A board search reveals several others having dealt with it using HJT analysis
you can d/l it here http://www.allsecpros.com/hjt.html
There`s also a tutorial available at that site which might be of use. good luck