Command Service

Shaba · May 19, 2007

Hi

Looks like there's no info we need, unfortunately (nothing in "Search result list")

Please download the Registry Search tool by clicking on the "hard drive" icon halfway down this page:
http://www.billsway.com/vbspage/
Save it to the desktop and run it. If you get an alert from your antivirus about scripting, choose to allow the script to run. Search for cmdService and click OK. Post the logfile from the tool here for me.

brispie · May 20, 2007

Sorry to sound dumb again, but I can't see a hard drive icon on that page.

Can you clarify?

Thanks

Shaba · May 20, 2007

Hi

It looks like this ->

brispie · May 20, 2007

Sorry! Very slow on the uptake today!

REGEDIT4
; RegSrch.vbs © Bill James

; Registry search results for string "cmdService" 20/05/2007 22:17:18

; NOTE: This file will be deleted when you close WordPad.
; You must manually save this file to a new location if you want to refer to it again later.
; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\zip]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\WinRAR\ArcHistory]
"1"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

"2"="C:\\Documents and Settings\\PHIL\\Local Settings\\Temporary Internet Files\\Content.IE5\\WLIRO5U3\\delcmdservice[1].zip"

"3"="C:\\Documents and Settings\\PHIL\\Local Settings\\Temporary Internet Files\\Content.IE5\\VEKNZ1C1\\delcmdservice[1].zip"

Shaba · May 21, 2007

Hi

Download RegASSASSIN by malwarebytes.org from here
Unzip/extract it to a folder on your desktop
Double-click on RegASSASSIN.exe to start RegASSASSIN
Copy and paste the below into the white box

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\cmdService]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService]
Click Delete
Answer Yes to any prompts

Do another search for "cmdService" with registry search tool and post back results.

brispie · May 21, 2007

When running RegASSASSIN I got 'Error: Hive return NULL' for every single one.

REGEDIT4
; RegSrch.vbs © Bill James

; Registry search results for string "cmdservice" 21/05/2007 20:37:33

; NOTE: This file will be deleted when you close WordPad.
; You must manually save this file to a new location if you want to refer to it again later.
; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\zip]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\WinRAR\ArcHistory]
"2"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

"3"="C:\\Documents and Settings\\PHIL\\Local Settings\\Temporary Internet Files\\Content.IE5\\WLIRO5U3\\delcmdservice[1].zip"

Shaba · May 22, 2007

Hi

Ok, then try again without these in each line -> [ ]

brispie · May 22, 2007

1,2,3,5&6 on the list 'Could not be removed'. 4 was succesfully deleted.

REGEDIT4
; RegSrch.vbs © Bill James

; Registry search results for string "cmdService" 22/05/2007 10:40:18

; NOTE: This file will be deleted when you close WordPad.
; You must manually save this file to a new location if you want to refer to it again later.
; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\zip]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\WinRAR\ArcHistory]
"2"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

"3"="C:\\Documents and Settings\\PHIL\\Local Settings\\Temporary Internet Files\\Content.IE5\\WLIRO5U3\\delcmdservice[1].zip"

Shaba · May 22, 2007

Hi

Then we use another tool:

Go here and download subinacl.msi
Double click on subinacl.msi to start the installation of Subinacl
Click Next>
Select I accept and click Next>
Click browse
From the drop down menu select C:\
Double click on WINDOWS and then system32
Click OK
Click Install now
Click Finish

Copy text below to Notepad and save it as delcmd.bat (save it as all files, *.*)

@echo off
FOR %%R IN (
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService"
"HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE"
"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService"
) Do (
subinacl.exe /subkeyreg %%R /setowner=%username% /grant=%username%=F
reg delete %%R /f
)

It should look like this ->

Doubleclick delcmd.bat; black dos windows will flash, that's normal.

(In case you are unsure how to create a bat file, take a look here with screenshots.)

Do another search for cmdService with reg search tool and post back results.

brispie · May 22, 2007

Think I did that all OK.

REGEDIT4
; RegSrch.vbs © Bill James

; Registry search results for string "cmdService" 22/05/2007 13:31:58

; NOTE: This file will be deleted when you close WordPad.
; You must manually save this file to a new location if you want to refer to it again later.
; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\zip]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\WinRAR\ArcHistory]
"2"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

"3"="C:\\Documents and Settings\\PHIL\\Local Settings\\Temporary Internet Files\\Content.IE5\\WLIRO5U3\\delcmdservice[1].zip"

Shaba · May 22, 2007

Hi

Ok, then we do it manually.

Make sure that you have logged in as administrator.

Go to start -> run -> regedit -> ok

Go to HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE

Select key (highlight it) and to go edit -> permissions.
Select there first your user account (that it's highlighted), then in Full control Allow and after that delete that key (right-click, choose delete).

Repeat for:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService

Do another search for cmdService with reg search tool and post back results.

brispie · May 22, 2007

I did all that, but every single one came up with the message 'Error while deleting key'. they have not been deleted.

brispie · May 22, 2007

Sorry, forgot to post.

REGEDIT4
; RegSrch.vbs © Bill James

; Registry search results for string "cmdService" 22/05/2007 22:31:06

; NOTE: This file will be deleted when you close WordPad.
; You must manually save this file to a new location if you want to refer to it again later.
; (If you save the file with a .reg extension, you can use it to restore any Registry changes you make to these values.)

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_CMDSERVICE\0000]
"Service"="cmdService"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit]
"LastKey"="My Computer\\HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\cmdService"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\zip]
"a"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

[HKEY_USERS\S-1-5-21-1606980848-1547161642-1801674531-1003\Software\WinRAR\ArcHistory]
"2"="C:\\Documents and Settings\\PHIL\\Desktop\\delcmdservice.zip"

"3"="C:\\Documents and Settings\\PHIL\\Local Settings\\Temporary Internet Files\\Content.IE5\\WLIRO5U3\\delcmdservice[1].zip"

Shaba · May 23, 2007

Hi

Well then there's likely a lot of bigger problem with permissions.

I'll do some research and post back ASAP.

Shaba · May 23, 2007

Hi

Download RegDACL to your Desktop
http://www.heysoft.de/nt/reg/doc/RegDACLE.zip

Create a folder on the desktop called Regdacl. You can do this by right clicking on an empty space on the Desktop, select New folder from the popup menu and name it Regdacl.
Unzip the content of RegDACLE.zip into the Regdacl folder on your Desktop.
Don't run anything in Regdacl folder till I tell you.

Copy/paste the following text into a new Notepad document. Make sure that wordwrap is turned off.

@echo off
if exist regperms.txt del regperms.txt
For %%i in ("HKLM\SYSTEM\ControlSet001","HKLM\SYSTEM\ControlSet001\Services","HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService") Do regdacl %%i /L /E >> regperms.txt

regedit /a /e regkey.txt "HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services"

Notepad regperms.txt
notepad regkey.txt

Save it in the new Regdacl folder on your desktop as readperm.bat. Save it as:
File Type: All Files (not as a text document or it wont work).
Name: readperm.bat

Open the Regdacl folder on your Desktop. Double click readperm.bat. Notepad will open with regperms.txt and regkey.txt. Post the content please of both files please. If notepad doesn't bring up the text files, open the RegDacl folder and open regperms.txt and regkey.txt yourself.

brispie · May 23, 2007

REGEDIT4

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Abiosdsk]
"ErrorControl"=dword:00000000
"Group"="Primary disk"
"Start"=dword:00000004
"Tag"=dword:00000003
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\abp480n5]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:00000038
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\abp480n5\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\abp480n5\Parameters\PnpInterface]
"5"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\acap2000]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\acap2000\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI]
"ErrorControl"=dword:00000001
"Group"="Boot Bus Extender"
"Start"=dword:00000000
"Tag"=dword:00000001
"Type"=dword:00000001
"DisplayName"="Microsoft ACPI Driver"
"ImagePath"=hex(2):73,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,41,43,50,\
49,2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI\Enum]
"0"="ACPI_HAL\\PNP0C08\\0"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPIEC]
"ErrorControl"=dword:00000001
"Group"="Boot Bus Extender"
"Start"=dword:00000004
"Tag"=dword:00000005
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\adpu160m]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:0000003c
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\adpu160m\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\adpu160m\Parameters\PnpInterface]
"5"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aec]
"Type"=dword:00000001
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):73,79,73,74,65,6d,33,32,5c,64,72,69,76,65,72,73,5c,61,65,63,\
2e,73,79,73,00
"DisplayName"="Microsoft Kernel Acoustic Echo Canceller"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aec\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aec\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AFD]
"DisplayName"="AFD"
"Description"="AFD Networking Support Environment"
"Group"="TDI"
"ImagePath"="\\SystemRoot\\System32\\drivers\\afd.sys"
"Start"=dword:00000001
"Type"=dword:00000001
"ErrorControl"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AFD\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AFD\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AFD\Enum]
"0"="Root\\LEGACY_AFD\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Aha154x]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:00000006
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Aha154x\Parameters]
"LegacyAdapterDetection"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Aha154x\Parameters\PnpInterface]
"1"=dword:00000001
"3"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aic78u2]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:00000034
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aic78u2\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aic78u2\Parameters\PnpInterface]
"5"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aic78xx]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:0000001e
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aic78xx\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aic78xx\Parameters\PnpInterface]
"5"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Alerter]
"Type"=dword:00000020
"Start"=dword:00000004
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,\
32,5c,73,76,63,68,6f,73,74,2e,65,78,65,20,2d,6b,20,4c,6f,63,61,6c,53,65,72,\
76,69,63,65,00
"DisplayName"="Alerter"
"DependOnService"=hex(7):4c,61,6e,6d,61,6e,57,6f,72,6b,73,74,61,74,69,6f,6e,00,\
00
"DependOnGroup"=hex(7):00
"ObjectName"="NT AUTHORITY\\LocalService"
"Description"="Notifies selected users and computers of administrative alerts. If the service is stopped, programs that use administrative alerts will not receive them. If this service is disabled, any services that explicitly depend on it will fail to start."

