drivers\usbhub.sys Kernel D river Yes Manual Running OK Normal No Yes usbohci Microsoft USB Open Host Controller Miniport Driver c:\windows\syste m32\drivers\usbohci.sys Kernel Driver Yes Manual Running OK Normal No Yes usbstor USB Mass Storage Driver c:\windows\system32\drivers\usbstor.sys Kernel D river No Manual Stopped OK Normal No No vgasave VgaSave c:\windows\system32\drivers\vga.sys Kernel Driver Yes System Running OK Ignore No Yes viaide ViaIde Not Available Kernel Driver No Disabled Stopped OK Normal No No volsnap VolSnap c:\windows\system32\drivers\volsnap.sys Kernel Driver Yes Boot Running OK Normal No Yes wanarp Remote Access IP ARP Driver c:\windows\system32\drivers\wanarp.sys Kernel Driver Yes Manual Running OK Normal No Yes wdica WDICA Not Available Kernel Driver No Manual Stopped OK Ignore No No wdmaud Microsoft WINMM WDM Audio Compatibility Driver c:\windows\system32\driv ers\wdmaud.sys Kernel Driver Yes Manual Running OK Normal No Yes wudfpf Windows Driver Foundation - User-mode Driver Framework Platform Driver c:\windows\system32\drivers\wudfpf.sys Kernel Driver No Manual Stopped OK Normal No No wudfrd Windows Driver Foundation - User-mode Driver Framework Reflector c:\windows\system32\drivers\wudfrd.sys Kernel Driver No Manual Stopped OK Normal No No [Signed Drivers] Device Name Signed Device Class Driver Version Driver Date Manufact urer INF Name Driver Name Device ID Not Available Not Available Not Available Not Available Not Available Not Available Not Available Not Available HTREE\ROOT\0 ACPI Uniprocessor PC Yes COMPUTER 5.1.2600.0 7/1/2001 (Standard computers) hal.inf Not Available ROOT\ACPI_HAL\0000 Microsoft ACPI-Compliant System Yes SYSTEM 5.1.2535.0 7/1/2001 Microsoft acpi.inf Not Available ACPI_HAL\PNP0C08\0 Processor Yes PROCESSOR 5.1.2600.0 4/1/2004 (Standar d processor types) cpu.inf Not Available ACPI\AUTHENTICAMD_-_X86_FAMILY_1 5_MODEL_44\_0 ACPI Power Button Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available ACPI\PNP0C0C\2&DABA3FF&0 PCI bus Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices ) machine.inf Not Available ACPI\PNP0A08\1

PCI standard RAM Controller Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_10DE&DEV _03EA&SUBSYS_21511019&REV_A1\3&2411E6FE&0&00 PCI standard ISA bridge Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available PCI\VEN_10DE&DEV_03E0&SU BSYS_00000000&REV_A2\3&2411E6FE&0&08 ISAPNP Read Data Port Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available ISAPNP\READDATAPORT\0 Motherboard resources Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available ACPI\PNP0C02\1 Programmable interrupt controller Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ACPI\PNP0000\4&3 1AD995D&0 Direct memory access controller Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ACPI\PNP0200\4&3 1AD995D&0 System timer Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ACPI\PNP0100\4&31AD995D&0 High precision event timer Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ACPI\PNP0103\4&3 1AD995D&0 System CMOS/real time clock Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ACPI\PNP0B00\4&3 1AD995D&0 System speaker Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ACPI\PNP0800\4&31AD995D&0 Numeric data processor Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available ACPI\PNP0C04\4&31AD995D& 0 Standard floppy disk controller Yes FDC 5.1.2600.0 7/1/2001 (Standard floppy disk controllers) fdc.inf Not Available ACPI\PNP0700\4&3 1AD995D&0 Communications Port Yes PORTS 5.1.2600.0 7/1/2001 (Standar d port types) msports.inf Not Available ACPI\PNP0501\1 Printer Port Yes PORTS 5.1.2600.0 7/1/2001 (Standard port t ypes) msports.inf Not Available ACPI\PNP0400\1 Printer Port Logical Interface Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available LPTENUM\MICROSOF TRAWPORT\5&1D62032D&0&LPT1 PS/2 Compatible Mouse Yes MOUSE 5.1.2600.0 7/1/2001 Microsof t msmouse.inf Not Available ACPI\PNP0F13\4&31AD995D&0 NVIDIA nForce PCI System Management Yes SYSTEM 4.5.7.0 6/8/2006 NVIDIA oem2.inf Not Available PCI\VEN_10DE&DEV_03EB&SUBSYS_21511019&RE V_A2\3&2411E6FE&0&09 PCI standard RAM Controller Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_10DE&DEV _03F5&SUBSYS_21511019&REV_A2\3&2411E6FE&0&0A Standard OpenHCD USB Host Controller Yes USB 5.1.2600.5512 7/1/2001 (Standard USB Host Controller) usbport.inf Not Available PCI\VEN_10DE&DEV _03F1&SUBSYS_21511019&REV_A3\3&2411E6FE&0&10 USB Root Hub Yes USB 5.1.2600.5512 7/1/2001 (Standard USB Ho st Controller) usbport.inf Not Available USB\ROOT_HUB\4&7C08A0A&0 USB Composite Device Yes USB 5.1.2600.0 7/1/2001 (Standar d USB Host Controller) usb.inf Not Available USB\VID_046D&PID_C31C\5&2628F3C5 &0&4 USB Human Interface Device Yes HIDCLASS 5.1.2600.5512 7/1/2001 (Standard system devices) input.inf Not Available USB\VID_046D&PID _C31C&MI_00\6&237324B8&0&0000 HID Keyboard Device Yes KEYBOARD 5.1.2600.5512 7/1/2001 (Standard keyboards) keyboard.inf Not Available HID\VID_046D&PID_C31C&MI

_00\7&1B61C0E9&0&0000 USB Human Interface Device Yes HIDCLASS 5.1.2600.5512 7/1/2001 (Standard system devices) input.inf Not Available USB\VID_046D&PID _C31C&MI_01\6&237324B8&0&0001 HID-compliant consumer control device Yes HIDCLASS 5.1.2600.5512 7/1/2001 Microsoft hidserv.inf Not Available HID\VID_046D&PID _C31C&MI_01&COL01\7&33254D2E&0&0000 HID-compliant device Yes HIDCLASS 5.1.2600.5512 7/1/2001 (Standard system devices) input.inf Not Available HID\VID_046D&PID _C31C&MI_01&COL02\7&33254D2E&0&0001 HID-compliant consumer control device Yes HIDCLASS 5.1.2600.5512 7/1/2001 Microsoft hidserv.inf Not Available HID\VID_046D&PID _C31C&MI_01&COL03\7&33254D2E&0&0002 USB Composite Device Yes USB 5.1.2600.0 7/1/2001 (Standar d USB Host Controller) usb.inf Not Available USB\VID_0471&PID_082F\USBGAP0000 0000000000000001871756C2 USB Audio Device Yes MEDIA 5.1.2535.0 7/1/2001 (Generic USB Audio) wdma_usb.inf USBAUDIO.sys USB\VID_0471&PID_082F&MI_00\7&1C 10DA88&0&0000 USB Human Interface Device Yes HIDCLASS 5.1.2600.5512 7/1/2001 (Standard system devices) input.inf Not Available USB\VID_0471&PID _082F&MI_03\7&1C10DA88&0&0003 HID-compliant device Yes HIDCLASS 5.1.2600.5512 7/1/2001 (Standard system devices) input.inf Not Available HID\VID_0471&PID _082F&MI_03\8&2FFB8217&0&0000 Standard Enhanced PCI to USB Host Controller Yes USB 5.1.2600.0 6/1/2002 (Standard USB Host Controller) usbport.inf Not Available PCI\VEN_10DE&DEV_03F2&SUBSYS_21511019&REV_A3\3&2411E6FE&0&11 USB Root Hub Yes USB 5.1.2600.5512 7/1/2001 (Standard USB Ho st Controller) usbport.inf Not Available USB\ROOT_HUB20\4&2FFFCF6E&0 PCI standard PCI-to-PCI bridge Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_10DE&DEV _03F3&SUBSYS_00000000&REV_A1\3&2411E6FE&0&20 Microsoft UAA Bus Driver for High Definition Audio Yes SYSTEM 5.10.0.5 010 3/5/2004 Microsoft hdaudbus.inf Not Available PCI\VEN_ 10DE&DEV_03F0&SUBSYS_21511019&REV_A2\3&2411E6FE&0&28 Realtek High Definition Audio Yes MEDIA 5.10.0.5618 5/7/2008 Realtek oem28.inf RtkHDAud.sys HDAUDIO\FUNC_01&VEN_10EC&DEV_0662&SUBSYS _10192151&REV_1001\4&385A275D&0&0001 Standard Dual Channel PCI IDE Controller Yes HDC 5.1.2600.5512 7/1/2001 (Standard IDE ATA/ATAPI controllers) mshdc.inf Not Avai lable PCI\VEN_10DE&DEV_03EC&SUBSYS_21511019&REV_A2\3&2411E6FE&0&30 Primary IDE Channel Yes HDC 5.1.2600.5512 7/1/2001 (Standar d IDE ATA/ATAPI controllers) mshdc.inf Not Available PCIIDE\IDECHANNE L\4&158D6C7E&0&0 CD-ROM Drive Yes CDROM 5.1.2535.0 7/1/2001 (Standard CD-ROM drives) cdrom.inf Not Available IDE\CDROMLITE-ON_DVDRW_SOHW-1693 S________________KS0B____\5&2A1E388B&0&0.0.0 Secondary IDE Channel Yes HDC 5.1.2600.5512 7/1/2001 (Standar d IDE ATA/ATAPI controllers) mshdc.inf Not Available PCIIDE\IDECHANNE L\4&158D6C7E&0&1 NVIDIA Network Bus Enumerator Yes NVIDIA NETWORK BUS ENUMERATOR 65.4.8.0 11/27/2006 NVIDIA oem5.inf Not Available PCI\VEN_10DE&DEV_03EF&SU BSYS_21511019&REV_A2\3&2411E6FE&0&38 NVIDIA nForce Networking Controller Yes NET 65.4.8.0 11/27/20 06 NVIDIA oem6.inf Not Available {1A3E09BE-1E45-494B-9174-D7385B4 5BBF5}\NVNET_DEV03EF\4&195A0546&0&00 NVIDIA MCP61 Serial ATA Controller Yes HDC 5.10.2600.677 6/28/200 6 NVIDIA Corporation oem3.inf Not Available PCI\VEN_10DE&DEV _03F6&SUBSYS_21511019&REV_A2\3&2411E6FE&0&40

Disk drive Yes DISKDRIVE 5.1.2535.0 7/1/2001 (Standar d disk drives) disk.inf Not Available IDE\DISKST3120827AS_____________ ________________3.42____\2020202020202020202020204D33305330314743 Disk drive Yes DISKDRIVE 5.1.2535.0 7/1/2001 (Standar d disk drives) disk.inf Not Available IDE\DISKST3750528AS_____________ ________________CC46____\2020202020202020202020205636445037375934 PCI standard PCI-to-PCI bridge Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_10DE&DEV _03E8&SUBSYS_00000000&REV_A2\3&2411E6FE&0&48 NVIDIA GeForce GT 520 Yes DISPLAY 6.14.12.8558 10/7/2011 NVIDIA oem11.inf Not Available PCI\VEN_10DE&DEV_1040&SUBSYS_00000000&REV_A1\4&2 28469D0&0&0048 SyncMaster 730B(Analog) Yes MONITOR 1.0.0.0 1/26/2005 Samsung oem10.in f Not Available DISPLAY\SAM0191\5&37F998B2&0&11335577&02&00 Microsoft UAA Bus Driver for High Definition Audio Yes SYSTEM 5.10.0.5 010 3/5/2004 Microsoft hdaudbus.inf Not Available PCI\VEN_ 10DE&DEV_0E08&SUBSYS_00000000&REV_A1\4&228469D0&0&0148 NVIDIA High Definition Audio Yes MEDIA 1.2.24.0 7/7/2011 NVIDIA oem12.inf nvhda32.sys HDAUDIO\FUNC_01&VEN_10DE&DEV_001C&SUBSYS _00000000&REV_1001\5&D97A0CC&0&0001 PCI standard PCI-to-PCI bridge Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_10DE&DEV _03E9&SUBSYS_00000000&REV_A2\3&2411E6FE&0&58 PCI standard PCI-to-PCI bridge Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_10DE&DEV _03E9&SUBSYS_00000000&REV_A2\3&2411E6FE&0&60 PCI standard host CPU bridge Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_1022&DEV _1100&SUBSYS_00000000&REV_00\3&2411E6FE&0&C0 PCI standard host CPU bridge Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_1022&DEV _1101&SUBSYS_00000000&REV_00\3&2411E6FE&0&C1 PCI standard host CPU bridge Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_1022&DEV _1102&SUBSYS_00000000&REV_00\3&2411E6FE&0&C2 PCI standard host CPU bridge Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available PCI\VEN_1022&DEV _1103&SUBSYS_00000000&REV_00\3&2411E6FE&0&C3 Motherboard resources Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available ACPI\PNP0C02\5 Motherboard resources Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available ACPI\PNP0C02\4 System board Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ACPI\PNP0C01\2&DABA3FF&0 ACPI Fan Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ACPI\PNP0C0B\2&DABA3FF&0 ACPI Thermal Zone Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available ACPI\THERMALZONE\THRM ACPI Fixed Feature Button Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ACPI\FIXEDBUTTON \2&DABA3FF&0 Logical Disk Manager Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available ROOT\DMIO\0000 Volume Manager Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ROOT\FTDISK\0000 Generic volume Yes VOLUME 5.1.2600.0 7/1/2001 Microsoft volume.inf Not Available STORAGE\VOLUME\1&30A96598&0&SIGNATURE2230222OFFS ET7E00LENGTH1BF1F18200 Generic volume Yes VOLUME 5.1.2600.0 7/1/2001 Microsoft volume.inf Not Available STORAGE\VOLUME\1&30A96598&0&SIGNATURE20BBED0AOFF

SET100000LENGTHAEA8B00000 AFD Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_AFD\0000 Belarc SMBios Access Not Available LEGACYDRIVER Not Available Not Avai lable Not Available Not Available Not Available ROOT\LEGACY_BANTEXT\0000 Beep Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_BEEP\0000 BHDrvx86 Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_BHDRVX86\0000 Norton Security Suite Settings Manager Not Available LEGACYDRIVER Not Avai lable Not Available Not Available Not Available Not Available ROOT\LEG ACY_CCSET_N360\0000 dmboot Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_DMBOOT\0000 dmload Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_DMLOAD\0000 ECSIoDriver_1_1_0_0 Not Available LEGACYDRIVER Not Available Not Avai lable Not Available Not Available Not Available ROOT\LEGACY_ECSIODRIVER_ 1_1_0_0\0000 Symantec Eraser Control driver Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_EECT RL\0000 EraserUtilRebootDrv Not Available LEGACYDRIVER Not Available Not Avai lable Not Available Not Available Not Available ROOT\LEGACY_ERASERUTILRE BOOTDRV\0000 Fips Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_FIPS\0000 Generic Packet Classifier Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_GPC\ 0000 HTTP Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_HTTP\0000 IDSxpx86 Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_IDSXPX86\0000 IP Traffic Filter Driver Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_IPFI LTERDRIVER\0000 IP Network Address Translator Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_IPNA T\0000 IPSEC driver Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_IPSEC\0000 ksecdd Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_KSECDD\0000 mnmdd Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_MNMDD\0000 mountmgr Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_MOUNTMGR\0000 NAVENG Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_NAVENG\0000 NAVEX15 Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_NAVEX15\0000 NDIS System Driver Not Available LEGACYDRIVER Not Available Not Avai lable Not Available Not Available Not Available ROOT\LEGACY_NDIS\0000 Remote Access NDIS TAPI Driver Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_NDIS TAPI\0000 NDIS Usermode I/O Protocol Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_NDIS UIO\0000

