[Version] Signature = "$Windows NT$" DriverVer=07/01/2001,5.1.2600.2180 [AddReg] HKLM,"SYSTEM\CurrentControlSet\Control\Windows","CSDVersion",0x10001,0x200 HKLM,"SYSTEM\CurrentControlSet\Control\Windows","CSDReleaseType",0x10001,0 HKLM,"SYSTEM\CurrentControlSet\Control","CurrentUser",0x00000002,"USERNAME" HKLM,"SYSTEM\CurrentControlSet\Control","WaitToKillServiceTimeout",0x00000002,"20000" HKLM,"SYSTEM\CurrentControlSet\Control\AGP","102B0520",0x00030003,80,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\AGP","102B0521",0x00030003,80,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\AGP","102B0525",0x00030003,80,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\AGP","10DE0100",0x00030003,00,01,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\AGP","53339102",0x00030003,00,01,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\AGP","53338C10",0x00030003,00,01,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\AGP","53338C12",0x00030003,00,01,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\Arbiters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Biosinfo","InfName",0x00000002,"biosinfo.inf" HKLM,"SYSTEM\CurrentControlSet\Control\BootVerificationProgram",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Class",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\PnP",,0x00000012 ; ; safeboot options ; HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot","AlternateShell",0x00000000,"cmd.exe" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal",,0x00000010 HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmboot.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmload.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmio.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmserver","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmadmin","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}","",0x00000000,"Universal Serial Bus controllers" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}","",0x00000000,"CD-ROM Drive" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}","",0x00000000,"DiskDrive" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Standard floppy disk controller" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Hdc" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Keyboard" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Mouse" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}","",0x00000000,"PCMCIA Adapters" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}","",0x00000000,"SCSIAdapter" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}","",0x00000000,"System" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Floppy disk drive" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}","",0x00000000,"Volume" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}","",0x00000000,"Human Interface Devices" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network",,0x00000010 HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Base","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Boot file system","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\File system","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Filter","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PCI Configuration","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PNP Filter","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PNP_TDI","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Primary disk","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SCSI Class","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\System Bus Extender","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Boot Bus Extender","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sermouse.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vga.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vgasave.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmboot.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmload.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmio.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmserver","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmadmin","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EventLog","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\Safeboot\Network\ip6fw.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\Safeboot\Network\ipnat.sys","",0x00000000,"Driver" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Netlogon","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PlugPlay","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\RpcSs","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\Safeboot\Network\SharedAccess","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DcomLaunch","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Browser","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Dhcp","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DnsCache","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LanmanServer","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LanmanWorkstation","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LmHosts","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Messenger","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Netlogon","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetMan","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NtLmSsp","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBT","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Tcpip","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AFD","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBIOS","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WinMgmt","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ndisuio","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WZCSVC","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppMgmt","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CryptSvc","",0x00000000,"Service" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NDIS Wrapper","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PNP_TDI","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Network","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NDIS","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBIOSGroup","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetDDEGroup","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetworkProvider","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Streams Drivers","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TDI","",0x00000000,"Driver Group" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{36FC9E60-C465-11CF-8056-444553540000}","",0x00000000,"Universal Serial Bus controllers" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E965-E325-11CE-BFC1-08002BE10318}","",0x00000000,"CD-ROM Drive" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}","",0x00000000,"DiskDrive" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E969-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Standard floppy disk controller" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Hdc" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Keyboard" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Mouse" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E97B-E325-11CE-BFC1-08002BE10318}","",0x00000000,"SCSIAdapter" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E97D-E325-11CE-BFC1-08002BE10318}","",0x00000000,"System" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}","",0x00000000,"Volume" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Net" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}","",0x00000000,"NetClient" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}","",0x00000000,"NetService" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}","",0x00000000,"NetTrans" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E980-E325-11CE-BFC1-08002BE10318}","",0x00000000,"Floppy disk drive" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E977-E325-11CE-BFC1-08002BE10318}","",0x00000000,"PCMCIA Adapters" HKLM,"SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}","",0x00000000,"Human Interface Devices" ; ; The following are Backup & Restore specific key ; ; HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","ASR Log File",0x00010000,"%SystemRoot%\repair\asr.log" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","ASR Error File",0x00010000,"%SystemRoot%\repair\asr.err" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Client Side Cache",0x00010000,"%SystemRoot%\csc\* /s" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Internet Explorer",0x00010000,"%UserProfile%\index.dat /s" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Memory Page File",0x00010000,"\Pagefile.sys" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Microsoft Writer (Bootable State)",0x00010000,"%SystemRoot%\Registration\*.clb","\*.crmlog /s" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Microsoft Writer (Service State)", 0x00010000,"%SystemRoot%\system32\NtmsData\*" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Netlogon",0x00010000,"%SystemRoot%\netlogon.chg" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Power Management",0x00010000,"\hiberfil.sys" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","VSS Default Provider",0x00010000,"\System Volume Information\*{3808876B-C176-4e48-B7AE-04046E6CC752} /s" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Task Scheduler",0x00010000,"%SYSTEMROOT%\schedlgu.txt" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Temporary Files",0x00010000,"%TEMP%\* /s" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Winlogon debug",0x00010000,"%WINDIR%\debug\*" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","SUS Client",0x00010000,"%SystemRoot%\SoftwareDistribution\* /s" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\AsrKeysNotToRestore","Plug & Play",0x00010000,"CurrentControlSet\Control\CriticalDeviceDatabase\" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","Plug & Play",0x00010000,"CurrentControlSet\Control\CriticalDeviceDatabase\" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","WMI Writer", 0x00010000,"%SystemRoot%\system32\wbem\Repository\* /s" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","Mount Manager",0x00010000,"MountedDevices\" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","Fault Tolerance",0x00010000,"Disk\" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","Installed Services",0x00010000,"CurrentControlSet\Services\*" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","Active Directory Restore",0x00010000,"CurrentControlSet\Services\NTDS\Restore In Progress\","CurrentControlSet\Services\NTDS\Parameters\New Database GUID" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","Pending Rename Operations",0x00010000,"CurrentControlSet\Control\Session Manager\PendingFileRenameOperations" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","LDM Boot Information",0x00010000,"CurrentControlSet\Services\dmio\boot info\" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","Windows Setup",0x00010000,"Setup\SystemPartition" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","Session Manager",0x00010000,"CurrentControlSet\Control\Session Manager\AllowProtectedRenames" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","ASR Information",0x00010000,"CurrentControlSet\Control\ASR\" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","Removable Storage Manager",0x00010000,"CurrentControlSet\Control\NTMS\ImportDatabase" ; ; Since no device is ever going to be listed in an INF of class "Unknown", it ; doesn't make any sense to stick another INF in the INF directory just so we ; can run its [ClassInstall32] section during GUI-mode setup. Thus, we pre-install ; that class here. ; HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E97E-E325-11CE-BFC1-08002BE10318}","",0x00000002,"%UNKNOWN%" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E97E-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"Unknown" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E97E-E325-11CE-BFC1-08002BE10318}","Icon",0x00000002,"-18" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"Keyboard" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E96B-E325-11CE-BFC1-08002BE10318}","UpperFilters",0x00010002,"kbdclass" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E96F-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"Mouse" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E96F-E325-11CE-BFC1-08002BE10318}","UpperFilters",0x00010002,"mouclass" ; ; We need the DiskDrive class around when booting into GUI-mode setup so we can ; load the correct upper filter. ; ; HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"DiskDrive" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}","UpperFilters",0x00010000,"PartMgr" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{71A27CDD-812A-11D0-BEC7-08002BE2092F}","UpperFilters",0x00010000,"VolSnap" ; ; The following are Network Software classes so they will continue to be listed here ; ; HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E973-E325-11CE-BFC1-08002BE10318}","",0x00000002,"%NETWORK_CLIENT%" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E973-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"NetClient" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E973-E325-11CE-BFC1-08002BE10318}","Icon",0x00000002,"-7" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E973-E325-11CE-BFC1-08002BE10318}","Installer32",0x00000000,"NetCfgx.Dll,NetClassInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E973-E325-11CE-BFC1-08002BE10318}","NoInstallClass",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E973-E325-11CE-BFC1-08002BE10318}","NoDisplayClass",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E974-E325-11CE-BFC1-08002BE10318}","",0x00000002,"%NETWORK_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E974-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"NetService" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E974-E325-11CE-BFC1-08002BE10318}","Icon",0x00000002,"-8" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E974-E325-11CE-BFC1-08002BE10318}","Installer32",0x00000000,"NetCfgx.Dll,NetClassInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E974-E325-11CE-BFC1-08002BE10318}","NoInstallClass",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E974-E325-11CE-BFC1-08002BE10318}","NoDisplayClass",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E975-E325-11CE-BFC1-08002BE10318}","",0x00000002,"%NETWORK_PROTOCOL%" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E975-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"NetTrans" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E975-E325-11CE-BFC1-08002BE10318}","Icon",0x00000002,"-6" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E975-E325-11CE-BFC1-08002BE10318}","NoInstallClass",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E975-E325-11CE-BFC1-08002BE10318}","NoDisplayClass",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E975-E325-11CE-BFC1-08002BE10318}","Installer32",0x00000000,"NetCfgx.Dll,NetClassInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E97B-E325-11CE-BFC1-08002BE10318}","LegacyAdapterDetection",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{4D36E965-E325-11CE-BFC1-08002BE10318}",0x00010000,"SysSetup.Dll,StorageCoInstaller","SysSetup.Dll,CriticalDeviceCoInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{4D36E967-E325-11CE-BFC1-08002BE10318}",0x00010000,"SysSetup.Dll,StorageCoInstaller","SysSetup.Dll,CriticalDeviceCoInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{4D36E96A-E325-11CE-BFC1-08002BE10318}",0x00010000,"SysSetup.Dll,CriticalDeviceCoInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{4D36E96B-E325-11CE-BFC1-08002BE10318}",0x00010000,"SysSetup.Dll,CriticalDeviceCoInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{4D36E96F-E325-11CE-BFC1-08002BE10318}",0x00010000,"SysSetup.Dll,CriticalDeviceCoInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{4D36E97B-E325-11CE-BFC1-08002BE10318}",0x00010000,"SysSetup.Dll,CriticalDeviceCoInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{4D36E97D-E325-11CE-BFC1-08002BE10318}",0x00010000,"SysSetup.Dll,CriticalDeviceCoInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{4D36E980-E325-11CE-BFC1-08002BE10318}",0x00010000,"SysSetup.Dll,StorageCoInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{6D807884-7D21-11CF-801C-08002BE10318}",0x00010000,"SysSetup.Dll,StorageCoInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\CoDeviceInstallers","{4D36E96D-E325-11CE-BFC1-08002BE10318}",0x00010000,"NetCfgx.dll,ModemClassCoInstaller","setup\FxsOcm.dll,FaxModemCoClassInstaller" HKLM,"SYSTEM\CurrentControlSet\Control\ComputerName",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName","ComputerName",0x00000002,"MACHINENAME" HKLM,"SYSTEM\CurrentControlSet\Control\ContentIndex","DoNotStartCiSvc",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Control\CrashControl","AutoReboot",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\CrashControl","CrashDumpEnabled",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Control\CrashControl","DumpFile",0x00020002,"%SystemRoot%\MEMORY.DMP" HKLM,"SYSTEM\CurrentControlSet\Control\CrashControl","LogEvent",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\CrashControl","MinidumpDir",0x00020002,"%SystemRoot%\Minidump" HKLM,"SYSTEM\CurrentControlSet\Control\CrashControl","Overwrite",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\CrashControl","SendAlert",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\gendisk",Service,0x00000000,disk HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\gendisk",ClassGUID,0x00000000,{4D36E967-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\gencdrom",Service,0x00000000,cdrom HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\gencdrom",ClassGUID,0x00000000,{4D36E965-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PS2_KEYBOARD",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PS2_KEYBOARD",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0300",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0300",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0301",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0301",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0302",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0302",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0304",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0304",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0305",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0305",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0306",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0306",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0309",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0309",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp030a",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp030a",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp030b",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp030b",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0320",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0320",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0343",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0343",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0344",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0344",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0345",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0345",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*CPQA0D7",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*CPQA0D7",ClassGUID,0x00000000,{4D36E96B-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PS2_MOUSE",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\PS2_MOUSE",ClassGUID,0x00000000,{4D36E96F-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f03",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f03",ClassGUID,0x00000000,{4D36E96F-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f0b",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f0b",ClassGUID,0x00000000,{4D36E96F-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f0e",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f0e",ClassGUID,0x00000000,{4D36E96F-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f12",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f12",ClassGUID,0x00000000,{4D36E96F-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f13",Service,0x00000000,i8042prt HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\*pnp0f13",ClassGUID,0x00000000,{4D36E96F-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#cc_0604",Service,0x00000000,pci HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase\pci#cc_0604",ClassGUID,0x00000000,{4D36E97D-E325-11CE-BFC1-08002BE10318} HKLM,"SYSTEM\CurrentControlSet\Control\DeviceClasses",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\FileSystem","NtfsDisable8dot3NameCreation",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\FileSystem","Win31FileSystem",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Control\FileSystem","Win95TruncatedExtensions",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Control\GraphicsDrivers",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\GraphicsDrivers\DCI","Timeout",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Control\GraphicsDrivers\UseNewKey",,0x00000012 ; ; The following are GroupOrderList definitions ; HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Base",0x00030003,\ 0e,00,00,00,0e,00,00,00,01,00,00,00,02,00,00,00,03,00,00,00,04,00,00,00,05,\ 00,00,00,06,00,00,00,07,00,00,00,08,00,00,00,09,00,00,00,0a,00,00,00,0b,00,\ 00,00,0c,00,00,00,0d,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Boot Bus Extender",0x00030001,\ 05,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00,\ 04,00,00,00,\ 05,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Extended Base",0x00030001,\ 03,00,00,00,01,00,00,00,02,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Keyboard Class",0x00030003,\ 01,00,00,00,01,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Keyboard Port",0x00030001,\ 03,00,00,00,01,00,00,00,02,00,00,00,03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Ndis",0x00030003,\ 09,00,00,00,01,00,00,00,02,00,00,00,03,00,00,00,04,00,00,00,05,00,00,00,06,\ 00,00,00,07,00,00,00,08,00,00,00,09,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Network",0x00030003,\ 03,00,00,00,01,00,00,00,02,00,00,00,03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Parallel arbitrator",0x00030003,\ 01,00,00,00,01,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","PNP_TDI",0x00030003,\ 02,00,00,00,01,00,00,00,02,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Pointer Class",0x00030003,\ 01,00,00,00,01,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Pointer Port",0x00030003,\ 03,00,00,00,01,00,00,00,02,00,00,00,03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Primary Disk",0x00030001,\ 05,00,00,00,01,00,00,00,02,00,00,00,03,00,00,00,04,00,00,00,05,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","SCSI CDROM Class",0x00030001,\ 02,00,00,00,01,00,00,00,02,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","SCSI Class",0x00030001,\ 03,00,00,00,01,00,00,00,02,00,00,00,03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","SCSI Miniport",0x00030001,\ 3f,00,00,00,\ 00,01,00,00,\ 01,01,00,00,\ 19,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00,\ 04,00,00,00,\ 05,00,00,00,\ 06,00,00,00,\ 07,00,00,00,\ 08,00,00,00,\ 09,00,00,00,\ 0a,00,00,00,\ 0b,00,00,00,\ 0c,00,00,00,\ 0d,00,00,00,\ 0e,00,00,00,\ 0f,00,00,00,\ 10,00,00,00,\ 11,00,00,00,\ 12,00,00,00,\ 13,00,00,00,\ 14,00,00,00,\ 15,00,00,00,\ 16,00,00,00,\ 17,00,00,00,\ 1a,00,00,00,\ 18,00,00,00,\ 1b,00,00,00,\ 1c,00,00,00,\ 1d,00,00,00,\ 1e,00,00,00,\ 1f,00,00,00,\ 20,00,00,00,\ 23,00,00,00,\ 24,00,00,00,\ 25,00,00,00,\ 26,00,00,00,\ 27,00,00,00,\ 28,00,00,00,\ 29,00,00,00,\ 2a,00,00,00,\ 2b,00,00,00,\ 2c,00,00,00,\ 2d,00,00,00,\ 2e,00,00,00,\ 2f,00,00,00,\ 30,00,00,00,\ 31,00,00,00,\ 32,00,00,00,\ 33,00,00,00,\ 34,00,00,00,\ 35,00,00,00,\ 36,00,00,00,\ 37,00,00,00,\ 38,00,00,00,\ 39,00,00,00,\ 3a,00,00,00,\ 3b,00,00,00,\ 3c,00,00,00,\ 3d,00,00,00,\ 3e,00,00,00,\ 3f,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","SpoolerGroup",0x00030003,\ 02,00,00,00,01,00,00,00,02,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","System Bus Extender",0x00030001,\ 0a,00,00,00,\ 03,00,00,00,\ 04,00,00,00,\ 01,00,00,00,\ 08,00,00,00,\ 09,00,00,00,\ 0a,00,00,00,\ 0b,00,00,00,\ 0c,00,00,00,\ 0d,00,00,00,\ 0e,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Video",0x00030003,\ 00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Video Init",0x00030003,\ 01,00,00,00,01,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Video Save",0x00030003,\ 01,00,00,00,01,00,00,00 ; ; GroupOrderList definitions for File System Filters ; HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Infrastructure",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter System",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Bottom",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Copy Protection",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Security Enhancer",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Open File",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Physical Quota Management",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Encryption",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Compression",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter HSM",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Cluster File System",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter System Recovery",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Quota Management",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Content Screener",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Continuous Backup",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Replication",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Anti-Virus",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Undelete",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Activity Monitor",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","FSFilter Top",0x00030003,\ 03,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","Filter",0x00030003,\ 06,00,00,00,\ 01,00,00,00,\ 02,00,00,00,\ 03,00,00,00,\ 04,00,00,00,\ 05,00,00,00,\ 06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\IDConfigDB\Hardware Profiles\0000","FriendlyName",0x00000000,"%NEW_HARDWARE_PROFILE%" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000402",0x00000002,"bg" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000404",0x00000002,"ch" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000405",0x00000002,"cz" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000406",0x00000002,"dk" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000407",0x00000002,"gr" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000408",0x00000002,"gk" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000409",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000040A",0x00000002,"sp" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000040B",0x00000002,"su" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000040C",0x00000002,"fr" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000040E",0x00000002,"hu" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000040F",0x00000002,"is" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000410",0x00000002,"it" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000411",0x00000002,"jp" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000412",0x00000002,"ko" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000413",0x00000002,"nl" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000414",0x00000002,"no" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000415",0x00000002,"pl" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000416",0x00000002,"br" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000418",0x00000002,"ro" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000419",0x00000002,"ru" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000041A",0x00000002,"yu" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000041B",0x00000002,"sl" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000041C",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000041D",0x00000002,"sv" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000041F",0x00000002,"tr" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000422",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000423",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000424",0x00000002,"yu" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000425",0x00000000,"et" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000426",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000427",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000804",0x00000002,"ch" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000807",0x00000002,"sg" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000809",0x00000002,"uk" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000080A",0x00000002,"la" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000080C",0x00000002,"be" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000813",0x00000002,"be" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000816",0x00000002,"po" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000C0C",0x00000002,"cf" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00000C1A",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00001009",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0000100C",0x00000002,"sf" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00001809",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010402",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010405",0x00000002,"cz" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010407",0x00000002,"gr" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010408",0x00000000,"gk" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010409",0x00000002,"dv" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0001040A",0x00000002,"sp" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0001040E",0x00000000,"hu" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010410",0x00000002,"it" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010415",0x00000000,"pl" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010419",0x00000002,"ru" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0001041B",0x00000002,"sl" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","0001041F",0x00000002,"tr" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010426",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010C0C",0x00000002,"cf" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00010C1A",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00020408",0x00000000,"gk" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00020409",0x00000002,"us" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00030409",0x00000002,"usl" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00040409",0x00000002,"usr" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybCodes","00050408",0x00000002,"gk" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybIDs","00000410",0x00000000,"141" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybIDs","0000041F",0x00000000,"179" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybIDs","00010408",0x00000000,"220" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybIDs","00010410",0x00000000,"142" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybIDs","00010415",0x00000000,"214" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybIDs","0001041F",0x00000000,"440" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layout\DosKeybIDs","00020408",0x00000000,"319" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00000409","Layout File",0x00000002,"KBDUS.DLL" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00000409","Layout Text",0x00000002,"%US%" HKLM,"System\CurrentControlSet\Control\Keyboard Layouts\00000409","Layout Display Name",,"@%SystemRoot%\system32\input.dll,-5000" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00010409","Layout File",0x00000002,"KBDDV.DLL" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00010409","Layout Id",0x00000002,"0002" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00010409","Layout Text",0x00000002,"%US_DVORAK%" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00020409","Layout File",0x00000002,"KBDUSX.DLL" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00020409","Layout Id",0x00000002,"0001" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00020409","Layout Text",0x00000002,"%US_INTERNATIONAL%" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00030409","Layout File",0x00000002,"KBDUSL.DLL" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00030409","Layout Id",0x00000002,"001A" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00030409","Layout Text",0x00000002,"%US_DVORAK_FOR_LEFT_HAND%" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00040409","Layout File",0x00000002,"KBDUSR.DLL" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00040409","Layout Id",0x00000002,"001B" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\00040409","Layout Text",0x00000002,"%US_DVORAK_FOR_RIGHT_HAND%" HKLM,"SYSTEM\CurrentControlSet\Control\Lsa","Authentication Packages",0x00010002,"msv1_0" HKLM,"SYSTEM\CurrentControlSet\Control\Lsa","Bounds",0x00030003,\ 00,30,00,00,00,20,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\Lsa","Security Packages",0x00010000,"kerberos","msv1_0","schannel","wdigest" HKLM,"SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders","ProviderOrder",0x00010002,"Windows NT Access Provider" HKLM,"SYSTEM\CurrentControlSet\Control\Lsa\AccessProviders\Windows NT Access Provider","ProviderPath",0x00020002,"%SystemRoot%\system32\ntmarta.dll" HKLM,"System\CurrentControlSet\Control\Lsa\MSV1_0","Auth132",0x00000002,"IISSUBA" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\SideWinderAutoDetect",,0x00000010 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\SideWinderAutoDetect","OEMName",0x00000000,"%SIDEWINDER_OEMNAME%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\SideWinderAutoDetect","OEMHardwareID",0x00000000,"Gameport\SideWinderGameController" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\SideWinderAutoDetect","OEMData",0x00000001,00,00,08,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\SideWinderAutoDetect","Flags1",0x00000001,01,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_0428&PID_4901","OEMName",0x00000000,"%NTGRIP_GPP%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_0428&PID_4901","OEMData",0x00000001, 20, 0, 0, 0, 0a, 0, 0, 0 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_0428&PID_4901","OEMHardwareID",0x00000000,"Gameport\VID_0428&PID_4901" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_044F&PID_A012","OEMData",0x00000001,41,00,00,10,08,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_001A","OEMData",0x00000001,00,00,08,10,08,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_001B","OEMData",0x00000001,03,00,08,10,08,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_0026","OEMData",0x00000001,20,00,00,10,09,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_0034","OEMData",0x00000001,00,00,08,10,08,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_0038","OEMData",0x00000001,03,00,08,10,08,00,00,00 HKLM,"System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EA","OEMData",0x00000001,40,08,00,00,04,00,00,00 HKLM,"System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EA","OEMName",0x00000000,"%TMT1_NOADAPT%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EA","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01EA" HKLM,"System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EB","OEMData",0x00000001,40,00,00,00,04,00,00,00 HKLM,"System\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EB","OEMName",0x00000000,"%TMT1_ADAPT%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EB","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01EB" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EC","OEMName",0x00000000,"%PCPROPAD6%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EC","OEMData",0x00000001,20,00,00,00,06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EC","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01EC" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01ED","OEMName",0x00000000,"%THRUSTMASTER_1%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01ED","OEMData",0x00000001,0a,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01ED","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01ED" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EE","OEMName",0x00000000,"%THRUSTMASTER_TOPGUNPLATINUM%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EE","OEMData",0x00000001,0b,80,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EE","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01EE" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EF","OEMName",0x00000000,"%LOGITECH_WINMANEXTREME%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EF","OEMData",0x00000001,0a,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01EF","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01EF" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F0","OEMName",0x00000000,"%HIDGAME_DFTDEV0%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F0","OEMData",0x00000001,40,08,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F0","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F0" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F1","OEMName",0x00000000,"%HIDGAME_DFTDEV1%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F1","OEMData",0x00000001,06,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F1","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F1" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F2","OEMName",0x00000000,"%HIDGAME_DFTDEV2%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F2","OEMData",0x00000001,07,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F2","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F2" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F3","OEMName",0x00000000,"%HIDGAME_DFTDEV3%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F3","OEMData",0x00000001,06,00,00,00,06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F3","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F3" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F4","OEMName",0x00000000,"%HIDGAME_DFTDEV4%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F4","OEMData",0x00000001,07,00,00,00,06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F4","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F4" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F5","OEMName",0x00000000,"%HIDGAME_DFTDEV5%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F5","OEMData",0x00000001,06,00,04,00,06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F5","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F5" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F6","OEMName",0x00000000,"%HIDGAME_DFTDEV6%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F6","OEMData",0x00000001,07,00,04,00,06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F6","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F6" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F7","OEMName",0x00000000,"%HIDGAME_DFTDEV7%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F7","OEMData",0x00000001,16,00,04,00,06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F7","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F7" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F8","OEMName",0x00000000,"%HIDGAME_DFTDEV8%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F8","OEMData",0x00000001,17,00,04,00,06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F8","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F8" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F9","OEMName",0x00000000,"%HIDGAME_DFTDEV9%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F9","OEMData",0x00000001,20,00,00,00,06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01F9","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01F9" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FA","OEMName",0x00000000,"%HIDGAME_DFTDEVA%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FA","OEMData",0x00000001,21,00,00,00,05,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FA","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01FA" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FB","OEMName",0x00000000,"%HIDGAME_DFTDEVB%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FB","OEMData",0x00000001,00,00,00,00,06,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FB","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01FB" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FC","OEMName",0x00000000,"%HIDGAME_DFTDEVC%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FC","OEMData",0x00000001,01,00,00,00,05,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FC","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01FC" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FD","OEMName",0x00000000,"%HIDGAME_DFTDEVD%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FD","OEMData",0x00000001,0A,00,00,00,05,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_045E&PID_01FD","OEMHardwareID",0x00000000,"Gameport\VID_045E&PID_01FD" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_046D&PID_C01F","OEMName",0x00000000,"%LOGITECH_WGMEXTRMDGTLAUTO%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_046D&PID_C01F","OEMData",0x00000001,00,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_046D&PID_C01F","OEMHardwareID",0x00000000,"GamePort\WingManDigitalDevice" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3900","OEMName",0x00000000,"%NTGRIP_BHK%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3900","OEMData",0x00000001, 