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Alerter\Parameters]
"AlertNames"=hex(7):00
"ServiceDll"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,\
33,32,5c,61,6c,72,73,76,63,2e,64,6c,6c,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Alerter\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ALG]
"Description"="Provides support for 3rd party protocol plug-ins for Internet Connection Sharing and the Windows Firewall."
"Type"=dword:00000010
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,53,79,73,74,65,6d,33,\
32,5c,61,6c,67,2e,65,78,65,00
"DisplayName"="Application Layer Gateway Service"
"ObjectName"="NT AUTHORITY\\LocalService"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ALG\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ALG\Enum]
"0"="Root\\LEGACY_ALG\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AliIde]
"ErrorControl"=dword:00000001
"Group"="System Bus Extender"
"Start"=dword:00000004
"Tag"=dword:00000004
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AmdK7]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000001
"Tag"=dword:00000003
"ImagePath"=hex(2):73,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,61,6d,64,\
6b,37,2e,73,79,73,00
"DisplayName"="AMD K7 Processor Driver"
"Group"="Extended Base"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AmdK7\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AmdK7\Enum]
"0"="ACPI\\AuthenticAMD_-_x86_Family_6_Model_8\\_0"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\amsint]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:00000024
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\amsint\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\amsint\Parameters\PnpInterface]
"5"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppMgmt]
"Description"="Provides software installation services such as Assign, Publish, and Remove."
"DisplayName"="Application Management"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,\
32,5c,73,76,63,68,6f,73,74,2e,65,78,65,20,2d,6b,20,6e,65,74,73,76,63,73,00
"ObjectName"="LocalSystem"
"Start"=dword:00000003
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppMgmt\Parameters]
"ServiceDll"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,53,79,73,74,65,6d,\
33,32,5c,61,70,70,6d,67,6d,74,73,2e,64,6c,6c,00
"ServiceDllUnloadOnStop"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppMgmt\Security]
"Security"=hex:01,00,14,80,a8,00,00,00,b4,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,78,00,05,00,00,00,00,00,14,00,8d,00,02,00,01,01,00,00,00,00,00,\
05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,18,00,8d,00,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,\
02,00,00,00,00,14,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,00,00,\
18,00,9d,00,00,00,01,02,00,00,00,00,00,05,20,00,00,00,21,02,00,00,01,01,00,\
00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppMgmt\Enum]
"0"="Root\\LEGACY_APPMGMT\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:00000029
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc\Parameters\PnpInterface]
"5"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc3350p]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:00000039
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc3350p\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc3350p\Parameters\PnpInterface]
"1"=dword:00000011

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc3550]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:0000002a
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc3550\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\asc3550\Parameters\PnpInterface]
"5"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aslm75]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):5c,3f,3f,5c,43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,\
6d,33,32,5c,64,72,69,76,65,72,73,5c,61,73,6c,6d,37,35,2e,73,79,73,00
"DisplayName"="aslm75"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aslm75\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\aslm75\Enum]
"0"="Root\\LEGACY_ASLM75\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Aspi32]
"ErrorControl"=dword:00000001
"Type"=dword:00000001
"Start"=dword:00000002
"MatchFlags"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Aspi32\Parameters]
"ExcludeMiniports"=""

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Aspi32\Enum]
"0"="Root\\LEGACY_ASPI32\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AsyncMac]
"Type"=dword:00000001
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):73,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,61,73,79,\
6e,63,6d,61,63,2e,73,79,73,00
"DisplayName"="RAS Asynchronous Media Driver"
"Description"="RAS Asynchronous Media Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AsyncMac\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\atapi]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000000
"Tag"=dword:00000019
"Type"=dword:00000001
"DisplayName"="Standard IDE/ESDI Hard Disk Controller"
"ImagePath"=hex(2):73,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,61,74,61,\
70,69,2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\atapi\Parameters]
"LegacyDetection"=dword:00000001
"GhostSlave"=hex(7):53,75,6e,44,69,73,6b,20,00,00
"UseCheckPowerForFlush"=hex(7):53,41,4d,53,55,4e,47,20,57,4e,52,2d,33,31,36,30,\
31,41,20,28,31,36,30,30,4d,42,29,20,20,20,20,20,20,20,20,20,20,20,20,20,00,\
53,41,4d,53,55,4e,47,20,57,4e,52,2d,33,31,36,30,31,41,20,28,31,2e,36,47,42,\
29,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,49,42,4d,2d,44,54,43,41,2d,\
32,34,30,39,30,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,54,43,36,4f,41,41,32,41,00,49,42,4d,2d,44,54,43,41,2d,32,\
34,30,39,30,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,54,43,36,49,41,41,32,41,00,49,42,4d,2d,44,50,4c,41,2d,32,35,\
31,32,30,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,50,4c,38,4f,41,41,32,41,00,49,42,4d,2d,44,50,4c,41,2d,32,35,31,\
32,30,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,50,4c,38,49,41,41,32,41,00,49,42,4d,2d,44,50,4c,41,2d,32,35,31,32,\
30,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,50,4c,38,49,41,41,34,41,00,49,42,4d,2d,44,54,43,41,2d,32,33,32,34,30,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,54,43,35,4f,41,41,32,41,00,49,42,4d,2d,44,54,43,41,2d,32,33,32,34,30,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
54,43,35,49,41,41,32,41,00,49,42,4d,2d,44,50,4c,41,2d,32,34,34,38,30,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,50,\
4c,37,4f,41,41,32,41,00,49,42,4d,2d,44,50,4c,41,2d,32,34,34,38,30,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,50,4c,\
37,49,41,41,32,41,00,00
"NoFlushDevice"=hex(7):51,55,41,4e,54,55,4d,5f,4c,50,53,35,32,35,41,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,53,43,\
52,2d,37,33,30,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,00,00
"PioOnlyDevice"=hex(7):20,20,20,20,43,6f,6e,6e,65,72,20,50,65,72,69,70,68,65,\
72,61,6c,73,20,34,32,35,4d,42,20,2d,20,43,46,53,34,32,35,41,20,20,00,4d,41,\
54,53,48,49,54,41,20,43,52,2d,35,38,31,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,00,46,58,36,30,30,53,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,00,43,44,2d,34,34,45,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,51,55,41,4e,\
54,55,4d,20,54,52,42,38,35,30,41,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,00,51,55,41,4e,54,55,4d,20,4d,41,52,56,45,\
52,49,43,4b,20,35,34,30,41,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,00,20,4d,41,58,54,4f,52,20,4d,58,54,2d,35,34,30,20,20,41,54,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,4d,61,78,74,6f,72,\
20,37,31,32,36,30,20,41,54,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,00,4d,61,78,74,6f,72,20,37,38,35,30,20,41,56,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
00,4d,61,78,74,6f,72,20,37,35,34,30,20,41,56,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,4d,61,78,74,6f,72,20,37,\
32,31,33,20,41,54,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\