NDProxy Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_NDPROXY\0000 NetBios over Tcpip Not Available LEGACYDRIVER Not Available Not Avai lable Not Available Not Available Not Available ROOT\LEGACY_NETBT\0000 Null Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_NULL\0000 PartMgr Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_PARTMGR\0000 ParVdm Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_PARVDM\0000 Remote Access Auto Connection Driver Not Available LEGACYDRIVER Not Avai lable Not Available Not Available Not Available Not Available ROOT\LEG ACY_RASACD\0000 RDPCDD Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_RDPCDD\0000 Secdrv Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_SECDRV\0000 Symantec Real Time Storage Protection (PEL) Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_SRTSPX\0000 Symantec Data Store Not Available LEGACYDRIVER Not Available Not Avai lable Not Available Not Available Not Available ROOT\LEGACY_SYMDS\0000 SymEvent Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_SYMEVENT\0000 Symantec Iron Driver Not Available LEGACYDRIVER Not Available Not Avai lable Not Available Not Available Not Available ROOT\LEGACY_SYMIRON\0000 Symantec Network Dispatch Driver Not Available LEGACYDRIVER Not Avai lable Not Available Not Available Not Available Not Available ROOT\LEG ACY_SYMTDI\0000 TCP/IP Protocol Driver Not Available LEGACYDRIVER Not Available Not Avai lable Not Available Not Available Not Available ROOT\LEGACY_TCPIP\0000 VgaSave Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_VGASAVE\0000 VolSnap Not Available LEGACYDRIVER Not Available Not Available Not Avai lable Not Available Not Available ROOT\LEGACY_VOLSNAP\0000 Remote Access IP ARP Driver Not Available LEGACYDRIVER Not Available Not Available Not Available Not Available Not Available ROOT\LEGACY_WANA RP\0000 Audio Codecs Yes MEDIA 5.1.2535.0 7/1/2001 (Standard system devices) wave.inf Not Available ROOT\MEDIA\MS_MMACM Legacy Audio Drivers Yes MEDIA 5.1.2535.0 7/1/2001 (Standar d system devices) wave.inf Not Available ROOT\MEDIA\MS_MMDRV Media Control Devices Yes MEDIA 5.1.2535.0 7/1/2001 (Standar d system devices) wave.inf Not Available ROOT\MEDIA\MS_MMMCI Legacy Video Capture Devices Yes MEDIA 5.1.2535.0 7/1/2001 (Standard system devices) wave.inf Not Available ROOT\MEDIA\MS_MM VCD Video Codecs Yes MEDIA 5.1.2535.0 7/1/2001 (Standard system devices) wave.inf Not Available ROOT\MEDIA\MS_MMVID WAN Miniport (L2TP) Yes NET 5.1.2535.0 7/1/2001 Microsof t netrasa.inf Not Available ROOT\MS_L2TPMINIPORT\0000 WAN Miniport (IP) Yes NET 5.1.2535.0 7/1/2001 Microsof t netrasa.inf Not Available ROOT\MS_NDISWANIP\0000 WAN Miniport (PPPOE) Yes NET 5.1.2535.0 7/1/2001 Microsof t netrasa.inf Not Available ROOT\MS_PPPOEMINIPORT\0000 WAN Miniport (PPTP) Yes NET 5.1.2535.0 7/1/2001 Microsof t netrasa.inf Not Available ROOT\MS_PPTPMINIPORT\0000 Packet Scheduler Miniport Yes NET 5.1.2535.0 7/1/2001 Microsoft netpsa.inf Not Available ROOT\MS_PSCHEDMP\0000 Packet Scheduler Miniport Yes NET 5.1.2535.0 7/1/2001

Microsoft netpsa.inf Not Available ROOT\MS_PSCHEDMP\0001 Direct Parallel Yes NET 5.1.2535.0 7/1/2001 Microsoft netrasa.inf Not Available ROOT\MS_PTIMINIPORT\0000 Hamachi Network Interface No NET 6.0.2.2 5/14/2007 LogMeIn, Inc. oem13.inf Not Available ROOT\NET\0000 Terminal Server Device Redirector Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ROOT\RDPDR\0000 Terminal Server Keyboard Driver Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ROOT\RDP_KBD\000 0 Terminal Server Mouse Driver Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ROOT\RDP_MOU\000 0 Plug and Play Software Device Enumerator Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ROOT\SYSTEM\0000 Microsoft WINMM WDM Audio Compatibility Driver Yes MEDIA 5.1.2535.0 7/1/2001 Microsoft wdmaudio.inf Not Available SW\{CD171DE3-69E 5-11D2-B56D-0000F8754380}\{9B365890-165F-11D0-A195-0020AFD156E4} Microsoft Kernel System Audio Device Yes MEDIA 5.1.2535.0 7/1/2001 Microsoft wdmaudio.inf Not Available SW\{A7C7A5B0-5AF3-11D1-9CED-00A0 24BF0407}\{9B365890-165F-11D0-A195-0020AFD156E4} Microsoft Kernel Wave Audio Mixer Yes MEDIA 5.1.2535.0 7/1/2001 Microsoft wdmaudio.inf Not Available SW\{B7EAFDC0-A680-11D0-96D8-00AA 0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4} Microcode Update Device Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standar d system devices) machine.inf Not Available ROOT\SYSTEM\0001 Microsoft System Management BIOS Driver Yes SYSTEM 5.1.2600.5512 7/1/2001 (Standard system devices) machine.inf Not Available ROOT\SYSTEM\0002 Not Available Yes Not Available 2:5.1 Not Available Not Available Not Available Not Available Microsoft XPS Document Writer [Environment Variables] Variable Value User Name ComSpec %SystemRoot%\system32\cmd.exe <SYSTEM> Path C:\Program Files\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;% SystemRoot%;%SystemRoot%\System32\Wbem;C:\WINDOWS\system32\WindowsPowerShell\v1. 0;C:\Program Files\QuickTime\QTSystem\;C:\PROGRA~1\DISKEE~1\DISKEE~1\ <SYSTEM> windir %SystemRoot% <SYSTEM> FP_NO_HOST_CHECK NO <SYSTEM> OS Windows_NT <SYSTEM> PROCESSOR_ARCHITECTURE x86 <SYSTEM> PROCESSOR_LEVEL 15 <SYSTEM> PROCESSOR_IDENTIFIER x86 Family 15 Model 44 Stepping 2, AuthenticAMD <SYSTEM> PROCESSOR_REVISION 2c02 <SYSTEM> NUMBER_OF_PROCESSORS 1 <SYSTEM> PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.PSC1 <SYSTEM> TEMP %SystemRoot%\TEMP <SYSTEM> TMP %SystemRoot%\TEMP <SYSTEM> CLASSPATH .;C:\Program Files\Java\jre7\lib\ext\QTJava.zip <SYSTEM> QTJAVA C:\Program Files\Java\jre7\lib\ext\QTJava.zip <SYSTEM> TEMP %USERPROFILE%\Local Settings\Temp NT AUTHORITY\SYSTEM TMP %USERPROFILE%\Local Settings\Temp NT AUTHORITY\SYSTEM TEMP %USERPROFILE%\Local Settings\Temp NT AUTHORITY\LOCAL SERVICE TMP %USERPROFILE%\Local Settings\Temp NT AUTHORITY\LOCAL SERVICE TEMP %USERPROFILE%\Local Settings\Temp NT AUTHORITY\NETWORK SERVICE TMP %USERPROFILE%\Local Settings\Temp NT AUTHORITY\NETWORK SERVICE TEMP %USERPROFILE%\Local Settings\Temp GZ891RP9\Walter TMP %USERPROFILE%\Local Settings\Temp GZ891RP9\Walter

[Print Jobs] Document Size Owner Notify Status Time Submitted Start Time Until Time Elapsed Time Pages Printed Job ID Priority Paramete rs Driver Print Processor Host Print Queue Data Type Name [Network Connections] Local Name [Running Tasks] Name Path Process ID Priority Min Working Set Max Working Set Start Time Version Size File Date system idle process Not Available 0 0 Not Available Not Avai lable Not Available Not Available Not Available Not Available system Not Available 4 8 0 1413120 Not Available Not Avai lable Not Available Not Available smss.exe c:\windows\system32\smss.exe 480 11 204800 1413120 3/19/2013 10:44 AM 5.1.2600.5512 (xpsp.080413-2111) 49.50 KB (50,688 bytes) 4/14/2008 12:42 AM csrss.exe Not Available 664 13 Not Available Not Available 3/19/2013 10:44 AM Not Available Not Available Not Available winlogon.exe c:\windows\system32\winlogon.exe 696 13 204800 1413120 3/19/2013 10:44 AM 5.1.2600.5512 (xpsp.080413-2113) 496.00 K B (507,904 bytes) 4/14/2008 12:42 AM services.exe c:\windows\system32\services.exe 740 9 204800 1413120 3/19/2013 10:44 AM 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 108.00 KB (110,592 bytes) 4/14/2008 12:42 AM lsass.exe c:\windows\system32\lsass.exe 752 9 204800 1413120 3/19/2013 10:44 AM 5.1.2600.5512 (xpsp.080413-2113) 13.00 KB (13,312 bytes) 4/14/2008 12:42 AM svchost.exe c:\windows\system32\svchost.exe 908 8 204800 1413120 3/19/2013 10:44 AM 5.1.2600.5512 (xpsp.080413-2111) 14.00 KB (14,336 bytes) 4/14/2008 12:42 AM svchost.exe Not Available 968 8 Not Available Not Available 3/19/2013 10:44 AM Not Available Not Available Not Available svchost.exe c:\windows\system32\svchost.exe 1064 8 204800 1413120 3/19/2013 10:44 AM 5.1.2600.5512 (xpsp.080413-2111) 14.00 KB (14,336 bytes) 4/14/2008 12:42 AM svchost.exe Not Available 1124 8 Not Available Not Available 3/19/2013 10:44 AM Not Available Not Available Not Available svchost.exe Not Available 1188 8 Not Available Not Available 3/19/2013 10:44 AM Not Available Not Available Not Available spoolsv.exe c:\windows\system32\spoolsv.exe 1440 8 204800 1413120 3/19/2013 10:44 AM 5.1.2600.6024 (xpsp_sp3_gdr.100817-1626) 57.50 KB (58,880 bytes) 4/14/2008 12:42 AM explorer.exe c:\windows\explorer.exe 1696 8 204800 1413120 3/19/201 3 10:44 AM 6.00.2900.5512 (xpsp.080413-2105) 1,009.50 KB (1,033,728 b ytes) 4/14/2008 12:42 AM rundll32.exe c:\windows\system32\rundll32.exe 1880 8 204800 1413120 3/19/2013 10:44 AM 5.1.2600.5512 (xpsp.080413-2105) 32.50 KB (33,280 bytes) 4/14/2008 12:42 AM rthdcpl.exe c:\windows\rthdcpl.exe 1972 8 204800 1413120 3/19/201 3 10:44 AM 2.2.1.0 16.08 MB (16,862,208 bytes) 3/11/2013 10:20 PM ctfmon.exe c:\windows\system32\ctfmon.exe 2000 8 204800 1413120 3/19/2013 10:44 AM 5.1.2600.5512 (xpsp.080413-2105) 15.00 KB (15,360 bytes) 4/14/2008 12:42 AM robotaskbaricon.exe c:\program files\siber systems\ai roboform\robotaskbaric Remote Name Type Status User Name

on.exe 2020 8 204800 1413120 3/19/2013 10:44 AM 7-7-9-5 106.77 K B (109,336 bytes) 3/10/2013 10:05 PM wincinemamgr.exe c:\program files\intervideo\common\bin\wincinemamgr.exe 188 8 204800 1413120 3/19/2013 10:44 AM 2.0.5 272.00 KB (278,5 28 bytes) 3/12/2013 1:19 PM voip321.exe c:\program files\philips\voip321\voip321.exe 192 8 204800 1413120 3/19/2013 10:44 AM 3, 8, 3, 0 368.00 KB (376,832 bytes ) 5/3/2007 3:52 PM skype.exe c:\program files\skype\phone\skype.exe 220 8 204800 1413120 3/19/2013 10:44 AM 3.8.0.188 20.63 MB (21,633,320 bytes) 11/7/2008 1:31 PM svchost.exe Not Available 404 8 Not Available Not Available 3/19/2013 10:44 AM Not Available Not Available Not Available dkservice.exe c:\program files\diskeeper corporation\diskeeper\dkservice.exe 1012 6 204800 1413120 3/19/2013 10:44 AM 15.0.951.0 2.05 MB (2,148,176 bytes) 3/3/2011 1:49 PM jqs.exe c:\program files\java\jre7\bin\jqs.exe 1056 4 1413120 1413120 3/19/2013 10:44 AM 10.17.2.02 166.91 KB (170,912 bytes) 3/10/201 3 8:24 PM ccsvchst.exe c:\program files\norton security suite\engine\20.2.0.19\ccsvchst .exe 1216 8 1048576 10485760 3/19/2013 10:44 AM 12.2.0.8 140.55 KB (143,928 bytes) 3/13/2013 11:53 AM nvsvc32.exe c:\windows\system32\nvsvc32.exe 1548 8 204800 1413120 3/19/2013 10:44 AM 6.14.12.8558 291.31 KB (298,304 bytes) 2/28/201 1 9:11 PM ccsvchst.exe c:\program files\norton security suite\engine\20.2.0.19\ccsvchst .exe 1952 8 204800 1413120 3/19/2013 10:44 AM 12.2.0.8 140.55 KB (143,928 bytes) 3/13/2013 11:53 AM alg.exe Not Available 2520 8 Not Available Not Available 3/19/201 3 10:44 AM Not Available Not Available Not Available yahoomessenger.exe c:\program files\yahoo!\messenger\yahoomessenger.exe 4032 8 204800 1413120 3/20/2013 6:21 AM 11,5,0,0228 6.29 MB (6,595,928 bytes) 3/18/2013 4:03 PM wmiprvse.exe Not Available 3068 8 Not Available Not Available 3/20/2013 6:21 AM Not Available Not Available Not Available yahoomessenger.exe c:\program files\yahoo!\messenger\yahoomessenger.exe 3460 8 204800 1413120 3/20/2013 6:21 AM 11,5,0,0228 6.29 MB (6,595,928 bytes) 3/18/2013 4:03 PM firefox.exe c:\program files\mozilla firefox\firefox.exe 4068 8 204800 1413120 3/20/2013 8:56 AM 19.0.2 895.90 KB (917,400 bytes) 3/17/2013 4:38 PM plugin-container.exe c:\program files\mozilla firefox\plugin-container.exe 2144 8 204800 1413120 3/20/2013 9:16 AM 19.0.2 16.90 KB (17,304 bytes) 3/17/2013 4:38 PM helpctr.exe c:\windows\pchealth\helpctr\binaries\helpctr.exe 3188 8 204800 1413120 3/20/2013 9:24 AM 5.1.2600.5512 (xpsp.080413-2108) 751.00 KB (769,024 bytes) 3/10/2013 8:18 PM helpsvc.exe c:\windows\pchealth\helpctr\binaries\helpsvc.exe 4004 8 204800 1413120 3/20/2013 9:24 AM 5.1.2600.5997 (xpsp_sp3_gdr.1006 14-1759) 727.00 KB (744,448 bytes) 3/10/2013 8:18 PM [Loaded Modules] Name Version Size File Date Manufacturer Path smss 5.1.2600.5512 (xpsp.080413-2111) 49.50 KB (50,688 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\smss.exe ntdll 5.1.2600.6055 (xpsp_sp3_gdr.101209-1647) 701.50 KB (718,336 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\ntdl l.dll winlogon 5.1.2600.5512 (xpsp.080413-2113) 496.00 KB (507,904 bytes

) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\winl ogon.exe kernel32 5.1.2600.6293 (xpsp_sp3_gdr.121001-1622) 967.00 KB (990,2 08 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\syste m32\kernel32.dll advapi32 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 603.00 KB (617,4 72 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\syste m32\advapi32.dll rpcrt4 5.1.2600.6022 (xpsp_sp3_gdr.100813-1643) 577.00 KB (590,848 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\rpcr t4.dll secur32 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305) 55.50 KB (56,832 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\secur32.dll authz 5.1.2600.5512 (xpsp.080413-2113) 61.00 KB (62,464 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\authz.dll msvcrt 7.0.2600.5512 (xpsp.080413-2111) 335.00 KB (343,040 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msvcrt.dll crypt32 5.131.2600.6239 (xpsp_sp3_gdr.120601-1620) 587.00 KB (601,088 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\cryp t32.dll msasn1 5.1.2600.5875 (xpsp_sp3_gdr.090904-1413) 57.50 KB (58,880 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msasn1.dll user32 5.1.2600.5512 (xpsp.080413-2105) 565.00 KB (578,560 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\user32.dll gdi32 5.1.2600.5698 (xpsp_sp3_gdr.081022-1932) 280.00 KB (286,720 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\gdi3 2.dll nddeapi 5.1.2600.5512 (xpsp.080413-2105) 17.50 KB (17,920 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\nddeapi.dll profmap 5.1.2600.5512 (xpsp.080413-2113) 27.00 KB (27,648 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\profmap.dll netapi32 5.1.2600.6260 (xpsp_sp3_gdr.120706-1619) 330.00 KB (337,9 20 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\syste m32\netapi32.dll userenv 5.1.2600.5512 (xpsp.080413-2113) 710.00 KB (727,040 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\userenv.dll psapi 5.1.2600.5512 (xpsp.080413-2105) 22.50 KB (23,040 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\psapi.dll regapi 5.1.2600.5512 (xpsp.080413-2111) 48.50 KB (49,664 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\regapi.dll setupapi 5.1.2600.5512 (xpsp.080413-2111) 962.00 KB (985,088 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\setu papi.dll version 5.1.2600.5512 (xpsp.080413-2105) 18.50 KB (18,944 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\version.dll winsta 5.1.2600.5512 (xpsp.080413-2111) 52.50 KB (53,760 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\winsta.dll wintrust 5.131.2600.6285 (xpsp_sp3_gdr.120824-1617) 173.50 KB (177,6 64 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\syste m32\wintrust.dll imagehlp 5.1.2600.6198 (xpsp_sp3_gdr.120229-1643) 145.00 KB (148,4 80 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\syste m32\imagehlp.dll ws2_32 5.1.2600.5512 (xpsp.080413-0852) 80.50 KB (82,432 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\ws2_32.dll ws2help 5.1.2600.5512 (xpsp.080413-0852) 19.50 KB (19,968 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\ws2help.dll imm32 5.1.2600.5512 (xpsp.080413-2105) 107.50 KB (110,080 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\imm32.dll msgina 5.1.2600.5512 (xpsp.080413-2113) 974.00 KB (997,376 bytes)

4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msgina.dll comctl32 5.82 (xpsp_sp3_qfe.100823-1643) 603.00 KB (617,472 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\comctl32.dll odbc32 3.525.3012.0 (xpsp_sp3_gdr.101108-1643) 244.00 KB (249,856 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\odbc32.dll comdlg32 6.00.2900.5512 (xpsp.080413-2105) 270.50 KB (276,992 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\comd lg32.dll shell32 6.00.2900.6242 (xpsp_sp3_gdr.120608-1638) 8.07 MB (8,462,848 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\shel l32.dll shlwapi 6.00.2900.5912 (xpsp_sp3_gdr.091207-1454) 463.00 KB (474,112 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\shlw api.dll comctl32 6.0 (xpsp_sp3_qfe.100823-1643) 1.01 MB (1,054,208 bytes) 3/10/2013 8:55 PM Microsoft Corporation c:\windows\winsxs\x86_microsoft. windows.common-controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dl l odbcint 3.525.1132.0 (xpsp.080413-0852) 92.00 KB (94,208 bytes) 4/13/2008 5:56 P M Microsoft Corporation c:\windows\system32\odbcint.dll shsvcs 6.00.2900.5853 (xpsp_sp3_gdr.090727-1736) 132.00 KB (135,168 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\shsv cs.dll sfc 5.1.2600.5512 (xpsp.080413-2111) 5.00 KB (5,120 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\sfc.dll sfc_os 5.1.2600.5512 (xpsp.080413-2111) 137.00 KB (140,288 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\sfc_os.dll ole32 5.1.2600.6168 (xpsp_sp3_gdr.111101-1829) 1.23 MB (1,288,704 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\ole3 2.dll apphelp 5.1.2600.5512 (xpsp.080413-2105) 123.00 KB (125,952 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\apphelp.dll msctfime 5.1.2600.5512 (xpsp.080413-2105) 173.00 KB (177,152 bytes ) 4/14/2008 12:40 AM Microsoft Corporation c:\windows\system32\msct fime.ime winscard 5.1.2600.5512 (xpsp.080413-2113) 97.00 KB (99,328 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\winscard.dll wtsapi32 5.1.2600.5512 (xpsp.080413-2111) 18.00 KB (18,432 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wtsapi32.dll sxs 5.1.2600.5512 (xpsp.080413-2111) 696.50 KB (713,216 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\sxs.dll uxtheme 6.00.2900.5512 (xpsp.080413-2105) 213.50 KB (218,624 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\uxtheme.dll winmm 5.1.2600.6160 (xpsp_sp3_gdr.111014-1624) 172.00 KB (176,128 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\winm m.dll cscdll 5.1.2600.5512 (xpsp.080413-2111) 99.50 KB (101,888 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\cscdll.dll rsaenh 5.1.2600.5507 (xpsp.080318-1711) 203.50 KB (208,384 bytes) 4/13/2008 6:07 PM Microsoft Corporation c:\windows\system32\rsaenh.dll dimsntfy 5.1.2600.5512 (xpsp.080413-2113) 19.00 KB (19,456 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\dimsntfy.dll wlnotify 5.1.2600.5512 (xpsp.080413-2113) 90.50 KB (92,672 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wlnotify.dll mpr 5.1.2600.5512 (xpsp.080413-0852) 58.50 KB (59,904 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\mpr.dll winspool 5.1.2600.5512 (xpsp.080413-0852) 143.00 KB (146,432 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wins pool.drv wgalogon 1.9.0040.0 233.88 KB (239,496 bytes) 3/10/2009 9:18 P

M Microsoft Corporation c:\windows\system32\wgalogon.dll oleaut32 5.1.2600.6341 539.50 KB (552,448 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\oleaut32.dll ntmarta 5.1.2600.5512 (xpsp.080413-2113) 116.00 KB (118,784 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\ntmarta.dll samlib 5.1.2600.5512 (xpsp.080413-2113) 62.50 KB (64,000 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\samlib.dll wldap32 5.1.2600.5512 (xpsp.080413-2113) 168.00 KB (172,032 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wldap32.dll clbcatq 2001.12.4414.700 487.00 KB (498,688 bytes) 3/10/2013 8:16 P M Microsoft Corporation c:\windows\system32\clbcatq.dll comres 2001.12.4414.700 773.50 KB (792,064 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\comres.dll msv1_0 5.1.2600.5876 (xpsp_sp3_gdr.090909-1234) 133.00 KB (136,192 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msv1 _0.dll cryptdll 5.1.2600.5512 (xpsp.080413-2113) 32.50 KB (33,280 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\cryptdll.dll iphlpapi 5.1.2600.5512 (xpsp.080413-0852) 92.50 KB (94,720 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\iphlpapi.dll cscui 5.1.2600.5512 (xpsp.080413-2105) 319.00 KB (326,656 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\cscui.dll xpsp2res 5.1.2600.5512 (xpsp.080413-2113) 2.76 MB (2,897,920 bytes ) 4/13/2008 6:09 PM Microsoft Corporation c:\windows\system32\xpsp 2res.dll wdmaud 5.1.2600.5512 (xpsp.080413-2108) 23.00 KB (23,552 bytes) 4/14/200 8 1:42 AM Microsoft Corporation c:\windows\system32\wdmaud.drv msacm32 5.1.2600.0 (xpclient.010817-1148) 20.00 KB (20,480 bytes) 8/23/200 1 7:00 AM Microsoft Corporation c:\windows\system32\msacm32.drv msacm32 5.1.2600.5512 (xpsp.080413-0845) 70.00 KB (71,680 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\msacm32.dll midimap 5.1.2600.5512 (xpsp.080413-0845) 18.50 KB (18,944 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\midimap.dll wbemprox 5.1.2600.5512 (xpsp.080413-2108) 18.50 KB (18,944 bytes) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\wbem\wbempro x.dll wbemcomn 5.1.2600.5512 (xpsp.080413-2108) 209.50 KB (214,528 bytes ) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\wbem \wbemcomn.dll wbemsvc 5.1.2600.5512 (xpsp.080413-2108) 42.50 KB (43,520 bytes) 3/10/201 3 8:16 PM Microsoft Corporation c:\windows\system32\wbem\wbemsvc.dll fastprox 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 462.50 KB (473,6 00 bytes) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\syste m32\wbem\fastprox.dll msvcp60 6.02.3104.0 404.00 KB (413,696 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msvcp60.dll ntdsapi 5.1.2600.5512 (xpsp.080413-2113) 65.50 KB (67,072 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\ntdsapi.dll dnsapi 5.1.2600.6089 (xpsp_sp3_gdr.110302-1625) 146.00 KB (149,504 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\dnsa pi.dll msxml3 8.100.1053.0 1.12 MB (1,172,480 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msxml3.dll services 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 108.00 KB (110,5 92 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\syste m32\services.exe ncobjapi 5.1.2600.5512 (xpsp.080413-2108) 35.50 KB (36,352 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\ncobjapi.dll scesrv 5.1.2600.5512 (xpsp.080413-2113) 307.50 KB (314,880 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\scesrv.dll

umpnpmgr 5.1.2600.5512 (xpsp.080413-2111) 120.50 KB (123,392 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\umpn pmgr.dll shimeng 5.1.2600.5512 (xpsp.080413-2105) 63.50 KB (65,024 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\shimeng.dll acadproc 5.1.2600.5512 (xpsp.080413-2105) 38.50 KB (39,424 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\apppatch\acadproc.dll eventlog 5.1.2600.5512 (xpsp.080413-2111) 55.00 KB (56,320 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\eventlog.dll lsass 5.1.2600.5512 (xpsp.080413-2113) 13.00 KB (13,312 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\lsass.exe lsasrv 5.1.2600.6058 (xpsp_sp3_gdr.101220-1709) 713.00 KB (730,112 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\lsas rv.dll samsrv 5.1.2600.5512 (xpsp.080413-2113) 406.00 KB (415,744 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\samsrv.dll acgenral 5.1.2600.5512 (xpsp.080413-2105) 1.77 MB (1,852,928 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\apppatch\acge nral.dll msprivs 5.1.2600.5512 (xpsp.080413-2113) 47.00 KB (48,128 bytes) 4/13/200 8 4:53 PM Microsoft Corporation c:\windows\system32\msprivs.dll kerberos 5.1.2600.6059 (xpsp_sp3_gdr.101221-1626) 294.50 KB (301,5 68 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\syste m32\kerberos.dll netlogon 5.1.2600.5512 (xpsp.080413-2113) 397.50 KB (407,040 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\netl ogon.dll w32time 5.1.2600.5512 (xpsp.080413-2113) 171.00 KB (175,104 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\w32time.dll schannel 5.1.2600.6239 (xpsp_sp3_gdr.120601-1620) 149.00 KB (152,5 76 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\syste m32\schannel.dll wdigest 5.1.2600.5834 (xpsp_sp3_gdr.090624-1305) 53.00 KB (54,272 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wdigest.dll scecli 5.1.2600.5512 (xpsp.080413-2113) 177.00 KB (181,248 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\scecli.dll ipsecsvc 5.1.2600.5512 (xpsp.080413-0852) 179.50 KB (183,808 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\ipse csvc.dll oakley 5.1.2600.5886 (xpsp_sp3_gdr.091012-1253) 264.00 KB (270,336 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\oakl ey.dll winipsec 5.1.2600.5512 (xpsp.080413-0852) 31.50 KB (32,256 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\winipsec.dll mswsock 5.1.2600.5625 (xpsp_sp3_gdr.080620-1249) 239.50 KB (245,248 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msws ock.dll hnetcfg 5.1.2600.5512 (xpsp.080413-0852) 336.00 KB (344,064 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\hnetcfg.dll wshtcpip 5.1.2600.5512 (xpsp.080413-0852) 19.00 KB (19,456 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wshtcpip.dll pstorsvc 5.1.2600.5512 (xpsp.080413-2113) 33.50 KB (34,304 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\pstorsvc.dll psbase 5.1.2600.5512 (xpsp.080413-2113) 94.50 KB (96,768 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\psbase.dll dssenh 5.1.2600.5507 (xpsp.080318-1711) 135.50 KB (138,752 bytes) 4/13/2008 6:07 PM Microsoft Corporation c:\windows\system32\dssenh.dll svchost 5.1.2600.5512 (xpsp.080413-2111) 14.00 KB (14,336 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\svchost.exe rpcss 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 392.00 KB (401,408 bytes

) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\rpcs s.dll termsrv 5.1.2600.5512 (xpsp.080413-2111) 288.50 KB (295,424 bytes) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\termsrv.dll icaapi 5.1.2600.5512 (xpsp.080413-2111) 11.00 KB (11,264 bytes) 3/10/201 3 8:16 PM Microsoft Corporation c:\windows\system32\icaapi.dll mstlsapi 5.1.2600.5512 (xpsp.080413-2111) 113.50 KB (116,224 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\mstl sapi.dll activeds 5.1.2600.5512 (xpsp.080413-2113) 189.00 KB (193,536 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\acti veds.dll adsldpc 5.1.2600.5512 (xpsp.080413-2113) 140.00 KB (143,360 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\adsldpc.dll atl 3.05.2284 57.50 KB (58,880 bytes) 4/14/2008 12:41 AM Microsof t Corporation c:\windows\system32\atl.dll dhcpcsvc 5.1.2600.5512 (xpsp.080413-0852) 124.00 KB (126,976 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\dhcp csvc.dll wzcsvc 5.1.2600.5512 (xpsp.080413-0852) 472.50 KB (483,840 bytes) 4/14/2008 1:42 AM Microsoft Corporation c:\windows\system32\wzcsvc.dll rtutils 5.1.2600.5512 (xpsp.080413-0852) 43.00 KB (44,032 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\rtutils.dll wmi 5.1.2600.5512 (xpsp.080413-2113) 5.50 KB (5,632 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\wmi.dll eapolqec 5.1.2600.5512 (xpsp.080413-0852) 30.00 KB (30,720 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\eapolqec.dll qutil 5.1.2600.5512 (xpsp.080413-0852) 75.00 KB (76,800 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\qutil.dll dot3api 5.1.2600.5512 (xpsp.080413-0852) 25.50 KB (26,112 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\dot3api.dll esent 5.1.2600.5512 (xpsp.080413-2113) 1.03 MB (1,082,368 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\esent.dll rastls 5.1.2600.5886 (xpsp_sp3_gdr.091012-1253) 146.00 KB (149,504 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\rast ls.dll cryptui 5.131.2600.5512 (xpsp.080413-2113) 500.50 KB (512,512 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\cryptui.dll wininet 8.00.6001.19401 (longhorn_ie8_gdr.130201-1500) 895.00 KB (916,480 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wini net.dll normaliz 6.0.5441.0 (winmain(wmbla).060628-1735) 23.00 KB (23,552 bytes) 1/7/2009 6:20 PM Microsoft Corporation c:\windows\system32\normaliz.dll urlmon 8.00.6001.19401 (longhorn_ie8_gdr.130201-1500) 1.16 MB (1,212,928 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\urlm on.dll iertutil 8.00.6001.19401 (longhorn_ie8_gdr.130201-1500) 1.91 MB (2,004,9 92 bytes) 3/8/2009 4:32 AM Microsoft Corporation c:\windows\syste m32\iertutil.dll mprapi 5.1.2600.5512 (xpsp.080413-0852) 85.00 KB (87,040 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\mprapi.dll rasapi32 5.1.2600.5512 (xpsp.080413-0852) 231.50 KB (237,056 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\rasa pi32.dll rasman 5.1.2600.5512 (xpsp.080413-0852) 60.00 KB (61,440 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\rasman.dll tapi32 5.1.2600.5512 (xpsp.080413-0852) 177.50 KB (181,760 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\tapi32.dll raschap 5.1.2600.5886 (xpsp_sp3_gdr.091012-1253) 78.00 KB (79,872 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\raschap.dll