03, 00, 08, 00, 05, 00, 00, 00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3900","OEMHardwareID",0x00000000,"Gameport\VID_047D&PID_3900" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3901","OEMName",0x00000000,"%NTGRIP_XDC%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3901","OEMData",0x00000001, 03, 00, 88, 01, 09, 00, 00, 00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3901","OEMHardwareID",0x00000000,"Gameport\VID_047D&PID_3901" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3905","OEMName",0x00000000,"%NTGRIP_ZEBRA%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3905","OEMData",0x00000001, 03, 00, 08, 00, 0a, 00, 00, 00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_3905","OEMHardwareID",0x00000000,"Gameport\VID_047D&PID_3905" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_4903","OEMName",0x00000000,"%NTGRIP_XDGP%" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_4903","OEMData",0x00000001, 03, 00, 88, 01, 0b, 00, 00, 00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM\VID_047D&PID_4903","OEMHardwareID",0x00000000,"Gameport\VID_047D&PID_4903" HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\ANDRETTI.EXE34492A63000BEA00","DSAPPHACKID_MODIFYCSBFAILURE",0x00030003,\ 1e,00,78,88 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\CARN2.EXE37EB70B500014000","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\CMMOVIE.EXE37D906F40000B000","DSAPPHACKID_RETURNWRITEPOS",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\DD2.EXE3288834400092BF0","DSAPPHACKID_DISABLEDEVICE",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\DD2H.EXE328882C500092DF8","DSAPPHACKID_DISABLEDEVICE",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\FIFARTWC.EXE345FB52D00183C00","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\FIFAWC.EXE35320039001AE400","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\FIFAWIN.EXE325FC5F4000F2200","DSAPPHACKID_PADCURSORS",0x00030003,\ 3C,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\FIFAWIN.EXE32665883000F2200","DSAPPHACKID_PADCURSORS",0x00030003,\ 3C,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\FROGGER2.EXE39AFD5020008F000","DSAPPHACKID_CACHEPOSITIONS",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\FURBY.EXE37CEF14100108000","DSAPPHACKID_CACHEPOSITIONS",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\GAMEMAIN.EXE35C90A8A00223C00","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\HH2002.EXE3A9A1B9800506577","DSAPPHACKID_DISABLEDEVICE",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\HOCKEY.EXE32348F190017A800","DSAPPHACKID_PADCURSORS",0x00030003,\ 3C,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\LEGACY.EXE347B57D00006D200","DSAPPHACKID_RETURNWRITEPOS",0x00030003,\ 07,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\LIBRARY.EXE371B6D8C00116800","DSAPPHACKID_CACHEPOSITIONS",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\MAGESLAY.EXE34146DD300112000","DSAPPHACKID_DISABLEDEVICE",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\MICKEYK.EXE37489012001F3292","DSAPPHACKID_RETURNWRITEPOS",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\MICKEYK.EXE37489012001F3292","DSAPPHACKID_DEVACCEL",0x00030003,\ 0e,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\MICKEYP.EXE37489012001F328A","DSAPPHACKID_RETURNWRITEPOS",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\MICKEYP.EXE37489012001F328A","DSAPPHACKID_DEVACCEL",0x00030003,\ 0e,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\MICKEYT.EXE37489012001C293C","DSAPPHACKID_RETURNWRITEPOS",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\MICKEYT.EXE37489012001C293C","DSAPPHACKID_DEVACCEL",0x00030003,\ 0e,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\NBAWIN.EXE3299791300186200","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\NBAWIN.EXE343FC9AF001FF400","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\NFS.EXE31C4F35C00105000","DSAPPHACKID_RETURNWRITEPOS",0x00030003,\ 07,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\NFS.EXE325328050011CC00","DSAPPHACKID_RETURNWRITEPOS",0x00030003,\ 07,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\NFS2SEA.EXE342709E1000EE200","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\NFS2SEN.EXE34270ABA000DBC00","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\NHL98.EXE340F99AF001CF800","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\NUKEPC.EXE3431F0600011515C","DSAPPHACKID_PADCURSORS",0x00030003,\ 0a,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\PARK.EXE36CB498E0010C000","DSAPPHACKID_CACHEPOSITIONS",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\PIT DROIDS.EXE37B9DC1C000BA02D","DSAPPHACKID_RETURNWRITEPOS",0x00030003,\ 04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\PIT DROIDS.EXE37B9DC1C000BA02D","DSAPPHACKID_DEVACCEL",0x00030003,\ 0e,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\SAW_GAME.EXE353D11FB0020CA00","DSAPPHACKID_DEVACCEL",0x00030003,\ 0e,00,00,00,04,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\TIME32.EXE33EE7C1E000D8400","DSAPPHACKID_RETURNWRITEPOS",0x00030003,\ 07,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\TP98_R.EXE3372E28300165C00","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\TP99_R.EXE350265F8001AD000","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\TPLAYW.EXE31F3EE2D0011D600","DSAPPHACKID_PADCURSORS",0x00030003,\ 28,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Application Compatibility\UNREAL.EXE355F016600006000","DSAPPHACKID_SMOOTHWRITEPOS",0x00030003,\ 01,00,00,00,50,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Device Presence", "VxD", 0x00010003, 0x00000001 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Device Presence", "WDM", 0x00010003, 0x00000001 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Device Presence", "Emulated", 0x00010003, 0x00000001 HKLM,"SYSTEM\CurrentControlSet\Control\MediaResources\DirectSound\Mixer Defaults", "Acceleration", 0x00010003, 0x00000000 HKLM,"SYSTEM\CurrentControlSet\Control\Network",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Network\Connections","ClassManagers",0x00010000,\ "{B4C8DF59-D16F-4042-80B7-3557A254B7C5}",\ "{BA126AD3-2166-11D1-B1D0-00805FC1270E}",\ "{BA126AD5-2166-11D1-B1D0-00805FC1270E}",\ "{BA126ADD-2166-11D1-B1D0-00805FC1270E}",\ "{BA126AE0-2166-11D1-B1D0-00805FC1270E}" HKLM,"SYSTEM\CurrentControlSet\Control\Network","FilterClasses",0x00010000,\ "scheduler",\ "loadbalance",\ "failover" HKLM,"SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}","",0x00000002,"%NETWORK_ADAPTERS%" HKLM,"SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"Net" HKLM,"SYSTEM\CurrentControlSet\Control\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}","",0x00000002,"%NETWORK_CLIENT%" HKLM,"SYSTEM\CurrentControlSet\Control\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"NetClient" HKLM,"SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}","",0x00000002,"%NETWORK_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Control\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"NetService" HKLM,"SYSTEM\CurrentControlSet\Control\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}","",0x00000002,"%NETWORK_PROTOCOL%" HKLM,"SYSTEM\CurrentControlSet\Control\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}","Class",0x00000002,"NetTrans" HKLM,"SYSTEM\CurrentControlSet\Control\NetworkProvider",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Nls",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10000",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10001",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10002",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10003",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10004",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10005",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10006",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10007",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10008",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10010",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10017",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10021",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10029",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10079",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10081",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","10082",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1026",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1047",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1140",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1141",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1142",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1143",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1144",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1145",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1146",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1147",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1148",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1149",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1250",0x00000000,"c_1250.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1251",0x00000000,"c_1251.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1252",0x00000000,"c_1252.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1253",0x00000000,"c_1253.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1254",0x00000000,"c_1254.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1255",0x00000000,"c_1255.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1256",0x00000000,"c_1256.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1257",0x00000000,"c_1257.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1258",0x00000000,"c_1258.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","1361",0x00000000,"c_1361.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20000",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20001",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20002",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20003",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20004",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20005",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20105",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20106",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20107",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20108",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20127",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20261",0x00000000,"c_20261.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20269",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20273",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20277",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20278",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20280",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20284",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20285",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20290",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20297",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20420",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20423",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20424",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20833",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20838",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20866",0x00000000,"c_20866.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20871",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20880",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20905",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20924",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20932",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20936",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","20949",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","21025",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","21027",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","21866",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28591",0x00000000,"c_28591.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28592",0x00000000,"c_28592.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28593",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28594",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28595",0x00000000,"c_28595.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28596",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28597",0x00000000,"c_28597.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28598",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28599",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","28605",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","37",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","38598",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","437",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","500",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","51949",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","50220",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","50221",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","50222",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","50225",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","50227",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","50229",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","52936",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57002",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57003",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57004",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57005",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57006",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57007",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57008",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57009",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57010",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","57011",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","708",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","720",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","737",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","775",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","850",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","852",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","855",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","857",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","858",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","860",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","861",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","862",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","863",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","864",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","865",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","866",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","869",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","870",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","874",0x00000000,"c_874.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","875",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","932",0x00000000,"c_932.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","936",0x00000000,"c_936.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","949",0x00000000,"c_949.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage","950",0x00000000,"c_950.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage\EUDCCodeRange","932",0x00000002,"F040-F9FC" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage\EUDCCodeRange","936",0x00000002,"AAA1-AFFE,F8A1-FEFE,A140-A7A0" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage\EUDCCodeRange","949",0x00000002,"C9A1-C9FE,FEA1-FEFE" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage\EUDCCodeRange","950",0x00000002,"FA40-FEFE,8E40-A0FE,8140-8DFE,C6A1-C8FE" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\CodePage\EUDCCodeRange","Unicode",0x00000000,"E000-F8FF" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0401",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0402",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0403",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0404",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0405",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0406",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0407",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0408",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0409",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","040a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","040b",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","040c",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","040d",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","040e",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","040f",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0410",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0411",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0412",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0413",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0414",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0415",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0416",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0418",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0419",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","041a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","041b",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","041c",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","041d",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","041e",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","041f",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0420",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0421",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0422",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0423",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0424",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0425",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0426",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0427",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0429",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","042a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","042b",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","042c",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","042d",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","042f",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0436",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0437",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0438",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0439",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","043e",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","043f",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0440",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0441",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0443",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0444",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0446",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0447",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0449",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","044a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","044b",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","044e",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","044f",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0450",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0456",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0457",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","045a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0465",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0801",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0804",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0807",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0809",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","080a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","080c",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0810",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0813",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0814",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0816",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","081a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","081d",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","082c",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","083e",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0843",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0c01",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0c04",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0c07",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0c09",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0c0a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0c0c",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0c1a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1001",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1004",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1007",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1009",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","100a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","100c",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1401",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1404",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1407",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1409",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","140a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","140c",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1801",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1809",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","180a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","180c",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1c01",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1c09",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","1c0a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","2001",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","2009",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","200a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","2401",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","2409",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","240a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","2801",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","2809",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","280a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","2c01",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","2c09",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","2c0a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","3001",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","3009",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","300a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","3401",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","3409",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","340a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","3801",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","380a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","3c01",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","3c0a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","4001",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","400a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","440a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","480a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","4c0a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","500a",0x00000000,"l_intl.nls" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","InstallLanguage",0x00000002,"%INSTALL_LANGUAGE%" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","1",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","2",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","3",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","4",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","5",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","6",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","7",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","8",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","9",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","a",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","b",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","c",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","d",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","e",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","f",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","10",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language Groups","11",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","(Default)",0x00000002,"00000409" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000401",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000402",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000403",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000404",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000405",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000406",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000407",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000408",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000409",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000040a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000040b",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000040c",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000040d",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000040e",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000040f",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000410",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000411",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000412",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000413",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000414",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000415",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000416",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000418",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000419",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000041a",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000041b",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000041c",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000041d",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000041e",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000041f",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000420",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000421",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000422",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000423",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000424",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000425",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000426",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000427",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000429",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000042a",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000042b",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000042c",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000042d",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000042f",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000436",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000437",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000438",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000439",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000043e",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000043f",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000440",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000441",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000443",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000444",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000446",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000447",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000449",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000044a",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000044b",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000044e",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000044f",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000450",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000456",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000457",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000045a",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000465",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000801",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000804",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000807",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000809",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000080a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000080c",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000810",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000813",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000814",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000816",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000081a",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000081d",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000082c",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000083e",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000843",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000c01",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000c04",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000c07",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000c09",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000c0a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000c0c",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000c1a",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001001",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001004",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001007",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001009",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000100a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000100c",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001401",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001404",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001407",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001409",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000140a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000140c",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001801",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001809",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000180a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000180c",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001c01",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001c09",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00001c0a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00002001",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00002009",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000200a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00002401",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00002409",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000240a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00002801",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00002809",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000280a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00002c01",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00002c09",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00002c0a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00003001",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00003009",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000300a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00003401",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00003409",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000340a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00003801",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000380a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00003c01",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00003c0a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00004001",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000400a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000440a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000480a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00004c0a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000500a",0x00000002,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00010407",0x00000000,"1" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","0001040e",0x00000000,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00010437",0x00000000,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00020804",0x00000000,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00021004",0x00000000,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00021404",0x00000000,"" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00030404",0x00000000,"" HKLM,"SYSTEM\CurrentControlSet\Control\NTMS",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID\Tape",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID\Tape\HP","Description",0x00000002,%HP_DESCRIPTOR% HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID\Tape\HP","Path",0x00020002,"%SystemRoot%\system32\mll_hp.dll" HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID\Tape\MTF","Description",0x00000002,%MTF_DESCRIPTOR% HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID\Tape\MTF","Path",0x00020002,"%SystemRoot%\system32\mll_mtf.dll" HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID\Tape\QIC","Description",0x00000002,%QIC_DESCRIPTOR% HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID\Tape\QIC","Path",0x00020002,"%SystemRoot%\system32\mll_qic.dll" HKLM,"SYSTEM\CurrentControlSet\Control\PnP\BusInformation","{441ee000-4342-11d5-a184-00c04f60524d}",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Control\PnP\BusInformation","{441ee001-4342-11d5-a184-00c04f60524d}",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Control\PnP\BusInformation","{c4ca1000-2ddc-11d5-a17a-00c04f60524d}",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Control\PnP\BusInformation","{c8ebdfb0-b510-11d0-80e5-00a0c92542e3}",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Control\PnP\BusInformation","{9d7debbc-c85d-11d1-9eb4-006008c3a19a}",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Control\PnP\BusInformation","{eeaf37d0-1963-47c4-aa48-72476db7cf49}",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Control\PnP\BusInformation","{f74e73eb-9ac5-45eb-be4d-772cc71ddfb3}",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Control\Print","MajorVersion",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Control\Print","MinorVersion",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Print","PriorityClass",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0","Directory",0x00000002,"WIN40" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Drivers",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows 4.0\Print Processors",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64","Directory",0x00000002,"IA64" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Drivers",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows IA64\Print Processors",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64","Directory",0x00000002,"x64" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Drivers",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows x64\Print Processors",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP","Directory",0x00000002,"W32ALPHA" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Drivers",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT Alpha_AXP\Print Processors",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86","Directory",0x00000002,"W32X86" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Drivers",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Print Processors",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Environments\Windows NT x86\Print Processors\winprint","Driver",0x00000000,"localspl.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Monitors",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Monitors\BJ Language Monitor","Driver",0x00000002,"cnbjmon.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Monitors\Local Port","Driver",0x00000000,"localspl.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Monitors\PJL Language Monitor","Driver",0x00000002,"pjlmon.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Monitors\Standard TCP/IP Port","Driver",0x00000000,"tcpmon.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Monitors\USB Monitor","Driver",0x00000000,"usbmon.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Printers",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Print\Providers","Order",0x00010002,"LanMan Print Services", "Internet Print Provider" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services","DisplayName",0x00000002,"%LANMAN_PRINT_SERVICES%" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Providers\LanMan Print Services","Name",0x00000002,"win32spl.