brispie · May 23, 2007

20,20,20,20,20,20,20,00,4d,61,78,74,6f,72,20,37,33,34,35,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,4d,\
61,78,74,6f,72,20,37,32,34,35,20,41,54,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,4d,61,78,74,6f,72,20,37,32,34,\
35,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,00,4d,61,78,74,6f,72,20,37,32,31,31,41,55,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,4d,61,78,\
74,6f,72,20,37,31,37,31,20,41,54,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,00,43,44,2d,33,31,36,45,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,00,53,41,4d,53,55,4e,47,5f,53,43,52,2d,32,34,33,30,00,43,52,2d,32,\
38,30,31,54,45,00,00
"NonRemovableMedia"=hex(7):4b,69,6e,67,73,74,6f,6e,20,54,65,63,68,6e,6f,6c,6f,\
67,79,20,44,61,74,61,50,61,6b,20,33,34,30,20,20,20,20,20,20,20,20,20,00,53,\
75,6e,44,69,73,6b,20,53,44,50,35,41,2d,31,30,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,53,75,6e,44,69,73,6b,20,53,44,\
43,46,42,2d,31,30,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,00,53,75,6e,44,69,73,6b,20,53,44,50,33,42,2d,32,30,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,53,75,6e,\
44,69,73,6b,20,53,44,50,33,42,2d,31,37,35,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,00,53,75,6e,44,69,73,6b,20,53,44,50,35,\
2d,32,2e,35,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,00,43,61,6c,6c,75,6e,61,20,54,65,63,68,6e,6f,6c,6f,67,79,20,43,54,\
32,36,30,4d,43,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,42,4e,2d,53,30,\
30,34,41,43,2d,53,20,31,2e,30,30,00,43,61,6c,6c,75,6e,61,20,54,65,63,68,6e,\
6f,6c,6f,67,79,20,43,54,35,32,30,52,4d,00,48,69,74,61,63,68,69,20,43,56,20,\
35,2e,31,2e,31,00,20,20,20,20,20,20,41,54,41,5f,46,4c,41,53,48,20,00,4d,69,\
74,73,75,62,69,73,68,69,20,41,54,41,20,43,61,72,64,20,00,4c,45,58,41,52,20,\
41,54,41,5f,46,4c,41,53,48,00,4d,69,63,72,6f,6e,20,4d,54,43,46,30,30,34,41,\
00,4d,69,63,72,6f,6e,20,4d,54,43,46,30,30,38,41,00,53,75,6e,44,69,73,6b,20,\
53,44,50,33,42,2d,31,31,30,00,53,75,6e,44,69,73,6b,20,53,44,43,46,42,2d,34,\
00,42,4e,2d,43,41,42,2d,54,00,4d,45,4d,4f,52,59,53,54,49,43,4b,00,4d,45,4d,\
4f,52,59,53,54,49,43,4b,20,20,20,38,4d,20,20,38,4b,00,00
"NoPowerDownDevice"=hex(7):52,44,2d,44,52,43,30,30,31,2d,4d,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,43,\
53,2d,52,33,37,20,30,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,00,00
"AutoEjectZipDevice"=hex(7):49,4f,4d,45,47,41,20,20,5a,49,50,20,31,30,30,20,20,\
20,20,20,20,20,41,54,41,50,49,20,20,20,20,20,20,20,20,20,20,20,20,20,32,33,\
2e,44,20,20,20,20,00,49,4f,4d,45,47,41,20,20,5a,49,50,20,31,30,30,20,20,20,\
20,20,20,20,41,54,41,50,49,20,20,20,20,20,20,20,20,20,20,20,20,20,32,31,2e,\
44,20,20,20,20,00,49,4f,4d,45,47,41,20,20,5a,49,50,20,31,30,30,20,20,20,20,\
20,20,20,41,54,41,50,49,20,20,20,20,20,20,20,20,20,20,20,20,20,32,30,2e,44,\
20,20,20,20,00,49,4f,4d,45,47,41,20,20,5a,49,50,20,31,30,30,20,20,20,20,20,\
20,20,41,54,41,50,49,20,20,20,20,20,20,20,20,20,20,20,20,20,39,31,2e,44,20,\
20,20,20,00,49,4f,4d,45,47,41,20,20,5a,49,50,20,31,30,30,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,42,2e,32,39,20,20,\
20,20,00,49,4f,4d,45,47,41,20,20,5a,49,50,20,31,30,30,20,20,20,20,20,20,20,\
20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,20,42,2e,32,32,20,20,20,\
20,00,00
"NeedIdentDevice"=hex(7):51,55,41,4e,54,55,4d,20,46,49,52,45,42,41,4c,4c,00,00
"DefaultPioAtapiDevice"=hex(7):54,4f,52,69,53,41,4e,20,44,56,44,2d,52,4f,4d,20,\
44,52,44,2d,4e,32,31,36,00,49,44,45,2d,43,44,20,52,2f,52,57,20,32,78,32,78,\
32,34,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\atapi\Enum]
"0"="PCIIDE\\IDEChannel\\4&26e3677b&0&0"
"Count"=dword:00000002
"NextInstance"=dword:00000002
"1"="PCIIDE\\IDEChannel\\4&26e3677b&0&1"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Atdisk]
"ErrorControl"=dword:00000000
"Group"="Primary disk"
"Start"=dword:00000004
"Tag"=dword:00000001
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ati HotKey Poller]
"Type"=dword:00000110
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,\
32,5c,41,74,69,32,65,76,78,78,2e,65,78,65,00
"Group"="Event log"
"ObjectName"="LocalSystem"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ati HotKey Poller\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Ati HotKey Poller\Enum]
"0"="Root\\LEGACY_ATI_HOTKEY_POLLER\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ATI Smart]
"Type"=dword:00000110
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
61,74,69,32,73,67,61,67,2e,65,78,65,00
"DisplayName"="ATI Smart"
"ObjectName"="LocalSystem"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ATI Smart\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ATI Smart\Enum]
"0"="Root\\LEGACY_ATI_SMART\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag]
"Type"=dword:00000001
"Start"=dword:00000003
"ErrorControl"=dword:00000000
"Tag"=dword:00000001
"ImagePath"=hex(2):73,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,61,74,69,\
32,6d,74,61,67,2e,73,79,73,00
"Group"="Video"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Device0]
"InstalledDisplayDrivers"=hex(7):61,74,69,32,64,76,61,67,00,00
"MultiFunctionSupported"=dword:00000001
"GCOOPTION_DisableGPIOPowerSaveMode"=dword:00000001
"ReleaseVersion"="8.05-040812a-017884C-Asus"
"BuildNumber"="17884"
"drv"="ati2dvag.dll"
"DALGameGammaScale"=dword:00646464
"UseNewOGLRegPath"=dword:00000001
"DALRULE_DYNAMICFIXEDDISPLAYMODEREPORTING"=dword:00000001
"DALRULE_ALLOWMONITORRANGELIMITMODESCRT"=dword:00000001
"DALRULE_GETVGAEXPANSIONATBOOT"=dword:00000000
"DisableHotPlugDFP"=dword:00000000
"ExtEvent_EnableAlpsMouseOrientation"=dword:00000000
"ExtEvent_SafeEscapeSupport"=dword:00000001
"DALRULE_DISABLEPSEUDOLARGEDESKTOP"=dword:00000000
"OvlTheaterMode"=hex:00,00,00,00
"DisableOvlTheaterMode"=dword:00000000
"UseVMRPitch"=dword:00000001
"DisableMMSnifferCode"=dword:00000000
"DisableProgPCILatency"=dword:00000000
"DALRULE_GetTVFakeEDID"=dword:00000000
"Catalyst_Version"="0"
"DALRULE_REGISTRYACCESS"=dword:00000000
"DALRULE_RESTRICTCRTANALOGDETECTIONONEDIDMISMATCH"=dword:00000000
"DALRULE_ENABLEDRIVERMODEPRUNNING"=dword:00000000
"GCORULE_ENABLETILEDMEMORYCALCULATION"=dword:00000001
"DALRULE_MACROVISIONINFOREPORT"=dword:00000000
"DALRULE_BANDWIDTHMODEENUM"=dword:00000001
"ExtEvent_LCDSetNativeModeOnResume"=dword:00000000
"DALRULE_LIMITTMDSMODES"=dword:00000000
"DALRULE_RESTRICT640x480MODE"=dword:00000000
"DALRULE_RESTRICT8BPPON2NDDRV"=dword:00000000
"TVForceDetection"=dword:00000000
"DALRULE_ADAPTERBANDWIDTHMODEENUM"=dword:00000000
"GCOOPTION_MinMemEff"=dword:00000000
"GCORULE_IncreaseMinMemEff"=dword:00000000
"DALRULE_DISABLECWDDEDETECTION"=dword:00000000
"DALRULE_SELECTION_SCHEME"=dword:00000000
"DALRULE_NOCRTANDDFPACTIVESIMULTANEOUSLY"=dword:00000000
"DisableTabletPCRotation"=dword:00000001
"DisableSmartSave"=dword:00000000
"DisableSmartSave_DEF"=dword:00000000
"VPUEnableSubmissionBox_DEF"="1"
"ExtEvent_EnableMultiSessions"=dword:00000001
"TVEnableOverscan"=dword:00000001
"RotationSupportLevel"=dword:00000002
"NewRotation"="1"
"DALRULE_DYNAMICMODESUPPORT"=dword:00000001
"CVRULE_CUSTOMIZEDMODESENABLED"=dword:00000001
"GSettingControl"=dword:00000002
"GCOOPTION_DigitalCrtInfo"=hex:a3,38,61,c1,a3,38,61,b1
"GCORULE_FracFbDivSupport"=dword:00000000
"PrimaryTiling"="1"
"GCORULE_FlickerWA"=dword:00000001
"SMOOTHVISION_NAME"="SMOOTHVISION 2.1"
"GCORULE_ENABLERMXFILTER"=dword:00000001
"DALRULE_RESTRICT2ACTIVEDISPLAYS"=dword:00000000
"TVM6Flag"=dword:00000001
"DXVA_WMV"="0"
"DALRULE_ONEDISPLAYBOOTDEFAULT"=dword:00000001
"DfpUsePixSlip"=dword:00000001
"GI"="0"
"Main3D_DEF"="3"
"AntiAlias_DEF"="1"
"AntiAliasSamples_DEF"="0"
"AnisoType_DEF"="0"
"AnisoDegree_DEF"="0"
"TextureOpt_DEF"="0"
"TextureLod_DEF"="0"
"TruformMode_DEF"="0"
"VSyncControl_DEF"="1"
"SwapEffect_DEF"="0"
"TemporalAAMultiplier_DEF"="0"
"ExportCompressedTex_DEF"="1"
"PixelCenter_DEF"="0"
"ForceZBufferDepth_DEF"="0"
"EnableTripleBuffering_DEF"="0"
"ColourDesktopGamma_DEF"="1.0 1.0 1.0"
"ColourDesktopBrightness_DEF"="0 0 0"
"ColourDesktopContrast_DEF"="1.0 1.0 1.0"
"ColourFullscreenGamma_DEF"="1.0 1.0 1.0"
"ColourFullscreenBrightness_DEF"="0 0 0"
"ColourFullscreenContrast_DEF"="1.0 1.0 1.0"
"DALLargeDesktopModesBCD"=hex:12,80,04,80,00,00,00,60,06,40,09,60,00,00,00,60,\
16,00,06,00,00,00,00,60,08,00,12,00,00,00,00,60,20,48,07,68,00,00,00,60,10,\
24,15,36,00,00,00,60,23,04,08,64,00,00,00,60,11,52,17,28,00,00,00,60,25,60,\
10,24,00,00,00,60,12,80,20,48,00,00,00,60,32,00,12,00,00,00,00,60,16,00,24,\
00,00,08,00,60,16,00,24,00,00,16,00,60
"Device Description"="ASUS A9550 Secondary"
"DDC2Disabled"=dword:00000000
"DisableBlockWrite"=dword:00000001
"DisableDMACopy"=dword:00000000
"TestEnv"=dword:00000000
"TimingSelection"=dword:00000000
"VgaCompatible"=dword:00000000
"Adaptive De-interlacing"=dword:00000001
"VPE Adaptive De-interlacing"=dword:00000001
"DisableTimeStampWriteBack"=dword:00000000
"DisableTiling"=dword:00000000
"ExtEvent_EnableHotPlug"=dword:00000001
"ExtEvent_EnableMouseRotation"=dword:00000000
"ExtEvent_DriverMessageSupport"=dword:00000001
"DFPRULE_HotplugSupported"=dword:00000001
"DALRULE_NOTVANDCRTONSAMECONTROLLER"=dword:00000000
"DALRULE_NOCRTANDLCDONSAMECONTROLLER"=dword:00000000
"DALRULE_DISPLAYSRESTRICTMODES"=dword:00000000
"VPUEnableSubmissionBox"="1"
"DALRULE_NOFORCEBOOT"=dword:00000001
"DALRULE_ADDNATIVEMODESTOMODETABLE"=dword:00000001
"DisableFullAdapterInit"=dword:00000000
"GCOOPTION_MaxTmdsPllOutFreq"=hex:50,c3,00,00
"DALNonStandardModesBCD1"=hex:12,80,07,68,00,00,00,00,12,80,09,60,00,00,00,00,\
17,92,13,44,00,00,00,00,18,00,14,40,00,00,00,00,18,56,13,92,00,00,00,00,16,\
00,12,00,00,00,00,70
"DALRULE_NOCRTANDDFPONSAMECONTROLLER"=dword:00000001
"GCORULE_IntTMDSReduceBlankTiming"=dword:00000000
"HDTVRULE_HDTVGDOENABLE"=dword:00000001
"HDTVRULE_HDTVSIGNALFORMAT"=dword:00000001
"DisableEnumAllChilds"=dword:00000001
"TestedBusCaps"=dword:00000000
"RequestedBusCaps"=dword:0000007f