schedsvc 5.1.2600.5512 (xpsp.080413-2108) 188.00 KB (192,512 bytes ) 3/10/2013 8:18 PM Microsoft Corporation c:\windows\system32\sche dsvc.dll msidle 6.00.2900.5512 (xpsp.080413-2105) 6.50 KB (6,656 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\msidle.dll audiosrv 5.1.2600.5512 (xpsp.080413-0845) 41.50 KB (42,496 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\audiosrv.dll wkssvc 5.1.2600.5826 (xpsp_sp3_gdr.090609-1434) 129.00 KB (132,096 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wkss vc.dll cryptsvc 5.1.2600.5512 (xpsp.080413-2113) 61.00 KB (62,464 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\cryptsvc.dll certcli 5.1.2600.5512 (xpsp.080413-2113) 190.00 KB (194,560 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\certcli.dll dmserver 2600.5512.503.0 23.00 KB (23,552 bytes) 4/14/2008 12:41 AM Microsoft Corp. c:\windows\system32\dmserver.dll hidserv 5.1.2600.5512 (xpsp.080413-2108) 21.00 KB (21,504 bytes) 3/10/201 3 3:14 PM Microsoft Corporation c:\windows\system32\hidserv.dll hid 5.1.2600.5512 (xpsp.080413-2108) 20.50 KB (20,992 bytes) 4/14/200 8 1:41 AM Microsoft Corporation c:\windows\system32\hid.dll pchsvc 5.1.2600.5512 (xpsp.080413-2108) 37.50 KB (38,400 bytes) 3/10/201 3 8:18 PM Microsoft Corporation c:\windows\pchealth\helpctr\binaries\pch svc.dll es 2001.12.4414.706 248.00 KB (253,952 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\es.dll ersvc 5.1.2600.5512 (xpsp.080413-2108) 22.50 KB (23,040 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\ersvc.dll srvsvc 5.1.2600.6031 (xpsp_sp3_gdr.100826-1646) 97.50 KB (99,840 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\srvsvc.dll netman 5.1.2600.5512 (xpsp.080413-0852) 193.50 KB (198,144 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\netman.dll netshell 5.1.2600.5512 (xpsp.080413-0852) 1.63 MB (1,703,936 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\nets hell.dll credui 5.1.2600.5512 (xpsp.080413-2113) 160.00 KB (163,840 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\credui.dll dot3dlg 5.1.2600.5512 (xpsp.080413-0852) 9.00 KB (9,216 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\dot3dlg.dll onex 5.1.2600.5512 (xpsp.080413-0852) 141.00 KB (144,384 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\onex.dll eappcfg 5.1.2600.5512 (xpsp.080413-0852) 124.00 KB (126,976 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\eappcfg.dll eappprxy 5.1.2600.5512 (xpsp.080413-0852) 40.00 KB (40,960 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\eappprxy.dll wzcsapi 5.1.2600.5512 (xpsp.080413-0852) 51.50 KB (52,736 bytes) 4/14/200 8 1:42 AM Microsoft Corporation c:\windows\system32\wzcsapi.dll seclogon 5.1.2600.5512 (xpsp.080413-2113) 18.50 KB (18,944 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\seclogon.dll browser 5.1.2600.6260 (xpsp_sp3_gdr.120706-1619) 76.50 KB (78,336 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\browser.dll wuauserv 5.4.3790.5512 (xpsp.080413-0852) 6.50 KB (6,656 bytes) 3/10/2013 8:19 PM Microsoft Corporation c:\windows\system32\wuauserv.dll wmisvc 5.1.2600.5512 (xpsp.080413-2108) 141.50 KB (144,896 bytes) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\wbem\wmisvc. dll vssapi 5.1.2600.5512 (xpsp.080413-2108) 420.50 KB (430,592 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\vssapi.dll wuaueng 7.6.7600.256 (winmain_wtr_wsus3sp2(oobla).120602-1459) 1.84 MB (1,933,8 48 bytes) 3/10/2013 8:19 PM Microsoft Corporation c:\windows\syste m32\wuaueng.dll

winhttp 5.1.2600.6175 (xpsp_sp3_gdr.111116-1647) 346.50 KB (354,816 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\winh ttp.dll cabinet 5.1.2600.5512 (xpsp.080413-2105) 59.00 KB (60,416 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\cabinet.dll mspatcha 5.1.2600.5512 (xpsp.080413-2111) 29.00 KB (29,696 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\mspatcha.dll trkwks 5.1.2600.5512 (xpsp.080413-2108) 88.00 KB (90,112 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\trkwks.dll srsvc 5.1.2600.5512 (xpsp.080413-2108) 167.00 KB (171,008 bytes) 3/10/2013 8:18 PM Microsoft Corporation c:\windows\system32\srsvc.dll powrprof 6.00.2900.5512 (xpsp.080413-2105) 17.00 KB (17,408 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\powrprof.dll sens 5.1.2600.5512 (xpsp.080413-2108) 38.50 KB (39,424 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\sens.dll wscsvc 5.1.2600.5512 (xpsp.080413-2108) 79.00 KB (80,896 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\wscsvc.dll msi 4.5.6001.22159 4.24 MB (4,445,184 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msi.dll ipnathlp 5.1.2600.5512 (xpsp.080413-0852) 323.50 KB (331,264 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\ipna thlp.dll comsvcs 2001.12.4414.702 1.21 MB (1,267,200 bytes) 3/10/2013 8:16 P M Microsoft Corporation c:\windows\system32\comsvcs.dll colbact 2001.12.4414.700 59.00 KB (60,416 bytes) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\colbact.dll mtxclu 2001.12.4414.706 65.00 KB (66,560 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\mtxclu.dll wsock32 5.1.2600.5512 (xpsp.080413-0852) 22.00 KB (22,528 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\wsock32.dll clusapi 5.1.2600.5512 (xpsp.080413-2111) 57.00 KB (58,368 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\clusapi.dll resutils 5.1.2600.5512 (xpsp.080413-2111) 57.50 KB (58,880 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\resutils.dll wbemcore 5.1.2600.5512 (xpsp.080413-2108) 519.00 KB (531,456 bytes ) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\wbem \wbemcore.dll esscli 5.1.2600.5512 (xpsp.080413-2108) 242.00 KB (247,808 bytes) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\wbem\esscli. dll wmiutils 5.1.2600.5512 (xpsp.080413-2108) 93.00 KB (95,232 bytes) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\wbem\wmiutil s.dll repdrvfs 5.1.2600.5512 (xpsp.080413-2108) 174.00 KB (178,176 bytes ) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\wbem \repdrvfs.dll winrnr 5.1.2600.5512 (xpsp.080413-2113) 16.50 KB (16,896 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\winrnr.dll rasadhlp 5.1.2600.5512 (xpsp.080413-0852) 7.50 KB (7,680 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\rasadhlp.dll wmiprvsd 5.1.2600.5755 (xpsp_sp3_gdr.090206-1234) 442.50 KB (453,1 20 bytes) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\syste m32\wbem\wmiprvsd.dll wbemess 5.1.2600.5512 (xpsp.080413-2108) 267.50 KB (273,920 bytes) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\wbem\wbemess .dll ncprov 5.1.2600.5512 (xpsp.080413-2108) 46.00 KB (47,104 bytes) 3/10/201 3 8:16 PM Microsoft Corporation c:\windows\system32\wbem\ncprov.dll upnp 5.1.2600.5512 (xpsp.080413-0852) 130.50 KB (133,632 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\upnp.dll

ssdpapi 5.1.2600.5512 (xpsp.080413-0852) 34.00 KB (34,816 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\ssdpapi.dll netcfgx 5.1.2600.5512 (xpsp.080413-0852) 608.00 KB (622,592 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\netcfgx.dll tapisrv 5.1.2600.5512 (xpsp.080413-0852) 244.00 KB (249,856 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\tapisrv.dll rasmans 5.1.2600.5512 (xpsp.080413-0852) 182.00 KB (186,368 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\rasmans.dll rasdlg 5.1.2600.5512 (xpsp.080413-0852) 643.00 KB (658,432 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\rasdlg.dll rastapi 5.1.2600.5512 (xpsp.080413-0852) 57.00 KB (58,368 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\rastapi.dll unimdm 5.1.2600.5512 (xpsp.080413-0852) 202.00 KB (206,848 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\unimdm.tsp uniplat 5.1.2600.5512 (xpsp.080413-0852) 13.50 KB (13,824 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\uniplat.dll kmddsp 5.1.2600.5512 (xpsp.080413-0852) 32.50 KB (33,280 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\kmddsp.tsp ndptsp 5.1.2600.5512 (xpsp.080413-0852) 55.50 KB (56,832 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\ndptsp.tsp ipconf 5.1.2600.5512 (xpsp.080413-0852) 17.00 KB (17,408 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\ipconf.tsp h323 5.1.2600.5512 (xpsp.080413-0852) 259.50 KB (265,728 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\h323.tsp hidphone 5.1.2600.5512 (xpsp.080413-0852) 29.00 KB (29,696 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\hidphone.tsp rasppp 5.1.2600.5512 (xpsp.080413-0852) 206.00 KB (210,944 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\rasppp.dll ntlsapi 5.1.2600.5512 (xpsp.080413-2113) 8.00 KB (8,192 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\ntlsapi.dll rasqec 5.1.2600.5512 (xpsp.080413-0852) 60.50 KB (61,952 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\rasqec.dll cryptnet 5.131.2600.5512 (xpsp.080413-2113) 63.00 KB (64,512 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\cryptnet.dll sensapi 5.1.2600.5512 (xpsp.080413-2108) 7.00 KB (7,168 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\sensapi.dll advpack 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) 125.50 KB (128,5 12 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\syste m32\advpack.dll wuapi 7.6.7600.256 (winmain_wtr_wsus3sp2(oobla).120602-1459) 563.52 KB (577,0 48 bytes) 3/10/2013 8:19 PM Microsoft Corporation c:\windows\syste m32\wuapi.dll spoolsv 5.1.2600.6024 (xpsp_sp3_gdr.100817-1626) 57.50 KB (58,880 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\spoolsv.exe spoolss 5.1.2600.5512 (xpsp.080413-0852) 73.50 KB (75,264 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\spoolss.dll localspl 5.1.2600.6226 (xpsp_sp3_gdr.120511-1616) 337.50 KB (345,6 00 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\syste m32\localspl.dll cnbjmon 5.1.2600.2082 (xpsp(skatari).040213-0952) 46.00 KB (47,104 bytes) 4/14/2008 1:41 AM Microsoft Corporation c:\windows\system32\cnbjmon.dll pjlmon 5.1.2600.5512 (xpsp.080413-0852) 15.00 KB (15,360 bytes) 4/14/200 8 1:42 AM Microsoft Corporation c:\windows\system32\pjlmon.dll tcpmon 5.1.2600.5512 (xpsp.080413-0852) 44.50 KB (45,568 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\tcpmon.dll usbmon 5.1.2600.5512 (xpsp.080413-0852) 16.50 KB (16,896 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\usbmon.dll filterpipelineprintproc 6.1.2600.5635 (xpsp_sp3_qfe.080704-1744) 87.00 KB (89,088 bytes) 3/10/2013 8:38 PM Microsoft Corporation c:\windows\syste m32\spool\prtprocs\w32x86\filterpipelineprintproc.dll

win32spl 5.1.2600.5512 (xpsp.080413-0852) 100.00 KB (102,400 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\win3 2spl.dll netrap 5.1.2600.5512 (xpsp.080413-2113) 11.50 KB (11,776 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\netrap.dll inetpp 5.1.2600.5512 (xpsp.080413-0852) 73.50 KB (75,264 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\inetpp.dll explorer 6.00.2900.5512 (xpsp.080413-2105) 1,009.50 KB (1,033,728 b ytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\explorer.exe browseui 6.00.2900.6332 (xpsp_sp3_gdr.121224-1126) 1,001.00 KB (1,0 25,024 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\syste m32\browseui.dll shdocvw 6.00.2900.6332 (xpsp_sp3_gdr.121224-1126) 1.44 MB (1,510,400 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\shdo cvw.dll bushell 7.2.0.11 2.39 MB (2,504,088 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ bushell.dll gdiplus 5.2.6002.22791 (vistasp2_ldr.120203-0237) 1.67 MB (1,748,992 bytes ) 3/10/2013 8:57 PM Microsoft Corporation c:\windows\winsxs\x86_mi crosoft.windows.gdiplus_6595b64144ccf1df_1.0.6002.22791_x-ww_c8dff154\gdiplus.dl l msvcp100 10.00.40219.1 411.33 KB (421,200 bytes) 3/13/2013 11:53 AM Microsoft Corporation c:\program files\norton security suite\engine\20 .2.0.19\msvcp100.dll msvcr100 10.00.40219.1 755.83 KB (773,968 bytes) 3/13/2013 11:53 AM Microsoft Corporation c:\program files\norton security suite\engine\20 .2.0.19\msvcr100.dll ccl120u 12.2.0.8 688.95 KB (705,488 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ ccl120u.dll efacli 4.1.1.9 83.95 KB (85,968 bytes) 3/13/2013 11:53 AM Symantec Corpora tion c:\program files\norton security suite\engine\20.2.0.19\efacli.dll themeui 6.00.2900.5512 (xpsp.080413-2105) 376.50 KB (385,536 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\themeui.dll msimg32 5.1.2600.5512 (xpsp.080413-2105) 4.50 KB (4,608 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\msimg32.dll ccvrtrst 12.2.0.8 86.95 KB (89,040 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ ccvrtrst.dll ccset 12.2.0.8 336.95 KB (345,040 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ ccset.dll linkinfo 5.1.2600.5512 (xpsp.080413-2105) 19.50 KB (19,968 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\linkinfo.dll ntshrui 5.1.2600.5512 (xpsp.080413-2105) 140.00 KB (143,360 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\ntshrui.dll ieframe 8.00.6001.19401 (longhorn_ie8_gdr.130201-1500) 10.60 MB (11,111,424 byt es) 3/8/2009 4:39 AM Microsoft Corporation c:\windows\system32\iefr ame.dll mlang 6.00.2900.5512 (xpsp.080413-2105) 572.50 KB (586,240 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\mlang.dll msctf 5.1.2600.5512 (xpsp.080413-2105) 291.00 KB (297,984 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msctf.dll webcheck 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) 231.00 K B (236,544 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windo ws\system32\webcheck.dll stobject 5.1.2600.5512 (xpsp.080413-2105) 119.00 KB (121,856 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\stob ject.dll

batmeter 6.00.2900.5512 (xpsp.080413-2105) 28.50 KB (29,184 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\batmeter.dll WPDShServiceObj 5.2.5721.5145 (WMP_11.061018-2006) 130.50 KB (133,632 bytes ) 10/18/2006 9:47 PM Microsoft Corporation c:\windows\system32\wpds hserviceobj.dll mydocs 6.00.2900.5512 (xpsp.080413-2105) 88.50 KB (90,624 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\mydocs.dll PortableDeviceTypes 5.2.5721.5145 (WMP_11.061018-2006) 163.00 KB (166,9 12 bytes) 10/18/2006 9:47 PM Microsoft Corporation c:\windows\syste m32\portabledevicetypes.dll PortableDeviceApi 5.2.5721.5145 (WMP_11.061018-2006) 277.50 KB (284,1 60 bytes) 10/18/2006 9:47 PM Microsoft Corporation c:\windows\syste m32\portabledeviceapi.dll drprov 5.1.2600.5512 (xpsp.080413-2111) 14.00 KB (14,336 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\drprov.dll ntlanman 5.1.2600.5512 (xpsp.080413-2108) 43.00 KB (44,032 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\ntlanman.dll netui0 5.1.2600.5512 (xpsp.080413-2108) 79.00 KB (80,896 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\netui0.dll netui1 5.1.2600.5512 (xpsp.080413-2108) 240.00 KB (245,760 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\netui1.dll davclnt 5.1.2600.5512 (xpsp.080413-2111) 24.50 KB (25,088 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\davclnt.dll asoehook 20.2.0.19 563.90 KB (577,432 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\asoehook.dll mbamext 1.70.0.0000 77.35 KB (79,208 bytes) 3/13/2013 12:43 PM Malwareb ytes Corporation c:\program files\malwarebytes' anti-malware\mbamext.dll wzshlstb 4.1 (32-bit) 10.82 KB (11,080 bytes) 4/5/2010 2:50 PM WinZip Computing, S.L. c:\program files\winzip\wzshlstb.dll navshext 20.2.0.19 170.40 KB (174,488 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\navshext.dll xpsp1res 5.1.2600.5512 (xpsp.080413-2113) 183.00 KB (187,392 bytes ) 4/13/2008 6:09 PM Microsoft Corporation c:\windows\system32\xpsp 1res.dll pdfshell 11.0.01.36 387.22 KB (396,512 bytes) 12/18/2012 2:08 PM Adobe Systems, Inc. c:\program files\common files\adobe\acrobat\acti vex\pdfshell.dll browselc 6.00.2900.5512 (xpsp.080413-2105) 62.00 KB (63,488 bytes) 4/13/2008 5:33 PM Microsoft Corporation c:\windows\system32\browselc.dll duser 5.1.2600.5512 (xpsp.080413-2105) 297.00 KB (304,128 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\duser.dll actxprxy 6.00.2900.5512 (xpsp.080413-2113) 96.00 KB (98,304 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\actxprxy.dll isoshell 1, 0, 0, 2 59.39 KB (60,816 bytes) 3/14/2013 8:06 AM EZB Systems, Inc. c:\program files\ultraiso\isoshell.dll wzcdlg 5.1.2600.5512 (xpsp.080413-0852) 374.50 KB (383,488 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wzcdlg.dll ccipc 12.2.0.8 155.45 KB (159,184 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ ccipc.dll bucomm 7.2.0.11 430.40 KB (440,728 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ bucomm.dll bueng 2.00.706.36 1.26 MB (1,318,768 bytes) 3/13/2013 11:53 AM SwapDrive, Inc. c:\program files\norton security suite\engine\20.2.0.19\bueng.dl l wups 7.6.7600.256 (winmain_wtr_wsus3sp2(oobla).120602-1459) 35.02 KB (35,864 bytes) 3/10/2013 8:19 PM Microsoft Corporation c:\windows\system32\wups