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Providers\Internet Print Provider","DisplayName",0x00000002,"%HTTP_PRINT_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Providers\Internet Print Provider","Name",0x00000002,"inetpp.dll" HKLM,"SYSTEM\CurrentControlSet\Control\PriorityControl","Win32PrioritySeparation",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Control\ProductOptions","ProductType",0x00000002,"WinNt" HKLM,"SYSTEM\CurrentControlSet\Control\ProductOptions","ProductSuite",0x00010002,"" HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\DiskCOMPAQPCST32430N________","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\DiskMICROP__3243-19MZ__Q4D__","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\DiskMICROP__4421-07___0502SJ","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\DiskSEAGATE_ST34502LC_______","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\DiskIBM_____DNES-309170W____","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\CDROMYAMAHACRW4416S__________","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\CDROMCyberDrvSCSI_CD-ROM_120S","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\WormYAMAHA__CDR100__________","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\WormYAMAHA__CDR102__________","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ProcessorESH-SHVSVA_HSBP_M10_____","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ChangerJVC_CD-CHG_MC-1600______","OneLun",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ScannerUMAX____Astra_2400S_____","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ScannerUMAX____Astra_2200______","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ScannerUMAX____Astra_1200S_____","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ScannerUMAX____Astra_1220S_____","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ScannerUMAX____Astra_610S______","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ScannerUMAX____Astra_600S______","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ScannerLinoHellSAPHIR3_________","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\Scanner________Scanner_________","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\Scanner________Scanner_600_____","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ScannerMICROTEKScanMakerIII____","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\ScsiPort\SpecialTargetList\ScannerMICROTEKScanMakerIIsp___","SetLunInCdb",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\SecurePipeServers",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg","Description",0x00000002,"%REGISTRY_SERVER%" HKLM,"SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg\AllowedPaths","Machine",0x00010000,\ "System\CurrentControlSet\Control\ProductOptions",\ "System\CurrentControlSet\Control\Print\Printers",\ "System\CurrentControlSet\Control\Server Applications",\ "System\CurrentControlSet\Services\Eventlog",\ "Software\Microsoft\OLAP Server",\ "Software\Microsoft\Windows NT\CurrentVersion" HKLM,"SYSTEM\CurrentControlSet\Control\SecurityProviders\SaslProfiles",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\SecurityProviders\SaslProfiles","GSSAPI",0x00000002,"Kerberos" HKLM,"SYSTEM\CurrentControlSet\Control\SecurityProviders","SecurityProviders",0x00000002,"schannel.dll" HKLM,"SYSTEM\CurrentControlSet\Control\ServiceGroupOrder","List",0x00010000,\ "System Reserved",\ "Boot Bus Extender",\ "System Bus Extender",\ "SCSI miniport",\ "Port",\ "Primary Disk",\ "SCSI Class",\ "SCSI CDROM Class",\ "FSFilter Infrastructure",\ "FSFilter System",\ "FSFilter Bottom",\ "FSFilter Copy Protection",\ "FSFilter Security Enhancer",\ "FSFilter Open File",\ "FSFilter Physical Quota Management",\ "FSFilter Encryption",\ "FSFilter Compression",\ "FSFilter HSM",\ "FSFilter Cluster File System",\ "FSFilter System Recovery",\ "FSFilter Quota Management",\ "FSFilter Content Screener",\ "FSFilter Continuous Backup",\ "FSFilter Replication",\ "FSFilter Anti-Virus",\ "FSFilter Undelete",\ "FSFilter Activity Monitor",\ "FSFilter Top",\ "Filter",\ "Boot File System",\ "Base",\ "Pointer Port",\ "Keyboard Port",\ "Pointer Class",\ "Keyboard Class",\ "Video Init",\ "Video",\ "Video Save",\ "File System",\ "Event Log",\ "Streams Drivers",\ "NDIS Wrapper",\ "COM Infrastructure",\ "UIGroup",\ "LocalValidation",\ "PlugPlay",\ "PNP_TDI",\ "NDIS",\ "TDI",\ "NetBIOSGroup",\ "ShellSvcGroup",\ "SchedulerGroup",\ "SpoolerGroup",\ "AudioGroup",\ "SmartCardGroup",\ "NetworkProvider",\ "RemoteValidation",\ "NetDDEGroup",\ "Parallel arbitrator",\ "Extended Base",\ "PCI Configuration" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","BootExecute",0x00010002,"autocheck autochk *" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","CriticalSectionTimeout",0x00010003,2592000 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","EnableMCA",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","EnableMCE",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","ExcludeFromKnownDlls",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","GlobalFlag",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","HeapDeCommitFreeBlockThreshold",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","HeapDeCommitTotalFreeThreshold",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","HeapSegmentCommit",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","HeapSegmentReserve",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","ObjectDirectories",0x00010002,"\Windows","\RPC Control" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","ProtectionMode",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager","ResourceTimeoutCount",0x00010003,648000 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\CWD",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\CWD\ff060102423da0000407108e0500",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\CWD\ff060102423da0000407108e0500\1","Add1",0x00030003,\ 02,15,40,a0,10,1e,b8,23,00,8e,d8,8b,0e,14,07,81,e1,00,02,1f,c3 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\CWD\ff060102423da0000407108e0500\1","Change1",0x00030003,\ 01,1d,50,48,0c,55,8b,ec,b8,00,00,9c,59,81,e1,00,02,55,8b,ec,b8,00,00,e8,e7,\ 57,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTBI01\ff06010242935100040720730500",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTBI01\ff06010242935100040720730500\1","Change1",0x00030003,\ 01,49,D0,18,22,45,55,8B,EC,1E,B4,43,32,C0,C5,56,06,CD,21,1f,72,0A,C4,5E,0A,\ 26,89,0F,33,C0,EB,04,50,E8,FA,02,5D,4D,CB,55,8B,EC,1E,B8,00,43,C5,56,06,CD,21,\ 1F,72,0D,C4,5E,0A,80,E1,1F,26,89,0F,33,C0,EB,04,50,E8,FA,02,5D,CB HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTBI02",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTBI02\ff06010242468300040790c80400",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTBI02\ff06010242468300040790c80400\1","Change1",0x00030003,\ 01,51,12,46,26,45,55,8B,EC,56,57,1e,b4,43,32,c0,c5,56,06,cd,21,1f,72,0a,c4,\ 5e,0a,26,89,0f,33,c0,eb,04,50,e8,4b,03,5f,5e,5d,4d,cb,45,55,8b,ec,1e,b4,43,32,\ c0,c5,56,06,cd,21,1f,72,0a,c4,5e,0a,80,e1,1f,26,89,0f,33,c0,eb,04,50,e8,4b,03,5d,4d,cb,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTBIN",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTBIN\ff0601024cab7b000407b0ea0400",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTBIN\ff0601024cab7b000407b0ea0400\2","Change1",0x00030003,\ 01,15,f0,3b,08,3d,03,5f,74,03,e9,06,00,3d,03,5f,90,90,e9,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTSCR",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTSCR\ff060102c47b1f00040750db0100",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\INSTSCR\ff060102c47b1f00040750db0100\e","Change1",0x00030003,\ 01,13,84,1e,07,45,55,8b,ec,68,00,20,45,55,8b,ec,68,02,20 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\LTSPRINT",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\LTSPRINT\ff060102424f3f000306706600",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\LTSPRINT\ff060102424f3f000306706600\1","Change1",0x00030003,\ 01,0b,9c,1c,03,3d,00,01,3d,00,06 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\MYST",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\MYST\ff060102423bab000407102e0600",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\MYST\ff060102423bab000407102e0600\1","Add1",0x00030003,\ 02,15,40,ab,10,1e,b8,23,00,8e,d8,8b,0e,14,07,81,e1,00,02,1f,c3 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\MYST\ff060102423bab000407102e0600\1","Change1",0x00030003,\ 01,1d,50,49,0c,55,8b,ec,b8,00,00,9c,59,81,e1,00,02,55,8b,ec,b8,00,00,e8,e7,\ 61,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\OUTPOST",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\OUTPOST\ff06010242410f000306801500",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\OUTPOST\ff06010242410f000306801500\1","Change1",0x00030003,\ 01,0f,09,0a,05,9a,73,05,ff,01,b8,03,0a,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\PALED40",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\PALED40\ff060102420032000407401b0100",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\PALED40\ff060102420032000407401b0100\1","Change1",0x00030003,\ 01,07,b7,21,01,d8,0c HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601025642ea00040750550700",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601025642ea00040750550700\3","Change1",0x00030003,\ 01,1D,b7,41,0c,8b,4e,f0,8b,5e,f2,2b,4e,f4,1b,5e,f6,b9,50,01,bb,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256e2e400040750600700",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256e2e400040750600700\3","Change1",0x00030003,\ 01,1D,FD,34,0c,8b,4e,f0,8b,5e,f2,2b,4e,f4,1b,5e,f6,b9,50,01,bb,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601024237e6000407d00e0800",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601024237e6000407d00e0800\1","Change1",0x00030003,\ 01,1D,65,e5,0c,8b,46,e8,8b,56,ea,2b,46,fa,1b,56,fc,b8,50,01,ba,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256eae500040710640700",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256eae500040710640700\3","Change1",0x00030003,\ 01,1D,fd,34,0c,8b,4e,f0,8b,5e,f2,2b,4e,f4,1b,5e,f6,b9,50,01,bb,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256c1ef00040770fb0600",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256c1ef00040770fb0600\3","Change1",0x00030003,\ 01,1D,fd,38,0c,8b,46,f0,8b,56,f2,2b,46,f4,1b,56,f6,b8,50,01,ba,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256b1dd00040760ef0b00",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256b1dd00040760ef0b00\3","Change1",0x00030003,\ 01,15,2c,3b,08,66,8b,46,f0,66,2b,46,f4,66,b8,50,01,00,00,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601024211e100040750e50700",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601024211e100040750e50700\1","Change1",0x00030001,\ 01,1D,3f,e0,0c,8b,46,e8,8b,56,ea,2b,46,fa,1b,56,fc,b8,50,01,ba,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601025621ef000407f07a0700",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601025621ef000407f07a0700\3","Change1",0x00030003,\ 01,1D,f3,45,0c,8b,4e,f0,8b,5e,f2,2b,4e,f4,1b,5e,f6,b9,50,01,bb,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256faef00040710c50600",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff06010256faef00040710c50600\3","Change1",0x00030003,\ 01,1D,b7,33,0c,8b,46,f0,8b,56,f2,2b,46,f4,1b,56,f6,b8,50,01,ba,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff060102565ce5000407d0600700",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff060102565ce5000407d0600700\3","Change1",0x00030003,\ 01,1D,fd,34,0c,8b,4e,f0,8b,5e,f2,2b,4e,f4,1b,5e,f6,b9,50,01,bb,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601025621ef000407f07a0700",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601025621ef000407f07a0700\3","Change1",0x00030003,\ 01,1D,f3,45,0c,8b,4e,f0,8b,5e,f2,2b,4e,f4,1b,5e,f6,b9,50,01,bb,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff060102564ee6000407b0670700",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff060102564ee6000407b0670700\3","Change1",0x00030003,\ 01,15,7c,35,08,66,8b,46,fc,66,2b,46,f0,66,b8,50,01,00,00,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601024237e6000407d00e0800",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601024237e6000407d00e0800\1","Change1",0x00030003,\ 01,1D,65,e5,0c,8b,46,e8,8b,56,ea,2b,46,fa,1b,56,fc,b8,50,01,ba,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff060102428203000306401600",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff060102428203000306401600\1","Change1",0x00030003,\ 01,0f,28,03,05,33,ed,55,9a,13,b8,00,4c,cd,21 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601025674e6000407704d0700",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP\ff0601025674e6000407704d0700\3","Change1",0x00030003,\ 01,1d,cf,3d,0c,8b,4e,f0,8b,5e,f2,2b,4e,f4,1b,5e,f6,b9,50,01,bb,00,00,90,90,\ 90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP16",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP16\ff0601024cd875000407a0db0100",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\SETUP16\ff0601024cd875000407a0db0100\2","Change1",0x00030001,\ 01,23,17,42,0f,8b,c8,8b,d0,8b,5e,0e,2a,e4,89,07,8a,cd,2a,ed,b9,0a,00,ba,03,0a,\ 8b,5e,0e,2a,e4,90,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\USA",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\USA\ff06010242059b00040710780600",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\USA\ff06010242059b00040710780600\1","Change1",0x00030003,\ 01,1d,95,44,0c,55,8b,ec,b8,00,00,9c,59,81,e1,00,02,55,8b,ec,b8,00,00,e8,67,\ 56,90,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\USA\ff06010242059b00040710780600\1","Change2",0x00030003,\ 01,25,05,9b,10,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1e,b8,23,00,\ 8e,d8,8b,0e,14,07,81,e1,00,02,1f,c3 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\VB",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\VB\ff060102ec353f00040780c81300",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\VB\ff060102ec353f00040780c81300\12","Change1",0x00030003,\ 01,11,1b,03,06,81,3e,ba,31,34,03,81,3e,ba,31,09,03 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\VB40016",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\VB40016\ff0702021401ee3e000407d0460e00",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\VB40016\ff0702021401ee3e000407d0460e00\16","Change1",0x00030003,\ 01,11,6d,2a,06,81,3e,6e,36,34,03,81,3e,6e,36,09,03 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\WISE0001",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\WISE0001\ff0601024cf4ef000407604e0100",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\WISE0001\ff0601024cf4ef000407604e0100\2","Change1",0x00030003,\ 01,0f,8e,00,05,9a,4b,00,0f,02,b8,0c,29,90,90 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices","AUX",0x00000002,"\DosDevices\COM1" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices","MAILSLOT",0x00000002,"\Device\MailSlot" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices","NUL",0x00000002,"\Device\Null" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices","PIPE",0x00000002,"\Device\NamedPipe" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices","PRN",0x00000002,"\DosDevices\LPT1" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices","UNC",0x00000002,"\Device\Mup" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Environment","ComSpec",0x00020002,"%SystemRoot%\system32\cmd.exe" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Environment","Path",0x00020002,"%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Environment","windir",0x00020002,"%SystemRoot%" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Executive","AdditionalCriticalWorkerThreads",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Executive","AdditionalDelayedWorkerThreads",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\FileRenameOperations",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\kernel","ObUnsecureGlobalNames",0x00010002,"netfxcustomperfcounters.1.0","SharedPerfIPCBlock","Cor_Private_IPCBlock" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","advapi32",0x00000000,"advapi32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","comdlg32",0x00000000,"comdlg32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","DllDirectory",0x00020000,"%SystemRoot%\system32" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","gdi32",0x00000000,"gdi32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","imagehlp",0x00000000,"imagehlp.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","kernel32",0x00000000,"kernel32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","lz32",0x00000000,"lz32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","ole32",0x00000000,"ole32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","oleaut32",0x00000000,"oleaut32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","olecli32",0x00000000,"olecli32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","olecnv32",0x00000000,"olecnv32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","olesvr32",0x00000000,"olesvr32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","olethk32",0x00000000,"olethk32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","rpcrt4",0x00000000,"rpcrt4.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","shell32",0x00000000,"shell32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","url",0x00000000,"url.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","urlmon",0x00000000,"urlmon.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","user32",0x00000000,"user32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","version",0x00000000,"version.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","wininet",0x00000000,"wininet.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\KnownDLLs","wldap32",0x00000000,"wldap32.dll" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management","ClearPageFileAtShutdown",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management","DisablePagingExecutive",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management","LargeSystemCache",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management","NonPagedPoolQuota",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management","NonPagedPoolSize",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management","PagedPoolQuota",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management","PagedPoolSize",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management","SecondLevelDataCache",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management","SystemPages",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems","Debug",0x00020002,"" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems","Kmode",0x00020000,"%SystemRoot%\system32\win32k.sys" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems","Optional",0x00010002,"Posix" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems","Posix",0x00020002,"%SystemRoot%\system32\psxss.exe" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems","Required",0x00010002,"Debug","Windows" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Environment","FP_NO_HOST_CHECK",0x00000000,"NO" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems","Windows",0x00020000,\ "%SystemRoot%\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16" HKLM,"SYSTEM\CurrentControlSet\Control\Setup",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\AssignmentOrdering","Eisa",0x00000000,"PCFlat" HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\AssignmentOrdering","Isa",0x00000000,"PCFlat" ; HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\AssignmentOrdering","MCA",0x00000000,"PCFlat" HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\AssignmentOrdering","PCFlat",0x000a0001,\ a8,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,01,00,00,00,01,00,01,00,24,00,00,00,00,01,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,05,00,00,00,00,00,00,ff,ff,00,00,00,00,00,00,08,01,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,40,01,00,00,00,00,00,00,7f,01,00,00,\ 00,00,00,00,08,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,02,00,00,00,\ 00,00,00,ff,02,00,00,00,00,00,00,08,01,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,03,00,00,00,00,00,00,6f,03,00,00,00,00,00,00,08,01,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,78,03,00,00,00,00,00,00,7a,03,00,00,00,00,00,00,\ 08,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,e8,02,00,00,00,00,00,00,ff,\ 02,00,00,00,00,00,00,08,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,f0,01,\ 00,00,00,00,00,00,f8,01,00,00,00,00,00,00,08,01,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,b0,03,00,00,00,00,00,00,cf,03,00,00,00,00,00,00,08,01,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,e8,03,00,00,00,00,00,00,ff,03,00,00,00,\ 00,00,00,08,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,ce,01,00,00,00,00,\ 00,00,cf,01,00,00,00,00,00,00,08,01,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,01,00,00,00,00,00,00,ff,03,00,00,00,00,00,00,00,02,00,00,00,00,00,00,\ 0f,00,00,00,0f,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,08,\ 02,00,00,00,00,00,00,0d,00,00,00,0d,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,08,02,00,00,00,00,00,00,0c,00,00,00,0c,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,08,02,00,00,00,00,00,00,09,00,00,00,\ 09,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,08,02,00,00,00,\ 00,00,00,08,00,00,00,08,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,08,02,00,00,00,00,00,00,07,00,00,00,07,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,08,02,00,00,00,00,00,00,0b,00,00,00,0b,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,08,02,00,00,00,00,00,00,0a,\ 00,00,00,0a,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,08,02,\ 00,00,00,00,00,00,02,00,00,00,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,08,02,00,00,00,00,00,00,05,00,00,00,05,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,08,02,00,00,00,00,00,00,03,00,00,00,03,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,08,02,00,00,00,00,\ 00,00,04,00,00,00,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,08,02,00,00,00,00,00,00,0e,00,00,00,0e,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,08,02,00,00,00,00,00,00,06,00,00,00,06,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,08,02,00,00,00,00,00,00,0c,00,\ 00,00,0c,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,08,02,00,\ 00,00,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,08,02,00,00,00,00,00,00,00,00,00,00,0f,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,03,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,10,00,00,00,00,00,ff,ff,af,ff,00,00,00,00,08,03,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,0f,00,00,00,00,00,ff,ff,0f,00,00,00,00,00,\ 08,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,08,00,00,00,00,00,ff,\ ff,0b,00,00,00,00,00,08,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 08,00,00,00,00,00,ff,ff,0f,00,00,00,00,00,08,03,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,08,00,00,00,00,00,ff,ff,f7,ff,00,00,00,00,00,04,00,00,\ 00,00,00,00,06,00,00,00,0f,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,08,04,00,00,00,00,00,00,03,00,00,00,04,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,08,04,00,00,00,00,00,00,00,00,00,00,0f,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\AssignmentOrdering","PCI",0x000a0001,\ e8,08,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\ 00,00,00,01,00,00,00,01,00,01,00,46,00,00,00,\ 00, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,fc,00,00,00,00,00,00, ff,fc,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,f8,00,00,00,00,00,00, ff,f8,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,f4,00,00,00,00,00,00, ff,f4,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,f0,00,00,00,00,00,00, ff,f0,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,ec,00,00,00,00,00,00, ff,ec,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,e8,00,00,00,00,00,00, ff,e8,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,e4,00,00,00,00,00,00, ff,e4,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,e0,00,00,00,00,00,00, ff,e0,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,dc,00,00,00,00,00,00, ff,dc,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,d8,00,00,00,00,00,00, ff,d8,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,d4,00,00,00,00,00,00, ff,d4,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,d0,00,00,00,00,00,00, ff,d0,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,cc,00,00,00,00,00,00, ff,cc,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,c8,00,00,00,00,00,00, ff,c8,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,c4,00,00,00,00,00,00, ff,c4,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,c0,00,00,00,00,00,00, ff,c0,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,bc,00,00,00,00,00,00, ff,bc,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,b8,00,00,00,00,00,00, ff,b8,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,b4,00,00,00,00,00,00, ff,b4,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,b0,00,00,00,00,00,00, ff,b0,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,ac,00,00,00,00,00,00, ff,ac,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,a8,00,00,00,00,00,00, ff,a8,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,a4,00,00,00,00,00,00, ff,a4,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,a0,00,00,00,00,00,00, ff,a0,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,9c,00,00,00,00,00,00, ff,9c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,98,00,00,00,00,00,00, ff,98,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,94,00,00,00,00,00,00, ff,94,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,90,00,00,00,00,00,00, ff,90,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,8c,00,00,00,00,00,00, ff,8c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,88,00,00,00,00,00,00, ff,88,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,84,00,00,00,00,00,00, ff,84,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,80,00,00,00,00,00,00, ff,80,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,7c,00,00,00,00,00,00, ff,7c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,78,00,00,00,00,00,00, ff,78,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,74,00,00,00,00,00,00, ff,74,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,70,00,00,00,00,00,00, ff,70,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,6c,00,00,00,00,00,00, ff,6c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,68,00,00,00,00,00,00, ff,68,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,64,00,00,00,00,00,00, ff,64,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,60,00,00,00,00,00,00, ff,60,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,5c,00,00,00,00,00,00, ff,5c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,58,00,00,00,00,00,00, ff,58,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,54,00,00,00,00,00,00, ff,54,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,50,00,00,00,00,00,00, ff,50,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,4c,00,00,00,00,00,00, ff,4c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,48,00,00,00,00,00,00, ff,48,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,44,00,00,00,00,00,00, ff,44,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,40,00,00,00,00,00,00, ff,40,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,3c,00,00,00,00,00,00, ff,3c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,38,00,00,00,00,00,00, ff,38,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,34,00,00,00,00,00,00, ff,34,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,30,00,00,00,00,00,00, ff,30,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,2c,00,00,00,00,00,00, ff,2c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,28,00,00,00,00,00,00, ff,28,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,24,00,00,00,00,00,00, ff,24,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,20,00,00,00,00,00,00, ff,20,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,1c,00,00,00,00,00,00, ff,1c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,18,00,00,00,00,00,00, ff,18,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,14,00,00,00,00,00,00, ff,14,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,10,00,00,00,00,00,00, ff,10,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,0c,00,00,00,00,00,00, ff,0c,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,08,00,00,00,00,00,00, ff,08,00,00,00,00,00,00,\ 08, 01, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,05,00,00,00,00,00,00, ff,ff,ff,ff,00,00,00,00,\ 00, 02, 00, 00, 00,00, 00,00, 00,00,00,00, ff,ff,ff,ff, 00,00,00,00,00,00,00,00, 00,00,00,00,00,00,00,00,\ 00, 03, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,00,10,00,00,00,00,00, ff,ff,af,ff,00,00,00,00,\ 08, 03, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,00,0f,00,00,00,00,00, ff,ff,0f,00,00,00,00,00,\ 08, 03, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,00,08,00,00,00,00,00, ff,ff,0b,00,00,00,00,00,\ 08, 03, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,00,08,00,00,00,00,00, ff,ff,0f,00,00,00,00,00,\ 08, 03, 00, 00, 00,00, 00,00, 00,00,00,00, 00,00,00,00, 00,00,08,00,00,00,00,00, ff,ff,f7,ff,00,00,00,00,\ 00, 04, 00, 00, 00,00, 00,00, 06,00,00,00, ff,00,00,00, 00,00,00,00,00,00,00,00, 00,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\AssignmentOrdering","PCMCIA",0x00000000,"PCFlat" HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","CBus",0x00030003,\ 09,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","Eisa",0x00030003,\ 02,00,00,00,01,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","Internal",0x00030003,\ 00,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","Isa",0x00030003,\ 01,00,00,00,00,00,00,00 ; HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","MCA",0x00030003,\ ; 03,00,00,00,01,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","MPI",0x00030003,\ 0a,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","MPSA",0x00030003,\ 0b,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","NuBus",0x00030003,\ 07,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","PCI",0x00030003,\ 05,00,00,00,01,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","PCMCIA",0x00030003,\ 08,00,00,00,01,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","TurboChannel",0x00030003,\ 04,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\BusValues","VME",0x00030003,\ 06,00,00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\ReservedResources","Isa",0x00080001,\ 01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00,28,00,00,00,01,01,00,00,00,\ 00,00,00,00,00,00,00,00,01,00,00,01,03,00,00,e8,42,00,00,00,00,00,00,08,00,\ 00,00,01,03,00,00,e8,4a,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,82,00,\ 00,00,00,00,00,08,00,00,00,01,03,00,00,e8,86,00,00,00,00,00,00,08,00,00,00,\ 01,03,00,00,e8,8a,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,8e,00,00,00,\ 00,00,00,08,00,00,00,01,03,00,00,e8,92,00,00,00,00,00,00,08,00,00,00,01,03,\ 00,00,e8,96,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,9a,00,00,00,00,00,\ 00,08,00,00,00,01,03,00,00,e8,9e,00,00,00,00,00,00,08,00,00,00,01,03,00,00,\ e8,a2,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,a6,00,00,00,00,00,00,08,\ 00,00,00,01,03,00,00,e8,aa,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,ae,\ 00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,b6,00,00,00,00,00,00,08,00,00,\ 00,01,03,00,00,e8,ba,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,be,00,00,\ 00,00,00,00,08,00,00,00,01,03,00,00,e8,c2,00,00,00,00,00,00,08,00,00,00,01,\ 03,00,00,e8,c6,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,ca,00,00,00,00,\ 00,00,08,00,00,00,01,03,00,00,e8,ce,00,00,00,00,00,00,08,00,00,00,01,03,00,\ 00,e8,d2,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,d6,00,00,00,00,00,00,\ 08,00,00,00,01,03,00,00,e8,da,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,\ de,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,e2,00,00,00,00,00,00,08,00,\ 00,00,01,03,00,00,e8,e6,00,00,00,00,00,00,08,00,00,00,01,03,00,00,e8,ea,00,\ 00,00,00,00,00,08,00,00,00,01,03,00,00,e8,ee,00,00,00,00,00,00,08,00,00,00,\ 01,03,00,00,ee,f6,00,00,00,00,00,00,02,00,00,00,01,03,00,00,ee,fa,00,00,00,\ 00,00,00,02,00,00,00,01,03,00,00,ee,fe,00,00,00,00,00,00,02,00,00,00,02,03,\ 00,00,03,00,00,00,03,00,00,00,ff,ff,ff,ff,02,03,00,00,04,00,00,00,04,00,00,\ 00,ff,ff,ff,ff,02,03,00,00,0e,00,00,00,0e,00,00,00,ff,ff,ff,ff,02,03,00,00,\ 06,00,00,00,06,00,00,00,ff,ff,ff,ff,02,03,00,00,0c,00,00,00,0c,00,00,00,ff,\ ff,ff,ff,02,03,00,00,01,00,00,00,01,00,00,00,ff,ff,ff,ff,03,03,00,00,ff,ff,\ bf,ff,00,00,00,00,00,00,40,00 HKLM,"SYSTEM\CurrentControlSet\Control\Terminal Server","fAllowToGetHelp",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\Terminal Server\VIDEO\disc","VgaCompatible",0x00000000,"\Device\Video0" HKLM,"SYSTEM\CurrentControlSet\Control\Terminal Server\VIDEO\disc","\Device\Video0",0x00000000,"\REGISTRY\Machine\System\CurrentControlSet\Services\TSDDD\Device0" HKLM,"SYSTEM\CurrentControlSet\Control\Terminal Server\InputDevices" HKLM,"SYSTEM\CurrentControlSet\Control\TimeZoneInformation","Bias",0x00010003,%TIMEZONEINFO_BIAS% HKLM,"SYSTEM\CurrentControlSet\Control\Update","UpdateMode",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\VirtualDeviceDrivers","VDD",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Control\Watchdog",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\Watchdog\Display","EaRecovery",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Control\Windows","Directory",0x00020002,"%SystemRoot%" HKLM,"SYSTEM\CurrentControlSet\Control\Windows","ErrorMode",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Windows","NoInteractiveServices",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Control\Windows","SystemDirectory",0x00020002,"%SystemRoot%\system32" ; ; Establish a security descriptor for the Scsi Info Exceptions guid ; that will only allow DELETE, READ_CONTROL, WRITE_DAC, WRITE_OWNER, ; WMIGUID_QUERY, WMIGUID_SET to the administrators group HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","1101D829-167B-4ebf-ACAE-28CAB7C34802",0x00030003,\ 01,00,04,80,34,00,00,00,44,00,00,00,00,00,00,00,14,00,00,00,02,00,20,00,\ 01,00,00,00,00,00,18,00,03,00,0F,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,\ 00,00,00,05,20,00,00,00,20,02,00,00 ; ; Establish a security descriptor for the Failure Prediction Function guid ; that will only allow DELETE, READ_CONTROL, WRITE_DAC, WRITE_OWNER, ; WMIGUID_QUERY, WMIGUID_EXECUTE to the administrators group HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","78ebc105-4cf9-11d2-ba4a-00a0c9062910",0x00030003,\ 01,00,04,80,34,00,00,00,44,00,00,00,00,00,00,00,14,00,00,00,02,00,20,00,\ 01,00,00,00,00,00,18,00,11,00,0F,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,01,02,00,00,\ 00,00,00,05,20,00,00,00,20,02,00,00 ; ; Dont let non-admins open Traffic Control via WMI. ; Set security on the following GUIDS ; GUID_QOS_BESTEFFORT_BANDWIDTH, GUID_QOS_STATISTICS_BUFFER, GUID_QOS_FLOW_MODE, ; GUID_QOS_NON_BESTEFFORT_LIMIT, GUID_QOS_MAX_OUTSTANDING_SENDS ; GUID_QOS_TIMER_RESOLUTION ; ; 1. GUID_QOS_BESTEFFORT_BANDWIDTH HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","ed885290-40ec-11d1-2c91-00aa00574915",0x00030003,\ 01,00,04,80,14,00,00,00,24,00,00,00,00,00,00,00,\ 34,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,02,00,00,02,03,00,00,00,00,00,14,00,\ ff,07,02,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 00,00,18,00,ff,07,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,00,14,00,05,00,02,00,\ 01,01,00,00,00,00,00,01,00,00,00,00,00,00,00,00,\ 35,1d,f9,77,b0,f5,06,00,01,00,00,00,00,00,07,00,\ fc,b5,d5,77,d0,4d,d4,77,ff,ff,ff,ff,00,fa,06,00,\ 00,0f,dc,77,03,00,00,00,0a,bd,db,77,90,f9,06,00,\ 9f,0e,dc,77,00,00,07,00,03,00,00,00,00,00,07,00,\ 05,00,00,00,00,27,07,00,01,00,00,00,00,00,00,00,\ 34,f9,06,00,b0,ff,06,00,fc,f9,06,00,58,81,fb,77,\ a8,66,f8,77,ff,ff,ff,ff,0c,fa,06,00,0a,f8,e9,77,\ 00,00,07,00,c8,46,07,00,00,00,00,00,08,fa,06,00,\ 00,00,00,00,7f,0e,f9,77,00,00,07,00,a8,46,07,00,\ 00,00,00,00,e4,f9,06,00,88,06,07,00,98,fa,06,00,\ 58,81,fb,77,98,0e,f9,77,ff,ff,ff,ff,a8,fa,06,00,\ 9f,99,fc,77,48,07,07,00,b0,46,07,00,e8,fa,06,00,\ 40,fb,06,00,00,00,00,00,78,01,07,00,c8,63,07,00,\ 78,01,07,00,c0,63,07,00,20,fa,06,00,b0,ff,06,00,\ b0,ff,06,00,57,1a,db,77,38,cc,db,77,ff,ff,ff,ff,\ 00,00,07,00,81,00,00,00,01,27,07,00,24,0b,f9,77,\ c8,46,07,00,01,00,00,00,18,00,00,00,f0,f9,06,00,\ 00,00,00,00,b8,fa,06,00,00,00,07,00,04,00,00,00,\ 00,ff,ff,ff,c8,fa,06,00,0a,f8,e9,77,01,00,07,00,\ 00,00,00,00,18,fa,06,00,b0,ff,06,00,b0,ff,06,00,\ 58,81,fb,77,a8,66,f8,77,ff,ff,ff,ff,bc,fa,06,00,\ 7c,21,f9,77,00,00,07,00,00,00,00,00,b0,46,07,00,\ 10,fb,06,00,d1,59,f8,77,b0,46,07,00,be,59,f8,77,\ b6,02,dd,77,e8,fa,06,00,61,29,01,78,28,24,23,00,\ 00,00,00,00,18,b2,03,78,61,29,01,78,b2,24,23,00,\ 00,fb,06,00,9d,29,01,78,b2,24,23,00,f8,15,00,01,\ 54,ff,06,00,70,ff,06,00,6e,29,01,78,b2,24,23,00,\ f8,15,00,01 ; 2. GUID_QOS_STATISTICS_BUFFER HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","bb2c0980-e900-11d1-b07e-0080c71382bf",0x00030003,\ 01,00,04,80,14,00,00,00,24,00,00,00,00,00,00,00,\ 34,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,02,00,00,02,03,00,00,00,00,00,14,00,\ ff,07,02,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 00,00,18,00,ff,07,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,00,14,00,05,00,02,00,\ 01,01,00,00,00,00,00,01,00,00,00,00,00,00,00,00,\ 35,1d,f9,77,b0,f5,06,00,01,00,00,00,00,00,07,00,\ fc,b5,d5,77,d0,4d,d4,77,ff,ff,ff,ff,00,fa,06,00,\ 00,0f,dc,77,03,00,00,00,0a,bd,db,77,90,f9,06,00,\ 9f,0e,dc,77,00,00,07,00,03,00,00,00,00,00,07,00,\ 05,00,00,00,00,27,07,00,01,00,00,00,00,00,00,00,\ 34,f9,06,00,b0,ff,06,00,fc,f9,06,00,58,81,fb,77,\ a8,66,f8,77,ff,ff,ff,ff,0c,fa,06,00,0a,f8,e9,77,\ 00,00,07,00,c8,46,07,00,00,00,00,00,08,fa,06,00,\ 00,00,00,00,7f,0e,f9,77,00,00,07,00,a8,46,07,00,\ 00,00,00,00,e4,f9,06,00,88,06,07,00,98,fa,06,00,\ 58,81,fb,77,98,0e,f9,77,ff,ff,ff,ff,a8,fa,06,00,\ 9f,99,fc,77,48,07,07,00,b0,46,07,00,e8,fa,06,00,\ 40,fb,06,00,00,00,00,00,78,01,07,00,c8,63,07,00,\ 78,01,07,00,c0,63,07,00,20,fa,06,00,b0,ff,06,00,\ b0,ff,06,00,57,1a,db,77,38,cc,db,77,ff,ff,ff,ff,\ 00,00,07,00,81,00,00,00,01,27,07,00,24,0b,f9,77,\ c8,46,07,00,01,00,00,00,18,00,00,00,f0,f9,06,00,\ 00,00,00,00,b8,fa,06,00,00,00,07,00,04,00,00,00,\ 00,ff,ff,ff,c8,fa,06,00,0a,f8,e9,77,01,00,07,00,\ 00,00,00,00,18,fa,06,00,b0,ff,06,00,b0,ff,06,00,\ 58,81,fb,77,a8,66,f8,77,ff,ff,ff,ff,bc,fa,06,00,\ 7c,21,f9,77,00,00,07,00,00,00,00,00,b0,46,07,00,\ 10,fb,06,00,d1,59,f8,77,b0,46,07,00,be,59,f8,77,\ b6,02,dd,77,e8,fa,06,00,61,29,01,78,28,24,23,00,\ 00,00,00,00,18,b2,03,78,61,29,01,78,b2,24,23,00,\ 00,fb,06,00,9d,29,01,78,b2,24,23,00,f8,15,00,01,\ 54,ff,06,00,70,ff,06,00,6e,29,01,78,b2,24,23,00,\ f8,15,00,01 ; 3. GUID_QOS_FLOW_MODE HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","5c82290a-515a-11d2-8e58-00c04fc9bfcb",0x00030003,\ 01,00,04,80,14,00,00,00,24,00,00,00,00,00,00,00,\ 34,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,02,00,00,02,03,00,00,00,00,00,14,00,\ ff,07,02,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 00,00,18,00,ff,07,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,00,14,00,05,00,02,00,\ 01,01,00,00,00,00,00,01,00,00,00,00,00,00,00,00,\ 35,1d,f9,77,b0,f5,06,00,01,00,00,00,00,00,07,00,\ fc,b5,d5,77,d0,4d,d4,77,ff,ff,ff,ff,00,fa,06,00,\ 00,0f,dc,77,03,00,00,00,0a,bd,db,77,90,f9,06,00,\ 9f,0e,dc,77,00,00,07,00,03,00,00,00,00,00,07,00,\ 05,00,00,00,00,27,07,00,01,00,00,00,00,00,00,00,\ 34,f9,06,00,b0,ff,06,00,fc,f9,06,00,58,81,fb,77,\ a8,66,f8,77,ff,ff,ff,ff,0c,fa,06,00,0a,f8,e9,77,\ 00,00,07,00,c8,46,07,00,00,00,00,00,08,fa,06,00,\ 00,00,00,00,7f,0e,f9,77,00,00,07,00,a8,46,07,00,\ 00,00,00,00,e4,f9,06,00,88,06,07,00,98,fa,06,00,\ 58,81,fb,77,98,0e,f9,77,ff,ff,ff,ff,a8,fa,06,00,\ 9f,99,fc,77,48,07,07,00,b0,46,07,00,e8,fa,06,00,\ 40,fb,06,00,00,00,00,00,78,01,07,00,c8,63,07,00,\ 78,01,07,00,c0,63,07,00,20,fa,06,00,b0,ff,06,00,\ b0,ff,06,00,57,1a,db,77,38,cc,db,77,ff,ff,ff,ff,\ 00,00,07,00,81,00,00,00,01,27,07,00,24,0b,f9,77,\ c8,46,07,00,01,00,00,00,18,00,00,00,f0,f9,06,00,\ 00,00,00,00,b8,fa,06,00,00,00,07,00,04,00,00,00,\ 00,ff,ff,ff,c8,fa,06,00,0a,f8,e9,77,01,00,07,00,\ 00,00,00,00,18,fa,06,00,b0,ff,06,00,b0,ff,06,00,\ 58,81,fb,77,a8,66,f8,77,ff,ff,ff,ff,bc,fa,06,00,\ 7c,21,f9,77,00,00,07,00,00,00,00,00,b0,46,07,00,\ 10,fb,06,00,d1,59,f8,77,b0,46,07,00,be,59,f8,77,\ b6,02,dd,77,e8,fa,06,00,61,29,01,78,28,24,23,00,\ 00,00,00,00,18,b2,03,78,61,29,01,78,b2,24,23,00,\ 00,fb,06,00,9d,29,01,78,b2,24,23,00,f8,15,00,01,\ 54,ff,06,00,70,ff,06,00,6e,29,01,78,b2,24,23,00,\ f8,15,00,01 ; 4. GUID_QOS_NON_BESTEFFORT_LIMIT HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","185c44e0-40ed-11d1-2c91-00aa00574915",0x00030003,\ 01,00,04,80,14,00,00,00,24,00,00,00,00,00,00,00,\ 34,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,02,00,00,02,03,00,00,00,00,00,14,00,\ ff,07,02,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 00,00,18,00,ff,07,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,00,14,00,05,00,02,00,\ 01,01,00,00,00,00,00,01,00,00,00,00,00,00,00,00,\ 35,1d,f9,77,b0,f5,06,00,01,00,00,00,00,00,07,00,\ fc,b5,d5,77,d0,4d,d4,77,ff,ff,ff,ff,00,fa,06,00,\ 00,0f,dc,77,03,00,00,00,0a,bd,db,77,90,f9,06,00,\ 9f,0e,dc,77,00,00,07,00,03,00,00,00,00,00,07,00,\ 05,00,00,00,00,27,07,00,01,00,00,00,00,00,00,00,\ 34,f9,06,00,b0,ff,06,00,fc,f9,06,00,58,81,fb,77,\ a8,66,f8,77,ff,ff,ff,ff,0c,fa,06,00,0a,f8,e9,77,\ 00,00,07,00,c8,46,07,00,00,00,00,00,08,fa,06,00,\ 00,00,00,00,7f,0e,f9,77,00,00,07,00,a8,46,07,00,\ 00,00,00,00,e4,f9,06,00,88,06,07,00,98,fa,06,00,\ 58,81,fb,77,98,0e,f9,77,ff,ff,ff,ff,a8,fa,06,00,\ 9f,99,fc,77,48,07,07,00,b0,46,07,00,e8,fa,06,00,\ 40,fb,06,00,00,00,00,00,78,01,07,00,c8,63,07,00,\ 78,01,07,00,c0,63,07,00,20,fa,06,00,b0,ff,06,00,\ b0,ff,06,00,57,1a,db,77,38,cc,db,77,ff,ff,ff,ff,\ 00,00,07,00,81,00,00,00,01,27,07,00,24,0b,f9,77,\ c8,46,07,00,01,00,00,00,18,00,00,00,f0,f9,06,00,\ 00,00,00,00,b8,fa,06,00,00,00,07,00,04,00,00,00,\ 00,ff,ff,ff,c8,fa,06,00,0a,f8,e9,77,01,00,07,00,\ 00,00,00,00,18,fa,06,00,b0,ff,06,00,b0,ff,06,00,\ 58,81,fb,77,a8,66,f8,77,ff,ff,ff,ff,bc,fa,06,00,\ 7c,21,f9,77,00,00,07,00,00,00,00,00,b0,46,07,00,\ 10,fb,06,00,d1,59,f8,77,b0,46,07,00,be,59,f8,77,\ b6,02,dd,77,e8,fa,06,00,61,29,01,78,28,24,23,00,\ 00,00,00,00,18,b2,03,78,61,29,01,78,b2,24,23,00,\ 00,fb,06,00,9d,29,01,78,b2,24,23,00,f8,15,00,01,\ 54,ff,06,00,70,ff,06,00,6e,29,01,78,b2,24,23,00,\ f8,15,00,01 ; 5. GUID_QOS_MAX_OUTSTANDING_SENDS HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","161ffa86-6120-11d1-2c91-00aa00574915",0x00030003,\ 01,00,04,80,14,00,00,00,24,00,00,00,00,00,00,00,\ 34,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,02,00,00,02,03,00,00,00,00,00,14,00,\ ff,07,02,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 00,00,18,00,ff,07,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,00,14,00,05,00,02,00,\ 01,01,00,00,00,00,00,01,00,00,00,00,00,00,00,00,\ 35,1d,f9,77,b0,f5,06,00,01,00,00,00,00,00,07,00,\ fc,b5,d5,77,d0,4d,d4,77,ff,ff,ff,ff,00,fa,06,00,\ 00,0f,dc,77,03,00,00,00,0a,bd,db,77,90,f9,06,00,\ 9f,0e,dc,77,00,00,07,00,03,00,00,00,00,00,07,00,\ 05,00,00,00,00,27,07,00,01,00,00,00,00,00,00,00,\ 34,f9,06,00,b0,ff,06,00,fc,f9,06,00,58,81,fb,77,\ a8,66,f8,77,ff,ff,ff,ff,0c,fa,06,00,0a,f8,e9,77,\ 00,00,07,00,c8,46,07,00,00,00,00,00,08,fa,06,00,\ 00,00,00,00,7f,0e,f9,77,00,00,07,00,a8,46,07,00,\ 00,00,00,00,e4,f9,06,00,88,06,07,00,98,fa,06,00,\ 58,81,fb,77,98,0e,f9,77,ff,ff,ff,ff,a8,fa,06,00,\ 9f,99,fc,77,48,07,07,00,b0,46,07,00,e8,fa,06,00,\ 40,fb,06,00,00,00,00,00,78,01,07,00,c8,63,07,00,\ 78,01,07,00,c0,63,07,00,20,fa,06,00,b0,ff,06,00,\ b0,ff,06,00,57,1a,db,77,38,cc,db,77,ff,ff,ff,ff,\ 00,00,07,00,81,00,00,00,01,27,07,00,24,0b,f9,77,\ c8,46,07,00,01,00,00,00,18,00,00,00,f0,f9,06,00,\ 00,00,00,00,b8,fa,06,00,00,00,07,00,04,00,00,00,\ 00,ff,ff,ff,c8,fa,06,00,0a,f8,e9,77,01,00,07,00,\ 00,00,00,00,18,fa,06,00,b0,ff,06,00,b0,ff,06,00,\ 58,81,fb,77,a8,66,f8,77,ff,ff,ff,ff,bc,fa,06,00,\ 7c,21,f9,77,00,00,07,00,00,00,00,00,b0,46,07,00,\ 10,fb,06,00,d1,59,f8,77,b0,46,07,00,be,59,f8,77,\ b6,02,dd,77,e8,fa,06,00,61,29,01,78,28,24,23,00,\ 00,00,00,00,18,b2,03,78,61,29,01,78,b2,24,23,00,\ 00,fb,06,00,9d,29,01,78,b2,24,23,00,f8,15,00,01,\ 54,ff,06,00,70,ff,06,00,6e,29,01,78,b2,24,23,00,\ f8,15,00,01 ; 6. GUID_QOS_TIMER_RESOLUTION HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","ba10cc88-f13e-11d2-be1b-00a0c99ee63b",0x00030003,\ 01,00,04,80,14,00,00,00,24,00,00,00,00,00,00,00,\ 34,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,02,00,00,02,03,00,00,00,00,00,14,00,\ ff,07,02,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 00,00,18,00,ff,07,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,00,14,00,05,00,02,00,\ 01,01,00,00,00,00,00,01,00,00,00,00,00,00,00,00,\ 35,1d,f9,77,b0,f5,06,00,01,00,00,00,00,00,07,00,\ fc,b5,d5,77,d0,4d,d4,77,ff,ff,ff,ff,00,fa,06,00,\ 00,0f,dc,77,03,00,00,00,0a,bd,db,77,90,f9,06,00,\ 9f,0e,dc,77,00,00,07,00,03,00,00,00,00,00,07,00,\ 05,00,00,00,00,27,07,00,01,00,00,00,00,00,00,00,\ 34,f9,06,00,b0,ff,06,00,fc,f9,06,00,58,81,fb,77,\ a8,66,f8,77,ff,ff,ff,ff,0c,fa,06,00,0a,f8,e9,77,\ 00,00,07,00,c8,46,07,00,00,00,00,00,08,fa,06,00,\ 00,00,00,00,7f,0e,f9,77,00,00,07,00,a8,46,07,00,\ 00,00,00,00,e4,f9,06,00,88,06,07,00,98,fa,06,00,\ 58,81,fb,77,98,0e,f9,77,ff,ff,ff,ff,a8,fa,06,00,\ 9f,99,fc,77,48,07,07,00,b0,46,07,00,e8,fa,06,00,\ 40,fb,06,00,00,00,00,00,78,01,07,00,c8,63,07,00,\ 78,01,07,00,c0,63,07,00,20,fa,06,00,b0,ff,06,00,\ b0,ff,06,00,57,1a,db,77,38,cc,db,77,ff,ff,ff,ff,\ 00,00,07,00,81,00,00,00,01,27,07,00,24,0b,f9,77,\ c8,46,07,00,01,00,00,00,18,00,00,00,f0,f9,06,00,\ 00,00,00,00,b8,fa,06,00,00,00,07,00,04,00,00,00,\ 00,ff,ff,ff,c8,fa,06,00,0a,f8,e9,77,01,00,07,00,\ 00,00,00,00,18,fa,06,00,b0,ff,06,00,b0,ff,06,00,\ 58,81,fb,77,a8,66,f8,77,ff,ff,ff,ff,bc,fa,06,00,\ 7c,21,f9,77,00,00,07,00,00,00,00,00,b0,46,07,00,\ 10,fb,06,00,d1,59,f8,77,b0,46,07,00,be,59,f8,77,\ b6,02,dd,77,e8,fa,06,00,61,29,01,78,28,24,23,00,\ 00,00,00,00,18,b2,03,78,61,29,01,78,b2,24,23,00,\ 00,fb,06,00,9d,29,01,78,b2,24,23,00,f8,15,00,01,\ 54,ff,06,00,70,ff,06,00,6e,29,01,78,b2,24,23,00,\ f8,15,00,01 ; LocalSystem, Administrators ALLRIGHTS ; wmisecur guid dacl LocalSystem allow ALLRIGHTS ; wmisecur guid adacl Administrators allow ALLRIGHTS ; ; 7. SystemTraceControlGuid HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","9e814aad-3204-11d2-9a82-006008a86939",0x00030003,\ 01,00,04,80,14,00,00,00,24,00,00,00,00,00,00,00,\ 34,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,02,00,00,02,02,00,00,00,00,00,14,00,\ ff,07,02,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 00,00,18,00,ff,07,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,e8,63,07,00,00,26,07,00,\ c7,87,db,77,78,25,07,00,00,00,00,00,00,00,f8,77,\ 04,00,00,00,b4,f5,06,00,01,00,00,00,00,00,07,00,\ 7c,01,00,00,10,64,07,00,08,64,07,00,68,01,07,00,\ 00,f3,db,77,03,00,00,00,d2,c1,db,77,00,f9,06,00,\ 00,00,00,00,00,00,07,00,03,00,00,00,00,00,07,00,\ 05,00,00,00,00,64,07,00,01,00,00,00,00,00,00,00,\ 38,f9,06,00,b0,ff,06,00,00,fa,06,00,db,80,fb,77,\ 88,ae,f8,77,ff,ff,ff,ff,10,fa,06,00,e3,49,e9,77,\ 00,00,07,00,c8,46,07,00,00,00,00,00,84,fa,06,00,\ 41,9d,fc,77,00,00,07,00,00,00,07,00,a0,46,07,00,\ 00,00,00,00,e8,f9,06,00,00,00,07,00,a0,46,07,00,\ 00,00,00,00,ac,fa,06,00,41,9d,fc,77,00,00,07,00,\ 13,9e,fc,77,08,06,07,00,8f,9d,fc,77,ec,fa,06,00,\ 44,fb,06,00,00,00,00,00,78,01,07,00,28,64,07,00,\ 78,01,07,00,20,64,07,00,24,fa,06,00,b0,ff,06,00,\ b0,ff,06,00,8b,19,db,77,e0,d0,db,77,28,64,07,00,\ 78,01,07,00,28,64,07,00,78,01,07,00,20,64,07,00,\ c8,46,07,00,01,00,00,00,18,00,00,00,f4,f9,06,00,\ 07,00,00,00,bc,fa,06,00,00,00,07,00,86,00,00,00,\ 01,ff,ff,ff,cc,fa,06,00,a0,46,07,00,01,00,07,00,\ 00,00,00,00,1c,fa,06,00,b0,ff,06,00,b0,ff,06,00,\ db,80,fb,77,88,ae,f8,77,ff,ff,ff,ff,c0,fa,06,00,\ 4d,bf,f8,77,00,00,07,00,00,00,00,00,a8,46,07,00,\ 14,fb,06,00,4a,b5,f8,77,a8,46,07,00,37,b5,f8,77,\ 10,f0,dc,77,ec,fa,06,00,61,29,01,78,30,2c,23,00,\ 55,2c,23,00,18,b2,03,78,61,29,01,78,95,2c,23,00,\ 04,fb,06,00,9d,29,01,78,95,2c,23,00,d8,15,00,01,\ 68,ff,06,00,70,ff,06,00,6e,29,01,78,95,2c,23,00,\ d8,15,00,01 ; LocalSystem, Administrators ALLRIGHTS ; wmisecur guid dacl LocalSystem allow ALLRIGHTS ; wmisecur guid adacl Administrators allow ALLRIGHTS ; ; 8. WmiEventLoggerGuid HKLM,"SYSTEM\CurrentControlSet\Control\WMI\Security","44608a51-1851-4456-98b2-b300e931ee41",0x00030003,\ 01,00,04,80,14,00,00,00,24,00,00,00,00,00,00,00,\ 34,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,02,00,00,02,02,00,00,00,00,00,14,00,\ ff,07,02,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 00,00,18,00,ff,07,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,e8,63,07,00,00,26,07,00,\ c7,87,db,77,78,25,07,00,00,00,00,00,00,00,f8,77,\ 04,00,00,00,b4,f5,06,00,01,00,00,00,00,00,07,00,\ 7c,01,00,00,10,64,07,00,08,64,07,00,68,01,07,00,\ 00,f3,db,77,03,00,00,00,d2,c1,db,77,00,f9,06,00,\ 00,00,00,00,00,00,07,00,03,00,00,00,00,00,07,00,\ 05,00,00,00,00,64,07,00,01,00,00,00,00,00,00,00,\ 38,f9,06,00,b0,ff,06,00,00,fa,06,00,db,80,fb,77,\ 88,ae,f8,77,ff,ff,ff,ff,10,fa,06,00,e3,49,e9,77,\ 00,00,07,00,c8,46,07,00,00,00,00,00,84,fa,06,00,\ 41,9d,fc,77,00,00,07,00,00,00,07,00,a0,46,07,00,\ 00,00,00,00,e8,f9,06,00,00,00,07,00,a0,46,07,00,\ 00,00,00,00,ac,fa,06,00,41,9d,fc,77,00,00,07,00,\ 13,9e,fc,77,08,06,07,00,8f,9d,fc,77,ec,fa,06,00,\ 44,fb,06,00,00,00,00,00,78,01,07,00,28,64,07,00,\ 78,01,07,00,20,64,07,00,24,fa,06,00,b0,ff,06,00,\ b0,ff,06,00,8b,19,db,77,e0,d0,db,77,28,64,07,00,\ 78,01,07,00,28,64,07,00,78,01,07,00,20,64,07,00,\ c8,46,07,00,01,00,00,00,18,00,00,00,f4,f9,06,00,\ 07,00,00,00,bc,fa,06,00,00,00,07,00,86,00,00,00,\ 01,ff,ff,ff,cc,fa,06,00,a0,46,07,00,01,00,07,00,\ 00,00,00,00,1c,fa,06,00,b0,ff,06,00,b0,ff,06,00,\ db,80,fb,77,88,ae,f8,77,ff,ff,ff,ff,c0,fa,06,00,\ 4d,bf,f8,77,00,00,07,00,00,00,00,00,a8,46,07,00,\ 14,fb,06,00,4a,b5,f8,77,a8,46,07,00,37,b5,f8,77,\ 10,f0,dc,77,ec,fa,06,00,61,29,01,78,30,2c,23,00,\ 55,2c,23,00,18,b2,03,78,61,29,01,78,95,2c,23,00,\ 04,fb,06,00,9d,29,01,78,95,2c,23,00,d8,15,00,01,\ 68,ff,06,00,70,ff,06,00,6e,29,01,78,95,2c,23,00,\ d8,15,00,01 HKLM,"SYSTEM\CurrentControlSet\Control\WOW","cmdline",0x00020000,"%NTVDM_WOWCMD%" HKLM,"SYSTEM\CurrentControlSet\Control\WOW","DefaultSeparateVDM",0x00000002,"no" HKLM,"SYSTEM\CurrentControlSet\Control\WOW","KnownDLLs",0x00000000,\ "comm.drv commdlg.dll ctl3dv2.dll ddeml.dll keyboard.drv lanman.drv mmsystem.dll mouse.drv netapi.dll olecli.dll olesvr.dll pmspl.dll shell.dll sound.drv system.drv toolhelp.dll vga.drv wfwnet.drv win87em.dll winoldap.mod winsock.dll winspool.exe wowdeb.exe timer.drv rasapi16.dll compobj.dll storage.dll ole2.dll ole2disp.dll ole2nls.dll typelib.dll msvideo.dll avifile.dll msacm.dll mciavi.drv mciseq.drv mciwave.drv progman.exe avicap.dll mapi.dll" HKLM,"SYSTEM\CurrentControlSet\Control\WOW","LPT_timeout",0x00000002,"15" HKLM,"SYSTEM\CurrentControlSet\Control\WOW","SharedWowTimeout",0x00010003,3600 HKLM,"SYSTEM\CurrentControlSet\Control\WOW","size",0x00000002,"0" HKLM,"SYSTEM\CurrentControlSet\Control\WOW","wowcmdline",0x00020000,"%SystemRoot%\system32\ntvdm.exe -a %SystemRoot%\system32\krnl386" HKLM,"SYSTEM\CurrentControlSet\Control\WOW","wowsize",0x00000000,"64" HKLM,"SYSTEM\CurrentControlSet\Enum",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0000","Class",0x00000002,"System" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0000","ClassGUID",0x00000002,"{4D36E97D-E325-11CE-BFC1-08002BE10318}" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0000","ConfigFlags",0x00010003,0x00000400 HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0000","HardwareID",0x00010002,"root\swenum" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0000","Service",0x00000002,"swenum" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0001","Class",0x00000002,"System" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0001","ClassGUID",0x00000002,"{4D36E97D-E325-11CE-BFC1-08002BE10318}" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0001","ConfigFlags",0x00010003,0x00000400 HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0001","HardwareID",0x00010002,"root\update" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0001","Service",0x00000002,"update" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0002","Class",0x00000002,"System" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0002","ClassGUID",0x00000002,"{4D36E97D-E325-11CE-BFC1-08002BE10318}" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0002","ConfigFlags",0x00010003,0x00000400 HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0002","HardwareID",0x00010002,"root\mssmbios" HKLM,"SYSTEM\CurrentControlSet\Enum\Root\SYSTEM\0002","Service",0x00000002,"mssmbios" HKLM,"SYSTEM\CurrentControlSet\Services",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Abiosdsk","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Abiosdsk","Group",0x00000002,"Primary disk" HKLM,"SYSTEM\CurrentControlSet\Services\Abiosdsk","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Abiosdsk","Tag",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\Abiosdsk","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\abp480n5","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\abp480n5","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\abp480n5","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\abp480n5","Tag",0x00010003,56 HKLM,"SYSTEM\CurrentControlSet\Services\abp480n5","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\abp480n5\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\abp480n5\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ACPI","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\ACPI","Group",0x00000000,"Boot Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\ACPI","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ACPI","Tag",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\ACPI","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\ACPIEC","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\ACPIEC","Group",0x00000000,"Boot Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\ACPIEC","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ACPIEC","Tag",0x00010001,5 HKLM,"SYSTEM\CurrentControlSet\Services\ACPIEC","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","Description",0,"%REMOTE_PROCEDURE_CALL_LAUNCHER_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","DisplayName",0,"%REMOTE_PROCEDURE_CALL_LAUNCHER_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","Group",0x00000000,"Event Log" HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","ImagePath",0x00020000,"%SystemRoot%\system32\svchost -k DcomLaunch" HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","ObjectName",0x00000000,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","Start",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch\Parameters","ServiceDll",0x00020002,"%SystemRoot%\system32\rpcss.dll" HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch\Security","Security",0x00030001,\ 01,00,14,80,b4,00,00,00,c0,00,00,00,14,00,00,00,34,00,00,00,02,00,20,00,01,\ 00,00,00,02,80,18,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,20,02,\ 00,00,02,00,80,00,05,00,00,00,00,03,18,00,8d,00,02,00,01,01,00,00,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,03,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,03,18,00,8f,00,02,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,\ 00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,\ 00,21,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,\ 12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","FailureActions",0x00030003,\ 00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,02,00,00,00,60,EA,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\adpu160m","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\adpu160m","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\adpu160m","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\adpu160m","Tag",0x00010003,60 HKLM,"SYSTEM\CurrentControlSet\Services\adpu160m","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\adpu160m\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\adpu160m\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Aha154x","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Aha154x","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\Aha154x","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Aha154x","Tag",0x00010003,6 HKLM,"SYSTEM\CurrentControlSet\Services\Aha154x","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Aha154x\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Aha154x\Parameters", "LegacyAdapterDetection", 0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Aha154x\Parameters\PnpInterface","1",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Aha154x\Parameters\PnpInterface","3",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\aic78u2","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\aic78u2","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\aic78u2","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\aic78u2","Tag",0x00010003,52 HKLM,"SYSTEM\CurrentControlSet\Services\aic78u2","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\aic78u2\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\aic78u2\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\aic78xx","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\aic78xx","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\aic78xx","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\aic78xx","Tag",0x00010003,30 HKLM,"SYSTEM\CurrentControlSet\Services\aic78xx","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\aic78xx\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\aic78xx\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\AliIde","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\AliIde","Group",0x00000000,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\AliIde","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\AliIde","Tag",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\AliIde","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\amsint","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\amsint","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\amsint","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\amsint","Tag",0x00010003,36 HKLM,"SYSTEM\CurrentControlSet\Services\amsint","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\amsint\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\amsint\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt","Description",0x00000000,"%APPLICATION_MANAGEMENT_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt","DisplayName",0x00000000,"%APPLICATION_MANAGEMENT%" HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt","ImagePath",0x00020000,"%SystemRoot%\system32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt","Start",0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\appmgmts.dll" HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt\Parameters","ServiceDllUnloadOnStop",0x00010001, 1 HKLM,"SYSTEM\CurrentControlSet\Services\AppMgmt\Security","Security",0x00030003,\ 01,00,14,80,b4,00,00,00,c0,00,00,00,14,00,00,00,34,00,00,00,02,00,20,00,01,\ 00,00,00,02,80,18,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,20,02,\ 00,00,02,00,80,00,05,00,00,00,00,03,18,00,8d,00,02,00,01,01,00,00,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,03,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,03,18,00,8f,00,02,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,\ 00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,\ 00,21,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,\ 12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\asc","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\asc","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\asc","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\asc","Tag",0x00010003,41 HKLM,"SYSTEM\CurrentControlSet\Services\asc","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\asc\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\asc\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\asc3350p","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\asc3350p","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\asc3350p","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\asc3350p","Tag",0x00010003,57 HKLM,"SYSTEM\CurrentControlSet\Services\asc3350p","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\asc3350p\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\asc3350p\Parameters\PnpInterface","1",0x00010003,0x11 HKLM,"SYSTEM\CurrentControlSet\Services\asc3550","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\asc3550","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\asc3550","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\asc3550","Tag",0x00010003,42 HKLM,"SYSTEM\CurrentControlSet\Services\asc3550","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\asc3550\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\asc3550\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\atapi","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\atapi","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\atapi","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\atapi","Tag",0x00010003,25 HKLM,"SYSTEM\CurrentControlSet\Services\atapi","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Atdisk","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Atdisk","Group",0x00000002,"Primary disk" HKLM,"SYSTEM\CurrentControlSet\Services\Atdisk","Start",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\Atdisk","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Atdisk","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv","DependOnService",0x00010000,"PlugPlay","RpcSs" HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv","Description",0x00000000,"%AUDIOSRV_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv","DisplayName",0x00000000,"%AUDIOSRV_DISPLAYNAME%" HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv","Group",0x00000002,"AudioGroup" HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv","Start",0x00010003,0x00000002 HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv","Type",0x00010001,0x00000020 HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\audiosrv.dll" HKLM,"SYSTEM\CurrentControlSet\Services\AudioSrv\Parameters","ServiceDllUnloadOnStop",0x00010001, 1 HKLM,"SYSTEM\CurrentControlSet\Services\Beep","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Beep","Group",0x00000002,"Base" HKLM,"SYSTEM\CurrentControlSet\Services\Beep","Start",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Beep","Tag",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Beep","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\cbidf2k","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\cbidf2k","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\cbidf2k","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\cbidf2k","Tag",0x00010003,25 HKLM,"SYSTEM\CurrentControlSet\Services\cbidf2k","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\cbidf2k\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\cbidf2k\Parameters\PnpInterface","1",0x00010003,0x1 HKLM,"SYSTEM\CurrentControlSet\Services\cbidf2k\Parameters\PnpInterface","5",0x00010003,0x1 HKLM,"SYSTEM\CurrentControlSet\Services\cd20xrnt","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\cd20xrnt","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\cd20xrnt","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\cd20xrnt","Tag",0x00010003,58 HKLM,"SYSTEM\CurrentControlSet\Services\cd20xrnt","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\cd20xrnt\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\cd20xrnt\Parameters\PnpInterface","1",0x00010003,0x11 HKLM,"SYSTEM\CurrentControlSet\Services\Cdaudio","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Cdaudio","Group",0x00000002,"Filter" HKLM,"SYSTEM\CurrentControlSet\Services\Cdaudio","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Cdaudio","Tag",0x00010001,6 HKLM,"SYSTEM\CurrentControlSet\Services\Cdaudio","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Cdfs","DependOnGroup",0x00010002,"SCSI CDROM Class" HKLM,"SYSTEM\CurrentControlSet\Services\Cdfs","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Cdfs","Group",0x00000002,"File system" HKLM,"SYSTEM\CurrentControlSet\Services\Cdfs","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Cdfs","Type",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Cdrom","DependOnGroup",0x00010000,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\Cdrom","ErrorControl",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\Cdrom","Group",0x00000000,"SCSI CDROM Class" HKLM,"SYSTEM\CurrentControlSet\Services\Cdrom","Start",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Cdrom","Tag",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\Cdrom","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Changer","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Changer","Group",0x00000002,"Filter" HKLM,"SYSTEM\CurrentControlSet\Services\Changer","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Changer","Tag",0x00010001,5 HKLM,"SYSTEM\CurrentControlSet\Services\Changer","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\CiSvc","DependOnService",0x00010000,"RPCSS" HKLM,"SYSTEM\CurrentControlSet\Services\CiSvc","Description",0x00000000,"%INDEXING_SERVICE_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\CiSvc","DisplayName",0x00000000,"%INDEXING_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\CiSvc","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\CiSvc","ImagePath",0x00020000,"%SystemRoot%\system32\cisvc.exe" HKLM,"SYSTEM\CurrentControlSet\Services\CiSvc","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\CiSvc","Start",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\CiSvc","Type",0x00010003,288 HKLM,"SYSTEM\CurrentControlSet\Services\ClipSrv","DependOnService",0x00010002,"NetDDE" HKLM,"SYSTEM\CurrentControlSet\Services\ClipSrv","Description",0x00000000,"%CLIPBOOK_SERVER_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\ClipSrv","DisplayName",0x00000000,"%CLIPBOOK_SERVER%" HKLM,"SYSTEM\CurrentControlSet\Services\ClipSrv","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ClipSrv","ImagePath",0x00020002,"%SystemRoot%\system32\clipsrv.exe" HKLM,"SYSTEM\CurrentControlSet\Services\ClipSrv","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\ClipSrv","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ClipSrv","Type",0x00010003,16 HKLM,"SYSTEM\CurrentControlSet\Services\ClipSrv\Security","Security",0x00030003,\ 01,00,14,80,9c,00,00,00,a8,00,00,00,14,00,00,00,34,00,00,00,02,00,20,00,01,\ 00,00,00,02,80,18,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,20,02,\ 00,00,02,00,68,00,04,00,00,00,00,03,18,00,8d,00,02,00,01,01,00,00,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,03,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,03,18,00,8f,00,02,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,\ 00,00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,\ 05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\CmdIde","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\CmdIde","Group",0x00000000,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\CmdIde","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\CmdIde","Tag",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\CmdIde","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Cpqarray","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Cpqarray","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\Cpqarray","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Cpqarray","Tag",0x00010003,256 HKLM,"SYSTEM\CurrentControlSet\Services\Cpqarray","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Cpqarray\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Cpqarray\Parameters\PnpInterface","2",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Cpqarray\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc","DependOnService",0x00010002,"RpcSs" HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc","Description",0x00000000,%CRYPTSVC_DESCRIPTION% HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc","DisplayName",0x00000000,%CRYPTSVC_DISPLAYNAME% HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc","ImagePath",0x00020000,"%SystemRoot%\system32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc","Start",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\cryptsvc.dll" HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc\Parameters","ServiceMain",0x00000002,"CryptServiceMain" HKLM,"SYSTEM\CurrentControlSet\Services\CryptSvc\Security","Security",0x00030003,\ HKLM,"SYSTEM\CurrentControlSet\Services\dac2w2k","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dac2w2k","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\dac2w2k","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\dac2w2k","Tag",0x00010003,32 HKLM,"SYSTEM\CurrentControlSet\Services\dac2w2k","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dac2w2k\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\dac2w2k\Parameters\PnpInterface","2",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dac2w2k\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dac960nt","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dac960nt","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\dac960nt","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\dac960nt","Tag",0x00010003,32 HKLM,"SYSTEM\CurrentControlSet\Services\dac960nt","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dac960nt\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\dac960nt\Parameters\PnpInterface","2",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dac960nt\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dpti2o","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dpti2o","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\dpti2o","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\dpti2o","Tag",0x00010003,60 HKLM,"SYSTEM\CurrentControlSet\Services\dpti2o","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\dpti2o\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\dpti2o\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\i2omp","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\i2omp","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\i2omp","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\i2omp","Tag",0x00010003,45 HKLM,"SYSTEM\CurrentControlSet\Services\i2omp","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\i2omp\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\i2omp\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\i2omgmt","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\i2omgmt","Group",0x00000002,"SCSI Class" HKLM,"SYSTEM\CurrentControlSet\Services\i2omgmt","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\i2omgmt","Tag",0x00010003,45 HKLM,"SYSTEM\CurrentControlSet\Services\i2omgmt","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Disk","DependOnGroup",0x00010000,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\Disk","ErrorControl",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\Disk","Group",0x00000000,"SCSI Class" HKLM,"SYSTEM\CurrentControlSet\Services\Disk","Start",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\Disk","Tag",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\Disk","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc","DependOnService",0x00010000,"RpcSs" HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc","Description",0x00000000,"%ERSVC_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc","DisplayName",0x00000000,"%ERSVC%" HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc","ErrorControl",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc","Start",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\ersvc.dll" HKLM,"SYSTEM\CurrentControlSet\Services\ERSvc\Security","Security",0x00030003,\ 01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,00,1c,00,01,\ 00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,02,00,\ 60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,\ 00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,\ 00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,00,18,00,fd,\ 01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,00,00,00,00,\ 00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog","Description",0x00000000,"%EVENTLOG_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog","DisplayName",0x00000000,"%EVENTLOG%" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog","Group",0x00000002,"Event log" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog","ImagePath",0x00020002,"%SystemRoot%\system32\services.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog","PlugPlayServiceType",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog","Start",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog","Type",0x00010003,32 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application","DisplayNameFile",0x00020000,"%SystemRoot%\system32\els.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application","DisplayNameID",0x00010001,256 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application","File",0x00020002,"%SystemRoot%\system32\config\AppEvent.Evt" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application","MaxSize",0x00010003,524288 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application","PrimaryModule",0x00000002,"Application" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application","Retention",0x00010003,604800 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Autochk","EventMessageFile",0x00020002,"%SystemRoot%\System32\winlogon.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Autochk","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application","CategoryCount",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application","CategoryMessageFile",0x00020002,"%SystemRoot%\system32\eventlog.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Error","EventMessageFile",0x00020000,"%SystemRoot%\System32\faultrep.dll;%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Error","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Hang","EventMessageFile",0x00020000,"%SystemRoot%\System32\faultrep.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Hang","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Management","EventMessageFile",0x00020000,"%SystemRoot%\System32\appmgmts.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Management","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\kernel32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Management","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Software Installation","EventMessageFile",0x00020000,"%SystemRoot%\System32\appmgr.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Software Installation","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Chkdsk","EventMessageFile",0x00020002,"%SystemRoot%\System32\ulib.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Chkdsk","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\COM","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll;%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\COM","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\kernel32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\COM","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\DrWatson","EventMessageFile",0x00020002,"%SystemRoot%\System32\drwtsn32.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\DrWatson","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\EventSystem","CategoryCount",0x00010003,6 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\EventSystem","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\EventSystem","CategoryMessageFile",0x00020002,"%SystemRoot%\System32\EsEnU.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\EventSystem","EventMessageFile",0x00020002,"%SystemRoot%\System32\EsEnU.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\File Deployment","EventMessageFile",0x00020002,"%SystemRoot%\System32\fdeploy.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\File Deployment","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\kernel32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\File Deployment","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Folder Redirection","EventMessageFile",0x00020002,"%SystemRoot%\System32\fdeploy.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Folder Redirection","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\kernel32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Folder Redirection","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\LoadPerf","EventMessageFile",0x00020002,"%SystemRoot%\System32\loadperf.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\LoadPerf","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\MSDTC","EventMessageFile",0x00020002,"%SystemRoot%\System32\comres.dll;%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\MSDTC Client","EventMessageFile",0x00020002,"%SystemRoot%\System32\comres.dll;%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\ntbackup","EventMessageFile",0x00020002,"%SystemRoot%\System32\ntbackup.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\ntbackup","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Perfctrs","EventMessageFile",0x00020002,"%SystemRoot%\System32\perfctrs.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Perfctrs","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\PerfDisk","EventMessageFile",0x00020002,"%SystemRoot%\System32\perfdisk.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\PerfDisk","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Perflib","EventMessageFile",0x00020002,"%SystemRoot%\System32\prflbmsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Perflib","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Perfmon","EventMessageFile",0x00020002,"%SystemRoot%\System32\perfmon.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Perfmon","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\PerfNet","EventMessageFile",0x00020002,"%SystemRoot%\System32\perfnet.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\PerfNet","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\PerfOS","EventMessageFile",0x00020002,"%SystemRoot%\System32\perfOS.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\PerfOS","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\PerfProc","EventMessageFile",0x00020002,"%SystemRoot%\System32\perfproc.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\PerfProc","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SceCli","EventMessageFile",0x00020002,"%SystemRoot%\System32\scecli.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SceCli","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SceSrv","EventMessageFile",0x00020000,"%SystemRoot%\System32\scesrv.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SceSrv","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SclgNtfy","EventMessageFile",0x00020002,"%SystemRoot%\System32\sclgntfy.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SclgNtfy","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Software Restriction Policies","EventMessageFile",0x00020002,"%SystemRoot%\System32\ntdll.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Software Restriction Policies","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SpoolerCtrs","EventMessageFile",0x00020002,"%SystemRoot%\System32\winspool.drv" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SpoolerCtrs","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\MSSQLSERVER/MSDE","EventMessageFile",0x00020002,"%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\MSSQLSERVER/MSDE","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SecurityCenter","EventMessageFile",0x00020002,"%SystemRoot%\system32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SecurityCenter","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Starter","EventMessageFile",0x00020002,"%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Starter","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SysmonLog","EventMessageFile",0x00020002,"%SystemRoot%\System32\smlogsvc.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\SysmonLog","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Tlntsvr","EventMessageFile",0x00020002,"%SystemRoot%\System32\tlntsvr.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Tlntsvr","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Userenv","EventMessageFile",0x00020000,"%SystemRoot%\System32\userenv.dll;%SystemRoot%\System32\xpsp1res.dll;%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Userenv","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Userinit","EventMessageFile",0x00020002,"%SystemRoot%\System32\userinit.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Userinit","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\WebClient","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\WebClient","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Windows 3.1 Migration","EventMessageFile",0x00020002,"%SystemRoot%\System32\advapi32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Windows 3.1 Migration","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Windows Product Activation","EventMessageFile",0x00020000,"%SystemRoot%\System32\dpcdll.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Windows Product Activation","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Winlogon","EventMessageFile",0x00020002,"%SystemRoot%\System32\winlogon.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Winlogon","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\WinMgmt","EventMessageFile",0x00020000,"%SystemRoot%\system32\WBEM\WinMgmtR.dll;%SystemRoot%\system32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\WinMgmt","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\WMIAdapter","EventMessageFile",0x00020002,"%SystemRoot%\system32\WBEM\WMIApRes.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\WMIAdapter","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security","DisplayNameFile",0x00020000,"%SystemRoot%\System32\els.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security","DisplayNameID",0x00010001,257 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security","File",0x00020002,"%SystemRoot%\System32\config\SecEvent.Evt" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security","MaxSize",0x00010003,524288 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security","PrimaryModule",0x00000002,"Security" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security","Retention",0x00010003,604800 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\DS","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\MsObjs.