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Device0\ATI WDM Configurations]
"PnP ID Version"="34"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Device1]
"InstalledDisplayDrivers"=hex(7):61,74,69,32,64,76,61,67,00,00
"MultiFunctionSupported"=dword:00000001
"GCOOPTION_DisableGPIOPowerSaveMode"=dword:00000001
"ReleaseVersion"="8.05-040812a-017884C-Asus"
"BuildNumber"="17884"
"drv"="ati2dvag.dll"
"DALGameGammaScale"=dword:00646464
"UseNewOGLRegPath"=dword:00000001
"DALRULE_DYNAMICFIXEDDISPLAYMODEREPORTING"=dword:00000001
"DALRULE_ALLOWMONITORRANGELIMITMODESCRT"=dword:00000001
"DALRULE_GETVGAEXPANSIONATBOOT"=dword:00000000
"DisableHotPlugDFP"=dword:00000000
"ExtEvent_EnableAlpsMouseOrientation"=dword:00000000
"ExtEvent_SafeEscapeSupport"=dword:00000001
"DALRULE_DISABLEPSEUDOLARGEDESKTOP"=dword:00000000
"OvlTheaterMode"=hex:00,00,00,00
"DisableOvlTheaterMode"=dword:00000000
"UseVMRPitch"=dword:00000001
"DisableMMSnifferCode"=dword:00000000
"DisableProgPCILatency"=dword:00000000
"DALRULE_GetTVFakeEDID"=dword:00000000
"Catalyst_Version"="0"
"DALRULE_REGISTRYACCESS"=dword:00000000
"DALRULE_RESTRICTCRTANALOGDETECTIONONEDIDMISMATCH"=dword:00000000
"DALRULE_ENABLEDRIVERMODEPRUNNING"=dword:00000000
"GCORULE_ENABLETILEDMEMORYCALCULATION"=dword:00000001
"DALRULE_MACROVISIONINFOREPORT"=dword:00000000
"DALRULE_BANDWIDTHMODEENUM"=dword:00000001
"ExtEvent_LCDSetNativeModeOnResume"=dword:00000000
"DALRULE_LIMITTMDSMODES"=dword:00000000
"DALRULE_RESTRICT640x480MODE"=dword:00000000
"DALRULE_RESTRICT8BPPON2NDDRV"=dword:00000000
"TVForceDetection"=dword:00000000
"DALRULE_ADAPTERBANDWIDTHMODEENUM"=dword:00000000
"GCOOPTION_MinMemEff"=dword:00000000
"GCORULE_IncreaseMinMemEff"=dword:00000000
"DALRULE_DISABLECWDDEDETECTION"=dword:00000000
"DALRULE_SELECTION_SCHEME"=dword:00000000
"DALRULE_NOCRTANDDFPACTIVESIMULTANEOUSLY"=dword:00000000
"DisableTabletPCRotation"=dword:00000001
"DisableSmartSave"=dword:00000000
"DisableSmartSave_DEF"=dword:00000000
"VPUEnableSubmissionBox_DEF"="1"
"ExtEvent_EnableMultiSessions"=dword:00000001
"TVEnableOverscan"=dword:00000001
"RotationSupportLevel"=dword:00000002
"NewRotation"="1"
"DALRULE_DYNAMICMODESUPPORT"=dword:00000001
"CVRULE_CUSTOMIZEDMODESENABLED"=dword:00000001
"GSettingControl"=dword:00000002
"GCOOPTION_DigitalCrtInfo"=hex:a3,38,61,c1,a3,38,61,b1
"GCORULE_FracFbDivSupport"=dword:00000000
"PrimaryTiling"="1"
"GCORULE_FlickerWA"=dword:00000001
"SMOOTHVISION_NAME"="SMOOTHVISION 2.1"
"GCORULE_ENABLERMXFILTER"=dword:00000001
"DALRULE_RESTRICT2ACTIVEDISPLAYS"=dword:00000000
"TVM6Flag"=dword:00000001
"DXVA_WMV"="0"
"DALRULE_ONEDISPLAYBOOTDEFAULT"=dword:00000001
"DfpUsePixSlip"=dword:00000001
"GI"="0"
"Main3D_DEF"="3"
"AntiAlias_DEF"="1"
"AntiAliasSamples_DEF"="0"
"AnisoType_DEF"="0"
"AnisoDegree_DEF"="0"
"TextureOpt_DEF"="0"
"TextureLod_DEF"="0"
"TruformMode_DEF"="0"
"VSyncControl_DEF"="1"
"SwapEffect_DEF"="0"
"TemporalAAMultiplier_DEF"="0"
"ExportCompressedTex_DEF"="1"
"PixelCenter_DEF"="0"
"ForceZBufferDepth_DEF"="0"
"EnableTripleBuffering_DEF"="0"
"ColourDesktopGamma_DEF"="1.0 1.0 1.0"
"ColourDesktopBrightness_DEF"="0 0 0"
"ColourDesktopContrast_DEF"="1.0 1.0 1.0"
"ColourFullscreenGamma_DEF"="1.0 1.0 1.0"
"ColourFullscreenBrightness_DEF"="0 0 0"
"ColourFullscreenContrast_DEF"="1.0 1.0 1.0"
"DALLargeDesktopModesBCD"=hex:12,80,04,80,00,00,00,60,06,40,09,60,00,00,00,60,\
16,00,06,00,00,00,00,60,08,00,12,00,00,00,00,60,20,48,07,68,00,00,00,60,10,\
24,15,36,00,00,00,60,23,04,08,64,00,00,00,60,11,52,17,28,00,00,00,60,25,60,\
10,24,00,00,00,60,12,80,20,48,00,00,00,60,32,00,12,00,00,00,00,60,16,00,24,\
00,00,08,00,60,16,00,24,00,00,16,00,60
"Device Description"="ASUS A9550 Secondary"
"DDC2Disabled"=dword:00000000
"DisableBlockWrite"=dword:00000001
"DisableDMACopy"=dword:00000000
"TestEnv"=dword:00000000
"TimingSelection"=dword:00000000
"VgaCompatible"=dword:00000000
"Adaptive De-interlacing"=dword:00000001
"VPE Adaptive De-interlacing"=dword:00000001
"DisableTimeStampWriteBack"=dword:00000000
"DisableTiling"=dword:00000000
"ExtEvent_EnableHotPlug"=dword:00000001
"ExtEvent_EnableMouseRotation"=dword:00000000
"ExtEvent_DriverMessageSupport"=dword:00000001
"DFPRULE_HotplugSupported"=dword:00000001
"DALRULE_NOTVANDCRTONSAMECONTROLLER"=dword:00000000
"DALRULE_NOCRTANDLCDONSAMECONTROLLER"=dword:00000000
"DALRULE_DISPLAYSRESTRICTMODES"=dword:00000000
"VPUEnableSubmissionBox"="1"
"DALRULE_NOFORCEBOOT"=dword:00000001
"DALRULE_ADDNATIVEMODESTOMODETABLE"=dword:00000001
"DisableFullAdapterInit"=dword:00000000
"GCOOPTION_MaxTmdsPllOutFreq"=hex:50,c3,00,00
"DALNonStandardModesBCD1"=hex:12,80,07,68,00,00,00,00,12,80,09,60,00,00,00,00,\
17,92,13,44,00,00,00,00,18,00,14,40,00,00,00,00,18,56,13,92,00,00,00,00,16,\
00,12,00,00,00,00,70
"DALRULE_NOCRTANDDFPONSAMECONTROLLER"=dword:00000001
"GCORULE_IntTMDSReduceBlankTiming"=dword:00000000
"HDTVRULE_HDTVGDOENABLE"=dword:00000001
"HDTVRULE_HDTVSIGNALFORMAT"=dword:00000001
"DisableEnumAllChilds"=dword:00000001
"TestedBusCaps"=dword:00000000
"RequestedBusCaps"=dword:0000007f