.dll rundll32 5.1.2600.5512 (xpsp.080413-2105) 32.50 KB (33,280 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\rundll32.exe nvmctray 6.14.12.8558 198.31 KB (203,072 bytes) 2/28/2011 9:11 P M NVIDIA Corporation c:\windows\system32\nvmctray.dll nvapi 6.14.12.8558 2.34 MB (2,449,408 bytes) 3/10/2013 8:27 PM NVIDIA Corporation c:\windows\system32\nvapi.dll rthdcpl 2.2.1.0 16.08 MB (16,862,208 bytes) 3/11/2013 10:20 PM Realtek Semiconductor Corp. c:\windows\rthdcpl.exe dsound 5.3.2600.5512 (xpsp.080413-0845) 359.00 KB (367,616 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\dsound.dll hhctrl 5.2.3790.4110 (srv03_sp2_qfe.070702-2345) 532.50 KB (545,280 bytes ) 4/14/2008 12:39 AM Microsoft Corporation c:\windows\system32\hhct rl.ocx ksuser 5.3.2600.5512 (xpsp.080413-0845) 4.00 KB (4,096 bytes) 3/10/201 3 8:28 PM Microsoft Corporation c:\windows\system32\ksuser.dll ctfmon 5.1.2600.5512 (xpsp.080413-2105) 15.00 KB (15,360 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\ctfmon.exe msutb 5.1.2600.5512 (xpsp.080413-2105) 190.50 KB (195,072 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msutb.dll robotaskbaricon 7-7-9-5 106.77 KB (109,336 bytes) 3/10/2013 10:05 PM Siber Systems c:\program files\siber systems\ai roboform\robotaskbaricon.exe umengx86 7.6.0.7 283.43 KB (290,232 bytes) 3/1/2013 1:09 AM Symantec Corporation c:\documents and settings\all users\application data\nor ton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definitions\bashdefs\2 0130301.001\umengx86.dll roboform 7-7-9-5 3.47 MB (3,635,480 bytes) 3/10/2013 10:05 PM Siber Systems Inc. c:\program files\siber systems\ai roboform\roboform.dll oleacc 7.0.2600.6153 (xpsp_sp3_gdr(oobla).110926-1140) 215.00 KB (220,160 bytes ) 8/23/2001 7:00 AM Microsoft Corporation c:\windows\system32\olea cc.dll WinCinemaMgr 2.0.5 272.00 KB (278,528 bytes) 3/12/2013 1:19 PM InterVideo Inc. c:\program files\intervideo\common\bin\wincinemamgr.exe mfc42 6.02.8081.0 956.00 KB (978,944 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\mfc42.dll voip321 3, 8, 3, 0 368.00 KB (376,832 bytes) 5/3/2007 3:52 PM Philips c:\program files\philips\voip321\voip321.exe eni_fp Not Available 54.00 KB (55,296 bytes) 10/13/2006 12:39 PM Not Avai lable c:\program files\philips\voip321\eni_fp.dll skype 3.8.0.188 20.63 MB (21,633,320 bytes) 11/7/2008 1:31 PM Skype Technologies S.A. c:\program files\skype\phone\skype.exe shfolder 6.00.2900.5512 (xpsp.080413-2105) 24.50 KB (25,088 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\shfolder.dll olepro32 5.1.2600.5512 83.00 KB (84,992 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\olepro32.dll dxdiagn 5.03.2600.5512 (xpsp.080413-0845) 2.02 MB (2,113,536 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\dxdiagn.dll devenum 6.05.2600.5512 58.50 KB (59,904 bytes) 4/14/2008 12:41 AM Microsof t Corporation c:\windows\system32\devenum.dll msdmo 6.05.2600.5512 14.00 KB (14,336 bytes) 4/14/2008 12:42 AM Microsof t Corporation c:\windows\system32\msdmo.dll DkService 15.0.951.0 2.05 MB (2,148,176 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\dkservi ce.exe pdh 5.1.2600.5773 (xpsp_sp3_gdr.090306-1225) 277.50 KB (284,160 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\pdh. dll odbcbcp 2000.085.1132.00 (xpsp.080413-0852) 24.00 KB (24,576 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\odbcbcp.dll mjs 4.0.106.0 111.34 KB (114,016 bytes) 8/30/2010 11:13 AM

Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\mjs.dll fltlib 5.1.2600.5512 (xpsp.080413-2111) 16.50 KB (16,896 bytes) 3/10/201 3 8:18 PM Microsoft Corporation c:\windows\system32\fltlib.dll dklib 15.0.951.0 213.83 KB (218,960 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\dklib.d ll msvcr100 10.00.40219.1 755.83 KB (773,968 bytes) 2/18/2011 2:10 P M Microsoft Corporation c:\windows\system32\msvcr100.dll msvcp100 10.00.40219.1 411.33 KB (421,200 bytes) 2/19/2011 12:33 PM Microsoft Corporation c:\windows\system32\msvcp100.dll prfacade 15.0.951.0 74.83 KB (76,624 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\prfacad e.dll tab 3.0.42.0 302.08 KB (309,330 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\tab.dll dkres 15.0.951.0 3.99 MB (4,189,008 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\1033\dk res.dll DkTabProvider 15.0.951.0 121.21 KB (124,118 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\dktabpr ovider.dll mjscr 4.0.106.0 174.84 KB (179,040 bytes) 8/30/2010 11:13 AM Diskeeper Corporation c:\program files\common files\diskeeper corporation\mjs\ mjscr.dll perfos 5.1.2600.5512 (xpsp.080413-2111) 24.50 KB (25,088 bytes) 4/14/200 8 12:42 AM Microsoft Corporation c:\windows\system32\perfos.dll perfproc 5.1.2600.5512 (xpsp.080413-2111) 34.00 KB (34,816 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\perfproc.dll wmidcprv 5.1.2600.5512 (xpsp.080413-2108) 137.50 KB (140,800 bytes ) 3/10/2013 8:16 PM Microsoft Corporation c:\windows\system32\wbem \wmidcprv.dll NsIfaastMeas 15.0.951.0 98.36 KB (100,718 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\nsifaas tmeas.dll NsNtfsAutoAnalyze 15.0.951.0 141.18 KB (144,570 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\d iskeeper\nsntfsautoanalyze.dll NsNtfsJIT 15.0.951.0 140.95 KB (144,328 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\nsntfsj it.dll NsNtfsBootOptimization 15.0.951.0 116.55 KB (119,346 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\d iskeeper\nsntfsbootoptimization.dll NsNtfsTve 15.0.951.0 198.22 KB (202,978 bytes) 3/3/2011 1:49 PM Diskeeper Corporation c:\program files\diskeeper corporation\diskeeper\nsntfst ve.dll jqs 10.17.2.02 166.91 KB (170,912 bytes) 3/10/2013 8:24 PM Oracle Corporation c:\program files\java\jre7\bin\jqs.exe msvcr100 10.00.30319.1 752.33 KB (770,384 bytes) 3/10/2013 8:24 P M Microsoft Corporation c:\program files\java\jre7\bin\msvcr100.dll perfdisk 5.1.2600.5512 (xpsp.080413-2111) 26.00 KB (26,624 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\perfdisk.dll ccsvchst 12.2.0.8 140.55 KB (143,928 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\ccsvchst.exe dbghelp 5.1.2600.5512 (xpsp.080413-2105) 625.00 KB (640,000 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\dbghelp.dll ccsvc 12.2.0.8 145.45 KB (148,944 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ ccsvc.dll

srtsp32 14.1.1.9 398.02 KB (407,568 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ srtsp32.dll dimaster 8.2.0.19 522.87 KB (535,416 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\dimaster.dll isdatasv 20.2.0.19 1.11 MB (1,164,184 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\isdatasv.dll isdatapr 20.2.1.6 1.67 MB (1,746,328 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\isdatapr.dll cosvcplg 2013.3.1.3 796.83 KB (815,952 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\cosvcplg.dll ccgevt 12.2.0.8 281.95 KB (288,720 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ ccgevt.dll ccglog 12.2.0.8 201.95 KB (206,800 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ ccglog.dll ccjobmgr 12.2.0.8 391.45 KB (400,848 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\ccjobmgr.dll ccsubeng 12.2.0.8 316.45 KB (324,048 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\ccsubeng.dll ccemlpxy 12.2.0.8 202.45 KB (207,312 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\ccemlpxy.dll iron 3.1.1.3 581.94 KB (595,904 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\iron.dll symredir 13.1.0.8 72.48 KB (74,224 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ symredir.dll busvc 7.2.0.11 573.90 KB (587,672 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ busvc.dll sndsvc 13.1.0.8 245.48 KB (251,376 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ sndsvc.dll symrdrsv 13.1.0.8 39.48 KB (40,432 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ symrdrsv.dll hncore 20.2.0.19 463.40 KB (474,520 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ hncore.dll appmgr32 20.1.0.22 277.45 KB (284,112 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\appmgr32.dll symneti 13.1.0.8 234.48 KB (240,112 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ symneti.dll avmodule 20.1.0.22 1.69 MB (1,767,376 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\avmodule.dll ncw 20.2.0.19 3.59 MB (3,768,728 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ ncw.dll avpsvc32 20.2.0.19 699.90 KB (716,696 bytes) 3/13/2013 11:53

AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\avpsvc32.dll sqsvc 4.2.0.7 1.47 MB (1,544,088 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\sqsvc.dl l cltpe 13.2.0.9 809.48 KB (828,912 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ cltpe.dll idsxpx86 11.1.1.5 776.97 KB (795,616 bytes) 3/18/2013 5:44 P M Symantec Corporation c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definitions\ip sdefs\20130316.002\idsxpx86.dll avifc 20.1.0.22 490.45 KB (502,224 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ avifc.dll codatapr 2013.2.0.18 932.40 KB (954,776 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\codatapr.dll coshdobj 2013.2.0.18 524.90 KB (537,496 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\coshdobj.dll budatacl 7.2.0.11 232.40 KB (237,976 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\budatacl.dll tudatapr 7.2.0.4 112.40 KB (115,096 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ tudatapr.dll buprov 7.2.0.11 506.40 KB (518,552 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ buprov.dll gwrks32 3.56.054.16 365.46 KB (374,232 bytes) 3/13/2013 11:53 AM GEAR-Software c:\program files\norton security suite\engine\20.2.0.19\gwrks32. dll gearaw32 3.56.054.16 3.73 MB (3,914,712 bytes) 3/13/2013 11:53 AM GEAR-Software c:\program files\norton security suite\engine\20.2.0.19\ gearaw32.dll qsplugin 20.2.0.19 235.90 KB (241,560 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\qsplugin.dll cltlms 13.2.0.9 945.98 KB (968,688 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ cltlms.dll nahelper 4.2.0.10 765.87 KB (784,248 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\nahelper.dll bhsvcplg 7.0.0.226 143.99 KB (147,448 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\bhsvcplg.dll spocclnt 4.2.0.10 570.87 KB (584,568 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\spocclnt.dll dscli 2.1.1.9 639.45 KB (654,800 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\dscli.dl l datastor 4.2.0.10 1.01 MB (1,062,776 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\datastor.dll comm 4.2.0.10 917.37 KB (939,384 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ comm.dll

sqlite 4.2.0.10 337.87 KB (345,976 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ sqlite.dll bhclient 7.0.0.226 193.99 KB (198,648 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\bhclient.dll ipsplug 11.1.0.73 121.97 KB (124,896 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ ipsplug.dll fwcore 20.2.0.19 462.40 KB (473,496 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ fwcore.dll distrptr 8.2.0.19 308.87 KB (316,280 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\distrptr.dll bhengine 7.6.0.7 1.81 MB (1,893,304 bytes) 3/1/2013 1:09 AM Symantec Corporation c:\documents and settings\all users\application data\nor ton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definitions\bashdefs\2 0130301.001\bhengine.dll proxyclt 4.2.0.10 100.37 KB (102,776 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\proxyclt.dll fwgenplg 20.2.0.19 170.40 KB (174,488 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\fwgenplg.dll fwsetup 20.2.0.19 195.90 KB (200,600 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ fwsetup.dll avmail 20.1.0.22 95.95 KB (98,256 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\avmail.d ll asengine 20.2.0.19 3.87 MB (4,059,544 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\asengine.dll qbackup 20.1.0.22 110.45 KB (113,104 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ qbackup.dll imcfg 20.2.0.19 72.90 KB (74,648 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\imcfg.dl l avpapp32 20.2.0.19 523.40 KB (535,960 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\avpapp32.dll ashelper 20.2.0.19 517.40 KB (529,816 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\ashelper.dll idsxpx86 11.1.1.5 776.97 KB (795,616 bytes) 3/19/2013 8:17 P M Symantec Corporation c:\documents and settings\all users\application data\norton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definitions\ip sdefs\20130319.002\idsxpx86.dll numeng 20.2.0.19 233.90 KB (239,512 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ numeng.dll lue 1.9.2.5 917.95 KB (939,976 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\lue.dll cltlmj 13.2.0.9 828.98 KB (848,880 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ cltlmj.dll nvsvc32 6.14.12.8558 291.31 KB (298,304 bytes) 2/28/2011 9:11 PM NVIDIA Corporation c:\windows\system32\nvsvc32.exe