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\DS\ObjectNames","Directory Service Object",0x00010003,0x00001E00 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\LSA","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\MsObjs.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\LSA\ObjectNames","PolicyObject",0x00010003,5632 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\LSA\ObjectNames","SecretObject",0x00010003,5648 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\LSA\ObjectNames","TrustedDomainObject",0x00010003,5664 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\LSA\ObjectNames","UserAccountObject",0x00010003,5680 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\NetDDE Object","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\MsObjs.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\NetDDE Object\ObjectNames","DDE Share",0x00010003,7424 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\SC Manager","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\MsObjs.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\SC Manager\ObjectNames","SC_MANAGER Object",0x00010003,7168 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\SC Manager\ObjectNames","SERVICE Object",0x00010003,7184 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security","CategoryCount",0x00010001,9 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security","CategoryMessageFile",0x00020002,"%SystemRoot%\System32\MsAuditE.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security","GuidMessageFile",0x00020002,"%SystemRoot%\System32\NtMarta.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security","EventMessageFile",0x00020000,"%SystemRoot%\System32\MsAuditE.dll;%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\MsObjs.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security","TypesSupported",0x00010003,28 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Channel",0x00010001,5120 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Desktop",0x00010001,6672 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Device",0x00010003,4352 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Directory",0x00010003,4368 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Event",0x00010003,4384 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","EventPair",0x00010003,4400 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","File",0x00010003,4416 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","IoCompletion",0x00010003,4864 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Job",0x00010003,5136 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Key",0x00010003,4432 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","MailSlot",0x00010003,4416 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Mutant",0x00010003,4448 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","NamedPipe",0x00010003,4416 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Port",0x00010003,4464 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Process",0x00010003,4480 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Profile",0x00010003,4496 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Section",0x00010003,4512 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Semaphore",0x00010003,4528 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","SymbolicLink",0x00010003,4544 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Thread",0x00010003,4560 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Timer",0x00010003,4576 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Token",0x00010003,4592 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","Type",0x00010003,4608 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","WaitablePort",0x00010003,4464 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security\ObjectNames","WindowStation",0x00010001,6656 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security Account Manager","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\MsObjs.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security Account Manager\ObjectNames","SAM_ALIAS",0x00010003,5424 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security Account Manager\ObjectNames","SAM_DOMAIN",0x00010003,5392 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security Account Manager\ObjectNames","SAM_GROUP",0x00010003,5408 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security Account Manager\ObjectNames","SAM_SERVER",0x00010003,5376 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Security Account Manager\ObjectNames","SAM_USER",0x00010003,5440 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Spooler","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\MsObjs.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Spooler\ObjectNames","Document",0x00010003,6944 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Spooler\ObjectNames","Printer",0x00010003,6928 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Spooler\ObjectNames","Server",0x00010003,6912 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System","DisplayNameFile",0x00020000,"%SystemRoot%\system32\els.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System","DisplayNameID",0x00010001,258 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System","File",0x00020002,"%SystemRoot%\system32\config\SysEvent.Evt" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System","MaxSize",0x00010003,524288 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System","PrimaryModule",0x00000002,"System" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System","Retention",0x00010003,604800 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\abiosdsk","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\abiosdsk","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\abp480n5","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\abp480n5","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\acpi","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\acpi.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\acpi","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\acpiec","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\acpiec.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\acpiec","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\adpu160m","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\adpu160m","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\aha154x","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\aha154x","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\aic78xx","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\aic78xx","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\aic78u2","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\aic78u2","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\aliide","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\AliIde.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\aliide","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ami0nt","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ami0nt","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\amsint","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\amsint","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\apphelp","EventMessageFile",0x00020002,"%SystemRoot%\System32\apphelp.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\apphelp","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Application Popup","EventMessageFile",0x00020002,"%SystemRoot%\System32\ntdll.dll;%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Application Popup","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\asc","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\asc","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\asc3350p","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\asc3350p","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\asc3550","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\asc3550","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\atapi","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\atapi","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\atdisk","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\atdisk","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\beep","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\beep","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cbidf2k","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cbidf2k","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cd20xrnt","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cd20xrnt","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cdaudio","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cdaudio","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cdfs","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cdfs","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cdrom","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cdrom","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\changer","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\changer","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cmdide","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\CmdIde.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cmdide","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cpqarray","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\cpqarray","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\dac2w2k","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\dac2w2k","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\dac960nt","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\dac960nt","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\DCOM","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll;%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\DCOM","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\kernel32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\DCOM","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\DfsDriver","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\DfsDriver","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\DfsSvc","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\DfsSvc","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\disk","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\disk","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\dpti2o","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\dpti2o","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\efs","EventMessageFile",0x00020002,"%SystemRoot%\System32\lsasrv.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\efs","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\eventlog","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\eventlog","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\fastfat","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\fastfat","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\fdc","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\fdc.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\fdc","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Fips","EventMessageFile",0x00020002,"%SystemRoot%\System32\Drivers\fips.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Fips","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\flpydisk","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\flpydisk.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\flpydisk","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\fs_rec","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\fs_rec","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ftdisk","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\FtDisk.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ftdisk","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\hpn","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\hpn","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ini910u","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ini910u","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\i2omp","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\i2omp","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\i2omgmt","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\i2omgmt","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\intelide","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\IntelIde.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\intelide","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\isapnp","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\isapnp.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\isapnp","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\kbdclass","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\KbdClass.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\kbdclass","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Kerberos","EventMessageFile",0x00020002,"%SystemRoot%\System32\kerberos.dll;%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Kerberos","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\lbrtfdc","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\lbrtfdc.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\lbrtfdc","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\LsaSrv","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\LsaSrv","EventMessageFile",0x00020002,"%SystemRoot%\System32\lsasrv.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\LsaSrv","CategoryMessageFile",0x00020002,"%SystemRoot%\System32\lsasrv.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\LsaSrv","CategoryCount",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Modem","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Modem.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Modem","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\mouclass","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\MouClass.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\mouclass","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\mraid35x","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\mraid35x","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\MRxDAV","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\MRxDAV","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\msadlib","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\msadlib","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\msfs","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\msfs","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Mup","EventMessageFile",0x00020000,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Mup","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ndis","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ndis","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\NetDDE","EventMessageFile",0x00020002,"%SystemRoot%\System32\netdde.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\NetDDE","TypesSupported",0x00010003,31 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\npfs","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\npfs","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ntfs","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ntfs","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\null","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\null","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\parport","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\ParPort.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\parport","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\partmgr","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\partmgr","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\parvdm","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\ParVdm.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\parvdm","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\pci","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Pci.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\pci","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\pciide","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\PciIde.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\pciide","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\pcmcia","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Pcmcia.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\pcmcia","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\perc2","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\perc2","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\PlugPlayManager","EventMessageFile",0x00020002,"%SystemRoot%\System32\umpnpmgr.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\PlugPlayManager","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql1080","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql1080","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql10wnt","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql10wnt","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql12160","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql12160","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql1240","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql1240","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql1280","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ql1280","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SAM","EventMessageFile",0x00020002,"%SystemRoot%\System32\samsrv.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SAM","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Save Dump","EventMessageFile",0x00020002,"%SystemRoot%\System32\SaveDump.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Save Dump","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\SCardSvr","EventMessageFile",0x00020002,"%SystemRoot%\System32\SCardSvr.exe" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ScardSvr","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Schedule","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Schedule","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\kernel32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Schedule","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\scsiport","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\scsiport","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\serial","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\Serial.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\serial","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Service Control Manager","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Service Control Manager","ParameterMessageFile",0x00020002,"%SystemRoot%\System32\kernel32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Service Control Manager","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Setup","EventMessageFile",0x00020002,"%SystemRoot%\System32\syssetup.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Setup","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\System Error","EventMessageFile",0x00020000,"%SystemRoot%\System32\faultrep.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\System Error","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Windows File Protection","EventMessageFile",0x00020000,"%SystemRoot%\System32\sfc_os.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Windows File Protection","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sfloppy","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sfloppy","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Simbad","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Simbad","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sndblst","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sndblst","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sparrow","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sparrow","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\symc810","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\symc810","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\symc8xx","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\symc8xx","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sym_hi","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sym_hi","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sym_u3","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\sym_u3","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\System","CategoryCount",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\System","CategoryMessageFile",0x00020002,"%SystemRoot%\system32\eventlog.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\tdi","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\tdi","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\toside","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\TosIde.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\toside","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Distributed Link Tracking Client","EventMessageFile",0x00020002,"%SystemRoot%\System32\netevent.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Distributed Link Tracking Client","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\udfs","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\udfs","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ultra","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\ultra","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\UPS","EventMessageFile",0x00020002,"%SystemRoot%\System32\netmsg.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\UPS","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\USER32","EventMessageFile",0x00020002,"%SystemRoot%\System32\user32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\USER32","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\VgaSave","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\vga.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\VgaSave","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\viaide","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\ViaIde.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\viaide","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\VolSnap","EventMessageFile",0x00020002,"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\Drivers\VolSnap.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\VolSnap","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\W32Time","EventMessageFile",0x00020000,"%SystemRoot%\System32\w32time.dll" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\W32Time","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Win32k","EventMessageFile",0x00020002,"%SystemRoot%\System32\win32k.sys" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Win32k","TypesSupported",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\Fastfat","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Fastfat","Group",0x00000002,"Boot file system" HKLM,"SYSTEM\CurrentControlSet\Services\Fastfat","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Fastfat","Type",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Fdc","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Fdc","Group",0x00000002,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\Fdc","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Fdc","Tag",0x00010003,b HKLM,"SYSTEM\CurrentControlSet\Services\Fdc","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Fips","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Fips","Start",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Fips","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Flpydisk","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Flpydisk","Group",0x00000002,"Primary disk" HKLM,"SYSTEM\CurrentControlSet\Services\Flpydisk","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Flpydisk","Tag",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Flpydisk","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Fs_Rec","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Fs_Rec","Group",0x00000002,"Boot file system" HKLM,"SYSTEM\CurrentControlSet\Services\Fs_Rec","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Fs_Rec","Type",0x00010003,8 HKLM,"SYSTEM\CurrentControlSet\Services\Ftdisk","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Ftdisk","Group",0x00000002,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\Ftdisk","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Ftdisk","Tag",0x00010003,9 HKLM,"SYSTEM\CurrentControlSet\Services\Ftdisk","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\hpn","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\hpn","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\hpn","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\hpn","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\hpn\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\hpn\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\HidServ","DependOnService",0x00010000,"RpcSs" HKLM,"SYSTEM\CurrentControlSet\Services\HidServ","Description",0x00000000,"%HIDSERV_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\HidServ","DisplayName",0x00000000,"%HIDSERV%" HKLM,"SYSTEM\CurrentControlSet\Services\HidServ","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\HidServ","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\HidServ","ObjectName",0x00000000,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\HidServ","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\HidServ","Type",0x00010001,0x00000020 HKLM,"SYSTEM\CurrentControlSet\Services\HidServ\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\hidserv.dll" HKLM,"SYSTEM\CurrentControlSet\Services\HTTP","DisplayName", 0x00000000,"%HTTP%" HKLM,"SYSTEM\CurrentControlSet\Services\HTTP","Description", 0x00000000,"%HTTP_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\HTTP","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\HTTP","ImagePath", 0x00020000,"System32\Drivers\HTTP.sys" HKLM,"SYSTEM\CurrentControlSet\Services\HTTP","Start", 0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\HTTP","Type", 0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\HTTP\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\HTTP\Security", "Security", 0x00000001,\ 01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\ 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\ 00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\ 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\ 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,00,00,\ 14,00,14,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,14,00,14,00,00,\ 00,01,01,00,00,00,00,00,05,06,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Http", "TypesSupported", 0x00010003, 7 HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Http", "EventMessageFile", 0x00020002,"%SystemRoot%\System32\xpsp2res.dll" HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter","DependOnService", 0x00010000,"HTTP" HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter","Description", 0x00000000,"%HTTPFILTER_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter","DisplayName", 0x00000000,"%HTTPFILTER%" HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter","ImagePath", 0x00020000,"%SystemRoot%\System32\svchost.exe -k HTTPFilter" HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter","ObjectName", 0x00000000,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter","Start", 0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter","Type", 0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter\Parameters", "ServiceDll", 0x00020000, "%SystemRoot%\System32\w3ssl.dll" HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter\Parameters", "ServiceMain", 0x00000000, "HTTPFilterServiceMain" HKLM,"SYSTEM\CurrentControlSet\Services\HTTPFilter\Security", "Security", 0x00000001,\ 01,00,14,80,b8,00,00,00,c4,00,00,00,14,00,00,00,30,00,00,00,02,\ 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\ 00,00,02,00,88,00,06,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\ 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\ 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,00,00,\ 14,00,14,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,14,00,14,00,00,\ 00,01,01,00,00,00,00,00,05,06,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,\ 01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SvcHost", "HTTPFilter", 0x00010000, "HTTPFilter" HKLM,"Software\Microsoft\Windows NT\CurrentVersion\SvcHost\HTTPFilter", "CoInitializeSecurityParam", 0x00010003, 1 HKLM,"SYSTEM\CurrentControlSet\Services\Imapi","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Imapi","Group",0x00000000,"Pnp Filter" HKLM,"SYSTEM\CurrentControlSet\Services\Imapi","Start",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Imapi","Tag",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\Imapi","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\ini910u","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ini910u","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\ini910u","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ini910u","Tag",0x00010003,48 HKLM,"SYSTEM\CurrentControlSet\Services\ini910u","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ini910u\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\ini910u\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Inport\Parameters","HzMode",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\IntelIde","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\IntelIde","Group",0x00000000,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\IntelIde","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\IntelIde","Tag",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\IntelIde","Type",0x00010001,1 ; ; Windows Firewall ; ; We need to write these entries here, even though they are actually installed ; in netrass.inf, because we want the firewall to be started during GuiMode ; setup by TCPIP.SYS. If these reg keys aren't present, TCPIP.SYS will not be ; able to start the Firewall (i.e. IPNAT.SYS). ; HKLM,"SYSTEM\CurrentControlSet\Services\IpNat","DependOnGroup",0x00010000,"" HKLM,"SYSTEM\CurrentControlSet\Services\IpNat","DependOnService",0x00010000,"Tcpip" HKLM,"SYSTEM\CurrentControlSet\Services\IpNat","Description",0x00000000,%IPNAT_DRIVER_DESCRIPTION% HKLM,"SYSTEM\CurrentControlSet\Services\IpNat","DisplayName",0x00000000,%IPNAT_DRIVER_DESCRIPTION% HKLM,"SYSTEM\CurrentControlSet\Services\IpNat","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\IpNat","ImagePath",0x00020000,"system32\DRIVERS\ipnat.sys" HKLM,"SYSTEM\CurrentControlSet\Services\IpNat","Start",0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\IpNat","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\isapnp","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\isapnp","Group",0x00000000,"Boot Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\isapnp","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\isapnp","Tag",0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\isapnp","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\isapnp","HasBootConfig",0x00010001,00000000 HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass","Group",0x00000002,"Keyboard Class" HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass\Parameters","ConnectMultiplePorts",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass\Parameters","KeyboardDataQueueSize",0x00010003,100 HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass\Parameters","KeyboardDeviceBaseName",0x00000002,"KeyboardClass" HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass\Parameters","MaximumPortsServiced",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\Kbdclass\Parameters","SendOutputToAllPorts",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\KSecDD","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\KSecDD","Group",0x00000002,"Base" HKLM,"SYSTEM\CurrentControlSet\Services\KSecDD","Start",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\KSecDD","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\KSecDD","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\lbrtfdc","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\lbrtfdc","Group",0x00000002,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\lbrtfdc","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\lbrtfdc","Tag",0x00010003,0xe HKLM,"SYSTEM\CurrentControlSet\Services\lbrtfdc","Type",0x00010003,1 ; HKLM,"SYSTEM\CurrentControlSet\Services\mca","ErrorControl",0x00010001,1 ; HKLM,"SYSTEM\CurrentControlSet\Services\mca","Group",0x00000000,"Boot Bus Extender" ; HKLM,"SYSTEM\CurrentControlSet\Services\mca","Start",0x00010003,4 ; HKLM,"SYSTEM\CurrentControlSet\Services\mca","Tag",0x00010001,4 ; HKLM,"SYSTEM\CurrentControlSet\Services\mca","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd","Group",0x00000000,"Video Save" HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd","Start",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd\Video","VideoID",0x00000000,"{8B6D7859-A639-4A15-8790-7161976D057A}" HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd\Video","Service",0x00000000,"mnmdd" HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd\Device0","InstalledDisplayDrivers",0x00010000,"mnmdd" HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd\Device0","Device Description",0x00000000,"NetMeeting driver" HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd\Device0","VgaCompatible",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\mnmdd\Device0","MirrorDriver",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Control\Video\{8B6D7859-A639-4A15-8790-7161976D057A}\Video","Service",0x00000000,"mnmdd" HKLM,"SYSTEM\CurrentControlSet\Control\Video\{8B6D7859-A639-4A15-8790-7161976D057A}\0000","InstalledDisplayDrivers",0x00010000,"mnmdd" HKLM,"SYSTEM\CurrentControlSet\Control\Video\{8B6D7859-A639-4A15-8790-7161976D057A}\0000","Device Description",0x00000000,"NetMeeting driver" HKLM,"SYSTEM\CurrentControlSet\Control\Video\{8B6D7859-A639-4A15-8790-7161976D057A}\0000","VgaCompatible",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Control\Video\{8B6D7859-A639-4A15-8790-7161976D057A}\0000","MirrorDriver",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Modem","ErrorControl",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\Modem","Group",0x00000000,"Extended base" HKLM,"SYSTEM\CurrentControlSet\Services\Modem","Start",0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\Modem","Tag",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\Modem","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Modem\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Mouclass","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Mouclass","Group",0x00000002,"Pointer Class" HKLM,"SYSTEM\CurrentControlSet\Services\Mouclass","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Mouclass","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Mouclass","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Mouclass\Parameters","ConnectMultiplePorts",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\Mouclass\Parameters","MaximumPortsServiced",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\Mouclass\Parameters","MouseDataQueueSize",0x00010003,100 HKLM,"SYSTEM\CurrentControlSet\Services\Mouclass\Parameters","PointerDeviceBaseName",0x00000002,"PointerClass" HKLM,"SYSTEM\CurrentControlSet\Services\MountMgr","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\MountMgr","Group",0x00000002,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\MountMgr","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\MountMgr","Tag",0x00010003,8 HKLM,"SYSTEM\CurrentControlSet\Services\MountMgr","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\mraid35x","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\mraid35x","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\mraid35x","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\mraid35x","Tag",0x00010003,43 HKLM,"SYSTEM\CurrentControlSet\Services\mraid35x","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\mraid35x\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\mraid35x\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Msfs","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Msfs","Group",0x00000002,"File system" HKLM,"SYSTEM\CurrentControlSet\Services\Msfs","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Msfs","Type",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\MSIServer","Description",0x00000000,"%MSI_SERVICE_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\Mup","DisplayName",0x00000002,"%MUP%" HKLM,"SYSTEM\CurrentControlSet\Services\Mup","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Mup","Group",0x00000002,"Network" HKLM,"SYSTEM\CurrentControlSet\Services\Mup","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Mup","Tag",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Mup","Type",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Mup\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\NDIS","DisplayName",0x00000000,"%MICROSOFT_NDIS_SYSTEM_DRIVER%" HKLM,"SYSTEM\CurrentControlSet\Services\NDIS","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\NDIS","Group",0x00000000,"NDIS Wrapper" HKLM,"SYSTEM\CurrentControlSet\Services\NDIS","Start",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\NDIS","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\NDIS\MediaTypes",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\NDIS\Parameters","ProcessorAffinityMask",0x00010003,4294967295 HKLM,"SYSTEM\CurrentControlSet\Services\NDProxy","DisplayName",0x00010002,"%NDIS_PROXY%" HKLM,"SYSTEM\CurrentControlSet\Services\NDProxy","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\NDProxy","Group",0x00000002,"PNP_TDI" HKLM,"SYSTEM\CurrentControlSet\Services\NDProxy","Start",0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\NDProxy","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE","DependOnService",0x00010002,"NetDDEDSDM" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE","Description",0x00000000,"%NETWORK_DDE_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE","DisplayName",0x00000000,"%NETWORK_DDE%" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE","Group",0x00000002,"NetDDEGroup" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE","ImagePath",0x00020002,"%SystemRoot%\system32\netdde.exe" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE","Type",0x00010003,32 HKLM,"SYSTEM\CurrentControlSet\Services\NetDDE\Security","Security",0x00030003,\ 01,00,14,80,9c,00,00,00,a8,00,00,00,14,00,00,00,34,00,00,00,02,00,20,00,01,\ 00,00,00,02,80,18,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,20,02,\ 00,00,02,00,68,00,04,00,00,00,00,03,18,00,8d,00,02,00,01,01,00,00,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,03,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,03,18,00,8f,00,02,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,\ 00,00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,\ 05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\NetDDEdsdm","DependOnService",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\NetDDEdsdm","Description",0x00000000,"%NETWORK_DDE_DSDM_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDEdsdm","DisplayName",0x00000000,"%NETWORK_DDE_DSDM%" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDEdsdm","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\NetDDEdsdm","ImagePath",0x00020002,"%SystemRoot%\system32\netdde.exe" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDEdsdm","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\NetDDEdsdm","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\NetDDEdsdm","Type",0x00010003,32 HKLM,"SYSTEM\CurrentControlSet\Services\NetDDEdsdm\Security","Security",0x00030003,\ 01,00,14,80,9c,00,00,00,a8,00,00,00,14,00,00,00,34,00,00,00,02,00,20,00,01,\ 00,00,00,02,80,18,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,20,02,\ 00,00,02,00,68,00,04,00,00,00,00,03,18,00,8d,00,02,00,01,01,00,00,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,03,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,03,18,00,8f,00,02,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,\ 00,00,23,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,\ 05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\Netlogon",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Netlogon\Parameters","DisablePasswordChange",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Netman","DependOnService",0x00010000,"RpcSs" HKLM,"SYSTEM\CurrentControlSet\Services\Netman","Description",0x00000000,"%NETMAN_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\Netman","DisplayName",0x00000000,"%NETMAN_NAME%" HKLM,"SYSTEM\CurrentControlSet\Services\Netman","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Netman","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\Netman","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\Netman","Start",0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\Netman","Type",0x00010001,0x00000120 