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Device1\ATI WDM Configurations]
"PnP ID Version"="34"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Device2]
"InstalledDisplayDrivers"=hex(7):61,74,69,32,64,76,61,67,00,00
"MultiFunctionSupported"=dword:00000001
"GCOOPTION_DisableGPIOPowerSaveMode"=dword:00000001
"ReleaseVersion"="8.05-040812a-017884C-Asus"
"BuildNumber"="17884"
"drv"="ati2dvag.dll"
"DALGameGammaScale"=dword:00646464
"UseNewOGLRegPath"=dword:00000001
"DALRULE_DYNAMICFIXEDDISPLAYMODEREPORTING"=dword:00000001
"DALRULE_ALLOWMONITORRANGELIMITMODESCRT"=dword:00000001
"DALRULE_GETVGAEXPANSIONATBOOT"=dword:00000000

brispie · May 23, 2007

"VSyncControl_DEF"="1"
"SwapEffect_DEF"="0"
"TemporalAAMultiplier_DEF"="0"
"ExportCompressedTex_DEF"="1"
"PixelCenter_DEF"="0"
"ForceZBufferDepth_DEF"="0"
"EnableTripleBuffering_DEF"="0"
"ColourDesktopGamma_DEF"="1.0 1.0 1.0"
"ColourDesktopBrightness_DEF"="0 0 0"
"ColourDesktopContrast_DEF"="1.0 1.0 1.0"
"ColourFullscreenGamma_DEF"="1.0 1.0 1.0"
"ColourFullscreenBrightness_DEF"="0 0 0"
"ColourFullscreenContrast_DEF"="1.0 1.0 1.0"
"DALLargeDesktopModesBCD"=hex:12,80,04,80,00,00,00,60,06,40,09,60,00,00,00,60,\
16,00,06,00,00,00,00,60,08,00,12,00,00,00,00,60,20,48,07,68,00,00,00,60,10,\
24,15,36,00,00,00,60,23,04,08,64,00,00,00,60,11,52,17,28,00,00,00,60,25,60,\
10,24,00,00,00,60,12,80,20,48,00,00,00,60,32,00,12,00,00,00,00,60,16,00,24,\
00,00,08,00,60,16,00,24,00,00,16,00,60
"Device Description"="ASUS A9550 Secondary"
"DDC2Disabled"=dword:00000000
"DisableBlockWrite"=dword:00000001
"DisableDMACopy"=dword:00000000
"TestEnv"=dword:00000000
"TimingSelection"=dword:00000000
"VgaCompatible"=dword:00000000
"Adaptive De-interlacing"=dword:00000001
"VPE Adaptive De-interlacing"=dword:00000001
"DisableTimeStampWriteBack"=dword:00000000
"DisableTiling"=dword:00000000
"ExtEvent_EnableHotPlug"=dword:00000001
"ExtEvent_EnableMouseRotation"=dword:00000000
"ExtEvent_DriverMessageSupport"=dword:00000001
"DFPRULE_HotplugSupported"=dword:00000001
"DALRULE_NOTVANDCRTONSAMECONTROLLER"=dword:00000000
"DALRULE_NOCRTANDLCDONSAMECONTROLLER"=dword:00000000
"DALRULE_DISPLAYSRESTRICTMODES"=dword:00000000
"VPUEnableSubmissionBox"="1"
"DALRULE_NOFORCEBOOT"=dword:00000001
"DALRULE_ADDNATIVEMODESTOMODETABLE"=dword:00000001
"DisableFullAdapterInit"=dword:00000000
"GCOOPTION_MaxTmdsPllOutFreq"=hex:50,c3,00,00
"DALNonStandardModesBCD1"=hex:12,80,07,68,00,00,00,00,12,80,09,60,00,00,00,00,\
17,92,13,44,00,00,00,00,18,00,14,40,00,00,00,00,18,56,13,92,00,00,00,00,16,\
00,12,00,00,00,00,70
"DALRULE_NOCRTANDDFPONSAMECONTROLLER"=dword:00000001
"GCORULE_IntTMDSReduceBlankTiming"=dword:00000000
"HDTVRULE_HDTVGDOENABLE"=dword:00000001
"HDTVRULE_HDTVSIGNALFORMAT"=dword:00000001
"DisableEnumAllChilds"=dword:00000001
"TestedBusCaps"=dword:00000000
"RequestedBusCaps"=dword:0000007f