npctray 20.2.0.19 523.40 KB (535,960 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ npctray.dll uimain 20.2.0.19 905.90 KB (927,640 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ uimain.dll d3d9 5.03.2600.5512 (xpsp.080413-0845) 1.61 MB (1,689,088 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\d3d9.dll d3d8thk 5.03.2600.5512 (xpsp.080413-0845) 8.00 KB (8,192 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\d3d8thk.dll symhtml 7.2.0.31 2.87 MB (3,004,824 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ symhtml.dll windowscodecs 6.0.6001.17009 (longhorn.070920-1905) 696.00 KB (712,704 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\wind owscodecs.dll buuiplg 7.2.0.11 254.40 KB (260,504 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ buuiplg.dll cltaldis 13.2.0.9 2.42 MB (2,532,336 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\cltaldis.dll cltres 13.2.0.9 499.98 KB (511,984 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\mui\20.2.0.19\09\ 01\cltres.loc fwsesal 20.2.0.19 514.90 KB (527,256 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ fwsesal.dll coactmgr 2013.2.0.18 1.29 MB (1,350,040 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20 .2.0.19\coactmgr.dll wincfi39 3.9.1.0 682.89 KB (699,280 bytes) 3/13/2013 11:53 AM Not Available c:\program files\norton security suite\engine\20.2.0.19\wincfi39 .dll sdkcmn 6.0.0.11 574.43 KB (588,216 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ sdkcmn.dll uialert 20.2.0.19 890.90 KB (912,280 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ uialert.dll userctxt 4.2.0.10 26.37 KB (27,000 bytes) 3/13/2013 11:53 AM Symantec Corporation c:\program files\norton security suite\engine\20.2.0.19\ userctxt.dll YahooMessenger 11,5,0,0228 6.29 MB (6,595,928 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\yahoomessenger.exe yimage 11,5,0,0228 248.00 KB (253,952 bytes) 3/18/2013 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\yimage.dll msvcr80 8.00.50727.6195 617.83 KB (632,656 bytes) 5/14/2011 1:17 AM Microsoft Corporation c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3 b_8.0.50727.6195_x-ww_44262b86\msvcr80.dll ylog 1.0.0.56036 46.50 KB (47,616 bytes) 3/18/2013 4:03 PM Yahoo! I nc. c:\program files\yahoo!\messenger\ylog.dll msvcp80 8.00.50727.6195 541.83 KB (554,832 bytes) 5/14/2011 1:12 AM Microsoft Corporation c:\windows\winsxs\x86_microsoft.vc80.crt_1fc8b3b9a1e18e3 b_8.0.50727.6195_x-ww_44262b86\msvcp80.dll riched20 5.30.23.1230 423.50 KB (433,664 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\riched20.dll YCPFoundation 9.0.0.56036 1.02 MB (1,069,056 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\ycpfoundation.dll nspr4 4.8.3.0 180.00 KB (184,320 bytes) 3/18/2013 4:03 PM Yahoo! I

nc. c:\program files\yahoo!\messenger\nspr4.dll yui 2008, 2, 1, 1 900.00 KB (921,600 bytes) 3/18/2013 4:03 PM Not Available c:\program files\yahoo!\messenger\yui.dll ymsglite 1.0.0.56036 1.45 MB (1,515,520 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\ymsglite.dll yhttp 2.5.0.56036 296.00 KB (303,104 bytes) 3/18/2013 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\yhttp.dll rgx 2.0.0.56036 196.00 KB (200,704 bytes) 3/18/2013 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\rgx.dll ycpssl 1.3.0.56036 744.00 KB (761,856 bytes) 3/18/2013 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\ycpssl.dll yalertcenterM 2008, 1, 2, 1 196.00 KB (200,704 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\yalertcenterm.dll ymdm_audio 1.0.0.56036 180.00 KB (184,320 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\ymdm_audio.dll rmc_audio 1.0.0.56036 1.90 MB (1,994,752 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\rmc_audio.dll ymdm_video 1.0.0.56036 88.00 KB (90,112 bytes) 3/18/2013 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\ymdm_video.dll core_video 1.0.0.56036 2.14 MB (2,248,704 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\core_video.dll ddraw 5.03.2600.5512 (xpsp.080413-0845) 273.00 KB (279,552 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\ddraw.dll dciman32 5.1.2600.5512 (xpsp.080413-2105) 8.50 KB (8,704 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\dciman32.dll pcre Not Available 76.50 KB (78,336 bytes) 3/18/2013 4:03 PM Not Avai lable c:\program files\yahoo!\messenger\pcre.dll xmllite 1.00.1018.0 119.00 KB (121,856 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\xmllite.dll ConnectionWizard 1.0.0.56036 140.00 KB (143,360 bytes) 3/18/201 3 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\connectionwiza rd.dll res_msgr 11, 6, 0, 1 1.35 MB (1,417,216 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\resources\en-us\res_ms gr.dll Flash32_11_6_602_180 11,6,602,180 13.93 MB (14,606,552 bytes) 3/13/201 3 7:45 PM Adobe Systems, Inc. c:\windows\system32\macromed\flash\flash 32_11_6_602_180.ocx mscms 5.1.2600.5627 (xpsp_sp3_gdr.080624-1245) 72.50 KB (74,240 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\mscms.dll ft60 11,5,0,0228 192.00 KB (196,608 bytes) 3/18/2013 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\ft60.dll mshtml 8.00.6001.19403 (longhorn_ie8_gdr_escrow.130227-1745) 5.73 MB (6,011,3 92 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\syste m32\mshtml.dll msls31 3.10.349.0 152.50 KB (156,160 bytes) 8/23/2001 7:00 AM Microsoft Corporation c:\windows\system32\msls31.dll YPluginRegistry 2.2.0.56036 464.00 KB (475,136 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\ypluginregistry.dll yml 3,0,0,2 32.50 KB (33,280 bytes) 3/18/2013 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\yml.dll msimtf 5.1.2600.5512 (xpsp.080413-2105) 155.50 KB (159,232 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msimtf.dll jscript 5.8.6001.23141 709.50 KB (726,528 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\jscript.dll imgutil 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) 34.00 KB (34,816 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\imgu til.dll pngfilt 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) 45.50 KB (46,592 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\pngf

ilt.dll yinidom 0.2.0.56036 19.50 KB (19,968 bytes) 3/18/2013 4:03 PM Yahoo! I nc. c:\program files\yahoo!\messenger\yinidom.dll ypagerps 9,5,0,100 68.00 KB (69,632 bytes) 3/18/2013 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\ypagerps.dll msoxmlmf 12.0.6500.5000 42.38 KB (43,392 bytes) 2/26/2009 3:45 PM Microsoft Corporation c:\progra~1\common~1\micros~1\office12\msoxmlmf.dll ymsdk 1.0.0.56036 3.72 MB (3,903,488 bytes) 3/18/2013 4:03 PM Yahoo! Inc. c:\program files\yahoo!\messenger\ymsdk.dll rmc_video 1.0.0.56036 288.00 KB (294,912 bytes) 3/18/2013 4:03 P M Yahoo! Inc. c:\program files\yahoo!\messenger\rmc_video.dll ddrawex 5.03.2600.5512 (xpsp.080413-0845) 26.50 KB (27,136 bytes) 4/14/200 8 12:41 AM Microsoft Corporation c:\windows\system32\ddrawex.dll d3dim 5.1.2600.0 (xpclient.010817-1148) 426.00 KB (436,224 bytes) 8/23/2001 7:00 AM Microsoft Corporation c:\windows\system32\d3dim.dll quartz 6.05.2600.6333 1.23 MB (1,292,288 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\quartz.dll msxml6 6.20.2502.0 1.31 MB (1,371,648 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\msxml6.dll dxtrans 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) 211.00 KB (216,0 64 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\syste m32\dxtrans.dll dxtmsft 8.00.6001.18702 (longhorn_ie8_rtm(wmbla).090308-0339) 340.00 KB (348,1 60 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\syste m32\dxtmsft.dll firefox 19.0.2 895.90 KB (917,400 bytes) 3/17/2013 4:38 PM Mozilla Corporation c:\program files\mozilla firefox\firefox.exe msvcr100 10.00.30319.1 752.33 KB (770,384 bytes) 3/17/2013 4:38 P M Microsoft Corporation c:\program files\mozilla firefox\msvcr100.dll mozglue 19.0.2 128.40 KB (131,480 bytes) 3/17/2013 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\mozglue.dll nspr4 4.9.4 168.40 KB (172,440 bytes) 3/17/2013 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\nspr4.dll msvcp100 10.00.30319.1 411.33 KB (421,200 bytes) 3/17/2013 4:38 P M Microsoft Corporation c:\program files\mozilla firefox\msvcp100.dll mozjs Not Available 2.93 MB (3,069,848 bytes) 3/17/2013 4:38 PM Not Available c:\program files\mozilla firefox\mozjs.dll plc4 4.9.4 21.40 KB (21,912 bytes) 3/17/2013 4:38 PM Mozilla Foundati on c:\program files\mozilla firefox\plc4.dll plds4 4.9.4 20.90 KB (21,400 bytes) 3/17/2013 4:38 PM Mozilla Foundati on c:\program files\mozilla firefox\plds4.dll nssutil3 3.14.1.0 101.90 KB (104,344 bytes) 3/17/2013 4:38 P M Mozilla Foundation c:\program files\mozilla firefox\nssutil3.dll nss3 3.14.1.0 Basic ECC 626.90 KB (641,944 bytes) 3/17/2013 4:38 P M Mozilla Foundation c:\program files\mozilla firefox\nss3.dll smime3 3.14.1.0 Basic ECC 89.90 KB (92,056 bytes) 3/17/2013 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\smime3.dll ssl3 3.14.1.0 Basic ECC 151.90 KB (155,544 bytes) 3/17/2013 4:38 P M Mozilla Foundation c:\program files\mozilla firefox\ssl3.dll mozsqlite3 3.7.14.1 793.40 KB (812,440 bytes) 3/17/2013 4:38 P M sqlite.org c:\program files\mozilla firefox\mozsqlite3.dll mozalloc 19.0.2 15.90 KB (16,280 bytes) 3/17/2013 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\mozalloc.dll gkmedias 19.0.2 2.82 MB (2,954,136 bytes) 3/17/2013 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\gkmedias.dll usp10 1.0420.2600.5969 (xpsp_sp3_gdr.100416-1716) 396.50 KB (406,016 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\usp1 0.dll xul 19.0.2 17.06 MB (17,887,640 bytes) 3/17/2013 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\xul.dll

xpcom 19.0.2 18.90 KB (19,352 bytes) 3/17/2013 4:38 PM Mozilla Foundati on c:\program files\mozilla firefox\xpcom.dll browsercomps 19.0.2 256.90 KB (263,064 bytes) 3/17/2013 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\components\browsercomps .dll feclient 5.1.2600.5512 (xpsp.080413-2113) 21.00 KB (21,504 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\feclient.dll ipsffpl 11.3.0.9 382.40 KB (391,576 bytes) 3/13/2013 11:51 AM Symantec Corporation c:\documents and settings\all users\application data\nor ton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\ipsffplgn\components\i psffpl.dll scxpx86 11.3.0.9 1.19 MB (1,252,248 bytes) 3/19/2013 8:17 PM Symantec Corporation c:\documents and settings\all users\application data\nor ton\{0c55c096-0f1d-4f28-aaa2-85ef591126e7}\n360_20.1.0.24\definitions\ipsdefs\20 130319.002\scxpx86.dll softokn3 3.14.1.0 Basic ECC 148.40 KB (151,960 bytes) 3/17/201 3 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\softokn 3.dll nssdbm3 3.14.1.0 Basic ECC 89.40 KB (91,544 bytes) 3/17/2013 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\nssdbm3.dll freebl3 3.14.1.0 Basic ECC 270.90 KB (277,400 bytes) 3/17/2013 4:38 P M Mozilla Foundation c:\program files\mozilla firefox\freebl3.dll nssckbi 1.93 366.40 KB (375,192 bytes) 3/17/2013 4:38 PM Mozilla Foundation c:\program files\mozilla firefox\nssckbi.dll t2embed 5.1.2600.6031 (xpsp_sp3_gdr.100826-1646) 117.00 KB (119,808 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\t2em bed.dll lz32 5.1.2600.0 (xpclient.010817-1148) 2.50 KB (2,560 bytes) 8/23/200 1 7:00 AM Microsoft Corporation c:\windows\system32\lz32.dll rf-firefox 7-7-9-5 1.49 MB (1,564,432 bytes) 3/10/2013 10:05 PM Siber Systems Inc. c:\program files\siber systems\ai roboform\firefox\rf-fi refox.dll icm32 5.1.2600.5512 (xpsp.080413-2105) 249.00 KB (254,976 bytes) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\icm32.dll shimgvw 6.00.2900.6072 (xpsp_sp3_gdr.110121-1719) 429.00 KB (439,296 bytes ) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\shim gvw.dll plugin-container 19.0.2 16.90 KB (17,304 bytes) 3/17/2013 4:38 PM Mozilla Corporation c:\program files\mozilla firefox\plugin-container.exe NPSWF32_11_6_602_180 11,6,602,180 14.04 MB (14,717,144 bytes) 3/13/201 3 7:47 PM Adobe Systems, Inc. c:\windows\system32\macromed\flash\npswf 32_11_6_602_180.dll helpctr 5.1.2600.5512 (xpsp.080413-2108) 751.00 KB (769,024 bytes) 3/10/2013 8:18 PM Microsoft Corporation c:\windows\pchealth\helpctr\bina ries\helpctr.exe hcappres 5.1.2600.0 (xpclient.010817-1148) 6.50 KB (6,656 bytes) 3/10/2013 8:19 PM Microsoft Corporation c:\windows\pchealth\helpctr\bina ries\hcappres.dll itss 5.2.3790.4186 (srv03_sp2_qfe.071108-1306) 135.00 KB (138,240 bytes ) 4/14/2008 12:41 AM Microsoft Corporation c:\windows\system32\itss .dll pchshell 5.1.2600.5512 (xpsp.080413-2108) 100.50 KB (102,912 bytes ) 3/10/2013 8:18 PM Microsoft Corporation c:\windows\pchealth\help ctr\binaries\pchshell.dll vbscript 5.8.6001.23141 411.00 KB (420,864 bytes) 4/14/2008 12:42 AM Microsoft Corporation c:\windows\system32\vbscript.dll msinfo 7, 0, 0, 0 368.00 KB (376,832 bytes) 3/10/2013 8:18 PM c:\windows\pchealth\helpctr\binaries\msinfo.dll mfc42u 6.02.8081.0 952.00 KB (974,848 bytes) 4/3/2007 3:44 AM Microsoft Corporation c:\windows\system32\mfc42u.dll

riched32 5.1.2600.0 (xpclient.010817-1148) 3.50 KB (3,584 bytes) 8/23/2001 7:00 AM Microsoft Corporation c:\windows\system32\riched32.dll helpsvc 5.1.2600.5997 (xpsp_sp3_gdr.100614-1759) 727.00 KB (744,448 bytes ) 3/10/2013 8:18 PM Microsoft Corporation c:\windows\pchealth\help ctr\binaries\helpsvc.exe [Services] Display Name Name State Start Mode Service Type Path Error Co ntrol Start Name Tag ID Alerter Alerter Stopped Disabled Share Process c:\windows\system32\svch ost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Application Layer Gateway Service ALG Running Manual Own Process c:\windows\system32\alg.exe Normal NT AUTHORITY\LocalService 0 Application Management AppMgmt Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 ASP.NET State Service aspnet_state Stopped Manual Own Process c:\windo ws\microsoft.net\framework\v2.0.50727\aspnet_state.exe Normal NT AUTHORITY\Net workService 0 Windows Audio AudioSrv Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Background Intelligent Transfer Service BITS Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Computer Browser Browser Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Indexing Service CiSvc Stopped Manual Share Process c:\windows\syste m32\cisvc.exe Normal LocalSystem 0 ClipBook ClipSrv Stopped Disabled Own Process c:\windows\syste m32\clipsrv.exe Normal LocalSystem 0 .NET Runtime Optimization Service v2.0.50727_X86 clr_optimization_v2.0.50 727_32 Stopped Disabled Own Process c:\windows\microsoft.net\framewo rk\v2.0.50727\mscorsvw.exe Ignore LocalSystem 0 Microsoft .NET Framework NGEN v4.0.30319_X86 clr_optimization_v4.0.30319_32 Stopped Auto Own Process c:\windows\microsoft.net\framework\v4.0.30319\ms corsvw.exe Ignore LocalSystem 0 COM+ System Application COMSysApp Stopped Manual Own Process c:\windo ws\system32\dllhost.exe /processid:{02d4b3f1-fd88-11d1-960d-00805fc79235} Normal LocalSystem 0 Cryptographic Services CryptSvc Running Auto Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 DCOM Server Process Launcher DcomLaunch Running Auto Share Process c:\windows\system32\svchost -k dcomlaunch Normal LocalSystem 0 DHCP Client Dhcp Running Auto Share Process c:\windows\system32\svch ost.exe -k netsvcs Normal LocalSystem 0 Diskeeper Diskeeper Running Auto Own Process "c:\program file s\diskeeper corporation\diskeeper\dkservice.exe" Normal LocalSystem 0 Logical Disk Manager Administrative Service dmadmin Stopped Manual Share Pr ocess c:\windows\system32\dmadmin.exe /com Normal LocalSystem 0 Logical Disk Manager dmserver Running Auto Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 DNS Client Dnscache Running Auto Share Process c:\windows\syste m32\svchost.exe -k networkservice Normal NT AUTHORITY\NetworkService 0 Wired AutoConfig Dot3svc Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k dot3svc Normal localSystem 0 Extensible Authentication Protocol Service EapHost Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k eapsvcs Normal localSystem 0 Error Reporting Service ERSvc Running Auto Share Process c:\windows\syste