HKLM,"SYSTEM\CurrentControlSet\Services\Netman\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\netman.dll" HKLM,"SYSTEM\CurrentControlSet\Services\Npfs","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Npfs","Group",0x00000002,"File system" HKLM,"SYSTEM\CurrentControlSet\Services\Npfs","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Npfs","Type",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Npfs\Aliases","lsass",0x00010002,"protected_storage","netlogon","lsarpc","samr" HKLM,"SYSTEM\CurrentControlSet\Services\Npfs\Aliases","ntsvcs",0x00010000,"eventlog","svcctl" HKLM,"SYSTEM\CurrentControlSet\Services\Ntfs","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Ntfs","Group",0x00000002,"File system" HKLM,"SYSTEM\CurrentControlSet\Services\Ntfs","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Ntfs","Type",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Null","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Null","Group",0x00000002,"Base" HKLM,"SYSTEM\CurrentControlSet\Services\Null","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Null","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Null","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Parport","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Parport","Group",0x00000002,"Parallel arbitrator" HKLM,"SYSTEM\CurrentControlSet\Services\Parport","Start",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\Parport","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Parport","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\PartMgr","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\PartMgr","Group",0x00000002,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\PartMgr","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\PartMgr","Tag",0x00010003,a HKLM,"SYSTEM\CurrentControlSet\Services\PartMgr","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ParVdm","DependOnGroup",0x00010002,"Parallel arbitrator" HKLM,"SYSTEM\CurrentControlSet\Services\ParVdm","DependOnService",0x00010002,"Parport" HKLM,"SYSTEM\CurrentControlSet\Services\ParVdm","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\ParVdm","Group",0x00000002,"Extended base" HKLM,"SYSTEM\CurrentControlSet\Services\ParVdm","Start",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\ParVdm","Tag",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\ParVdm","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ParVdm\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\PCI","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\PCI","Group",0x00000000,"Boot Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\PCI","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\PCI","Tag",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\PCI","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\PCIDump","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\PCIDump","Group",0x00000002,"PCI Configuration" HKLM,"SYSTEM\CurrentControlSet\Services\PCIDump","Start",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\PCIDump","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\PCIDump","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\PCIIde","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\PCIIde","Group",0x00000000,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\PCIIde","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\PCIIde","Tag",0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\PCIIde","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Pcmcia","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Pcmcia","Group",0x00000000,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\Pcmcia","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Pcmcia","Tag",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Pcmcia","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Pcmcia\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Pcmcia\Parameters","SoundsEnabled",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\perc2","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\perc2","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\perc2","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\perc2","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\perc2\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\perc2\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\perc2hib","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\perc2hib","Group",0x00000002,"Filter" HKLM,"SYSTEM\CurrentControlSet\Services\perc2hib","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\perc2hib","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\PerfDisk",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\PerfDisk\Performance","Close",0x00000002,"CloseDiskObject" HKLM,"SYSTEM\CurrentControlSet\Services\PerfDisk\Performance","Collect",0x00000002,"CollectDiskObjectData" HKLM,"SYSTEM\CurrentControlSet\Services\PerfDisk\Performance","Collect Timeout",0x00010001,2000 HKLM,"SYSTEM\CurrentControlSet\Services\PerfDisk\Performance","Library",0x00000002,"perfdisk.dll" HKLM,"SYSTEM\CurrentControlSet\Services\PerfDisk\Performance","Object List",0x00000002,"234 236" HKLM,"SYSTEM\CurrentControlSet\Services\PerfDisk\Performance","Open",0x00000002,"OpenDiskObject" HKLM,"SYSTEM\CurrentControlSet\Services\PerfDisk\Performance","Open Timeout",0x00010001,5000 HKLM,"SYSTEM\CurrentControlSet\Services\PerfNet",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\PerfNet\Performance","Close",0x00000002,"CloseNetSvcsObject" HKLM,"SYSTEM\CurrentControlSet\Services\PerfNet\Performance","Collect",0x00000002,"CollectNetSvcsObjectData" HKLM,"SYSTEM\CurrentControlSet\Services\PerfNet\Performance","Collect Timeout",0x00010001,5000 HKLM,"SYSTEM\CurrentControlSet\Services\PerfNet\Performance","Library",0x00000002,"perfnet.dll" HKLM,"SYSTEM\CurrentControlSet\Services\PerfNet\Performance","Object List",0x00000002,"52 262 330 1300" HKLM,"SYSTEM\CurrentControlSet\Services\PerfNet\Performance","Open",0x00000002,"OpenNetSvcsObject" HKLM,"SYSTEM\CurrentControlSet\Services\PerfNet\Performance","Open Timeout",0x00010001,8000 HKLM,"SYSTEM\CurrentControlSet\Services\PerfOS",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\PerfOS\Performance","Close",0x00000002,"CloseOSObject" HKLM,"SYSTEM\CurrentControlSet\Services\PerfOS\Performance","Collect",0x00000002,"CollectOSObjectData" HKLM,"SYSTEM\CurrentControlSet\Services\PerfOS\Performance","Collect Timeout",0x00010001,2000 HKLM,"SYSTEM\CurrentControlSet\Services\PerfOS\Performance","Library",0x00000002,"perfos.dll" HKLM,"SYSTEM\CurrentControlSet\Services\PerfOS\Performance","Object List",0x00000002,"2 4 86 238 260 700" HKLM,"SYSTEM\CurrentControlSet\Services\PerfOS\Performance","Open",0x00000002,"OpenOSObject" HKLM,"SYSTEM\CurrentControlSet\Services\PerfOS\Performance","Open Timeout",0x00010001,5000 HKLM,"SYSTEM\CurrentControlSet\Services\PerfProc",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\PerfProc\Performance","Close",0x00000002,"CloseSysProcessObject" HKLM,"SYSTEM\CurrentControlSet\Services\PerfProc\Performance","Collect",0x00000002,"CollectSysProcessObjectData" HKLM,"SYSTEM\CurrentControlSet\Services\PerfProc\Performance","Collect Timeout",0x00010001,8000 HKLM,"SYSTEM\CurrentControlSet\Services\PerfProc\Performance","Library",0x00000002,"perfproc.dll" HKLM,"SYSTEM\CurrentControlSet\Services\PerfProc\Performance","Object List",0x00000000,"230 232 786 740 816 1408 1500 1548 1760" HKLM,"SYSTEM\CurrentControlSet\Services\PerfProc\Performance","Open",0x00000002,"OpenSysProcessObject" HKLM,"SYSTEM\CurrentControlSet\Services\PerfProc\Performance","Open Timeout",0x00010001,10000 HKLM,"SYSTEM\CurrentControlSet\Services\PlugPlay","Description",0x00000000,"%PLUG_AND_PLAY_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\PlugPlay","DisplayName",0x00000000,"%PLUG_AND_PLAY%" HKLM,"SYSTEM\CurrentControlSet\Services\PlugPlay","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\PlugPlay","Group",0x00000002,"PlugPlay" HKLM,"SYSTEM\CurrentControlSet\Services\PlugPlay","ImagePath",0x00020002,"%SystemRoot%\system32\services.exe" HKLM,"SYSTEM\CurrentControlSet\Services\PlugPlay","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\PlugPlay","PlugPlayServiceType",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\PlugPlay","Start",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\PlugPlay","Type",0x00010003,32 HKLM,"SYSTEM\CurrentControlSet\Services\ProtectedStorage","DependOnService",0x00010002,"RpcSs" HKLM,"SYSTEM\CurrentControlSet\Services\ProtectedStorage","Description",0x00000000,%PROTECTEDSTORAGE_DESCRIPTION% HKLM,"SYSTEM\CurrentControlSet\Services\ProtectedStorage","DisplayName",0x00000000,%PROTECTEDSTORAGE_DISPLAYNAME% HKLM,"SYSTEM\CurrentControlSet\Services\ProtectedStorage","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ProtectedStorage","ImagePath",0x00020000,"%SystemRoot%\system32\lsass.exe" HKLM,"SYSTEM\CurrentControlSet\Services\ProtectedStorage","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\ProtectedStorage","Start",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\ProtectedStorage","Type",0x00010001,288 HKLM,"SYSTEM\CurrentControlSet\Services\ql1080","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql1080","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\ql1080","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ql1080","Tag",0x00010003,61 HKLM,"SYSTEM\CurrentControlSet\Services\ql1080","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql1080\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\ql1080\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Ql10wnt","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Ql10wnt","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\Ql10wnt","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Ql10wnt","Tag",0x00010003,35 HKLM,"SYSTEM\CurrentControlSet\Services\Ql10wnt","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Ql10wnt\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Ql10wnt\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql12160","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql12160","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\ql12160","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ql12160","Tag",0x00010003,63 HKLM,"SYSTEM\CurrentControlSet\Services\ql12160","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql12160\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\ql12160\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql1240","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql1240","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\ql1240","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ql1240","Tag",0x00010003,49 HKLM,"SYSTEM\CurrentControlSet\Services\ql1240","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql1240\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\ql1240\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql1280","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql1280","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\ql1280","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ql1280","Tag",0x00010003,63 HKLM,"SYSTEM\CurrentControlSet\Services\ql1280","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ql1280\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\ql1280\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","Description",0x00000000,"%REGSVC_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","DependOnService",0x00010002,"RPCSS" HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","DisplayName",0x00000000,"%REGSVC_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","ImagePath",0x00020000,"%%SystemRoot%\system32\svchost.exe -k LocalService" HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","ObjectName",0x00000000,"NT AUTHORITY\LocalService" HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","Group",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","Start",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry\Parameters","ServiceDll",0x00020002,"%SystemRoot%\system32\regsvc.dll" HKLM,"SYSTEM\CurrentControlSet\Services\RemoteRegistry","FailureActions",0x00030003,\ 00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,E0,AD,08,00,01,00,00,00,E8,\ 03,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs","Description",0x00000000,"%REMOTE_PROCEDURE_CALL_RPC_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs","DisplayName",0x00000000,"%REMOTE_PROCEDURE_CALL_RPC_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs","Group",0x00000000,"COM Infrastructure" HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs","ImagePath",0x00020000,"%SystemRoot%\system32\svchost -k rpcss" HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs","ObjectName",0x00000000,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs","Start",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs\Parameters","ServiceDll",0x00020002,"%SystemRoot%\system32\rpcss.dll" HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs\Security","Security",0x00030001,\ 01,00,14,80,b4,00,00,00,c0,00,00,00,14,00,00,00,34,00,00,00,02,00,20,00,01,\ 00,00,00,02,80,18,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,20,02,\ 00,00,02,00,80,00,05,00,00,00,00,03,18,00,8d,00,02,00,01,01,00,00,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,03,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,03,18,00,8f,00,02,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,\ 00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,\ 00,21,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,\ 12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\RpcSs","FailureActions",0x00030003,\ 00,00,00,00,00,00,00,00,00,00,00,00,01,00,00,00,00,00,00,00,02,00,00,00,60,EA,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\SamSs","Description",0x00000000,"%SECURITY_ACCOUNTS_MANAGER_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\SamSs","DisplayName",0x00000000,"%SECURITY_ACCOUNTS_MANAGER_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\SamSs","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\SamSs","ImagePath",0x00020002,"%SystemRoot%\system32\lsass.exe" HKLM,"SYSTEM\CurrentControlSet\Services\SamSs","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\SamSs","Start",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\SamSs","Type",0x00010003,32 HKLM,"SYSTEM\CurrentControlSet\Services\SamSs","Group",0x00000002,"LocalValidation" HKLM,"SYSTEM\CurrentControlSet\Services\SamSs","DependOnService",0x00010000,"RPCSS" HKLM,"SYSTEM\CurrentControlSet\Services\Samss\Security","Security",0x00030003,\ 01,00,14,80,b4,00,00,00,c0,00,00,00,14,00,00,00,34,00,00,00,02,00,20,00,01,\ 00,00,00,02,80,18,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,20,02,\ 00,00,02,00,80,00,05,00,00,00,00,03,18,00,8d,00,02,00,01,01,00,00,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,03,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,03,18,00,8f,00,02,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,\ 00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,\ 00,21,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,\ 12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\SCardSvr","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\SCardSvr","Start",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\SCardSvr","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\SCardSvr","ImagePath",0x00020002,"%SystemRoot%\System32\SCardSvr.exe" HKLM,"SYSTEM\CurrentControlSet\Services\ScardSvr","Description",0x00000000,"%SMARTCARD_RESOURCE_MANAGER_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\ScardSvr","DisplayName",0x00000000,"%SMARTCARD_RESOURCE_MANAGER%" HKLM,"SYSTEM\CurrentControlSet\Services\SCardSvr","DependOnService",0x00010000,"PlugPlay" HKLM,"SYSTEM\CurrentControlSet\Services\SCardSvr","ObjectName",0x00000000,"NT AUTHORITY\LocalService" HKLM,"SYSTEM\CurrentControlSet\Services\SCardSvr","Group",0x00000000,"SmartCardGroup" HKLM,"SYSTEM\CurrentControlSet\Services\SCardSvr\Security","Security",0x00030001,\ 01,00,04,80,88,00,00,00,94,00,00,00,00,00,00,00,14,00,00,00,02,00,74,00,05,\ 00,00,00,00,00,14,00,FD,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,00,00,\ 14,00,FD,01,02,00,01,01,00,00,00,00,00,05,13,00,00,00,00,00,18,00,FF,01,0F,\ 00,01,02,00,00,00,00,00,05,20,00,00,00,20,02,00,00,00,00,18,00,FF,01,0F,00,\ 01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,14,00,9D,01,02,00,01,\ 01,00,00,00,00,00,02,00,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,\ 00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\seclogon","Description",0x00000000,"%SECLOGON_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\seclogon","DisplayName",0x00000000,"%SECLOGON_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\seclogon","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\seclogon","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\seclogon","Objectname",0x00000000,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\seclogon","Start",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\seclogon","Type",0x00010001,288 HKLM,"SYSTEM\CurrentControlSet\Services\seclogon\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\seclogon.dll" HKLM,"SYSTEM\CurrentControlSet\Services\seclogon\Parameters","ServiceMain",0x00000002,"SvcEntry_Seclogon" HKLM,"SYSTEM\CurrentControlSet\Services\SENS","DependOnService",0x00010002,"EventSystem" HKLM,"SYSTEM\CurrentControlSet\Services\SENS","Description",0x00000000,"%SENS_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\SENS","DisplayName",0x00000000,"%SENS_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\SENS","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\SENS","ImagePath",0x00020000,"%SystemRoot%\system32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\SENS","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\SENS","Group",0x00000002,"Network" HKLM,"SYSTEM\CurrentControlSet\Services\SENS","Start",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\SENS","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\SENS\Parameters","ServiceDll",0x00020002,"%SystemRoot%\system32\sens.dll" HKLM,"SYSTEM\CurrentControlSet\Services\Serial","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Serial","Group",0x00000002,"Extended base" HKLM,"SYSTEM\CurrentControlSet\Services\Serial","Start",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Serial","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Serial","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Serial\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Sfloppy","DependOnGroup",0x00010000,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\Sfloppy","ErrorControl",0x00010001,0 HKLM,"SYSTEM\CurrentControlSet\Services\Sfloppy","Group",0x00000000,"Primary disk" HKLM,"SYSTEM\CurrentControlSet\Services\Sfloppy","Start",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\Sfloppy","Tag",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\Sfloppy","Type",0x00010001,1 ; ; Windows Firewall ; ; We need to write these entries here, even though they are actually installed ; in netrass.inf, because we want the firewall to be started during GuiMode ; setup by TCPIP.SYS. If these reg keys aren't present, TCPIP.SYS will not be ; able to start the Firewall (i.e. IPNAT.SYS). ; HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess","DependOnGroup",0x00010000,"" HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess","DependOnService",0x00010000,"Netman","WinMgmt" HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess","Description",0x00000000,%SHAREDACCESS_SERVICE_DESCRIPTION% HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess","DisplayName",0x00000000,%SHAREDACCESS_SERVICE_NAME% HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess","ImagePath",0x00020000,"%SystemRoot%\system32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess","ObjectName",0x00000000,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess","Start",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess","Type",0x00010001,0x20 HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters","ServiceDll",0x00020000,"%SystemRoot%\system32\ipnathlp.dll" HKLM,"SYSTEM\CurrentControlSet\Services\ALG","Description",0x00000000,%Svc-ALG-Description% HKLM,"SYSTEM\CurrentControlSet\Services\Simbad","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Simbad","Group",0x00000002,"Filter" HKLM,"SYSTEM\CurrentControlSet\Services\Simbad","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Simbad","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Simbad","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Sparrow","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Sparrow","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\Sparrow","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Sparrow","Tag",0x00010003,7 HKLM,"SYSTEM\CurrentControlSet\Services\Sparrow","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Sparrow\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Sparrow\Parameters\PnpInterface","1",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Sparrow\Parameters", "LegacyAdapterDetection", 0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","DependOnService",0x00010000,"RPCSS" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","Description",0x00000000,"%SPOOLER_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","DisplayName",0x00000000,"%SPOOLER_DISPLAYNAME%" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","FailureActions",0x00000003, \ 80,51,01,00,00,00,00,00,00,00,00,00,03,00,00,00,e8,47,0c, \ 00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,00,00, \ 00,00,00,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","Group",0x00000002,"SpoolerGroup" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","ImagePath",0x00020000,"%SystemRoot%\system32\spoolsv.exe" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","Start",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\Spooler","Type",0x00010003,272 HKLM,"SYSTEM\CurrentControlSet\Services\Spooler\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\Spooler\Performance","Close",0x00000002,"PerfClose" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler\Performance","Collect",0x00000002,"PerfCollect" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler\Performance","Collect Timeout",0x00010003,2000 HKLM,"SYSTEM\CurrentControlSet\Services\Spooler\Performance","Library",0x00000002,"winspool.drv" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler\Performance","Object List",0x00000002,"1450" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler\Performance","Open",0x00000002,"PerfOpen" HKLM,"SYSTEM\CurrentControlSet\Services\Spooler\Performance","Open Timeout",0x00010003,4000 HKLM,"SYSTEM\CurrentControlSet\Services\swenum","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\swenum","Start",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\swenum","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\swenum\Devices",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\symc810","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\symc810","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\symc810","Start",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\symc810","Tag",0x00010003,26 HKLM,"SYSTEM\CurrentControlSet\Services\symc810","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\symc810\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\symc810\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\symc8xx","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\symc8xx","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\symc8xx","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\symc8xx","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\symc8xx","Tag",0x00010003,54 HKLM,"SYSTEM\CurrentControlSet\Services\symc8xx\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\symc8xx\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\sym_hi","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\sym_hi","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\sym_hi","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\sym_hi","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\sym_hi","Tag",0x00010003,55 HKLM,"SYSTEM\CurrentControlSet\Services\sym_hi\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\sym_hi\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\sym_u3","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\sym_u3","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\sym_u3","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\sym_u3","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\sym_u3","Tag",0x00010003,55 HKLM,"SYSTEM\CurrentControlSet\Services\sym_u3\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\sym_u3\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\SysmonLog","Description",0x00000002,"%SYSMONLOG_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\SysmonLog","DisplayName",0x00000002,"%SYSMONLOG%" HKLM,"SYSTEM\CurrentControlSet\Services\SysmonLog","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\SysmonLog","ImagePath",0x00020002,"%SystemRoot%\system32\smlogsvc.exe" HKLM,"SYSTEM\CurrentControlSet\Services\SysmonLog","ObjectName",0x00000002,"NT Authority\NetworkService" HKLM,"SYSTEM\CurrentControlSet\Services\SysmonLog","Start",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\SysmonLog","Type",0x00010003,16 HKLM,"SYSTEM\CurrentControlSet\Services\SysmonLog","DefaultLogFileFolder",0x00020002,"%SystemDrive%\PerfLogs" HKLM,"SYSTEM\CurrentControlSet\Services\SysmonLog\Log Queries","Defaults Installed",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv","DependOnService",0x00010000,"PlugPlay","RpcSs" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv","Description",0x00000000,"%TELEPHONY_SERVICE_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv","DisplayName",0x00000000,"%TELEPHONY_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv","Start",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv","Type",0x00010001,0x20 HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\tapisrv.dll" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv\Performance","Close",0x00000002,"CloseTapiPerformanceData" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv\Performance","Collect",0x00000002,"CollectTapiPerformanceData" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv\Performance","Library",0x00000002,"tapiperf.dll" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv\Performance","ObjectList",0x00000002,"1150" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv\Performance","Open",0x00000002,"OpenTapiPerformanceData" HKLM,"SYSTEM\CurrentControlSet\Services\TapiSrv\Security","Security",0x00030001,\ 01,00,14,80,6C,00,00,00,78,00,00,00,14,00,00,00,34,00,00,00,02,\ 00,20,00,01,00,00,00,02,80,18,00,FF,01,0F,00,01,01,00,00,00,00,00,01,00,00,\ 00,00,20,02,00,00,02,00,38,00,02,00,00,00,00,03,18,00,FF,01,0F,00,01,02,00,\ 00,00,00,00,05,20,00,00,00,20,02,00,00,00,03,18,00,9D,00,00,00,01,02,00,00,\ 00,00,00,05,20,00,00,00,21,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,\ 01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\TosIde","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\TosIde","Group",0x00000000,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\TosIde","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\TosIde","Tag",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\TosIde","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks","Description",0x00000000,"%TRACK_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks","DisplayName",0x00000000,"%TRACK_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks","DependOnService",0x00010002,"RpcSs" HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks","ImagePath",0x00020000,"%SystemRoot%\system32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks","Start",0x00010001,2 HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\TrkWks\Parameters","ServiceDll",0x00020002,"%SystemRoot%\system32\trkwks.dll" HKLM,"SYSTEM\CurrentControlSet\Services\TSDDD\Device0","InstalledDisplayDrivers",0x00010000,"TSDDD" HKLM,"SYSTEM\CurrentControlSet\Services\TSDDD\Device0","VgaCompatible",0x00010001,00000000 HKLM,"SYSTEM\CurrentControlSet\Services\Udfs","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Udfs","Group",0x00000002,"File system" HKLM,"SYSTEM\CurrentControlSet\Services\Udfs","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\Udfs","Type",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\ultra","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ultra","Group",0x00000002,"SCSI miniport" HKLM,"SYSTEM\CurrentControlSet\Services\ultra","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ultra","Tag",0x00010003,59 HKLM,"SYSTEM\CurrentControlSet\Services\ultra","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\ultra\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\ultra\Parameters\PnpInterface","5",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Update","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Update","Start",0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\Update","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Update\Devices",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\UPS","Description",0x00000000,"%UPS_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\UPS","DisplayName",0x00000000,"%UPS_DISPLAYNAME%" HKLM,"SYSTEM\CurrentControlSet\Services\UPS","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\UPS","ImagePath",0x00020002,"%SystemRoot%\System32\ups.exe" HKLM,"SYSTEM\CurrentControlSet\Services\UPS","ObjectName",0x00000002,"NT AUTHORITY\LocalService" HKLM,"SYSTEM\CurrentControlSet\Services\UPS","Start",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\UPS","Type",0x00010003,16 HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave","ErrorControl",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave","Group",0x00000000,"Video Save" HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave","ImagePath",0x00020000,"\SystemRoot\System32\drivers\vga.sys" HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave","Start",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave","Tag",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave\Video","VideoID",0x00000000,"{23A77BF7-ED96-40EC-AF06-9B1F4867732A}" HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave\Video","Service",0x00000000,"VgaSave" HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave\Device0","InstalledDisplayDrivers",0x00010000,"vga", "framebuf", "vga256", "vga64k" HKLM,"SYSTEM\CurrentControlSet\Services\VgaSave\Device0","VgaCompatible",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Control\Video\{23A77BF7-ED96-40EC-AF06-9B1F4867732A}\Video","Service",0x00000000,"VgaSave" HKLM,"SYSTEM\CurrentControlSet\Control\Video\{23A77BF7-ED96-40EC-AF06-9B1F4867732A}\0000","InstalledDisplayDrivers",0x00010000,"vga", "framebuf", "vga256", "vga64k" HKLM,"SYSTEM\CurrentControlSet\Control\Video\{23A77BF7-ED96-40EC-AF06-9B1F4867732A}\0000","VgaCompatible",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\ViaIde","ErrorControl",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\ViaIde","Group",0x00000000,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\ViaIde","Start",0x00010003,4 HKLM,"SYSTEM\CurrentControlSet\Services\ViaIde","Tag",0x00010001,4 HKLM,"SYSTEM\CurrentControlSet\Services\ViaIde","Type",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\VolSnap","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\VolSnap","Group",0x00000002,"System Bus Extender" HKLM,"SYSTEM\CurrentControlSet\Services\VolSnap","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\VolSnap","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\VSS","DependOnService",0x00010000,"RPCSS" HKLM,"SYSTEM\CurrentControlSet\Services\VSS","Description",0x00000000,"%VOLUME_SNAPSHOT_SERVICE_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\VSS","DisplayName",0x00000000,"%VOLUME_SNAPSHOT_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\VSS","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\VSS","ImagePath",0x00020000,"%SystemRoot%\System32\vssvc.exe" HKLM,"SYSTEM\CurrentControlSet\Services\VSS","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\VSS","Start",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\VSS","Type",0x00010003,0x10 HKLM,"SYSTEM\CurrentControlSet\Services\W32Time","Description",0x00000000,"%WINDOWS_TIME_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\W32Time","DisplayName",0x00000000,"%WINDOWS_TIME_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\W32Time","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\W32Time","Group",0x00000002,"" HKLM,"SYSTEM\CurrentControlSet\Services\W32Time","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\W32Time","Objectname",0x00000000,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\W32Time","Start",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\W32Time","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\W32Time\Security","Security",0x00030003,\ 01,00,14,80,b4,00,00,00,c0,00,00,00,14,00,00,00,34,00,00,00,02,00,20,00,01,\ 00,00,00,02,80,18,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,20,02,\ 00,00,02,00,80,00,05,00,00,00,00,03,18,00,8d,00,02,00,01,01,00,00,00,00,00,\ 01,00,00,00,00,00,00,00,00,00,03,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,20,02,00,00,00,03,18,00,8f,00,02,00,01,02,00,00,00,00,00,05,20,\ 00,00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,\ 00,00,23,02,00,00,00,03,18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,\ 00,21,02,00,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,\ 12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\WinTrust",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\WinTrust\SubjectPackages",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\WinTrust\SubjectPackages\MS Subjects 1","$DLL",0x00020002,"%SystemRoot%\system32\MsSip1.dll" HKLM,"SYSTEM\CurrentControlSet\Services\WinTrust\SubjectPackages\MS Subjects 2","$DLL",0x00020002,"%SystemRoot%\system32\MsSip2.dll" HKLM,"SYSTEM\CurrentControlSet\Services\WinTrust\SubjectPackages\MS Subjects 3","$DLL",0x00020002,"%SystemRoot%\system32\MsSip3.dll" HKLM,"SYSTEM\CurrentControlSet\Services\WinTrust\TrustProviders",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\WinTrust\TrustProviders\Software Publisher","$DLL",0x00020002,"%SystemRoot%\system32\SoftPub.dll" HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc","Type",0x00010001,0x00000020 HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc","Start",0x00010001,0x00000002 HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc","ErrorControl",0x00010001,0x00000001 HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc","DisplayName",0x00000000,"%SECURITY_CENTER_DISPLAYNAME%" HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc","DependOnService",0x00010000,"RpcSs","winmgmt" HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc","ObjectName",0x00000000,"LocalSystem" HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc","Description",0x00000000,"%SECURITY_CENTER_DESCRIPTION%" HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc\Parameters","ServiceDll",0x00020000,"%SYSTEMROOT%\system32\wscsvc.dll" HKLM, "SYSTEM\CurrentControlSet\Services\wscsvc\Security","Security",0x00030003,\ 01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\ 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\ 00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\ 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\ 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\ 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\Wmi","Description",0x00000000,"%WMI_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\Wmi","DisplayName",0x00000000,"%WMI_SERVICE%" HKLM,"SYSTEM\CurrentControlSet\Services\Wmi","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Wmi","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\Wmi","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\Wmi","Start",0x00010001,3 HKLM,"SYSTEM\CurrentControlSet\Services\Wmi","Type",0x00010001,32 HKLM,"SYSTEM\CurrentControlSet\Services\Wmi\Security","Security",0x00030001,\ 01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\ 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\ 00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\ 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\ 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\ 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\Wmi\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\advapi32.dll" HKLM,"SYSTEM\CurrentControlSet\Services\Wmi\Parameters","ServiceMain",0x00000002,"WdmWmiServiceMain" HKLM,"SYSTEM\Select","Current",0x00010003,0 HKLM,"SYSTEM\Select","Default",0x00010003,1 HKLM,"SYSTEM\Select","Failed",0x00010003,0 HKLM,"SYSTEM\Select","LastKnownGood",0x00010003,1 HKLM,"SYSTEM\Setup","SetupType",0x00010003,1 HKLM,"SYSTEM\Setup","SystemSetupInProgress",0x00010003,1 HKLM,"SYSTEM\Setup\AllowStart\AFD",,0x00000010 HKLM,"SYSTEM\Setup\AllowStart\WS2IFSL",,0x00000010 HKLM,"SYSTEM\Setup\AllowStart\EventLog",,0x00000010 HKLM,"SYSTEM\Setup\AllowStart\PlugPlay",,0x00000010 HKLM,"SYSTEM\Setup\AllowStart\ProtectedStorage",,0x00000010 HKLM,"SYSTEM\Setup\AllowStart\Rpcss",,0x00000010 HKLM,"SYSTEM\Setup\AllowStart\DcomLaunch",,0x00000010 HKLM,"SYSTEM\Setup\AllowStart\SamSs",,0x00000010 HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov","DependOnService",0x00010000, "RpcSs" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov","Description",0, "%XMLPROV_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov","DisplayName",0, "%XMLPROV_DISPLAYNAME%" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov","ErrorControl",0x00010001, 0x00000001 HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov","ImagePath",0x00020000, "%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov","ObjectName",0, "LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov","Start",0x00010001, 0x00000003 HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov","Type",0x00010001, 0x00000020 HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters","ServiceDll",0x00020000, "%SystemRoot%\System32\xmlprov.dll" HKLM,"SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\4","RolesSupported",0x00010003, 0x0000000A HKLM,"SYSTEM\CurrentControlSet\Services\RasMan\PPP\EAP\13","RolesSupported",0x00010003, 0x00000002 HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Branding\http://www.microsoft.com/provisioning/Branding","QueryAlias",0, "branding" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Branding\http://www.microsoft.com/provisioning/Branding","SchemaFile",0, "branding.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Connection\http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1","QueryAlias",0,"baseeapconnectionpropertiesv1" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Connection\http://www.microsoft.com/provisioning/BaseEapConnectionPropertiesV1","SchemaFile",0,"baseeapconnectionpropertiesv1.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Connection\http://www.microsoft.com/provisioning/EapConnectionPropertiesV1","QueryAlias",0,"eapconnectionpropertiesv1" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Connection\http://www.microsoft.com/provisioning/EapConnectionPropertiesV1","SchemaFile",0,"eapconnectionpropertiesv1.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Connection\http://www.microsoft.com/provisioning/MsChapV2ConnectionPropertiesV1","QueryAlias",0,"mschapv2connectionpropertiesv1" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Connection\http://www.microsoft.com/provisioning/MsChapV2ConnectionPropertiesV1","SchemaFile",0,"mschapv2connectionpropertiesv1.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Connection\http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV1","QueryAlias",0,"mspeapconnectionpropertiesv1" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Connection\http://www.microsoft.com/provisioning/MsPeapConnectionPropertiesV1","SchemaFile",0,"mspeapconnectionpropertiesv1.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\User\http://www.microsoft.com/provisioning/BaseEapUserPropertiesV1","QueryAlias",0,"baseeapuserpropertiesv1" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\User\http://www.microsoft.com/provisioning/BaseEapUserPropertiesV1","SchemaFile",0,"baseeapuserpropertiesv1.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\User\http://www.microsoft.com/provisioning/EapUserPropertiesV1","QueryAlias",0,"eapuserpropertiesv1" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\User\http://www.microsoft.com/provisioning/EapUserPropertiesV1","SchemaFile",0,"eapuserpropertiesv1.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\User\http://www.microsoft.com/provisioning/MsChapV2UserPropertiesV1","QueryAlias",0,"mschapv2userpropertiesv1" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\User\http://www.microsoft.com/provisioning/MsChapV2UserPropertiesV1","SchemaFile",0,"mschapv2userpropertiesv1.