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Device2\ATI WDM Configurations]
"PnP ID Version"="34"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Device3]
"InstalledDisplayDrivers"=hex(7):61,74,69,32,64,76,61,67,00,00
"MultiFunctionSupported"=dword:00000001
"GCOOPTION_DisableGPIOPowerSaveMode"=dword:00000001
"ReleaseVersion"="8.05-040812a-017884C-Asus"
"BuildNumber"="17884"
"drv"="ati2dvag.dll"
"DALGameGammaScale"=dword:00646464
"UseNewOGLRegPath"=dword:00000001
"DALRULE_DYNAMICFIXEDDISPLAYMODEREPORTING"=dword:00000001
"DALRULE_ALLOWMONITORRANGELIMITMODESCRT"=dword:00000001
"DALRULE_GETVGAEXPANSIONATBOOT"=dword:00000000
"DisableHotPlugDFP"=dword:00000000
"ExtEvent_EnableAlpsMouseOrientation"=dword:00000000
"ExtEvent_SafeEscapeSupport"=dword:00000001
"DALRULE_DISABLEPSEUDOLARGEDESKTOP"=dword:00000000
"OvlTheaterMode"=hex:00,00,00,00
"DisableOvlTheaterMode"=dword:00000000
"UseVMRPitch"=dword:00000001
"DisableMMSnifferCode"=dword:00000000
"DisableProgPCILatency"=dword:00000000
"DALRULE_GetTVFakeEDID"=dword:00000000
"Catalyst_Version"="0"
"DALRULE_REGISTRYACCESS"=dword:00000000
"DALRULE_RESTRICTCRTANALOGDETECTIONONEDIDMISMATCH"=dword:00000000
"DALRULE_ENABLEDRIVERMODEPRUNNING"=dword:00000000
"GCORULE_ENABLETILEDMEMORYCALCULATION"=dword:00000001
"DALRULE_MACROVISIONINFOREPORT"=dword:00000000
"DALRULE_BANDWIDTHMODEENUM"=dword:00000001
"ExtEvent_LCDSetNativeModeOnResume"=dword:00000000
"DALRULE_LIMITTMDSMODES"=dword:00000000
"DALRULE_RESTRICT640x480MODE"=dword:00000000
"DALRULE_RESTRICT8BPPON2NDDRV"=dword:00000000
"TVForceDetection"=dword:00000000
"DALRULE_ADAPTERBANDWIDTHMODEENUM"=dword:00000000
"GCOOPTION_MinMemEff"=dword:00000000
"GCORULE_IncreaseMinMemEff"=dword:00000000
"DALRULE_DISABLECWDDEDETECTION"=dword:00000000
"DALRULE_SELECTION_SCHEME"=dword:00000000
"DALRULE_NOCRTANDDFPACTIVESIMULTANEOUSLY"=dword:00000000
"DisableTabletPCRotation"=dword:00000001
"DisableSmartSave"=dword:00000000
"DisableSmartSave_DEF"=dword:00000000
"VPUEnableSubmissionBox_DEF"="1"
"ExtEvent_EnableMultiSessions"=dword:00000001
"TVEnableOverscan"=dword:00000001
"RotationSupportLevel"=dword:00000002
"NewRotation"="1"
"DALRULE_DYNAMICMODESUPPORT"=dword:00000001
"CVRULE_CUSTOMIZEDMODESENABLED"=dword:00000001
"GSettingControl"=dword:00000002
"GCOOPTION_DigitalCrtInfo"=hex:a3,38,61,c1,a3,38,61,b1
"GCORULE_FracFbDivSupport"=dword:00000000
"PrimaryTiling"="1"
"GCORULE_FlickerWA"=dword:00000001
"SMOOTHVISION_NAME"="SMOOTHVISION 2.1"
"GCORULE_ENABLERMXFILTER"=dword:00000001
"DALRULE_RESTRICT2ACTIVEDISPLAYS"=dword:00000000
"TVM6Flag"=dword:00000001
"DXVA_WMV"="0"
"DALRULE_ONEDISPLAYBOOTDEFAULT"=dword:00000001
"DfpUsePixSlip"=dword:00000001
"GI"="0"
"Main3D_DEF"="3"
"AntiAlias_DEF"="1"
"AntiAliasSamples_DEF"="0"
"AnisoType_DEF"="0"
"AnisoDegree_DEF"="0"
"TextureOpt_DEF"="0"
"TextureLod_DEF"="0"
"TruformMode_DEF"="0"
"VSyncControl_DEF"="1"
"SwapEffect_DEF"="0"
"TemporalAAMultiplier_DEF"="0"
"ExportCompressedTex_DEF"="1"
"PixelCenter_DEF"="0"
"ForceZBufferDepth_DEF"="0"
"EnableTripleBuffering_DEF"="0"
"ColourDesktopGamma_DEF"="1.0 1.0 1.0"
"ColourDesktopBrightness_DEF"="0 0 0"
"ColourDesktopContrast_DEF"="1.0 1.0 1.0"
"ColourFullscreenGamma_DEF"="1.0 1.0 1.0"
"ColourFullscreenBrightness_DEF"="0 0 0"
"ColourFullscreenContrast_DEF"="1.0 1.0 1.0"
"DALLargeDesktopModesBCD"=hex:12,80,04,80,00,00,00,60,06,40,09,60,00,00,00,60,\
16,00,06,00,00,00,00,60,08,00,12,00,00,00,00,60,20,48,07,68,00,00,00,60,10,\
24,15,36,00,00,00,60,23,04,08,64,00,00,00,60,11,52,17,28,00,00,00,60,25,60,\
10,24,00,00,00,60,12,80,20,48,00,00,00,60,32,00,12,00,00,00,00,60,16,00,24,\
00,00,08,00,60,16,00,24,00,00,16,00,60
"Device Description"="ASUS A9550 Secondary"
"DDC2Disabled"=dword:00000000
"DisableBlockWrite"=dword:00000001
"DisableDMACopy"=dword:00000000
"TestEnv"=dword:00000000
"TimingSelection"=dword:00000000
"VgaCompatible"=dword:00000000
"Adaptive De-interlacing"=dword:00000001
"VPE Adaptive De-interlacing"=dword:00000001
"DisableTimeStampWriteBack"=dword:00000000
"DisableTiling"=dword:00000000
"ExtEvent_EnableHotPlug"=dword:00000001
"ExtEvent_EnableMouseRotation"=dword:00000000
"ExtEvent_DriverMessageSupport"=dword:00000001
"DFPRULE_HotplugSupported"=dword:00000001
"DALRULE_NOTVANDCRTONSAMECONTROLLER"=dword:00000000
"DALRULE_NOCRTANDLCDONSAMECONTROLLER"=dword:00000000
"DALRULE_DISPLAYSRESTRICTMODES"=dword:00000000
"VPUEnableSubmissionBox"="1"
"DALRULE_NOFORCEBOOT"=dword:00000001
"DALRULE_ADDNATIVEMODESTOMODETABLE"=dword:00000001
"DisableFullAdapterInit"=dword:00000000
"GCOOPTION_MaxTmdsPllOutFreq"=hex:50,c3,00,00
"DALNonStandardModesBCD1"=hex:12,80,07,68,00,00,00,00,12,80,09,60,00,00,00,00,\
17,92,13,44,00,00,00,00,18,00,14,40,00,00,00,00,18,56,13,92,00,00,00,00,16,\
00,12,00,00,00,00,70
"DALRULE_NOCRTANDDFPONSAMECONTROLLER"=dword:00000001
"GCORULE_IntTMDSReduceBlankTiming"=dword:00000000
"HDTVRULE_HDTVGDOENABLE"=dword:00000001
"HDTVRULE_HDTVSIGNALFORMAT"=dword:00000001
"DisableEnumAllChilds"=dword:00000001
"TestedBusCaps"=dword:00000000
"RequestedBusCaps"=dword:0000007f

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Device3\ATI WDM Configurations]
"PnP ID Version"="34"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Enum]
"0"="PCI\\VEN_1002&DEV_4153&SUBSYS_00381043&REV_00\\4&102ac5bc&0&00F0"
"Count"=dword:00000002
"NextInstance"=dword:00000002
"1"="PCI\\VEN_1002&DEV_4173&SUBSYS_00391043&REV_00\\4&102ac5bc&0&01F0"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ati2mtag\Video]
"Service"="ati2mtag"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Atmarpc]
"Type"=dword:00000001
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"Tag"=dword:0000000a
"ImagePath"=hex(2):73,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,61,74,6d,\
61,72,70,63,2e,73,79,73,00
"DisplayName"="ATM ARP Client Protocol"
"Group"="NDIS"
"DependOnService"=hex(7):54,63,70,69,70,00,00
"DependOnGroup"=hex(7):00
"Description"="ATM ARP Client Protocol"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Atmarpc\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AudioSrv]
"DependOnService"=hex(7):50,6c,75,67,50,6c,61,79,00,52,70,63,53,73,00,00
"Description"="Manages audio devices for Windows-based programs. If this service is stopped, audio devices and effects will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."
"DisplayName"="Windows Audio"
"ErrorControl"=dword:00000001
"Group"="AudioGroup"
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,53,79,73,74,65,6d,33,\
32,5c,73,76,63,68,6f,73,74,2e,65,78,65,20,2d,6b,20,6e,65,74,73,76,63,73,00
"ObjectName"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AudioSrv\Parameters]
"ServiceDll"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,53,79,73,74,65,6d,\
33,32,5c,61,75,64,69,6f,73,72,76,2e,64,6c,6c,00
"ServiceDllUnloadOnStop"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AudioSrv\Enum]
"0"="Root\\LEGACY_AUDIOSRV\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