m32\svchost.exe -k netsvcs Ignore LocalSystem 0 Event Log Eventlog Running Auto Share Process c:\windows\syste m32\services.exe Normal LocalSystem 0 COM+ Event System EventSystem Running Manual Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Fast User Switching Compatibility FastUserSwitchingCompatibility Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Windows Presentation Foundation Font Cache 3.0.0.0 FontCache3.0.0.0 Stopped Manual Own Process c:\windows\microsoft.net\framework\v3.0\wpf\pres entationfontcache.exe Normal NT AUTHORITY\LocalService 0 Help and Support helpsvc Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 HID Input Service HidServ Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Health Key and Certificate Management Service hkmsvc Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 HTTP SSL HTTPFilter Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k httpfilter Normal LocalSystem 0 Windows CardSpace idsvc Stopped Manual Share Process "c:\windows\micr osoft.net\framework\v3.0\windows communication foundation\infocard.exe" Normal LocalSystem 0 IMAPI CD-Burning COM Service ImapiService Stopped Manual Own Process c:\windows\system32\imapi.exe Normal LocalSystem 0 Java Quick Starter JavaQuickStarterService Running Auto Own Process "c:\program files\java\jre7\bin\jqs.exe" -service -config "c:\program files\java \jre7\lib\deploy\jqs\jqs.conf" Normal LocalSystem 0 Server LanmanServer Running Auto Share Process c:\windows\system32\svch ost.exe -k netsvcs Normal LocalSystem 0 Workstation lanmanworkstation Running Auto Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 TCP/IP NetBIOS Helper LmHosts Running Auto Share Process c:\windows\syste m32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Messenger Messenger Stopped Disabled Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 NetMeeting Remote Desktop Sharing mnmsrvc Stopped Manual Own Process c:\windows\system32\mnmsrvc.exe Normal LocalSystem 0 Mozilla Maintenance Service MozillaMaintenance Stopped Manual Own Proc ess "c:\program files\mozilla maintenance service\maintenanceservice.exe" Normal LocalSystem 0 Distributed Transaction Coordinator MSDTC Stopped Manual Own Process c:\windows\system32\msdtc.exe Normal NT AUTHORITY\NetworkService 0 Windows Installer MSIServer Stopped Manual Share Process c:\windo ws\system32\msiexec.exe /v Normal LocalSystem 0 Norton Security Suite N360 Running Auto Own Process "c:\program file s\norton security suite\engine\20.2.0.19\ccsvchst.exe" /s "n360" /m "c:\program files\norton security suite\engine\20.2.0.19\dimaster.dll" /prefetch:1 Normal LocalSystem 0 Network Access Protection Agent napagent Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal localSystem 0 Network DDE NetDDE Stopped Disabled Share Process c:\windows\syste m32\netdde.exe Normal LocalSystem 0 Network DDE DSDM NetDDEdsdm Stopped Disabled Share Process c:\windows\system32\netdde.exe Normal LocalSystem 0 Net Logon Netlogon Stopped Manual Share Process c:\windows\syste m32\lsass.exe Normal LocalSystem 0 Network Connections Netman Running Manual Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Net.Tcp Port Sharing Service NetTcpPortSharing Stopped Disabled

Share Process "c:\windows\microsoft.net\framework\v3.0\windows communication f oundation\smsvchost.exe" Normal NT AUTHORITY\LocalService 0 Network Location Awareness (NLA) Nla Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 NMIndexingService NMIndexingService Stopped Manual Own Process "c:\program files\common files\ahead\lib\nmindexingservice.exe" Normal LocalSys tem 0 NT LM Security Support Provider NtLmSsp Stopped Manual Share Process c:\windo ws\system32\lsass.exe Normal LocalSystem 0 Removable Storage NtmsSvc Stopped Manual Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 NVIDIA Driver Helper Service NVSvc Running Auto Own Process c:\windo ws\system32\nvsvc32.exe Normal LocalSystem 0 Microsoft Office Diagnostics Service odserv Stopped Manual Own Process "c:\program files\common files\microsoft shared\office12\odserv.exe" Normal LocalSystem 0 Office Source Engine ose Stopped Manual Own Process "c:\program file s\common files\microsoft shared\source engine\ose.exe" Normal LocalSystem 0 Plug and Play PlugPlay Running Auto Share Process c:\windows\syste m32\services.exe Normal LocalSystem 0 IPSEC Services PolicyAgent Running Auto Share Process c:\windows\syste m32\lsass.exe Normal LocalSystem 0 Protected Storage ProtectedStorage Running Auto Share Process c:\windows\system32\lsass.exe Normal LocalSystem 0 Remote Access Auto Connection Manager RasAuto Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Remote Access Connection Manager RasMan Running Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Remote Desktop Help Session Manager RDSessMgr Stopped Manual Own Proc ess c:\windows\system32\sessmgr.exe Normal LocalSystem 0 Routing and Remote Access RemoteAccess Stopped Disabled Share Pr ocess c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Remote Registry RemoteRegistry Running Auto Share Process c:\windows\syste m32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Remote Procedure Call (RPC) Locator RpcLocator Stopped Manual Own Proc ess c:\windows\system32\locator.exe Normal NT AUTHORITY\NetworkService 0 Remote Procedure Call (RPC) RpcSs Running Auto Own Process c:\windo ws\system32\svchost -k rpcss Normal NT AUTHORITY\NetworkService 0 QoS RSVP RSVP Stopped Manual Own Process c:\windows\system32\rsvp .exe Normal LocalSystem 0 Security Accounts Manager SamSs Running Auto Share Process c:\windo ws\system32\lsass.exe Normal LocalSystem 0 Smart Card SCardSvr Stopped Manual Share Process c:\windows\syste m32\scardsvr.exe Ignore NT AUTHORITY\LocalService 0 Task Scheduler Schedule Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Normal LocalSystem 0 Secondary Logon seclogon Running Auto Share Process c:\windows\syste m32\svchost.exe -k netsvcs Ignore LocalSystem 0 System Event Notification SENS Running Auto Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Windows Firewall/Internet Connection Sharing (ICS) SharedAccess Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Shell Hardware Detection ShellHWDetection Running Auto Share Pr ocess c:\windows\system32\svchost.exe -k netsvcs Ignore LocalSystem 0 Print Spooler Spooler Running Auto Own Process c:\windows\system32\spoo

lsv.exe Normal LocalSystem 0 System Restore Service srservice Running Auto Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 SSDP Discovery Service SSDPSRV Running Manual Share Process c:\windows\syste m32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Windows Image Acquisition (WIA) stisvc Stopped Manual Share Process c:\windo ws\system32\svchost.exe -k imgsvc Normal LocalSystem 0 MS Software Shadow Copy Provider SwPrv Stopped Manual Own Process c:\windows\system32\dllhost.exe /processid:{ec04c34c-e0bc-4f59-9748-f59c0a8f04bf } Ignore LocalSystem 0 Performance Logs and Alerts SysmonLog Stopped Manual Own Process c:\windows\system32\smlogsvc.exe Normal NT Authority\NetworkService 0 Telephony TapiSrv Running Manual Share Process c:\windows\system32\svch ost.exe -k netsvcs Normal LocalSystem 0 Terminal Services TermService Running Manual Share Process c:\windo ws\system32\svchost -k dcomlaunch Normal LocalSystem 0 Themes Themes Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Telnet TlntSvr Stopped Disabled Own Process c:\windows\system32\tlnt svr.exe Normal LocalSystem 0 Distributed Link Tracking Client TrkWks Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Universal Plug and Play Device Host upnphost Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k localservice Normal NT AUTHORITY\Loc alService 0 Uninterruptible Power Supply UPS Stopped Manual Own Process c:\windo ws\system32\ups.exe Normal NT AUTHORITY\LocalService 0 Volume Shadow Copy VSS Stopped Manual Own Process c:\windows\syste m32\vssvc.exe Normal LocalSystem 0 Windows Time W32Time Running Auto Share Process c:\windows\system32\svch ost.exe -k netsvcs Normal LocalSystem 0 WebClient WebClient Running Auto Own Process c:\windows\syste m32\svchost.exe -k localservice Normal NT AUTHORITY\LocalService 0 Windows Management Instrumentation winmgmt Running Auto Share Process c:\windows\system32\svchost.exe -k netsvcs Ignore LocalSystem 0 Portable Media Serial Number Service WmdmPmSN Stopped Manual Share Pr ocess c:\windows\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Windows Management Instrumentation Driver Extensions Wmi Stopped Manual Share Process c:\windows\system32\svchost.exe -k netsvcs Normal LocalSys tem 0 WMI Performance Adapter WmiApSrv Stopped Manual Own Process c:\windo ws\system32\wbem\wmiapsrv.exe Normal LocalSystem 0 Windows Media Player Network Sharing Service WMPNetworkSvc Stopped Manual Own Process "c:\program files\windows media player\wmpnetwk.exe" Normal NT AUTHORITY\NetworkService 0 Windows Presentation Foundation Font Cache 4.0.0.0 WPFFontCache_v0400 Stopped Manual Own Process c:\windows\microsoft.net\framework\v4.0.30319\wp f\wpffontcache_v0400.exe Normal NT AUTHORITY\LocalService 0 Security Center wscsvc Running Auto Share Process c:\windows\system32\svch ost.exe -k netsvcs Normal LocalSystem 0 Automatic Updates wuauserv Running Auto Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Windows Driver Foundation - User-mode Driver Framework WudfSvc Stopped Manual Share Process c:\windows\system32\svchost.exe -k wudfservicegroup Normal LocalSystem 0 Wireless Zero Configuration WZCSVC Running Auto Share Process c:\windo ws\system32\svchost.exe -k netsvcs Normal LocalSystem 0 Network Provisioning Service xmlprov Stopped Manual Share Process c:\windo

ws\system32\svchost.exe -k netsvcs [Program Groups]

Normal LocalSystem

Group Name Name User Name Accessories Default User:Accessories Default User Accessories\Accessibility Default User:Accessories\Accessibility Default User Accessories\Entertainment Default User:Accessories\Entertainment Default User Accessories\System Tools Default User:Accessories\System Tools Default User Administrative Tools Default User:Administrative Tools Default User CourseDownloads.com Default User:CourseDownloads.com Default User CourseDownloads.com\TW Caddie 08 Default User:CourseDownloads.com\TW Cadd ie 08 Default User Norton Default User:Norton Default User Startup Default User:Startup Default User AC3Filter All Users:AC3Filter All Users Accessories All Users:Accessories All Users Accessories\Accessibility All Users:Accessories\Accessibility All User s Accessories\Communications All Users:Accessories\Communications All User s Accessories\Entertainment All Users:Accessories\Entertainment All User s Accessories\System Tools All Users:Accessories\System Tools All User s Administrative Tools All Users:Administrative Tools All Users CCleaner All Users:CCleaner All Users Diskeeper Corporation All Users:Diskeeper Corporation All Users Games All Users:Games All Users Hamachi All Users:Hamachi All Users InterActual All Users:InterActual All Users InterActual\InterActual Player All Users:InterActual\InterActual Player All Users InterVideo WinDVD 7 All Users:InterVideo WinDVD 7 All Users Malwarebytes' Anti-Malware All Users:Malwarebytes' Anti-Malware All User s Malwarebytes' Anti-Malware\Tools All Users:Malwarebytes' Anti-Malware\Too ls All Users Microsoft Office All Users:Microsoft Office All Users Microsoft Office\Microsoft Office Tools All Users:Microsoft Office\Microsoft Off ice Tools All Users Microsoft Silverlight All Users:Microsoft Silverlight All Users Nero 7 Ultra Edition All Users:Nero 7 Ultra Edition All Users Nero 7 Ultra Edition\Audio All Users:Nero 7 Ultra Edition\Audio All User s Nero 7 Ultra Edition\Data All Users:Nero 7 Ultra Edition\Data All User s Nero 7 Ultra Edition\Manuals All Users:Nero 7 Ultra Edition\Manuals All User s Nero 7 Ultra Edition\Photo and Video All Users:Nero 7 Ultra Edition\Photo and Video All Users Nero 7 Ultra Edition\Tools All Users:Nero 7 Ultra Edition\Tools All User s Norton Security Suite All Users:Norton Security Suite All Users PeerBlock All Users:PeerBlock All Users PeerBlock\Help and Support All Users:PeerBlock\Help and Support All User s

Philips All Users:Philips All Users Philips\VOIP321 All Users:Philips\VOIP321 All Users QuickTime All Users:QuickTime All Users Real All Users:Real All Users RoboForm All Users:RoboForm All Users Skype All Users:Skype All Users Startup All Users:Startup All Users TeamSpeak 3 Client All Users:TeamSpeak 3 Client All Users UltraISO All Users:UltraISO All Users Virtual Pool 3 DL All Users:Virtual Pool 3 DL All Users Windows PowerShell 1.0 All Users:Windows PowerShell 1.0 All Users WinZip All Users:WinZip All Users Yahoo! Messenger All Users:Yahoo! Messenger All Users Accessories NT AUTHORITY\SYSTEM:Accessories NT AUTHORITY\SYSTEM Accessories\Accessibility NT AUTHORITY\SYSTEM:Accessories\Accessibility NT AUTHORITY\SYSTEM Accessories\Entertainment NT AUTHORITY\SYSTEM:Accessories\Entertainment NT AUTHORITY\SYSTEM Accessories\System Tools NT AUTHORITY\SYSTEM:Accessories\System Tools NT AUTHORITY\SYSTEM Administrative Tools NT AUTHORITY\SYSTEM:Administrative Tools NT AUTHO RITY\SYSTEM CourseDownloads.com NT AUTHORITY\SYSTEM:CourseDownloads.com NT AUTHORITY\SYS TEM CourseDownloads.com\TW Caddie 08 NT AUTHORITY\SYSTEM:CourseDownloads.com\ TW Caddie 08 NT AUTHORITY\SYSTEM Norton NT AUTHORITY\SYSTEM:Norton NT AUTHORITY\SYSTEM Startup NT AUTHORITY\SYSTEM:Startup NT AUTHORITY\SYSTEM Accessories GZ891RP9\Walter:Accessories GZ891RP9\Walter Accessories\Accessibility GZ891RP9\Walter:Accessories\Accessibility GZ891RP9\Walter Accessories\Entertainment GZ891RP9\Walter:Accessories\Entertainment GZ891RP9\Walter Accessories\System Tools GZ891RP9\Walter:Accessories\System Tools GZ891RP9\Walter Administrative Tools GZ891RP9\Walter:Administrative Tools GZ891RP9\Walter CourseDownloads.com GZ891RP9\Walter:CourseDownloads.com GZ891RP9\Walter CourseDownloads.com\TW Caddie 08 GZ891RP9\Walter:CourseDownloads.com\TW C addie 08 GZ891RP9\Walter Norton GZ891RP9\Walter:Norton GZ891RP9\Walter Startup GZ891RP9\Walter:Startup GZ891RP9\Walter [Startup Programs] Program Command User Name Location desktop desktop.ini NT AUTHORITY\SYSTEM Startup desktop desktop.ini GZ891RP9\Walter Startup ctfmon.exe c:\windows\system32\ctfmon.exe GZ891RP9\Walter HKU\S-1-5-21-842 925246-448539723-682003330-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RoboForm "c:\program files\siber systems\ai roboform\robotaskbaricon.exe" GZ891RP9\Walter HKU\S-1-5-21-842925246-448539723-682003330-1003\SOFTWARE\Microso ft\Windows\CurrentVersion\Run desktop desktop.ini .DEFAULT Startup desktop desktop.ini All Users Common Startup InterVideo WinCinema Manager c:\progra~1\interv~1\common\bin\wincin~1.exe All Users Common Startup VOIP321 c:\progra~1\philips\voip321\voip321.exe All Users Common Startup SunJavaUpdateSched "c:\program files\common files\java\java update\jusched. exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run NvCplDaemon rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup All User

s HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run NvMediaCenter rundll32.exe c:\windows\system32\nvmctray.dll,nvtaskbarinit All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run nwiz c:\program files\nvidia corporation\nview\nwiz.exe /installquiet All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run APSDaemon "c:\program files\common files\apple\apple application support\a psdaemon.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\R un QuickTime Task "c:\program files\quicktime\qttask.exe" -atboottime All User s HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run NeroFilterCheck c:\program files\common files\ahead\lib\nerocheck.exe All User s HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run Adobe ARM "c:\program files\common files\adobe\arm\1.0\adobearm.exe" All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run RTHDCPL rthdcpl.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentV ersion\Run Alcmtr alcmtr.exe All Users HKLM\SOFTWARE\Microsoft\Windows\CurrentV ersion\Run [OLE Registration] Object Local Server Microsoft Office Excel 95 Worksheet Not Available Microsoft Office Excel Chart Not Available Microsoft Office Excel 97-2003 Worksheet c:\progra~1\micros~2\office12\ex cel.exe Microsoft Office Excel Chart c:\progra~1\micros~2\office12\excel.exe Microsoft Office Excel Worksheet c:\progra~1\micros~2\office12\excel.exe Microsoft Office Excel Macro-Enabled Worksheet c:\progra~1\micros~2\office12\ex cel.exe Microsoft Office Excel Binary Worksheet c:\progra~1\micros~2\office12\excel.exe Microsoft Word 6.0 - 7.0 Document Not Available Microsoft Word 6.0 - 7.0 Picture Not Available Microsoft Office Word 97 - 2003 Document c:\progra~1\micros~2\office12\wi nword.exe Sound (OLE2) sndrec32.exe Media Clip mplay32.exe Video Clip mplay32.exe /avi MIDI Sequence mplay32.exe /mid Microsoft Office Excel Chart Not Available Microsoft Excel 4.0 Macro Not Available Sound Not Available Media Clip Not Available Microsoft Office Outlook View Control Not Available Microsoft Office PowerPoint Slide c:\progra~1\micros~2\office12\powerpnt.e xe Microsoft Office Word Macro-Enabled Document c:\progra~1\micros~2\office12\wi nword.exe OpenDocument Text c:\progra~1\micros~2\office12\winword.exe Microsoft Office PowerPoint Macro-Enabled Slide c:\progra~1\micros~2\office12\po werpnt.exe Microsoft Office PowerPoint 97-2003 Presentation c:\progra~1\micros~2\off ice12\powerpnt.exe Microsoft Office PowerPoint 97-2003 Slide c:\progra~1\micros~2\office12\po werpnt.exe WordPad Document "%programfiles%\windows nt\accessories\wordpad.exe" Microsoft Office Word Macro-Enabled Template c:\progra~1\micros~2\office12\wi nword.exe Microsoft Office Word Template c:\progra~1\micros~2\office12\winword.exe Adobe Acrobat Document "c:\program files\adobe\reader 11.0\reader\acrord32.exe"

OpenDocument Presentation c:\progra~1\micros~2\office12\powerpnt.exe Microsoft Office PowerPoint Presentation c:\progra~1\micros~2\office12\po werpnt.exe Bitmap Image mspaint.exe Microsoft Office PowerPoint Macro-Enabled Presentation c:\progra~1\micros~2\off ice12\powerpnt.exe Organization Chart Add-in for Microsoft Office programs Not Available OpenDocument Spreadsheet c:\progra~1\micros~2\office12\excel.exe Microsoft Office Word Document c:\progra~1\micros~2\office12\winword.exe [Windows Error Reporting] Time Type Details 3/18/2013 8:14 AM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/18/2013 8:11 AM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/18/2013 7:43 AM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/17/2013 8:49 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.57, faulting module divx plus player.exe, version 10.4 .0.57, fault address 0x0000baeb.&#x000d;&#x000a; 3/17/2013 8:35 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/17/2013 3:34 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/17/2013 3:21 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/17/2013 2:57 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/17/2013 1:45 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/17/2013 1:32 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/17/2013 1:22 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module divx plus player.exe, version 10.4 .0.62, fault address 0x0000baeb.&#x000d;&#x000a; 3/17/2013 1:22 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module divx plus player.exe, version 10.4 .0.62, fault address 0x0000baeb.&#x000d;&#x000a; 3/17/2013 10:45 AM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/14/2013 10:31 PM Application Error Faulting application divx plus p layer.exe, version 10.4.0.62, faulting module qtcore4.dll, version 4.5.0.0, faul t address 0x000e1b16.&#x000d;&#x000a; 3/18/2013 6:31 AM Dhcp Your computer has lost the lease to its IP addre ss 25.77.254.113 on the&#x000d;&#x000a;Network Card with network address 7A79194 DFE71.&#x000d;&#x000a; 3/19/2013 10:07 PM Dhcp The IP address lease 5.77.254.113 for the Networ k Card with network address 7A79194DFE71 has been&#x000d;&#x000a;denied by the D

HCP server 25.0.0.1 (The DHCP Server sent a DHCPNACK message).&#x000d;&#x000a; 3/19/2013 10:07 PM Dhcp The IP address lease 25.77.254.113 for the Netwo rk Card with network address 7A79194DFE71 has been&#x000d;&#x000a;denied by the DHCP server 5.0.0.1 (The DHCP Server sent a DHCPNACK message).&#x000d;&#x000a; 3/17/2013 10:31 PM Dhcp The IP address lease 5.77.254.113 for the Networ k Card with network address 7A79194DFE71 has been&#x000d;&#x000a;denied by the D HCP server 25.0.0.1 (The DHCP Server sent a DHCPNACK message).&#x000d;&#x000a; 3/17/2013 10:31 PM Dhcp The IP address lease 25.77.254.113 for the Netwo rk Card with network address 7A79194DFE71 has been&#x000d;&#x000a;denied by the DHCP server 5.0.0.1 (The DHCP Server sent a DHCPNACK message).&#x000d;&#x000a; 3/12/2013 6:56 PM Dhcp The IP address lease 25.77.254.113 for the Netwo rk Card with network address 7A79194DFE71 has been&#x000d;&#x000a;denied by the DHCP server 5.0.0.1 (The DHCP Server sent a DHCPNACK message).&#x000d;&#x000a; 3/11/2013 7:38 PM Dhcp The IP address lease 5.77.254.113 for the Networ k Card with network address 7A79194DFE71 has been&#x000d;&#x000a;denied by the D HCP server 25.0.0.1 (The DHCP Server sent a DHCPNACK message).&#x000d;&#x000a; 3/11/2013 7:38 PM Dhcp The IP address lease 25.77.254.113 for the Netwo rk Card with network address 7A79194DFE71 has been&#x000d;&#x000a;denied by the DHCP server 5.0.0.1 (The DHCP Server sent a DHCPNACK message).&#x000d;&#x000a; 3/10/2013 10:33 PM Dhcp The IP address lease 5.77.254.113 for the Networ k Card with network address 7A7900000001 has been&#x000d;&#x000a;denied by the D HCP server 25.0.0.1 (The DHCP Server sent a DHCPNACK message).&#x000d;&#x000a; 3/10/2013 10:33 PM Dhcp The IP address lease 5.0.0.17 for the Network Ca rd with network address 7A7900000001 has been&#x000d;&#x000a;denied by the DHCP server 5.0.0.1 (The DHCP Server sent a DHCPNACK message).&#x000d;&#x000a; [Internet Settings]

[Internet Explorer] [ Following are sub-categories of this main category ] [Summary] Item Value Version 8.0.6001.18702 Build 86001 Application Path C:\Program Files\Internet Explorer Language English (United States) Active Printer Microsoft XPS Document Writer,winspool,Ne00: Cipher Strength 128-bit Content Advisor Disabled IEAK Install No [File Versions] File Version Size Date Path Company actxprxy.dll 6.0.2900.5512 96 KB 4/14/2008 12:41:50 AM C:\WINDOWS\syste m32 Microsoft Corporation advpack.dll 8.0.6001.18702 126 KB 3/8/2009 5:32:48 AM C:\WINDOWS\syste m32 Microsoft Corporation asctrls.ocx 6.0.2900.5512 112 KB 4/14/2008 12:39:00 AM C:\WINDOWS\syste m32 Microsoft Corporation browselc.dll 6.0.2900.5512 62 KB 4/13/2008 5:33:26 PM C:\WINDOWS\syste m32 Microsoft Corporation browseui.dll 6.0.2900.6332 1,001 KB 12/27/2012 6:24:19 AM C:\WINDO WS\system32 Microsoft Corporation cdfview.dll 6.0.2900.5512 148 KB 4/14/2008 12:41:52 AM C:\WINDOWS\syste

m32 Microsoft Corporation comctl32.dll 5.82.2900.6028 603 KB 8/23/2010 12:12:04 PM C:\WINDOWS\syste m32 Microsoft Corporation dxtrans.dll 8.0.6001.18702 211 KB 3/8/2009 5:31:38 AM C:\WINDOWS\syste m32 Microsoft Corporation dxtmsft.dll 8.0.6001.18702 340 KB 3/8/2009 5:31:44 AM C:\WINDOWS\syste m32 Microsoft Corporation iecont.dll <File Missing> Not Available Not Available Not Available Not Available iecontlc.dll <File Missing> Not Available Not Available Not Available Not Available iedkcs32.dll 18.0.6001.19401 379 KB 2/5/2013 4:05:45 PM C:\WINDOWS\syste m32 Microsoft Corporation iepeers.dll 8.0.6001.19401 180 KB 2/5/2013 4:05:45 PM C:\WINDOWS\syste m32 Microsoft Corporation iesetup.dll 8.0.6001.18702 70 KB 3/8/2009 5:32:50 AM C:\WINDOWS\syste m32 Microsoft Corporation ieuinit.inf Not Available 56 KB 3/8/2012 2:49:39 PM C:\WINDOWS\syste m32 Not Available iexplore.exe 8.0.6001.18702 624 KB 3/8/2009 3:09:26 PM C:\Program Files \Internet Explorer Microsoft Corporation imgutil.dll 8.0.6001.18702 34 KB 3/8/2009 5:31:38 AM C:\WINDOWS\syste m32 Microsoft Corporation inetcpl.cpl 8.0.6001.19401 1,435 KB 2/5/2013 4:05:46 PM C:\WINDO WS\system32 Microsoft Corporation inetcplc.dll 6.0.2600.0 108 KB 8/23/2001 7:00:00 AM C:\WINDOWS\syste m32 Microsoft Corporation inseng.dll 8.0.6001.18702 93 KB 3/8/2009 5:32:46 AM C:\WINDOWS\syste m32 Microsoft Corporation mlang.dll 6.0.2900.5512 573 KB 4/14/2008 12:41:58 AM C:\WINDOWS\syste m32 Microsoft Corporation msencode.dll 2000.7.25.0 92 KB 8/23/2001 7:00:00 AM C:\WINDOWS\syste m32 Not Available mshta.exe 8.0.6001.18702 45 KB 3/8/2009 5:31:02 AM C:\WINDOWS\syste m32 Microsoft Corporation mshtml.dll 8.0.6001.19403 5,871 KB 2/28/2013 10:33:07 PM C:\WINDO WS\system32 Microsoft Corporation mshtml.tlb 8.0.6001.18702 1,601 KB 3/8/2009 5:31:02 AM C:\WINDO WS\system32 Microsoft Corporation mshtmled.dll 8.0.6001.19401 66 KB 2/5/2013 4:05:46 PM C:\WINDOWS\syste m32 Microsoft Corporation mshtmler.dll 8.0.6001.18702 47 KB 3/8/2009 5:31:18 AM C:\WINDOWS\syste m32 Microsoft Corporation msident.dll 6.0.2900.5512 51 KB 4/14/2008 12:42:00 AM C:\WINDOWS\syste m32 Microsoft Corporation msidntld.dll 6.0.2600.0 15 KB 8/23/2001 7:00:00 AM C:\WINDOWS\syste m32 Microsoft Corporation msieftp.dll 6.0.2900.5512 243 KB 4/14/2008 12:42:00 AM C:\WINDOWS\syste m32 Microsoft Corporation msrating.dll 8.0.6001.18702 189 KB 3/8/2009 5:34:18 AM C:\WINDOWS\syste m32 Microsoft Corporation mstime.dll 8.0.6001.19401 598 KB 2/5/2013 4:05:47 PM C:\WINDOWS\syste m32 Microsoft Corporation occache.dll 8.0.6001.19401 202 KB 2/5/2013 4:05:47 PM C:\WINDOWS\syste m32 Microsoft Corporation proctexe.ocx 6.3.2900.5512 80 KB 4/14/2008 12:40:36 AM C:\WINDOWS\syste m32 Intel Corporation sendmail.dll 6.0.2900.5512 54 KB 4/14/2008 12:42:06 AM C:\WINDOWS\syste m32 Microsoft Corporation shdoclc.dll 6.0.2900.5512 537 KB 4/13/2008 5:33:20 PM C:\WINDOWS\syste

m32 Microsoft Corporation shdocvw.dll 6.0.2900.6332 1,475 KB 12/27/2012 6:24:19 AM C:\WINDO WS\system32 Microsoft Corporation shfolder.dll 6.0.2900.5512 25 KB 4/14/2008 12:42:06 AM C:\WINDOWS\syste m32 Microsoft Corporation shlwapi.dll 6.0.2900.5912 463 KB 12/8/2009 5:23:28 AM C:\WINDOWS\syste m32 Microsoft Corporation tdc.ocx 8.0.6001.18702 65 KB 3/8/2009 5:30:56 AM C:\WINDOWS\system32 Microsoft Corporation url.dll 8.0.6001.19401 104 KB 2/5/2013 4:05:47 PM C:\WINDOWS\system32 Microsoft Corporation urlmon.dll 8.0.6001.19401 1,185 KB 2/5/2013 4:05:47 PM C:\WINDO WS\system32 Microsoft Corporation webcheck.dll 8.0.6001.18702 231 KB 3/8/2009 5:34:48 AM C:\WINDOWS\syste m32 Microsoft Corporation wininet.dll 8.0.6001.19401 895 KB 2/5/2013 4:05:47 PM C:\WINDOWS\syste m32 Microsoft Corporation [Connectivity] Item Value Connection Preference LAN Settings AutoConfigProxy wininet.dll AutoProxyDetectMode Disabled AutoConfigURL Proxy Disabled ProxyServer ProxyOverride [Cache] [ Following are sub-categories of this main category ] [Summary] Item Value Page Refresh Type Automatic Temporary Internet Files Folder C:\Documents and Settings\Walter\Local Settings\ Temporary Internet Files Total Disk Space Not Available Available Disk Space Not Available Maximum Cache Size Not Available Available Cache Size Not Available [List of Objects] Program File Status CodeBase SupportSoft Script Runner Class Installed http://www.comcastsupport.com/sd ccommon/download/tgctlsr.cab Shockwave ActiveX Control Installed http://fpdownload.macromedia.com /pub/shockwave/cabs/director/sw.cab MUCatalogWebControl Class Installed http://catalog.update.microsoft. com/v7/site/ClientControl/en/x86/MuCatalogWebControl.cab?1363273954406 WUWebControl Class Installed http://windowsupdate.microsoft.com/windo wsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1362962755390 MUWebControl Class Installed http://www.update.microsoft.com/microsof tupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1363004800906 Never dial

[Content] [ Following are sub-categories of this main category ] [Summary] Item Value Content Advisor Disabled [Personal Certificates] Issued To Issued By Validity No personal certificate information available [Other People Certificates] Issued To Issued By Validity Signature Algorithm No other people certificate information available [Publishers] Name No publisher information available [Security] Zone Security Level My Computer Custom Local intranet Medium-low Trusted sites Medium Internet Not Available Restricted sites High Signature Algorithm