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\User\http://www.microsoft.com/provisioning/MsPeapUserPropertiesV1","QueryAlias",0,"mspeapuserpropertiesv1" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\User\http://www.microsoft.com/provisioning/MsPeapUserPropertiesV1","SchemaFile",0,"mspeapuserpropertiesv1.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Help\http://www.microsoft.com/provisioning/Help","QueryAlias",0, "help" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Help\http://www.microsoft.com/provisioning/Help","SchemaFile",0, "help.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Locations\http://www.microsoft.com/provisioning/Locations","QueryAlias",0, "locations" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Locations\http://www.microsoft.com/provisioning/Locations","SchemaFile",0, "locations.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Master\http://www.microsoft.com/provisioning/Master","QueryAlias",0, "master" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Master\http://www.microsoft.com/provisioning/Master","SchemaFile",0, "masterfile.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Register\http://www.microsoft.com/provisioning/Register","QueryAlias",0, "register" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\Register\http://www.microsoft.com/provisioning/Register","SchemaFile",0, "register.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\SSID\http://www.microsoft.com/provisioning/SSID","QueryAlias",0, "ssid" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\SSID\http://www.microsoft.com/provisioning/SSID","SchemaFile",0, "ssid.xdr" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\WirelessProfile\http://www.microsoft.com/provisioning/WirelessProfile","QueryAlias",0, "wirelessprofile" HKLM,"SYSTEM\CurrentControlSet\Services\xmlprov\Parameters\SchemaGroups\WirelessProfile\http://www.microsoft.com/provisioning/WirelessProfile","SchemaFile",0, "wirelessprofile.xdr" HKLM,"SYSTEM\CurrentControlSet\Control\Lsa", "ImpersonatePrivilegeUpgradeToolHasRun", 0x00010003, 1 HKLM,"SYSTEM\CurrentControlSet\Services\AFD","DisplayName",0x00000002,"AFD" HKLM,"SYSTEM\CurrentControlSet\Services\AFD","Description",0x00000002,"%AFD_SERVICE_DESCRIPTION%" HKLM,"SYSTEM\CurrentControlSet\Services\AFD","Group",0x00000002,"TDI" HKLM,"SYSTEM\CurrentControlSet\Services\AFD","ImagePath",0x00000002,"\SystemRoot\System32\drivers\afd.sys" HKLM,"SYSTEM\CurrentControlSet\Services\AFD","Start",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Services\AFD","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\AFD","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\AFD\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\AFD\Security","Security", 0x00000003,\ 01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\ 00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\ 00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\ 05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\ 20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\ 00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\ 00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\WS2IFSL","Start",0x00010021,1 HKLM,"SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList","{A50398B8-9075-4FBF-A7A1-456BF21937AD}",0x2,"1" HKLM,"SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList","{AD65A69D-3831-40D7-9629-9B0B50A93843}",0x2,"1" HKLM,"SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList","{0040D221-54A1-11D1-9DE0-006097042D69}",0x2,"1" HKLM,"SOFTWARE\Microsoft\Ole\AppCompat\ActivationSecurityCheckExemptionList","{2A6D72F1-6E7E-4702-B99C-E40D3DED33C3}",0x2,"1" [AddReg.RemoteBoot] HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0000\Linkage","Export",0x00010002,"\Device\{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0000\Linkage","Bind",0x00010002,"\Device\{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0000\Linkage","UpperBind",0x00010002,"Tcpip" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0000\Ndi\Interfaces","LowerRange",0x00000002,"ethernet" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E972-E325-11CE-BFC1-08002bE10318}\0000\Ndi\Interfaces","UpperRange",0x00000002,"ndis5" HKLM,"SYSTEM\CurrentControlSet\Control\NetworkProvider\Order",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Control\NetworkProvider\Order","ProviderOrder",0x00000002,"LanmanWorkstation" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip","DisplayName",0x00000002,"TCP/IP Protocol Driver" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip","Group",0x00000002,"PNP_TDI" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip","Tag",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Linkage","Bind",0x00010002,"\Device\{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Linkage","Export",0x00010002,"\Device\Tcpip_{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Linkage","Route",0x00010002,"""{54C7D140-09EF-11D1-B25A-F5FE627ED95E}""" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Linkage\Disabled","Bind",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Linkage\Disabled","Export",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Linkage\Disabled","Route",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{54C7D140-09EF-11D1-B25A-F5FE627ED95E}","IpConfig",0x00010002,"Tcpip\Parameters\Interfaces\{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{54C7D140-09EF-11D1-B25A-F5FE627ED95E}","IpAddress",0x00010002,"0.0.0.0" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{54C7D140-09EF-11D1-B25A-F5FE627ED95E}","SubnetMask",0x00010002,"0.0.0.0" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{54C7D140-09EF-11D1-B25A-F5FE627ED95E}","NTEContextList",0x00010002,"0x00000002" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Performance","ObjectList",0x00000002,"502 510 546 582 638 658" HKLM,"SYSTEM\CurrentControlSet\Services\Tcpip\Security","Security",0x00030003,\ 01,00,14,80,bc,00,00,00,c8,00,00,00,14,00,00,00,30,00,00,00,02,00,1c,00,\ 01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,\ 02,00,8c,00,05,00,00,00,00,00,18,00,8d,01,02,00,01,01,00,00,00,00,00,01,\ 00,00,00,00,72,00,76,00,00,00,1c,00,fd,01,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,23,02,00,00,69,00,63,00,00,00,1c,00,ff,01,0f,00,01,02,00,00,\ 00,00,00,05,20,00,00,00,20,02,00,00,69,00,63,00,00,00,1c,00,ff,01,0f,00,\ 01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,69,00,63,00,00,00,18,00,\ fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,25,02,00,00,01,01,00,00,\ 00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\NetBT","DisplayName",0x00000002,"WINS Client(TCP/IP) Protocol Driver" HKLM,"SYSTEM\CurrentControlSet\Services\NetBT","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\NetBT","Group",0x00000002,"PNP_TDI" HKLM,"SYSTEM\CurrentControlSet\Services\NetBT","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\NetBT","Tag",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\NetBT","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Linkage","Bind",0x00010002,"\Device\Tcpip_{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Linkage","Export",0x00010002,"\Device\NetBT_Tcpip_{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Linkage","Route",0x00010002,"""Tcpip"" ""{54C7D140-09EF-11D1-B25A-F5FE627ED95E}""" HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Linkage\Disabled","Bind",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Linkage\Disabled","Export",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Linkage\Disabled","Route",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Parameters","TransportBindName",0x00000002,"\Device\" HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Parameters","BroadcastAddress",0x00010001,0xffffffff HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Parameters\Interfaces\Tcpip_{54C7D140-09EF-11D1-B25A-F5FE627ED95E}",,0x00000010 HKLM,"SYSTEM\CurrentControlSet\Services\NetBT\Security","Security",0x00030003,\ 01,00,14,80,bc,00,00,00,c8,00,00,00,14,00,00,00,30,00,00,00,02,00,1c,00,\ 01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,\ 02,00,8c,00,05,00,00,00,00,00,18,00,8d,01,02,00,01,01,00,00,00,00,00,01,\ 00,00,00,00,64,00,00,00,00,00,1c,00,fd,01,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,23,02,00,00,00,00,00,00,00,00,1c,00,ff,01,0f,00,01,02,00,00,\ 00,00,00,05,20,00,00,00,20,02,00,00,00,00,00,00,00,00,1c,00,ff,01,0f,00,\ 01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,00,00,00,00,00,00,18,00,\ fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,25,02,00,00,01,01,00,00,\ 00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\Rdbss","DisplayName",0x00000002,"Rdbss" HKLM,"SYSTEM\CurrentControlSet\Services\Rdbss","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Rdbss","Group",0x00000002,"Network" HKLM,"SYSTEM\CurrentControlSet\Services\Rdbss","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\Rdbss","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\Rdbss","Type",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\Rdbss\Security","Security",0x00030003,\ 01,00,14,80,bc,00,00,00,c8,00,00,00,14,00,00,00,30,00,00,00,02,00,1c,00,\ 01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,\ 02,00,8c,00,05,00,00,00,00,00,18,00,8d,01,02,00,01,01,00,00,00,00,00,01,\ 00,00,00,00,00,00,00,00,00,00,1c,00,fd,01,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,23,02,00,00,02,00,04,00,00,00,1c,00,ff,01,0f,00,01,02,00,00,\ 00,00,00,05,20,00,00,00,20,02,00,00,02,00,04,00,00,00,1c,00,ff,01,0f,00,\ 01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,02,00,04,00,00,00,18,00,\ fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,25,02,00,00,01,01,00,00,\ 00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\MRxSmb","DisplayName",0x00000002,"MRXSMB" HKLM,"SYSTEM\CurrentControlSet\Services\MRxSmb","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\MRxSmb","Group",0x00000002,"Network" HKLM,"SYSTEM\CurrentControlSet\Services\MRxSmb","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\MRxSmb","Tag",0x00010003,3 HKLM,"SYSTEM\CurrentControlSet\Services\MRxSmb","Type",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\MRxSmb\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\MRxSmb\Security","Security",0x00030003,\ 01,00,14,80,bc,00,00,00,c8,00,00,00,14,00,00,00,30,00,00,00,02,00,1c,00,\ 01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,\ 02,00,8c,00,05,00,00,00,00,00,18,00,8d,01,02,00,01,01,00,00,00,00,00,01,\ 00,00,00,00,00,00,00,00,00,00,1c,00,fd,01,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,23,02,00,00,02,00,04,00,00,00,1c,00,ff,01,0f,00,01,02,00,00,\ 00,00,00,05,20,00,00,00,20,02,00,00,02,00,04,00,00,00,1c,00,ff,01,0f,00,\ 01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,02,00,04,00,00,00,18,00,\ fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,25,02,00,00,01,01,00,00,\ 00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation","Description",0x00000000,%LANMAN_WORKSTATION_DESCRIPTION% HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation","DisplayName",0x00000000,%LANMAN_WORKSTATION_DISPLAY% HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation","Group",0x00000002,"NetworkProvider" HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation","ImagePath",0x00020000,"%SystemRoot%\System32\svchost.exe -k netsvcs" HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation","DependOnService",0x00010000 HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation","ObjectName",0x00000002,"LocalSystem" HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation","Start",0x00010003,2 HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation","Type",0x00010003,0x20 HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Linkage","Bind",0x00010002,"\Device\NetBT_Tcpip_{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Linkage","Export",0x00010002,"\Device\LanmanWorkstation_NetBT_Tcpip_{54C7D140-09EF-11D1-B25A-F5FE627ED95E}" HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Linkage","Route",0x00010002,"""NetBT"" ""Tcpip"" ""{54C7D140-09EF-11D1-B25A-F5FE627ED95E}""" HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Linkage\Disabled","Bind",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Linkage\Disabled","Export",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Linkage\Disabled","Route",0x00010002 HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\networkprovider","Devicename",0x00000002,"\Device\LanmanRedirector" HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\networkprovider","Name",0x00000002,"Microsoft Windows Network" HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\networkprovider","ProviderPath",0x00020002,"%SystemRoot%\System32\ntlanman.dll" HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters",,0x00000012 HKLM,"SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters","ServiceDll",0x00020000,"%SystemRoot%\System32\wkssvc.dll" HKLM,"SYSTEM\CurrentControlSet\Services\IPSec","DisplayName",0x00000002,"IPSEC Driver" HKLM,"SYSTEM\CurrentControlSet\Services\IPSec","ErrorControl",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\IPSec","Group",0x00000002,"PNP_TDI" HKLM,"SYSTEM\CurrentControlSet\Services\IPSec","Start",0x00010003,0 HKLM,"SYSTEM\CurrentControlSet\Services\IPSec","Tag",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\IPSec","Type",0x00010003,1 HKLM,"SYSTEM\CurrentControlSet\Services\IPSec\Security","Security",0x00030003,\ 01,00,14,80,bc,00,00,00,c8,00,00,00,14,00,00,00,30,00,00,00,02,00,1c,00,\ 01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,00,00,\ 02,00,8c,00,05,00,00,00,00,00,18,00,8d,01,02,00,01,01,00,00,00,00,00,01,\ 00,00,00,00,00,00,00,00,00,00,1c,00,fd,01,02,00,01,02,00,00,00,00,00,05,\ 20,00,00,00,23,02,00,00,02,00,04,00,00,00,1c,00,ff,01,0f,00,01,02,00,00,\ 00,00,00,05,20,00,00,00,20,02,00,00,02,00,04,00,00,00,1c,00,ff,01,0f,00,\ 01,02,00,00,00,00,00,05,20,00,00,00,25,02,00,00,02,00,04,00,00,00,18,00,\ fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,25,02,00,00,01,01,00,00,\ 00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00 HKLM,"SOFTWARE\Microsoft\Windows\CurrentVersion\CSCSettings","DatabaseLocation",0x00000002,"D:\IntelliMirror Cache\CSC" [AddReg.Upgrade] HKLM,"SYSTEM\CurrentControlSet\Control\Print","Upgrade",0x00010001,1 HKLM,"SYSTEM\CurrentControlSet\Control\Print","RouterCacheSize",0x00010001,0x00000010 HKLM,"SYSTEM\CurrentControlSet\Control\SystemResources\ReservedResources","Eisa",0x00000004 HKLM,"SYSTEM\CurrentControlSet\Control\Windows","CSDVersion",0x10001,0x200 HKLM,"SYSTEM\CurrentControlSet\Control\Windows","CSDReleaseType",0x10001,0 [DelReg] HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\AsrCommands" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Microsoft Snapshot Writer (Bootable State)" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Microsoft Snapshot Writer (Service State)" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Removable Storage Manager Database" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","Snapshot Default Provider" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\FilesNotToBackup","WMI Snapshot Writer" HKLM,"SYSTEM\CurrentControlSet\Control\BackupRestore\KeysNotToRestore","PlugPlay" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{456D63F1-3F38-11D1-93C9-0040333C1C05}" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E967-E325-11CE-BFC1-08002BE10318}","LowerFilters" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E973-E325-11CE-BFC1-08002BE10318}","NoUseClass" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E974-E325-11CE-BFC1-08002BE10318}","NoUseClass" HKLM,"SYSTEM\CurrentControlSet\Control\Class\{4D36E975-E325-11CE-BFC1-08002BE10318}","NoUseClass" HKLM,"SYSTEM\CurrentControlSet\Control\CriticalDeviceDatabase" HKLM,"SYSTEM\CurrentControlSet\Control\GroupOrderList","System FS Filter" HKLM,"SYSTEM\CurrentControlSet\Control\IDConfigDB","PropertyProviders" HKLM,"SYSTEM\CurrentControlSet\Control\Keyboard Layouts\E00F0804" HKLM,"SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0","Auth1" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM","VID_4d53&PID_0F1F" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM","VID_4d53&PID_0003" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM","VID_4d53&PID_0017" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM","VID_4d53&PID_0006" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM","VID_4d53&PID_000D" HKLM,"SYSTEM\CurrentControlSet\Control\MediaProperties\PrivateProperties\Joystick\OEM","VID_4d53&PID_0015" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0812" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0827" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0445" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0448" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","044c" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","044d" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Language","0861" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000812" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000827" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000445" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000448" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000044c" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","0000044d" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale","00000861" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00010404" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00010411" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00010412" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00010804" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00010812" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00010c04" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00011004" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00011404" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\Locale\Alternate Sorts","00020c04" HKLM,"SYSTEM\CurrentControlSet\Control\Nls\OEMLocale" HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID\Tape\NTBackup" HKLM,"SYSTEM\CurrentControlSet\Control\NTMS\OMID\Tape\Scratch" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Monitors\%hpmon_regkey%" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Monitors\Lexmark DLC Network Port" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Monitors\Lexmark TCP/IP Network Port" HKLM,"SYSTEM\CurrentControlSet\Control\Print\Providers","RetryPopup" HKLM,"SYSTEM\CurrentControlSet\Control\Server Applications", "{8F8F8DC0-5713-11D1-9551-0060B0576642}" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppCompatibility", "AppCompatCache" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\AppPatches\Install" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Environment","Os2LibPath" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters","EnablePrefetcher" HKLM,"SYSTEM\CurrentControlSet\Control\Session Manager\SubSystems","Os2" HKLM,"SYSTEM\CurrentControlSet\Control\Windows","NoPopupsOnBoot" HKLM,"SYSTEM\CurrentControlSet\Services\ad1816" HKLM,"SYSTEM\CurrentControlSet\Services\adisnd" HKLM,"SYSTEM\CurrentControlSet\Services\alisnd" HKLM,"SYSTEM\CurrentControlSet\Services\als_fm" HKLM,"SYSTEM\CurrentControlSet\Services\alsnd" HKLM,"SYSTEM\CurrentControlSet\Services\am53c974" HKLM,"SYSTEM\CurrentControlSet\Services\au8820" HKLM,"SYSTEM\CurrentControlSet\Services\au8830" HKLM,"SYSTEM\CurrentControlSet\Services\auddrive" HKLM,"SYSTEM\CurrentControlSet\Services\aztaud" HKLM,"SYSTEM\CurrentControlSet\Services\CIMOM" HKLM,"SYSTEM\CurrentControlSet\Services\cl54xx" HKLM,"SYSTEM\CurrentControlSet\Services\Cnss" HKLM,"SYSTEM\CurrentControlSet\Services\cpq32fs2" HKLM,"SYSTEM\CurrentControlSet\Services\cs32ba11" HKLM,"SYSTEM\CurrentControlSet\Services\ctsyn" HKLM,"SYSTEM\CurrentControlSet\Services\cwantr0" HKLM,"SYSTEM\CurrentControlSet\Services\cwbaudio" HKLM,"SYSTEM\CurrentControlSet\Services\cwcecho" HKLM,"SYSTEM\CurrentControlSet\Services\cwcfm" HKLM,"SYSTEM\CurrentControlSet\Services\cwcspud" HKLM,"SYSTEM\CurrentControlSet\Services\cwcspud3" HKLM,"SYSTEM\CurrentControlSet\Services\cwcmmsys" HKLM,"SYSTEM\CurrentControlSet\Services\cwcmsg" HKLM,"SYSTEM\CurrentControlSet\Services\DcomLaunch","DependOnService" HKLM,"SYSTEM\CurrentControlSet\Services\DiskPerf" HKLM,"SYSTEM\CurrentControlSet\Services\eapci40" HKLM,"SYSTEM\CurrentControlSet\Services\emu10k" HKLM,"SYSTEM\CurrentControlSet\Services\emu10k1" HKLM,"SYSTEM\CurrentControlSet\Services\es137140" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Application Deployment" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\Application\PlugPlayManager" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\hpmon" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\Application\PSE36Prf" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Application\Type 1 Installer" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Directory Service" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\DiskPerf" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\floppy" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\intlfxsr" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\ncrc810" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\PSE36" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\scsicdrm" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\scsidisk" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\scsiflop" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\pinball" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\pnpisa" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\mga8" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\mga16" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\mga24" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\sglfb" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\trkwks" HKLM,"SYSTEM\CurrentControlSet\Services\Eventlog\System\VgaStart" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\System\Wmi" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\User32" HKLM,"SYSTEM\CurrentControlSet\Services\EventLog\Security\Schedule" HKLM,"SYSTEM\CurrentControlSet\Services\Floppy" HKLM,"SYSTEM\CurrentControlSet\Services\Homenet" HKLM,"SYSTEM\CurrentControlSet\Services\hphparnt" HKLM,"SYSTEM\CurrentControlSet\Services\ibmraidn" HKLM,"SYSTEM\CurrentControlSet\Services\intlfxsr" HKLM,"SYSTEM\CurrentControlSet\Services\LDAPSVCX" HKLM,"SYSTEM\CurrentControlSet\Services\ma_delta" HKLM,"SYSTEM\CurrentControlSet\Services\maestro" HKLM,"SYSTEM\CurrentControlSet\Services\Modem","PlugPlayServiceType" HKLM,"SYSTEM\CurrentControlSet\Services\ncrc810" HKLM,"SYSTEM\CurrentControlSet\Services\i8042prt","PlugPlayServiceType" HKLM,"SYSTEM\CurrentControlSet\Services\NDIS\NE2000MCA.1" HKLM,"SYSTEM\CurrentControlSet\Services\NDIS\NE2000MCA.2" HKLM,"SYSTEM\CurrentControlSet\Services\NDIS\NetDetect" HKLM,"SYSTEM\CurrentControlSet\Services\NetDetect" HKLM,"SYSTEM\CurrentControlSet\Services\OAKVGA" HKLM,"SYSTEM\CurrentControlSet\Services\OLE" HKLM,"SYSTEM\CurrentControlSet\Services\opl3sa" HKLM,"SYSTEM\CurrentControlSet\Services\p9000" HKLM,"SYSTEM\CurrentControlSet\Services\p9100" HKLM,"SYSTEM\CurrentControlSet\Services\Pcmcia\DataBase" HKLM,"SYSTEM\CurrentControlSet\Services\PerfDisk\Performance","Disable Performance Counters" HKLM,"SYSTEM\CurrentControlSet\Services\PerfNet\Performance","Disable Performance Counters" HKLM,"SYSTEM\CurrentControlSet\Services\PerfOS\Performance","Disable Performance Counters" HKLM,"SYSTEM\CurrentControlSet\Services\PerfProc\Performance","Disable Performance Counters" HKLM,"SYSTEM\CurrentControlSet\Services\pinball" HKLM,"SYSTEM\CurrentControlSet\Services\pnpisa" HKLM,"SYSTEM\CurrentControlSet\Services\PSE36" HKLM,"SYSTEM\CurrentControlSet\Services\ql10nt35" HKLM,"SYSTEM\CurrentControlSet\Services\quickaccess" HKLM,"SYSTEM\CurrentControlSet\Services\RCA" HKLM,"SYSTEM\CurrentControlSet\Services\s3ingr" HKLM,"SYSTEM\CurrentControlSet\Services\sb16snd" HKLM,"SYSTEM\CurrentControlSet\Services\sbawe32" HKLM,"SYSTEM\CurrentControlSet\Services\SCardSvr","DependOnGroup" HKLM,"SYSTEM\CurrentControlSet\Services\scesrv" HKLM,"SYSTEM\CurrentControlSet\Services\scsicdrm" HKLM,"SYSTEM\CurrentControlSet\Services\scsidisk" HKLM,"SYSTEM\CurrentControlSet\Services\scsiflop" HKLM,"SYSTEM\CurrentControlSet\Services\sfman" HKLM,"SYSTEM\CurrentControlSet\Services\sglfb" HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Setup" HKLM,"SYSTEM\CurrentControlSet\Services\sisaudio" HKLM,"SYSTEM\CurrentControlSet\Services\sndblst" HKLM,"SYSTEM\CurrentControlSet\Services\sndglxy" HKLM,"SYSTEM\CurrentControlSet\Services\sndsys" HKLM,"SYSTEM\CurrentControlSet\Services\sni543x" HKLM,"SYSTEM\CurrentControlSet\Services\Update\Group" HKLM,"SYSTEM\CurrentControlSet\Services\Update\Tag" HKLM,"SYSTEM\CurrentControlSet\Services\VgaStart" HKLM,"SYSTEM\CurrentControlSet\Services\waveart" HKLM,"SYSTEM\CurrentControlSet\Services\wdbkvga" HKLM,"SYSTEM\CurrentControlSet\Services\wdlavga" HKLM,"SYSTEM\CurrentControlSet\Services\wdmals" HKLM,"SYSTEM\CurrentControlSet\Services\WinMgmt" HKLM,"SYSTEM\CurrentControlSet\Services\YAMAHA\Driver\DSXGWDM" HKLM,"SYSTEM\CurrentControlSet\Services\ydsxg" HKLM,"SYSTEM\Services\CIMOM" HKLM,"SYSTEM\Setup","MiniSetupInProgress" HKLM,"SYSTEM\Setup","OobeInProgress" HKLM,"SYSTEM\CurrentControlSet\Control\Biosinfo","SystemBiosDate" HKLM,"SYSTEM\CurrentControlSet\Control\Storage\DeviceSettings" HKLM,"SYSTEM\CurrentControlSet\Control\Redbook\SpecialTargetList" HKLM, "SYSTEM\CurrentControlSet\Enum\SW\{c68127b1-9bea-11d0-8fa5-00c04fc324c1}" HKLM, "SYSTEM\CurrentControlSet\Services\swenum\Devices\{c68127b1-9bea-11d0-8fa5-00c04fc324c1}" HKLM,"SOFTWARE\Classes\CLSID\{7b47881d-4d79-4369-adf5-d1293852d36b}" HKLM,"SOFTWARE\Classes\CLSID\{7b47881d-4d79-4369-adf5-d1293852d36b}" HKLM,"SOFTWARE\Classes\AppID\{C49962DB-86EE-425e-B1EF-27A819546BB6}" HKLM,"SOFTWARE\Classes\CLSID\{03707315-53E9-4B84-82B2-F09025CAD207}" HKLM,"SOFTWARE\Classes\CLSID\{884BE013-3CD5-4647-A0D2-0931FD3DE938}" HKLM,"SOFTWARE\Classes\Interface\{122B0972-0D6A-48FB-92D0-A446DE80BD62}" HKLM,"SOFTWARE\Classes\Interface\{1B664CB0-9403-4061-B356-B374C63B1241}" HKLM,"SOFTWARE\Classes\Interface\{1C3FEDF7-1B2B-4550-A964-1511DF2163C8}" HKLM,"SOFTWARE\Classes\Interface\{2A57D76E-94D7-484A-9D41-72CE289DED01}" HKLM,"SOFTWARE\Classes\Interface\{43287AC8-F5AB-498B-A455-74DC84750C49}" HKLM,"SOFTWARE\Classes\Interface\{884BE013-3CD5-4647-A0D2-0931FD3DE938}" HKLM,"SOFTWARE\Classes\Interface\{FD695182-B9FF-4224-B55F-6774CC4CDB38}" HKLM,"SOFTWARE\Classes\IP6FwAPI.NetFirewallV6Manager" HKLM,"SOFTWARE\Classes\IP6FwAPI.NetFirewallV6Manager.1" HKLM,"SOFTWARE\Classes\TypeLib\{3756D8CE-B1F9-4D95-9E5F-DF06DF4B4999}" [AddReg] HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mprui.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mprui.dll","1",0x00030001,\ 4f,a0,48,38,49,bb,d5,9a,94,84,a0,a4,cd,f2,7e,5c,6e,a4,4,63,dc,76,9,ec,c3,f3,b9,2f,3f,cc,2d,9a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msinfo.dll","0",0x00030001,\ b9,04,00,00,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msinfo.dll","1",0x00030001,\ f3,c9,52,14,23,76,9e,e3,10,76,9c,7a,20,e1,bc,16,ab,f5,4e,33,57,4f,dc,60,4d,9e,bf,3c,d,99,5a,5b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msoobe.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msoobe.exe","1",0x00030001,\ d5,e4,ba,67,61,3d,1b,a2,61,be,7a,a6,85,c,6d,f1,92,81,9c,7f,cc,78,39,e,a5,f0,93,ce,3c,59,9c,12 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mstask.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,01,00,28,0a,47,00,04,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mstask.dll","1",0x00030001,\ 6,b3,94,81,ab,69,86,69,e6,d9,f8,f4,f9,7,fb,35,ef,43,c7,85,e7,40,a8,aa,3a,93,a6,6e,f4,dd,c9,85 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\netid.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\netid.dll","1",0x00030001,\ ef,4b,48,a3,4,f9,b0,b9,4b,34,d3,12,79,7e,87,c8,32,28,60,37,cb,c7,fb,86,e6,b5,a1,bb,49,18,24,2a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\objsel.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\objsel.dll","1",0x00030001,\ fa,f0,ea,18,a9,72,f2,f2,74,0,c1,5,32,8,a4,78,de,95,68,c4,7d,e,b,b8,44,a3,bb,49,33,e0,c2,8d HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ocmanage.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ocmanage.dll","1",0x00030001,\ 56,80,47,6f,df,95,b4,8f,a2,90,aa,4a,df,85,8,23 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\oobebaln.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\oobebaln.exe","1",0x00030001,\ 9b,1e,66,ad,3,7a,bb,b3,ad,6d,c7,b8,46,7b,28,1c,c1,f5,27,9b,75,45,1b,56,30,7b,f6,eb,57,11,d4,84 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\racpldlg.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\racpldlg.dll","1",0x00030001,\ 58,9d,5a,6a,58,8b,dd,2e,49,27,1d,13,7f,40,40,33 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\rstrui.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\rstrui.exe","1",0x00030001,\ ec,a5,62,7,42,5d,c6,1b,4b,51,8a,3c,d2,21,8a,ad,a6,e5,89,74,b3,61,4d,f6,3e,0,c3,6d,28,ea,37,17 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\setupapi.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\setupapi.dll","1",0x00030001,\ e9,c9,6a,f8,b0,23,e4,37,97,2f,88,ff,f3,32,f6,a5,2b,87,ff,ec,65,12,5b,32,77,e3,54,9d,f9,23,8a,31 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\srrstr.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\srrstr.dll","1",0x00030001,\ 4c,1,22,7,5,bf,dc,59,a8,e2,f9,a4,68,1,b3,3,b6,3f,dd,be,a9,cf,e4,9c,5a,bd,e2,9d,e,95,e8,ef HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sysmon.ocx","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sysmon.ocx","1",0x00030001,\ d5,4f,b9,87,a3,8,86,2d,40,df,bb,6b,b1,ea,62,6f,f4,8e,a0,e0,a,ca,59,57,6d,ea,36,fd,d0,f3,32,5a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sysocmgr.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sysocmgr.exe","1",0x00030001,\ 8a,5c,c0,42,22,be,c0,9b,fd,52,6f,b7,dc,e8,a4,3a,75,f3,e9,bb,ec,54,5b,84,e0,a6,99,d3,4d,c3,69,3c HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msoeres.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msoeres.dll","1",0x00030001,\ 34,13,4,ea,f5,af,69,ff,b9,88,5d,c7,c5,82,d6,19,d5,67,28,bd,73,e4,2,81,3b,f,1d,c6,78,e9,33,a4 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\acctres.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\acctres.dll","1",0x00030001,\ 76,81,6e,be,2,ba,c2,a6,56,83,ac,90,dc,f4,42,8b,e7,65,d5,79,45,64,e3,fa,84,61,1,2,58,be,4e,c2 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\icwconn1.exe","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\icwconn1.exe","1",0x00030001,\ b7,25,bd,37,49,5c,93,73,38,cf,70,a6,d6,7b,69,4,ef,dd,df,2a,10,18,bd,cc,d3,73,21,ec,dd,14,4d,ad HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\inetres.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\inetres.dll","1",0x00030001,\ e9,94,ff,3f,7f,7a,ca,4f,60,5,93,26,e2,6b,f0,ed,ea,71,1,c5,4c,50,7f,64,b4,50,6e,47,7d,2f,95,3 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\isign32.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\isign32.dll","1",0x00030001,\ 16,d3,8,b8,d,c4,ee,c0,26,a9,90,b7,92,93,de,8,97,f1,6e,4d,7e,f1,b4,4,65,58,d2,a4,f7,74,f2,b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mshtmler.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mshtmler.dll","1",0x00030001,\ 36,d7,75,5,73,76,b3,f9,c0,7d,e7,2e,4e,8c,60,5 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wab32res.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wab32res.dll","1",0x00030001,\ 4b,7e,a9,2e,db,3f,58,b5,e7,4d,1d,68,53,c4,7,95,de,54,9f,a9,47,4e,82,81,18,e4,4b,dd,3e,f0,89,4e HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wininet.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wininet.dll","1",0x00030001,\ 61,1a,17,87,12,b7,dc,ba,f1,b,f0,ee,c5,5c,ca,0,21,aa,cd,25,82,e2,50,53,63,cb,47,87,61,20,6a,a0 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\dpvoice.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\dpvoice.dll","1",0x00030001,\ 5f,57,b8,f6,71,fe,1a,57,28,fd,dc,cb,87,85,59,9b,47,3c,49,f4,83,95,35,cb,21,5e,f,a,58,15,2e,e0 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\joy.cpl","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\joy.cpl","1",0x00030001,\ d7,62,d8,aa,8f,89,e5,51,d2,34,16,4e,17,90,5a,c0,b1,f4,d8,7e,39,af,5e,b0,5d,e6,a7,6c,65,e1,e3,6 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sndrec32.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sndrec32.exe","1",0x00030001,\ 54,b6,a4,51,d2,28,b0,ed,56,f,b9,df,7b,e8,49,ae,bd,27,70,e9,4a,8a,99,34,85,f4,db,56,ee,5e,56,26 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sndvol32.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sndvol32.exe","1",0x00030001,\ d4,91,ec,2d,78,53,bb,b7,e5,bb,b8,bd,5f,ef,72,f7,58,7c,47,6b,94,67,7b,78,a6,f4,1c,ec,4d,ac,a0,a4 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ss3dfo.scr","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ss3dfo.scr","1",0x00030001,\ ba,9d,88,48,49,e2,c8,99,b5,6f,4e,9e,fd,9a,a3,b6,fc,a,21,13,7c,db,c1,47,5f,2d,c,33,da,7,e4,da HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssflwbox.scr","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssflwbox.scr","1",0x00030001,\ 37,89,74,3d,59,39,f2,ef,ac,1f,bb,d2,54,60,31,61,17,5b,41,f3,b4,3c,98,db,29,26,cb,de,31,f9,64,5c HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sstext3d.scr","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sstext3d.scr","1",0x00030001,\ 47,72,ef,41,fd,ce,26,af,40,4,98,9f,b0,0,72,dc,76,32,56,f5,32,6f,d7,9d,c0,ef,47,93,57,19,be,6b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\winmm.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\winmm.dll","1",0x00030001,\ f8,c8,ec,69,99,25,f3,54,62,29,a4,65,3e,93,c1,fe,9e,52,f,28,23,d5,b5,a6,5a,1d,67,0,37,a8,9f,35 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\hnetcfg.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\hnetcfg.dll","1",0x00030001,\ 34,fd,a0,61,77,c6,3,50,9b,e6,4,f0,84,b2,1f,3c,58,db,42,1b,b,28,33,88,b6,c0,d7,b3,59,1a,4e,54 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mdminst.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mdminst.dll","1",0x00030001,\ 52,33,5c,24,a,e9,4a,cf,9,52,59,b2,f7,2f,d5,4b,bc,b,c5,1f,fb,5e,a1,8d,1c,b2,fc,a1,34,79,be,b3 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\modemui.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\modemui.dll","1",0x00030001,\ 4b,5d,f7,40,8,44,c0,33,ab,56,c8,e0,88,65,fc,97,57,b0,16,12,29,cc,dd,73,57,3f,b8,90,54,f7,58,26 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mstsc.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mstsc.exe","1",0x00030001,\ 17,de,56,35,e4,ee,ae,24,8a,a7,e5,b1,43,3b,cd,a4,92,89,c8,e8,32,e5,94,15,12,58,12,33,e4,10,d1,24 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ncpa.cpl","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ncpa.cpl","1",0x00030001,\ 6e,48,88,f3,c2,66,de,b8,53,a0,1a,9a,5f,dd,7b,7b,12,2c,9a,df,e1,aa,ae,f,4e,59,ae,4a,6c,3f,32,58 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\netcfgx.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\netcfgx.dll","1",0x00030001,\ bd,4e,7e,96,5b,73,39,f4,55,8c,23,73,ef,68,80,aa,c2,32,a1,8a,73,5b,2,12,82,b2,99,82,7e,f9,dd,27 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\netshell.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\netshell.dll","1",0x00030001,\ 3b,62,1,9d,b0,bd,79,82,4,93,9a,db,1f,58,75,28,aa,bb,b0,93,30,0,bf,3e,e8,27,af,dc,7d,fe,a0,19 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\rasdlg.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\rasdlg.dll","1",0x00030001,\ 47,51,91,96,c1,cc,f9,7c,b3,38,dc,c,70,c,8b,aa,22,f5,27,df,28,f9,d5,8d,bd,17,6,cc,6d,27,2d,17 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\remotepg.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\remotepg.dll","1",0x00030001,\ 7,4,23,f6,1d,a,51,58,6c,87,e8,c8,8d,4d,f,9a,78,37,44,91,68,a8,38,da,e9,4b,2a,c6,bb,fc,a9,1a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\tapiui.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\tapiui.dll","1",0x00030001,\ 4,d5,8,9b,d,68,a4,94,61,ab,b6,c,2f,c,57,15,86,e0,97,f9,d0,b6,3a,c1,c4,ed,0,ec,ba,3c,27,7d HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\telephon.cpl","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\telephon.cpl","1",0x00030001,\ 36,81,ff,2a,d,ba,88,98,a5,59,6c,ae,ac,c9,53,7a,66,c6,ad,7,ff,3e,d2,72,5,44,c9,93,1e,40,a,ca HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sapi.cpl","0",0x00030001,\ 00,00,0f,10,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sapi.cpl","1",0x00030001,\ 29,2e,80,c7,94,6a,44,be,4,70,a2,7e,c8,a,d5,19,91,91,aa,83,da,62,eb,32,17,77,34,1c,f1,4e,e7,cb HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\srchctls.dll","0",0x00030001,\ d8,07,00,00,00,00,01,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\srchctls.dll","1",0x00030001,\ 4c,97,f6,fd,1b,8d,99,a3,bf,2e,a,28,b4,6d,44,48,ff,85,cb,87,65,25,c8,22,bd,8e,45,ad,4f,81,31,f0 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\srchui.dll","0",0x00030001,\ 9a,0a,00,00,00,00,01,00,d8,07,00,00,00,00,01,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\srchui.dll","1",0x00030001,\ 94,7,85,6c,6c,ef,22,ad,a,c4,1c,e7,ce,2b,df,72,e5,b6,cb,bb,25,97,b5,cd,db,61,85,da,ed,ce,8b,9b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wuauclt.exe","0",0x00030001,\ 52,04,2e,0e,04,00,05,00,00,00,28,0a,04,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wuauclt.exe","1",0x00030001,\ 33,80,b,16,a2,a9,70,74,5c,d5,f9,11,d0,2a,96,f8,ae,8f,7c,87,38,40,0,76,84,f2,3f,66,16,72,c9,28,6B,18,C4,B3,FE,31,72,FD,6D,A5,49,19,C8,5C,C2,94 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wuaueng.dll","0",0x00030001,\ 52,04,2e,0e,04,00,05,00,00,00,28,0a,04,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wuaueng.dll","1",0x00030001,\ 3e,9a,57,30,1,12,9f,20,40,ec,4c,f3,2e,c8,b0,21,c0,a6,b5,fb,37,3c,61,4a,5d,cb,af,aa,6a,36,4b,f HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\appwiz.cpl","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\appwiz.cpl","1",0x00030001,\ ce,f5,a,8b,8d,d6,cd,76,a9,c8,9,95,e,c8,f,40,11,20,48,3b,ff,95,d5,ca,e3,e0,28,51,73,a1,94,5a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\blue_ss.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\blue_ss.dll","1",0x00030001,\ cc,21,dd,d2,bc,2f,40,d5,b3,4a,cf,aa,52,c2,a7,5c,36,3b,25,c9,9e,4f,24,d9,db,9c,2c,6d,db,77,20,4f HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\browselc.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\browselc.dll","1",0x00030001,\ b1,c6,e4,5,71,45,ac,ec,a5,1e,bc,c9,69,8b,f3,30 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\browseui.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\browseui.dll","1",0x00030001,\ 2c,5c,b0,e4,58,e7,e2,6d,6e,36,13,1e,fa,df,a2,9d,d6,fe,a5,88,d4,83,c8,f1,88,a,ae,6f,bf,d1,94,d3 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\class_ss.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\class_ss.dll","1",0x00030001,\ a1,4b,ef,62,f6,43,3,ff,a5,21,ed,9c,8a,9b,f5,91,e6,52,de,9e,8,d9,13,18,f7,83,c1,1e,d7,30,42,c5 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\cleanmgr.exe","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\cleanmgr.exe","1",0x00030001,\ a6,2,bf,13,a0,a,c5,71,35,d5,66,48,9d,8b,51,6c,93,a8,1b,9d,ca,d2,26,f4,ac,9f,66,82,d1,55,dc,6d HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\comdlg32.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\comdlg32.dll","1",0x00030001,\ 84,ce,a0,45,c5,6f,d0,f5,13,8b,f8,52,7d,af,ea,7c,42,f4,c1,a6,ad,2f,43,b3,ec,40,d3,99,24,2c,3,18 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\control.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\control.exe","1",0x00030001,\ 2,e8,e3,6,19,73,e6,6d,6f,56,b7,7e,74,db,6f,19 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\dataclen.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\dataclen.dll","1",0x00030001,\ 9a,8a,75,27,d9,1d,d0,41,40,f1,fa,e4,3b,39,41,7a,e0,a2,e7,6,c5,68,98,dc,b7,bd,24,10,15,bc,d7,15 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\desk.cpl","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\desk.cpl","1",0x00030001,\ a,c8,25,2d,82,37,ae,a4,31,b2,e3,4b,a3,9d,29,c,16,1e,9e,3d,bd,cc,ce,3c,2e,73,81,3f,f8,1f,d8,ac HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\deskadp.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\deskadp.dll","1",0x00030001,\ ce,c,80,46,b2,56,46,21,ed,f8,81,3e,c5,9d,d8,a,5,6c,4,1a,58,24,1d,7e,90,e1,97,ff,e0,69,4c,b5 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\deskmon.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\deskmon.dll","1",0x00030001,\ 11,2,cc,47,5d,76,b0,55,19,5f,23,8,b2,1a,57,ea,7d,bc,b8,7d,97,1d,28,22,48,c5,3f,7a,9d,2a,51,ae HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\deskperf.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\deskperf.dll","1",0x00030001,\ 8e,9e,45,8c,71,90,80,67,6b,b5,b0,b5,c0,22,ca,92,6e,c9,c3,8d,40,85,5c,6d,77,83,4f,2f,18,4f,72,75 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\explorer.exe","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\explorer.exe","1",0x00030001,\ a8,9e,2e,d0,61,23,1d,14,34,81,dc,3d,27,6c,eb,29,ec,f1,e6,10,2a,42,e8,b2,83,92,e9,6b,e3,a4,6c,74 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\fldrclnr.