brispie · May 23, 2007

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\audstub]
"Type"=dword:00000001
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):73,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,61,75,64,\
73,74,75,62,2e,73,79,73,00
"DisplayName"="Audio Stub Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\audstub\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\audstub\Enum]
"0"="Root\\MEDIA\\MS_MMACM"
"Count"=dword:00000005
"NextInstance"=dword:00000005
"1"="Root\\MEDIA\\MS_MMDRV"
"2"="Root\\MEDIA\\MS_MMMCI"
"3"="Root\\MEDIA\\MS_MMVCD"
"4"="Root\\MEDIA\\MS_MMVID"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Automatic LiveUpdate Scheduler]
"Type"=dword:00000010
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):22,43,3a,5c,50,72,6f,67,72,61,6d,20,46,69,6c,65,73,5c,53,79,\
6d,61,6e,74,65,63,5c,4c,69,76,65,55,70,64,61,74,65,5c,41,4c,55,53,63,68,65,\
64,75,6c,65,72,53,76,63,2e,65,78,65,22,00
"DisplayName"="Automatic LiveUpdate Scheduler"
"DependOnService"=hex(7):52,50,43,53,53,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"
"Description"="Manages the scheduling of Automatic LiveUpdate sessions"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Automatic LiveUpdate Scheduler\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Automatic LiveUpdate Scheduler\Enum]
"0"="Root\\LEGACY_AUTOMATIC_LIVEUPDATE_SCHEDULER\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7Alrt]
"Type"=dword:00000110
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,3a,5c,50,52,4f,47,52,41,7e,31,5c,47,72,69,73,6f,66,74,5c,\
41,56,47,37,5c,61,76,67,61,6d,73,76,72,2e,65,78,65,00
"DisplayName"="AVG7 Alert Manager Server"
"DependOnService"=hex(7):52,50,43,53,53,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7Alrt\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7Alrt\Enum]
"0"="Root\\LEGACY_AVG7ALRT\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7Core]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000001
"Tag"=dword:00000001
"ImagePath"=hex(2):5c,53,79,73,74,65,6d,52,6f,6f,74,5c,53,79,73,74,65,6d,33,32,\
5c,44,72,69,76,65,72,73,5c,61,76,67,37,63,6f,72,65,2e,73,79,73,00
"DisplayName"="AVG7 Kernel"
"Group"="AVG"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7Core\Parameters]
"AvgDir"="C:\\PROGRA~1\\Grisoft\\AVG7\\"
"AvgLng"=dword:00000001
"TempDir"="C:\\DOCUME~1\\ALLUSE~1\\APPLIC~1\\Grisoft\\Avg7Data\\"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7Core\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7Core\Enum]
"0"="Root\\LEGACY_AVG7CORE\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7RsW]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000001
"Tag"=dword:00000002
"ImagePath"=hex(2):5c,53,79,73,74,65,6d,52,6f,6f,74,5c,53,79,73,74,65,6d,33,32,\
5c,44,72,69,76,65,72,73,5c,61,76,67,37,72,73,77,2e,73,79,73,00
"DisplayName"="AVG7 Wrap Driver"
"Group"="AVG"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7RsW\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7RsW\Enum]
"0"="Root\\LEGACY_AVG7RSW\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7RsXP]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000001
"Tag"=dword:00000003
"ImagePath"=hex(2):5c,53,79,73,74,65,6d,52,6f,6f,74,5c,53,79,73,74,65,6d,33,32,\
5c,44,72,69,76,65,72,73,5c,61,76,67,37,72,73,78,70,2e,73,79,73,00
"DisplayName"="AVG7 Resident Driver XP"
"Group"="AVG"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7RsXP\Parameters]
"Params"=dword:0000c007
"IgnoreFilesystem"=dword:000000c0
"Extensions"=hex:36,69,c4,8b,53,68,0c,c8,f7,fa,2a,09,15,f2,ab,88,44,3a,ca,67,\
e6,cf,eb,95,e5,93,34,f4,36,6a,c4,8b,53,3c,4d,8a,28,33,ed,c5,ca,2d,74,57,44,\
74,83,55,39,40,67,0b,3a,4c,eb,2b,36,3a,89,c9,8c,b7,d3,17,f7,ec,32,1a,ca,62,\
3b,15,9b,e5,15,c8,e6,9f,b8,d4,3a,01,a3,68,e9,b5,1b,54,53,68,0c,c8,f7,ad,7e,\
59,15,f2,ab,88,44,3a,ca,17,b5,de,f4,97,e5,93,34,f4,36,6a,c4,8b,53,2c,41,8b,\
28,33,ed,c5,ca,2d,74,57,44,77,84,54,39,40,67,0b,3a,4c,eb,2b,36,27,8b,c8,8c,\
b7,d3,17,f7,ec,32,1a,ca,61,24,14,9b,e5,15,c8,e6,9f,b8,d4,3a,1a,ae,6f,e9,b5,\
1b,54,53,68,0c,c8,f7,a0,7e,5e,15,f2,ab,88,44,3a,ca,17,e6,9f,f7,90,3a,4c,34,\
f4,36,6a,c4,8b,53,3e,5e,8c,28,33,ed,c5,ca,2d,74,57,44,76,87,52,39,40,67,0b,\
3a,4c,eb,2b,36,2f,9c,ce,8c,b7,d3,17,f7,ec,32,1a,ca,6b,3d,10,9b,e5,15,c8,e6,\
9f,b8,d4,3a,1c,a7,63,e9,b5,1b,54,53,68,0c,c8,f7,ec,66,52,ca,2d,ab,88,44,3a,\
ca,17,e6,d6,f6,9d,e5,93,34,f4,36,6a,c4,8b,14,2d,5c,82,28,33,ed,c5,ca,2d,74,\
57,44,7d,9a,5d,39,40,67,0b,3a,4c,eb,2b,36,6a,97,c1,53,68,d3,17,f7,ec,32,1a,\
ca,66,3a,1b,9b,e5,15,c8,e6,9f,b8,d4,3a,4c,af,66,36,6a,1b,54,53,68,0c,c8,f7,\
ab,61,57,15,f2,ab,88,44,3a,ca,17,e6,cc,ef,9a,e5,93,34,f4,36,6a,c4,8b,53,30,\
4f,87,28,33,ed,c5,ca,2d,74,57,44,3a,9c,58,e6,9f,67,0b,3a,4c,eb,2b,36,32,87,\
db,8c,b7,d3,17,f7,ec,32,1a,ca,60,33,07,9b,e5,15,c8,e6,9f,b8,d4,3a,1c,a3,7b,\
36,b5,1b,54,53,68,0c,c8,f7,aa,7b,4a,15,f2,ab,88,44,3a,ca,17,e6,9f,f4,84,3a,\
4c,34,f4,36,6a,c4,8b,53,2f,42,98,28,33,ed,c5,ca,2d,74,57,44,6e,85,47,39,40,\
67,0b,3a,4c,eb,2b,36,6a,94,db,53,68,d3,17,f7,ec,32,1a,ca,7f,37,04,9b,e5,15,\
c8,e6,9f,b8,d4,3a,1f,a3,78,e9,b5,1b,54,53,68,0c,c8,f7,a1,7f,49,15,f2,ab,88,\
44,3a,ca,17,e6,cc,e1,87,e5,93,34,f4,36,6a,c4,8b,53,2e,45,9c,28,33,ed,c5,ca,\
2d,74,57,44,7f,88,41,39,40,67,0b,3a,4c,eb,2b,36,39,86,dd,8c,b7,d3,17,f7,ec,\
32,1a,ca,75,36,01,9b,e5,15,c8,e6,9f,b8,d4,3a,08,b3,7d,e9,b5,1b,54,53,68,0c,\
c8,f7,aa,7f,4d,15,f2,ab,88,44,3a,ca,17,e6,9f,f4,8c,3a,4c,34,f4,36,6a,c4,8b,\
53,24,41,90,28,33,ed,c5,ca,2d,74,57,44,3a,86,4d,e6,9f,67,0b,3a,4c,eb,2b,c9,\
95,3b,74,53,68,0c,c8,f7,ec,32,1a,35,d2,8b,a8,44,3a,ca,17,e6,9f,b8,d4,c5,b3,\
14,d4,36,6a,c4,8b,53,68,0c,c8,08,13,cd,e5,ca,2d,74,57,44,3a,ca,17,19,60,47,\
2b,3a,4c,eb,2b,36,6a,c4,8b,ac,97,f3,37,f7,ec,32,1a,ca,2d,74,57,bb,c5,35,e8,\
e6,9f,b8,d4,3a,4c,eb,2b,c9,95,3b,74,53,68,0c,c8,f7,ec,32,1a,35,d2,8b,a8,44,\
3a,ca,17,e6,9f,b8,d4,c5,b3,14,d4,36,6a,c4,8b,53,68,0c,c8,08,13,cd,e5,ca,2d,\
74,57,44,3a,ca,17,0b,6d
"Security"=hex:01,00,04,90,00,00,00,00,00,00,00,00,00,00,00,00,14,00,00,00,02,\
00,20,00,01,00,00,00,00,03,18,00,ff,01,1f,00,01,02,00,00,00,00,00,05,20,00,\
00,00,20,02,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7RsXP\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7RsXP\Enum]
"0"="Root\\LEGACY_AVG7RSXP\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7UpdSvc]
"Type"=dword:00000010
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,3a,5c,50,52,4f,47,52,41,7e,31,5c,47,72,69,73,6f,66,74,5c,\
41,56,47,37,5c,61,76,67,75,70,73,76,63,2e,65,78,65,00
"DisplayName"="AVG7 Update Service"
"DependOnService"=hex(7):52,50,43,53,53,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7UpdSvc\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Avg7UpdSvc\Enum]
"0"="Root\\LEGACY_AVG7UPDSVC\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AvgClean]
"Type"=dword:00000001
"Start"=dword:00000001
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):5c,53,79,73,74,65,6d,52,6f,6f,74,5c,53,79,73,74,65,6d,33,32,\
5c,44,72,69,76,65,72,73,5c,61,76,67,63,6c,65,61,6e,2e,73,79,73,00
"DisplayName"="AVG7 Clean Driver"
"Group"="base"
"DependOnService"=hex(7):4e,74,66,73,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AvgClean\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AvgClean\Enum]
"0"="Root\\LEGACY_AVGCLEAN\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AVGEMS]
"Type"=dword:00000110
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,3a,5c,50,52,4f,47,52,41,7e,31,5c,47,72,69,73,6f,66,74,5c,\
41,56,47,37,5c,61,76,67,65,6d,63,2e,65,78,65,00
"DisplayName"="AVG E-mail Scanner"
"DependOnService"=hex(7):52,50,43,53,53,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AVGEMS\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AVGEMS\Enum]
"0"="Root\\LEGACY_AVGEMS\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AvgTdi]
"Type"=dword:00000001
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):5c,53,79,73,74,65,6d,52,6f,6f,74,5c,53,79,73,74,65,6d,33,32,\
5c,44,72,69,76,65,72,73,5c,61,76,67,74,64,69,2e,73,79,73,00
"DisplayName"="AVG Network Redirector"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AvgTdi\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AvgTdi\Enum]
"0"="Root\\LEGACY_AVGTDI\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BattC]
"MofImagePath"=hex(2):53,79,73,74,65,6d,33,32,5c,44,72,69,76,65,72,73,5c,62,61,\
74,74,63,2e,73,79,73,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Beep]
"ErrorControl"=dword:00000001
"Group"="Base"
"Start"=dword:00000001
"Tag"=dword:00000002
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Beep\Enum]
"0"="Root\\LEGACY_BEEP\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS]
"Type"=dword:00000020
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,\
32,5c,73,76,63,68,6f,73,74,2e,65,78,65,20,2d,6b,20,6e,65,74,73,76,63,73,00
"DisplayName"="Background Intelligent Transfer Service"
"DependOnService"=hex(7):52,70,63,53,73,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"
"Description"="Transfers data between clients and servers in the background. If BITS is disabled, features such as Windows Update will not work correctly."
"FailureActions"=hex:00,00,00,00,00,00,00,00,00,00,00,00,03,00,00,00,68,e3,0c,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Parameters]
"ServiceDll"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,\
5c,71,6d,67,72,2e,64,6c,6c,00