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\fldrclnr.dll","1",0x00030001,\ b8,58,79,f2,5c,aa,ea,e0,93,52,12,9,eb,19,1,5b,5,34,8e,62,f1,e0,6a,46,6b,f5,51,9e,fc,a8,76,fc HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\home_ss.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\home_ss.dll","1",0x00030001,\ b1,fc,89,21,fc,da,8d,16,d6,ac,99,5e,38,36,fe,df,ca,c6,59,6d,a8,d5,2,a3,2,bf,1e,d8,db,4d,d0,75 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\inetcpl.cpl","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\inetcpl.cpl","1",0x00030001,\ 43,df,d,c9,78,f7,ac,2,98,e,11,f6,62,63,6c,46,3f,8a,6e,67,e3,ae,cd,f9,30,89,2a,ee,7a,ae,5e,41 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\inetcplc.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\inetcplc.dll","1",0x00030001,\ a,2f,24,ad,8f,c5,d5,a,17,c0,fd,c9,67,ac,85,77,3e,a5,cb,8c,9,40,fb,ac,2d,37,55,91,fc,bf,ba,81 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\luna.mst","0",0x00030001,\ 01,00,00,00,00,00,01,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\luna.mst","1",0x00030001,\ 4f,eb,3,76,b3,d9,7,87,fc,c6,18,46,a9,ec,ac,10,6d,ec,81,2f,53,10,dc,95,5b,c1,7c,3,99,6e,f8,95 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\main.cpl","0",0x00030001,\ 01,00,63,09,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\main.cpl","1",0x00030001,\ 15,c0,49,9c,a2,10,c5,44,9d,f7,e7,6c,b3,6b,b9,fa,78,b2,55,9a,14,a5,5d,f8,9a,13,b3,2e,16,1a,14,af HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\metal_ss.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\metal_ss.dll","1",0x00030001,\ 5c,49,8c,6b,1a,75,d8,66,81,86,c7,d5,ab,2,f2,18,b8,f7,8e,35,a8,5e,b7,db,7c,ac,74,82,98,5c,5c,b2 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\nusrmgr.cpl","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\nusrmgr.cpl","1",0x00030001,\ 5b,56,c6,75,69,42,db,f8,cb,1a,7c,d,14,f0,85,7d,68,31,c5,a5,e,37,cb,94,71,77,84,9b,40,f4,b4,c7 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shell32.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shell32.dll","1",0x00030001,\ ff,fc,b4,fb,c9,81,68,fb,0,46,72,ff,a3,78,c9,57,56,e4,f3,9d,16,8a,87,d3,ab,ec,5f,37,c9,a9,c0,8c HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shlwapi.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shlwapi.dll","1",0x00030001,\ b6,3e,fc,7,d4,75,30,93,56,7b,db,be,54,c8,b3,40,47,c9,0,c7,7c,bd,2,1a,e6,35,37,70,4f,7f,be,af HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shsvcs.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shsvcs.dll","1",0x00030001,\ 7c,87,34,7,4e,b8,87,89,32,37,63,2c,b,92,16,b8 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sysdm.cpl","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sysdm.cpl","1",0x00030001,\ 48,1e,2a,33,de,44,3e,15,66,e3,32,b1,6e,4e,5d,8a,e4,1b,da,c5,eb,45,29,ca,61,d5,ad,d3,81,24,3e,df HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\taskmgr.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\taskmgr.exe","1",0x00030001,\ 3d,3a,51,7b,87,af,c1,57,68,b8,0,fe,f8,ea,69,ab,de,af,f7,6f,6e,e,84,68,50,64,71,45,be,cd,8d,bc HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\themeui.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\themeui.dll","1",0x00030001,\ db,5b,45,6a,4c,f6,5c,7a,de,55,7d,5b,d9,aa,b6,e9,1c,6,7,89,2f,8d,dd,3b,62,ee,7d,72,82,81,e5,60,24,4,AB,63,DC,3C,52,D8,3A,FC,6A,FC,27,4A,C0,33 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\timedate.cpl","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\timedate.cpl","1",0x00030001,\ f7,c7,f,66,87,9a,32,53,b7,47,14,4d,12,0,f5,c8,3c,dc,79,d1,a2,2a,3a,f5,99,66,d2,43,db,d2,56,51 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\uxtheme.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\uxtheme.dll","1",0x00030001,\ 32,a5,a2,87,50,54,e0,24,b3,b4,65,82,1c,71,15,b7,78,b7,51,cd,1f,6a,af,4f,60,36,fb,ab,8a,c5,83,a7 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\access.cpl","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\access.cpl","1",0x00030001,\ e8,32,d8,17,9f,7e,97,36,a,2,1,20,dc,91,cd,3e,af,7e,19,eb,be,41,66,1f,8d,f,86,d9,97,8c,bc,e8 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\accwiz.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\accwiz.exe","1",0x00030001,\ 39,f,ee,ac,ae,c6,aa,88,9a,8f,2a,6,4f,8c,fd,13,69,26,e5,6a,c1,ed,9f,1a,4,d2,31,df,a6,ac,18,b5 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\aclui.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\aclui.dll","1",0x00030001,\ 16,e3,1b,bf,d8,7d,3d,90,a,ab,e8,a4,61,ad,ea,a8,4d,83,42,4b,81,65,cb,f3,71,8e,c8,6b,db,85,71,33 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\batmeter.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\batmeter.dll","1",0x00030001,\ e5,b4,8b,31,bd,12,39,f1,77,1a,43,45,f5,30,52,5b,5c,85,89,58,38,9c,7,7c,1d,d4,89,66,20,76,70,fb HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\cabview.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\cabview.dll","1",0x00030001,\ fb,8b,81,0,45,6c,3b,a8,69,97,c2,16,7,41,ca,9c,ce,9d,8d,1a,fa,90,50,1c,e,39,c5,f6,9e,b1,e8,8e HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\calc.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\calc.exe","1",0x00030001,\ aa,9f,47,22,d,fe,48,f8,67,37,fa,11,dc,f9,6a,5e,28,8f,77,a6,f2,51,a8,15,2f,e7,8d,67,ca,c6,c7,b0 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\charmap.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\charmap.exe","1",0x00030001,\ 99,5b,c2,95,a0,43,67,66,19,77,60,2d,b3,bb,87,ad,f2,68,a4,b5,da,c,14,a5,6,18,df,f,f8,43,5f,3b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\cscui.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\cscui.dll","1",0x00030001,\ af,e6,a,a0,d6,97,21,5e,39,81,dc,f,fc,bb,48,c2,59,9,33,33,32,5,57,49,66,34,9d,4f,e4,89,5,1 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\diskcopy.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\diskcopy.dll","1",0x00030001,\ 5a,d9,ff,a,de,fc,9e,90,a5,b8,c,9e,91,66,ed,fb,1e,61,5c,95,53,e1,58,d9,c6,ba,d9,d0,5b,7b,e4,bb HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\docprop.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\docprop.dll","1",0x00030001,\ ff,b8,93,33,4a,36,e0,e8,bc,9f,bf,8f,ba,37,b3,d7,4e,4a,e1,b7,18,a1,96,e1,fd,e4,e0,5,15,5,9a,ef HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\docprop2.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\docprop2.dll","1",0x00030001,\ 33,b,57,e2,d9,70,60,ac,b4,ba,77,2f,13,12,cd,97,2e,48,ba,5b,81,96,78,e4,c9,9d,c5,71,7a,f3,88,8b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\eudcedit.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\eudcedit.exe","1",0x00030001,\ ec,ce,7d,31,ec,1e,83,b1,ad,bd,9f,c0,c3,79,62,25,7d,ae,b3,d7,bf,8,2d,bf,12,60,16,29,77,ae,8,89 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\freecell.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\freecell.exe","1",0x00030001,\ 7b,7a,7,5d,6c,57,69,c2,1d,6a,9e,7,4b,10,26,5,2f,40,1b,ac,e7,e7,57,10,2c,f8,ad,a5,e,53,5a,77 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\hdwwiz.cpl","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\hdwwiz.cpl","1",0x00030001,\ 1b,2c,20,3,1b,6b,d,23,92,f2,39,82,e0,c0,22,16,e6,75,8,68,be,62,b1,10,2f,e7,57,be,2e,55,c1,9c HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\hnetwiz.dll","0",0x00030001,\ 01,00,b8,08,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\hnetwiz.dll","1",0x00030001,\ 76,81,35,17,92,ac,25,2d,57,99,78,56,2e,31,8f,b7,91,2a,c3,da,8,3c,df,6c,5d,28,8b,a8,e0,c7,49,17 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\hotplug.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\hotplug.dll","1",0x00030001,\ 6a,bc,d8,d9,b4,df,ba,5e,d5,8c,2f,5c,52,d5,fb,78,4,16,55,fa,65,27,1f,1a,fd,98,c,81,e9,5f,ec,1b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\input.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\input.dll","1",0x00030001,\ c4,2a,15,5,6c,b7,ca,fb,f6,1e,d2,9a,30,f4,bc,4d,84,13,63,82,da,66,cb,b3,62,e,47,57,f7,c7,2f,e8 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\intl.cpl","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\intl.cpl","1",0x00030001,\ 56,e5,d,7,98,6b,2e,8c,b0,82,7e,25,9e,3,1b,81,28,c8,79,bd,6a,52,bc,e,cc,24,26,2a,f1,e0,63,c0 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\logon.scr","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\logon.scr","1",0x00030001,\ 49,1b,ca,83,c0,96,13,66,22,b6,6d,66,e,2d,9a,75,44,25,a,1d,df,32,d8,55,50,ec,8b,10,e3,29,a,6 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\logonui.exe","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\logonui.exe","1",0x00030001,\ 8,86,33,56,39,5c,53,be,15,e7,60,a0,48,9c,23,9a,4f,c,ff,a7,ec,90,ba,fb,53,93,60,21,7e,75,b2,5b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\magnify.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\magnify.exe","1",0x00030001,\ 13,ed,67,df,82,7d,bb,d0,d2,81,15,b2,75,70,45,9d,95,54,3b,19,e3,d,9f,11,cb,7d,b1,85,c5,f5,4d,3b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mlang.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mlang.dll","1",0x00030001,\ 70,ac,b2,88,74,64,82,67,a,c3,28,c5,3f,fb,58,54 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mmsys.cpl","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mmsys.cpl","1",0x00030001,\ 78,3e,8d,e5,9e,5c,fc,dd,ff,1b,f3,2,c8,d5,25,f,6d,35,5c,74,5e,28,8f,b4,94,a4,a0,c1,89,cb,29,2a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mshearts.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mshearts.exe","1",0x00030001,\ 64,c9,bc,7c,87,c1,b9,2,77,2f,7d,ce,fe,3a,15,3d,5e,2,5,f3,80,4a,58,28,9d,27,8c,cc,dd,ed,8e,88 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msidntld.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msidntld.dll","1",0x00030001,\ 6f,d9,62,a2,a8,f3,7d,f9,b1,64,ff,6d,6,f6,38,5b,3c,39,d4,6d,45,53,95,42,69,45,67,fb,38,fa,34,1b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msieftp.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msieftp.dll","1",0x00030001,\ 57,97,83,e6,66,7f,a8,4b,90,33,96,2,28,18,21,13,18,aa,a,c5,d0,ac,2f,e,bf,c6,74,c3,1c,55,b,87 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mspaint.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mspaint.exe","1",0x00030001,\ 33,e9,ce,84,a1,85,62,62,b6,1d,f3,6,5a,e3,b5,aa,7c,4c,66,97,d5,de,64,83,15,3c,8c,60,d4,cb,11,bd HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msports.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msports.dll","1",0x00030001,\ 72,d6,78,e0,c6,8,6b,d6,69,cb,f,48,85,67,74,22,59,9e,a2,1c,12,ea,72,a,97,20,f9,61,49,93,ca,a0 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mydocs.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mydocs.dll","1",0x00030001,\ df,13,3e,96,ed,26,67,22,7,2b,32,ac,26,1c,11,83,b6,4a,4e,a0,72,bf,9c,c1,af,ce,ef,90,d0,b6,fb,8a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\netplwiz.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\netplwiz.dll","1",0x00030001,\ 77,cf,97,4b,d5,e9,87,ab,de,d,43,f7,ec,cb,b1,c9,9a,30,91,e,9a,23,cb,47,32,91,20,7e,ba,bb,4e,1e HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\newdev.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\newdev.dll","1",0x00030001,\ e8,bd,e2,a0,dc,cc,ee,83,75,7f,46,96,1c,27,1a,29,b0,a3,56,c5,a9,63,2d,6c,fd,25,9d,ae,4e,2b,71,8a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\notepad.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\notepad.exe","1",0x00030001,\ 39,2a,3,dc,d3,d9,6f,2a,7c,58,9d,48,34,d3,d5,99,8d,13,c7,7f,2d,f3,f,af,a7,e7,32,14,c,cc,f7,da HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ntlanui2.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ntlanui2.dll","1",0x00030001,\ 81,20,bf,78,f3,0,d8,2f,bf,10,85,74,90,1e,1c,66,4b,d8,b7,a3,d1,61,b3,39,b6,9d,ec,e8,97,14,5a,f8 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ntshrui.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ntshrui.dll","1",0x00030001,\ b0,6f,3e,7a,74,c2,6e,7a,1a,fb,a0,3,d9,dc,a,d4,1,c7,8a,42,23,16,1a,7,cb,c0,7b,ce,8e,87,e6,c3 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\occache.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\occache.dll","1",0x00030001,\ 3a,9,80,e3,83,a6,67,34,c8,54,9d,7e,93,f4,cb,26,3e,b2,30,96,23,9c,d1,f7,a9,28,2d,39,ed,e1,e1,e3 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\osk.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\osk.exe","1",0x00030001,\ ce,60,ee,c7,4,c2,8b,f3,d5,f7,bb,88,1,b7,5b,10,75,59,71,12,47,c,ec,c3,a3,db,0,88,67,66,ae,73 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\powercfg.cpl","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\powercfg.cpl","1",0x00030001,\ 5,d1,5c,ec,84,42,6,42,a2,87,23,62,1e,b7,3e,fb,be,43,e4,cd,a3,d2,9c,85,76,b4,60,e1,b2,1d,d0,c4 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\rshx32.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\rshx32.dll","1",0x00030001,\ 7f,d7,d3,d0,ca,4f,6d,2,de,5e,19,8d,e9,78,b6,fc HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sendmail.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sendmail.dll","1",0x00030001,\ 1b,19,58,c6,f9,e2,69,1c,0,5e,ac,39,ed,51,34,80,ab,c2,26,73,4c,2b,ee,11,74,89,22,50,40,80,f4,37 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shimgvw.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shimgvw.dll","1",0x00030001,\ 9b,b3,83,9c,7d,36,4,92,3,5b,fa,99,dc,f9,cd,8a,be,2a,a3,8f,9e,7b,2f,5,d7,3a,e2,32,f5,c,1e,37 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shmedia.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shmedia.dll","1",0x00030001,\ 3,2e,30,e1,f6,6,89,ee,e7,3a,cc,99,25,13,72,6d HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shscrap.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shscrap.dll","1",0x00030001,\ 43,65,db,9b,f,aa,0,80,de,c,f8,ee,e8,a4,d6,b7,6a,12,f7,1f,be,ed,20,d0,44,70,40,c5,59,91,d1,b6 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sol.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sol.exe","1",0x00030001,\ 97,de,72,58,26,88,a6,d6,6b,93,95,ab,ee,16,7e,32,33,79,c8,c1,1e,a7,73,cb,18,67,91,28,9b,86,9c,5c HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\spider.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\spider.exe","1",0x00030001,\ af,2e,5b,b5,55,cc,94,c7,44,27,e0,54,47,86,e6,8,88,2f,b2,c8,c3,5f,7b,75,ad,b8,f7,1c,2f,a2,7d,de HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssbezier.scr","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssbezier.scr","1",0x00030001,\ cc,f,91,30,1a,72,e8,9b,57,d1,4d,45,8b,67,b4,19,c3,f2,23,97,a,d5,73,6a,ce,c0,ef,47,f0,5d,3d,86 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssmarque.scr","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssmarque.scr","1",0x00030001,\ 9c,30,32,77,ae,e7,f3,68,a0,a5,d0,9e,d4,b4,19,4f,72,b0,ac,c8,de,9a,9f,b5,81,50,51,6f,aa,9e,98,5c HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssmyst.scr","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssmyst.scr","1",0x00030001,\ ba,1c,a4,2d,61,a1,ce,75,d6,b6,57,e,12,10,6f,74,38,7,60,8f,d,ad,a6,ec,be,9e,2c,8a,5b,35,0,9f HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sspipes.scr","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sspipes.scr","1",0x00030001,\ a4,39,b7,b3,53,60,86,13,8e,25,72,f4,2c,b4,61,3e,8c,df,4,60,f3,7a,47,bf,e,16,a9,5e,e2,6b,29,1a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssstars.scr","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssstars.scr","1",0x00030001,\ d,2d,ec,a,ba,58,58,d,47,6,e9,8f,bb,73,84,73,62,3c,68,80,b4,ed,96,17,57,56,8,63,b4,52,95,74 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\stobject.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\stobject.dll","1",0x00030001,\ c5,93,2,51,da,1,71,f1,36,2a,60,d1,68,96,66,72,8e,af,73,f3,8,5a,37,8c,93,f5,5d,86,e1,b9,80,5c HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\syncui.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\syncui.dll","1",0x00030001,\ fa,e4,97,5e,c,70,83,50,7,b9,cb,95,3d,3,61,95,28,ea,ef,66,bc,c9,3b,63,dc,77,19,d0,c9,8f,92,f2 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sysinv.dll","0",0x00030001,\ e0,07,00,00,0a,00,04,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sysinv.dll","1",0x00030001,\ 86,c7,2d,59,50,f3,51,35,bb,17,bc,e9,c,bc,91,55 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\taskman.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\taskman.exe","1",0x00030001,\ c2,b6,e8,9,c4,8c,13,e1,a4,8d,89,16,be,f8,7e,26 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\umandlg.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\umandlg.dll","1",0x00030001,\ 7e,e5,c3,38,14,f1,ba,dc,3d,c9,a1,5d,4a,a,4f,76 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\url.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\url.dll","1",0x00030001,\ 9d,1d,0,ee,50,dc,c1,e8,fa,1c,e7,28,2a,86,32,90,d1,8,96,ac,15,c1,41,9b,bb,8f,6c,51,7e,d9,cc,14 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\utilman.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\utilman.exe","1",0x00030001,\ 75,39,51,12,73,e7,77,d9,2f,da,e5,57,ac,3,b1,3a,d4,11,6e,f2,90,2d,26,99,d4,1a,32,6e,b8,47,c3,fd HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\webcheck.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\webcheck.dll","1",0x00030001,\ 2b,fd,dc,af,ab,ff,ca,d7,48,c4,78,6d,d8,b0,fa,8b,a1,36,40,18,62,52,53,de,f9,72,8c,53,e5,c6,eb,bb,11,77,B3,1B,18,93,7A,DD,11,C9,65,51,BF,FB,EC,AF HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\webvw.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\webvw.dll","1",0x00030001,\ c7,d6,9f,42,52,59,a1,78,f,b1,be,f0,b7,fe,fb,71 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\winmine.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\winmine.exe","1",0x00030001,\ 29,a8,32,75,9a,9,fc,b,12,6a,c,38,53,20,c5,8a,ec,cb,68,e1,33,10,66,35,1a,57,45,96,9f,93,3e,d5 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wordpad.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wordpad.exe","1",0x00030001,\ 61,c9,ce,92,c2,64,fd,f,62,ac,92,d9,cb,b7,4c,b7,e8,7d,d5,e9,e9,75,8c,79,e4,68,b5,e3,53,c7,25,f8 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\zipfldr.dll","0",0x00030001,\ 52,04,f0,0a,00,00,06,00,00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\zipfldr.dll","1",0x00030001,\ f6,1f,ac,63,8b,34,cf,a2,31,6f,d6,52,19,10,4f,58,8b,cf,94,a7,86,4b,62,40,cf,5f,e3,51,ee,5f,6b,85 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shdoclc.dll","0",0x00030001,\ 00,00,28,0a,00,00,06,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\shdoclc.dll","1",0x00030001,\ b0,76,d8,4d,bf,b7,9b,93,2c,f,b7,3d,90,cf,bb,1b,9b,e5,8b,d3,bc,52,7c,d6,e9,a9,91,29,6b,6e,7a,8c HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\compstui.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\compstui.dll","1",0x00030001,\ 69,7e,7d,3a,23,5a,eb,ca,12,3,b,46,2d,eb,d0,a9,ac,8b,ad,41,fc,1a,68,0,dd,a2,a9,18,c9,9a,8b,db HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\credui.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\credui.dll","1",0x00030001,\ 1,33,25,57,fd,16,a2,f9,59,a7,2f,f6,58,4c,b5,a5,12,fd,1d,a1,80,fd,fc,4a,a6,e3,73,48,9f,45,c1,7f HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\dfrgres.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\dfrgres.dll","1",0x00030001,\ 83,e1,7d,ff,9d,7d,d9,ad,9f,ba,51,1,39,f9,3,ba,aa,f1,a5,1d,cf,43,4f,ff,7b,9f,8a,fc,a4,4,6a,36 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\icmui.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\icmui.dll","1",0x00030001,\ 28,2c,ab,e9,f,55,c1,d8,26,67,a6,6b,40,61,4f,5b,36,b1,6c,5b,79,66,81,d5,4,3c,b1,33,20,64,56,b HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\keymgr.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\keymgr.dll","1",0x00030001,\ 1f,92,c1,89,c1,d9,b5,fe,ce,bf,27,bb,ae,32,f,5a,e5,88,72,a4,ce,9b,e4,1b,2c,28,ef,1c,a,42,58,cd HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\licdll.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\licdll.dll","1",0x00030001,\ 83,d,b1,6b,e4,e6,3c,ce,66,5,e7,69,ff,3c,58,4e HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\migwiz.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\migwiz.exe","1",0x00030001,\ 9f,6b,36,8a,f1,d6,8,89,2f,4,8e,d0,37,e1,9,21,d0,6a,af,76,b8,8d,70,d3,a,88,53,3a,f7,49,58,d0 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mobsync.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mobsync.dll","1",0x00030001,\ f5,45,e8,e2,f9,3f,7c,54,d2,85,a,58,73,5,d3,b6,6c,6a,66,35,1,a7,5,c7,cc,46,e7,18,23,ba,63,a8 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mobsync.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\mobsync.exe","1",0x00030001,\ 28,2c,5,5e,43,ea,ec,1a,cd,5a,a,1a,7c,20,b,55,f0,9b,e7,48,f,3e,3e,3c,bc,cf,e6,93,c3,64,da,2 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msgina.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\msgina.dll","1",0x00030001,\ 69,e8,db,b8,bb,58,7c,40,4,9b,21,9a,47,79,2c,12,6c,5f,bc,53,e8,e9,62,55,a2,38,ed,1a,3f,6,99,c2 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ntbackup.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ntbackup.exe","1",0x00030001,\ 1b,43,1e,cf,3a,c7,58,a3,24,63,4a,56,ef,25,66,c7,d1,9d,12,70,72,d5,6,5,bb,81,99,f5,e1,99,a3,a3 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\oledlg.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\oledlg.dll","1",0x00030001,\ f4,1d,26,97,5a,5e,f8,68,6e,79,7a,a0,da,33,3,81,97,56,fa,f5,54,b2,47,ce,ee,e3,42,c1,81,c9,25,63 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\photowiz.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\photowiz.dll","1",0x00030001,\ 53,5d,91,45,73,76,ad,e6,47,1,33,41,a8,4d,c1,3a,62,63,72,79,8e,0,3d,70,7a,4d,5e,fa,8a,4c,6f,fd HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\printui.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\printui.dll","1",0x00030001,\ f7,1d,1e,51,63,84,7c,6,ff,6c,7a,e3,52,f3,4e,24,f2,54,5f,7f,92,bd,df,8f,25,53,9b,c6,dc,84,77,c6 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sigtab.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sigtab.dll","1",0x00030001,\ da,a6,2,fd,79,3d,42,3b,cc,73,c9,8c,25,68,bf,31 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\slayerxp.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\slayerxp.dll","1",0x00030001,\ af,18,da,bd,c9,e8,f1,ca,27,9,2b,51,b9,dd,51,b8 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssmypics.scr","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\ssmypics.scr","1",0x00030001,\ 68,f3,6a,9e,96,af,e5,2c,97,b9,7,ac,da,37,99,8d,4d,12,c6,f0,d3,ac,51,ef,fd,74,93,de,45,f0,af,cd HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sti_ci.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\sti_ci.dll","1",0x00030001,\ 0,3a,bf,d5,bd,ba,fb,b4,a0,44,2d,dd,56,42,65,10,f7,3,f2,c6,80,b8,8e,25,b,95,b6,74,6f,f3,ef,80 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\user32.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\user32.dll","1",0x00030001,\ e,74,56,24,8c,da,2b,f8,b6,34,5a,5d,ff,dc,9f,5d,56,d1,4e,d4,14,8d,14,93,1b,46,d8,32,ce,b,9e,65 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\userenv.dll","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\userenv.dll","1",0x00030001,\ 4e,25,7d,8,c,36,1d,f1,d2,63,39,fb,2c,56,1d,6b,95,2b,a1,fc,8f,60,25,7e,6,ae,8b,88,62,9b,73,bc HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wiashext.dll","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wiashext.dll","1",0x00030001,\ 80,2f,83,19,92,89,98,66,7b,9b,da,20,8,e8,cf,b0,ce,6e,99,4e,f1,49,49,7f,a2,7d,8b,6a,23,2b,7a,1a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\winlogon.exe","0",0x00030001,\ 52,04,28,0a,01,00,05,00,00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\winlogon.exe","1",0x00030001,\ 13,9e,ea,f1,7b,df,0,7c,c,b1,8,6b,69,e1,56,20,73,57,81,90,43,fe,dd,fd,28,4f,fb,49,f8,e3,57,a1 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wintrust.dll","0",0x00030001,\ 00,00,28,0a,83,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wintrust.dll","1",0x00030001,\ c4,2,e9,2e,a9,f5,38,44,9,cd,d,89,51,fb,94,72,48,8d,76,e2,11,f5,e8,d6,4a,e4,b,64,d4,3f,59,3a HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wpabaln.exe","0",0x00030001,\ 00,00,28,0a,01,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wpabaln.exe","1",0x00030001,\ a,96,0,c7,c7,e,67,a9,b5,78,66,ce,58,88,10,af,a8,6c,47,e1,5d,c1,d,ec,72,49,e2,b2,f5,c8,99,fb HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\comctl32.dll","0",0x00030001,\ 52,04,f0,0a,52,00,05,00,00,00,28,0a,52,00,05,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\comctl32.dll","1",0x00030001,\ 6a,c1,eb,ef,7d,78,87,5c,13,8c,6d,f7,7c,c2,da,87 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wmploc.dll","0",0x00030001,\ 87,11,00,00,00,00,08,00,7d,11,00,00,00,00,08,00,04,ba,00,00,00,00,09,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wmploc.dll","1",0x00030001,\ df,d9,37,fc,50,c3,a1,74,96,c8,50,e4,52,ef,c7,9c,98,7a,cb,bf,18,bc,c,5e,e1,b4,58,95,fe,1e,6f,47,92,e8,b,9e,9c,d3,11,12,ec,20,e8,d8,dd,c0,f5,30,35,be,fd,8b,80,42,3b,50,3c,bb,7e,7a,f2,46,c9,c9,97,BF,57,E3,EF,49,B1,16,1D,DB,7C,F3,32,26,E5,3E HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wmpshell.dll","0",0x00030001,\ 87,11,00,00,00,00,08,00,7d,11,00,00,00,00,08,00,04,ba,00,00,00,00,09,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wmpshell.dll","1",0x00030001,\ bb,65,88,92,13,1,8d,70,37,90,7a,79,9b,6c,49,4f,bb,65,88,92,13,1,8d,70,37,90,7a,79,9b,6c,49,4f,b5,ef,0,d4,31,f7,89,ee,b8,98,75,26,9e,11,19,9e HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wmm2res.dll","0",0x00030001,\ 00,00,f0,0c,00,00,02,00 HKLM,"SYSTEM\CurrentControlSet\Control\Nls\MUILanguages\RCV2\wmm2res.dll","1",0x00030001,\ f7,f6,f3,33,5d,3f,9,ce,10,66,95,4a,8c,98,9a,6d,ac,54,20,da,ce,9b,24,de,90,66,5d,21,4e,b,db,c8 [Strings] ; ; Key Descriptors ; NTVDM_WOWCMD="%SystemRoot%\system32\ntvdm.exe" TIMEZONEINFO_BIAS=0xffffffc4 ; ; Key Descriptors ; AFD_SERVICE_DESCRIPTION="Entorno de compatibilidad de funciones de red AFD" APPLICATION_MANAGEMENT="Administración de aplicaciones" APPLICATION_MANAGEMENT_DESCRIPTION="Ofrece servicios de instalación de software como Asignar, Publicar y Quitar." AUDIOSRV_DESCRIPTION="Administra dispositivos de audio para programas basados en Windows. Si se detiene este servicio, los dispositivos de audio y efectos no funcionarán correctamente. Si se deshabilita este servicio, cualquier servicio que dependa explícitamente de él tendrá un error al iniciar." AUDIOSRV_DISPLAYNAME="Audio de Windows" CLIPBOOK_SERVER="Portafolios" CLIPBOOK_SERVER_DESCRIPTION="Habilita el Visor del Portafolios para almacenar información y compartirla con equipos remotos. Si se detiene el servicio, el Visor del Portafolios no podrá compartir información con los equipos remotos. Si se deshabilita este servicio, cualquier servicio que explícitamente dependa de él no podrá iniciarse." CRYPTSVC_DISPLAYNAME = "Servicios de cifrado" CRYPTSVC_DESCRIPTION = "Proporciona tres servicios de administración: Servicio de catálogo de base de datos, que confirma las firmas de archivos de Windows; Servicio de raíz protegida, que agrega y quita certificados de entidades emisoras de raíz de confianza de este equipo; y el Servicio de claves, que ayuda a inscribir este equipo a certificados. Si se detiene este servicio, sus servicios de administración mencionados no funcionarán correctamente. Si se deshabilita este servicio, no se podrán iniciar ninguno de los servicios que dependen explícitamente de él." ERSVC="Servicio de informe de errores" ERSVC_DESCRIPTION="Permite informar de errores para servicios y aplicaciones que se ejecutan en entornos no estándar." EVENTLOG="Registro de sucesos" EVENTLOG_DESCRIPTION="Habilita mensajes de registro de sucesos emitidos por programas basados en Windows y componentes para que se vean en Visor de sucesos. Este servicio no se puede detener. " EVENTSYSTEM_SERVICE="Sistema de sucesos COM+" HID_KEYBOARD_PORT_DRIVER="Controlador del puerto de teclado HID" HID_MOUSE_PORT_DRIVER="Controlador del puerto de mouse HID" THRUSTMASTER_1="Sistema de control de vuelo Thrustmaster" THRUSTMASTER_TOPGUNPLATINUM="ThrustMaster TOP GUN Platinum" LOGITECH_WINMANEXTREME="Logitech WingMan Extreme" HIDGAME_DFTDEV0="Volante con pedales de eje de timón" HIDGAME_DFTDEV1="Joystick de cuatro botones con POV" HIDGAME_DFTDEV2="Joystick de cuatro botones con POV y acelerador" HIDGAME_DFTDEV3="Joystick de seis botones con POV" HIDGAME_DFTDEV4="Joystick de seis botones con POV y acelerador" HIDGAME_DFTDEV5="Joystick de seis botones con dos POV" HIDGAME_DFTDEV6="Joystick de seis botones con dos POV y acelerador" HIDGAME_DFTDEV7="Mando de vuelo de seis botones con dos POV" HIDGAME_DFTDEV8="Mando de vuelo de seis botones con dos POV y acelerador" HIDGAME_DFTDEV9="Controlador para juegos de seis botones" HIDGAME_DFTDEVA="Controlador para juegos de cinco botones con acelerador" HIDGAME_DFTDEVB="Joystick de seis botones" HIDGAME_DFTDEVC="Joystick de cinco botones con acelerador" HIDGAME_DFTDEVD="Joystick de cinco botones con POV" HIDSERV="Acceso a dispositivo de interfaz humana" HIDSERV_DESCRIPTION="Habilita el acceso de entrada genérico a los Dispositivos de interfaz humana (HID), que activa y mantiene el uso de botones de acceso directo predefinidos en los teclados, controles remotos y otros dispositivos multimedia. Si este servicio se detiene, los botones de acceso directo controlados por este servicio dejarán de funcionar. Si este servicio está deshabilitado, cualquier servicio que explícitamente dependa de él no podrá iniciarse." HP_DESCRIPTOR = "Biblioteca de etiquetas de medios de HP" HTTP="HTTP" HTTP_DESCRIPTION="Este servicio implementa el protocolo de transferencia de hipertexto (HTTP). Si se deshabilita este servicio, no se podrá iniciar ningún servicio que dependa explícitamente de él." HTTPFILTER="HTTP SSL" HTTPFILTER_DESCRIPTION="Este servicio implementa el protocolo de transferencia de hipertexto seguro (HTTPS), usando la Capa de sockets seguros (SSL). Si se deshabilita este servicio, no se podrá iniciar ningún servicio que dependa explícitamente de él." IASJET_SERVICE = "Acceso a base de datos IAS Jet" IASJET_SERVICE_DESCRIPTION = "Acceso a base de datos IAS Jet" INSTALL_LANGUAGE="0C0A" INTERSITE_MESSAGING_DESCRIPTION="Permite enviar recibir mensajes entre sitios de Windows Server." INTERSITE_MESSAGING_SERVICE="Mensajería interna" IPNAT_DRIVER_DESCRIPTION = "Traductor de direcciones de red IP" KERBEROS_KEY_DISTRIBUTION_CENTER="Centro de distribución de claves Kerberos" KERBEROS_KEY_DISTRIBUTION_CENTER_DESCRIPTION="Genera claves de sesión y otorga boletos de servicio para la autenticación mutua de clientes y servidores." LANMAN_PRINT_SERVICES="Servicios de impresión LanMan" LANMAN_WORKSTATION_DESCRIPTION="Ofrece conexiones y comunicaciones de red" LANMAN_WORKSTATION_DISPLAY="Estación de trabajo" LOGITECH_WGMEXTRMDGTLAUTO="Dispositivos digitales Logitech WingMan (detección automática)" MICROSOFT_NDIS_SYSTEM_DRIVER="Controlador de sistema NDIS" MODEM="Módem" MRXDAV_DESCRIPTION="El Redirector WebDav permite a las aplicaciones de Win32 tener E/S de archivo remoto en Internet" MRXDAV_DISPLAY="Redirector de cliente WebDav" MSI_SERVICE_DESCRIPTION="Instala, repara y quita software de acuerdo con las instrucciones contenidas en archivos .MSI." MTF_DESCRIPTOR = "Bibliotecas de etiquetas de medios MTF (Microsoft Tape Format)" MUP="Mup" NDIS_PROXY="Proxy NDIS" NETDETECT="NetDetect" NETMAN_NAME="Conexiones de red" NETMAN_DESCRIPTION="Administra objetos en la carpeta Conexiones de red y acceso telefónico, donde se pueden ver conexiones de red de área local y remotas." NETWORK_ADAPTERS="Adaptadores de red" NETWORK_ADAPTERS2="Adaptadores de red" NETWORK_CLIENT="Cliente de red" NETWORK_DDE_DSDM="DSDM de DDE de red" NETWORK_DDE_DSDM_DESCRIPTION="Administra los recursos de red Intercambio dinámico de datos (DDE). Si este servicio se detiene, se deshabilitarán los recursos compartidos de red DDE. Si este servicio está deshabilitado, cualquier servicio que explícitamente dependa de él no podrá iniciarse." NETWORK_DDE="DDE de red" NETWORK_DDE_DESCRIPTION="Ofrece transporte y seguridad en la red para el Intercambio dinámico de datos (DDE) para los programas que se ejecutan en el mismo equipo o en diferentes equipos. Si este servicio se detiene, se deshabilitarán el transporte y la seguridad DDE. Si este servicio está deshabilitado, cualquier servicio que explícitamente dependa de él no podrá iniciarse." NETWORK_PROTOCOL="Protocolo de red" NETWORK_SERVICE="Servicio de red" NEW_HARDWARE_PROFILE="Nuevo perfil de hardware" NTFR_DESCRIPTION="Permite que los archivos se copien automáticamente y se mantengan simultáneamente en servidores múltiples. Si este servicio se detiene, no ocurrirá la duplicación de archivos y, los servidores no se sincronizarán. Si este servicio está deshabilitado, cualquier servicio que explícitamente dependa de él no podrá iniciarse." NTFR_SERVICE_NAME="Réplica de archivos" NTGRIP_BHK="Gravis BlackHawk Digital (GamePort)" NTGRIP_GPP="Gravis GamePad Pro (GamePort)" NTGRIP_XDC="Gravis Xterminator Dual Control (GamePort)" NTGRIP_XDGP="Gravis Xterminator Digital Gamepad (GamePort)" NTGRIP_ZEBRA="Gravis Eliminator Precision Pro (GamePort)" PCPROPAD6="InterAct ProPad6" PLUG_AND_PLAY="Plug and Play" PLUG_AND_PLAY_DESCRIPTION="Habilita un equipo para que reconozca y adapte los cambios de hardware con el menor esfuerzo por parte del usuario. Si se detiene o deshabilita este servicio, el sistema se volverá inestable. " PROTECTEDSTORAGE_DISPLAYNAME = "Almacenamiento protegido" PROTECTEDSTORAGE_DESCRIPTION = "Ofrece almacenamiento protegido para datos importantes, como claves privadas, para impedir el acceso de servicios, procesos o usuarios no autorizados." QIC_DESCRIPTOR = "Biblioteca de etiquetas de medios QIC (formato QIC113)" REGISTRY_SERVER="Servidor del Registro" REGSVC_DESCRIPTION="Habilita usuarios remotos para que modifiquen la configuración del Registro en este equipo. Si se detiene este servicio, cualquier usuario en este equipo puede modificar el Registro. Si este servicio está deshabilitado, cualquier servicio que explícitamente dependa de él no podrá iniciarse." REGSVC_SERVICE="Registro remoto" REMOTE_PROCEDURE_CALL_LAUNCHER_DESCRIPTION="Ofrece el inicio de funcionalidad para los servicios DCOM." REMOTE_PROCEDURE_CALL_LAUNCHER_SERVICE="Iniciador de procesos de servidor DCOM" REMOTE_PROCEDURE_CALL_RPC_SERVICE="Llamada a procedimiento remoto (RPC)" REMOTE_PROCEDURE_CALL_RPC_DESCRIPTION="Ofrece el asignador de punto final y otros servicios RPC diversos." RSOP_SERVICE="Conjunto resultante de proveedor de directivas" RSOP_SERVICE_DESCRIPTION="Servicio de acceso de datos de directivas de grupos para el conjunto resultante de directivas" SCESRV_DISPLAYNAME = "Configuración y análisis de seguridad" SCESRV_DESCRIPTION = "Configura la seguridad del sistema; el servicio de motor es la parte principal del conjunto de herramientas de configuración de seguridad." SECLOGON_DESCRIPTION="Habilita los procesos de inicio en credenciales alternas. Si se detiene este servicio, se deshabilitará este tipo de acceso de inicio de sesión. Si este servicio está deshabilitado, cualquier servicio que explícitamente dependa de él no podrá iniciarse." SECLOGON_SERVICE="Inicio de sesión secundario" SECURITY_ACCOUNTS_MANAGER_SERVICE="Administrador de cuentas de seguridad" SECURITY_ACCOUNTS_MANAGER_DESCRIPTION="Almacena información de seguridad de cuentas de usuario locales." SECURITY_CENTER_DISPLAYNAME="Centro de seguridad" SECURITY_CENTER_DESCRIPTION="Supervisa las configuraciones de seguridad del sistema." SENS_SERVICE="Notificación de sucesos del sistema" SENS_DESCRIPTION="Registra sucesos del sistema como los de inicio de sesión en Windows, red y energía, y los notifica a los suscriptores de sucesos del sistema COM+." SHAREDACCESS_SERVICE_NAME = "Firewall de Windows/Conexión compartida a Internet (ICS)" SHAREDACCESS_SERVICE_DESCRIPTION = "Ofrece servicios de traducción de direcciones, direccionamiento, resolución de nombres y/o servicios de prevención de intrusión para una red doméstica o de pequeña empresa." Svc-ALG-Description = "Proporciona compatibilidad para complementos de protocolo de terceros para Conexión compartida a Internet y para Firewall de Windows." SIDEWINDER_OEMNAME="Microsoft SideWinder (detección automática)" SIDEWINDER_SW3DPRO="Microsoft SideWinder 3D Pro" SIDEWINDER_SWGPAD="Microsoft SideWinder Game Pad" SIDEWINDER_PRECISIONPRO="Microsoft SideWinder Precision Pro" SIDEWINDER_FORCEFEEDBACKPRO="Microsoft Sidewinder Force Feedback Pro" SIDEWINDER_FREESTYLEPRO="Microsoft SideWinder Freestyle Pro" SIDEWINDER_FORCEFEEDBACKWHEEL="Microsoft SideWinder Force Feedback con rueda" SMARTCARD_DRV_SUPPORT="Sistema de ayuda de tarjeta inteligente" SMARTCARD_DRV_SUPPORT_DESCRIPTION="Ofrece compatibilidad con tarjetas lectoras de tarjetas inteligentes heredadas (no plug and play) usadas por el equipo. Si este servicio se detiene, el equipo no será compatible con la tarjeta lectora heredada. Si este servicio está deshabilitado, cualquier servicio que explícitamente dependa de él no podrá iniciarse. " SMARTCARD_RESOURCE_MANAGER="Tarjeta inteligente" SMARTCARD_RESOURCE_MANAGER_DESCRIPTION="Administra el acceso a una tarjeta inteligente de la el equipo hace lectura. Si este servicio se detiene, el equipo no podrá leer las tarjetas inteligentes. Si este servicio está deshabilitado, cualquier servicio que explícitamente dependa de él no podrá iniciarse." SPOOLER_DISPLAYNAME="Cola de impresión" SPOOLER_DESCRIPTION="Carga archivos en la memoria para imprimirlos después." SYSMONLOG_DESCRIPTION="Recopila información de rendimiento de equipos locales o remotos de acuerdo a parámetros de programación configurados previamente, luego guarda la información en un registro o emite una alerta. Si se detiene el servicio, no se recopilará la información de rendimiento. Si se deshabilita el servicio, no se podrá iniciar ninguno de los servicios que dependan explícitamente de él." SYSMONLOG="Registros y alertas de rendimiento" TELEPHONY_SERVICE="Telefonía" TELEPHONY_SERVICE_DESCRIPTION="Ofrece compatibilidad con la API de telefonía (TAPI) para programas que controlan dispositivos de telefonía y conexiones de voz basadas en IP en el equipo local y, a través de la LAN, en servidores que utilizan también el servicio." TELNET_DISPLAYNAME="Telnet" TELNET_DESCRIPTION="Permite a un usuario remoto iniciar sesión en el sistema y ejecutar programas de consola utilizando la línea de comandos." TMT1_NOADAPT="Thrustmaster Formula T1/T2 sin adaptador" TMT1_ADAPT="Thrustmaster Formula T1/T2 con adaptador" TRACK_SERVICE="Cliente de seguimiento de vinculos distribuidos" TRACK_DESCRIPTION="Mantiene vínculos entre archivos NTFS dentro de un equipo o entre equipos en un dominio de red." TRACT_SERVER_SERVICE="Servidor de seguimiento de vínculos distribuidos" TRACT_SERVER_DESCRIPTION="Almacena información de modo que los archivos movidos entre volúmenes se puedan controlar en cada volumen del dominio." UNKNOWN="Otros dispositivos" UPS_DISPLAYNAME="Sistema de alimentación ininterrumpida" UPS_DESCRIPTION="Administra un sistema de alimentación ininterrumpida (UPS) conectado al equipo." US_DVORAK_FOR_LEFT_HAND="EE.UU. Dvorak para la mano izquierda" US_DVORAK_FOR_RIGHT_HAND="EE.UU. Dvorak para la mano derecha" US_DVORAK="EE.UU. Dvorak" US_INTERNATIONAL="EE.UU. Internacional" US="EE.UU." UTILMAN_DESCRIPTION="Inicia y configura herramientas de accesibilidad desde una ventana " UTILMAN_SERVICE="Administrador de utilidades" VOLUME_SNAPSHOT_SERVICE_DESCRIPTION="Administra e implementa Instantáneas de volumen usadas para copias de seguridad y otros propósitos. Si este servicio se detiene, las instantáneas se deshabilitarán para la copia de seguridad y ésta dará un error. Si este servicio está deshabilitado, cualquier servicio que explícitamente dependa de él no podrá iniciarse." VOLUME_SNAPSHOT_SERVICE="Instantáneas de volumen" WINDOWMETRICS_BORDERWIDTH="1" WINDOWS_TIME_SERVICE="Horario de Windows" WINDOWS_TIME_DESCRIPTION="Configura la hora en el equipo." WINMGMT_DESCRIPTION="Proporciona información sobre la administración del sistema." WINMGMT_SERVICE="Instrumental de administración de Windows" WMI_SERVICE="Extensiones de controlador de Instrumental de administración de Windows" WMI_DESCRIPTION="Proporciona información de administración de sistemas a y desde controladores." XMLPROV_DESCRIPTION="Administra los archivos de configuración XML en cada dominio para el aprovisionamiento de red automático." XMLPROV_DISPLAYNAME="Servicio de aprovisionamiento de red" INDEXING_SERVICE="Servicio de Index Server" INDEXING_SERVICE_DESCRIPTION="Indiza el contenido y las propiedades de archivos en equipos locales y remotos; ofrece acceso inmediato a archivos a través de un lenguaje de consulta flexible." HTTP_PRINT_SERVICE="Servicios de impresión de HTTP" hpmon_regkey = "Puerto de red Hewlett-Packard"