brispie · May 23, 2007

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\BITS\Enum]
"0"="Root\\LEGACY_BITS\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Browser]
"Type"=dword:00000020
"Start"=dword:00000002
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,\
32,5c,73,76,63,68,6f,73,74,2e,65,78,65,20,2d,6b,20,6e,65,74,73,76,63,73,00
"DisplayName"="Computer Browser"
"DependOnService"=hex(7):4c,61,6e,6d,61,6e,57,6f,72,6b,73,74,61,74,69,6f,6e,00,\
4c,61,6e,6d,61,6e,53,65,72,76,65,72,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"
"Description"="Maintains an updated list of computers on the network and supplies this list to computers designated as browsers. If this service is stopped, this list will not be updated or maintained. If this service is disabled, any services that explicitly depend on it will fail to start."

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Browser\Parameters]
"IsDomainMaster"="FALSE"
"MaintainServerList"="Auto"
"ServiceDll"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,53,79,73,74,65,6d,\
33,32,5c,62,72,6f,77,73,65,72,2e,64,6c,6c,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Browser\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,\
05,0b,00,00,00,00,00,18,00,9d,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,\
23,02,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,20,\
02,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,05,12,00,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Browser\Enum]
"0"="Root\\LEGACY_BROWSER\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cbidf2k]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:00000019
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cbidf2k\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cbidf2k\Parameters\PnpInterface]
"1"=dword:00000001
"5"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cd20xrnt]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:0000003a
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cd20xrnt\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cd20xrnt\Parameters\PnpInterface]
"1"=dword:00000011

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Cdaudio]
"ErrorControl"=dword:00000000
"Group"="Filter"
"Start"=dword:00000001
"Tag"=dword:00000006
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Cdaudio\Enum]
"Count"=dword:00000000
"NextInstance"=dword:00000000
"INITSTARTFAILED"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Cdfs]
"DependOnGroup"=hex(7):53,43,53,49,20,43,44,52,4f,4d,20,43,6c,61,73,73,00,00
"ErrorControl"=dword:00000001
"Group"="File system"
"Start"=dword:00000004
"Type"=dword:00000002

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Cdfs\Enum]
"0"="Root\\LEGACY_CDFS\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Cdrom]
"DependOnGroup"=hex(7):53,43,53,49,20,6d,69,6e,69,70,6f,72,74,00,00
"ErrorControl"=dword:00000001
"Group"="SCSI CDROM Class"
"Start"=dword:00000001
"Tag"=dword:00000002
"Type"=dword:00000001
"DisplayName"="CD-ROM Driver"
"ImagePath"=hex(2):73,79,73,74,65,6d,33,32,5c,44,52,49,56,45,52,53,5c,63,64,72,\
6f,6d,2e,73,79,73,00
"AutoRun"=dword:00000001
"AutoRunAlwaysDisable"=hex(7):4e,45,43,20,20,20,20,20,4d,42,52,2d,37,20,20,20,\
00,4e,45,43,20,20,20,20,20,4d,42,52,2d,37,2e,34,20,00,50,49,4f,4e,45,45,52,\
20,43,48,41,4e,47,52,20,44,52,4d,2d,31,38,30,34,58,00,50,49,4f,4e,45,45,52,\
20,43,44,2d,52,4f,4d,20,44,52,4d,2d,36,33,32,34,58,00,50,49,4f,4e,45,45,52,\
20,43,44,2d,52,4f,4d,20,44,52,4d,2d,36,32,34,58,20,00,54,4f,52,69,53,41,4e,\
20,43,44,2d,52,4f,4d,20,43,44,52,5f,43,33,36,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Cdrom\Enum]
"0"="IDE\\CdRomSONY_CD-RW__CRX320EE____________________RYK3____\\3032353030313630303030303533383520202020"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Changer]
"ErrorControl"=dword:00000000
"Group"="Filter"
"Start"=dword:00000001
"Tag"=dword:00000005
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CiSvc]
"DependOnService"=hex(7):52,50,43,53,53,00,00
"Description"="Indexes contents and properties of files on local and remote computers; provides rapid access to files through flexible querying language."
"DisplayName"="Indexing Service"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,\
32,5c,63,69,73,76,63,2e,65,78,65,00
"ObjectName"="LocalSystem"
"Start"=dword:00000003
"Type"=dword:00000120

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ClipSrv]
"DependOnService"=hex(7):4e,65,74,44,44,45,00,00
"Description"="Enables ClipBook Viewer to store information and share it with remote computers. If the service is stopped, ClipBook Viewer will not be able to share information with remote computers. If this service is disabled, any services that explicitly depend on it will fail to start."
"DisplayName"="ClipBook"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,33,\
32,5c,63,6c,69,70,73,72,76,2e,65,78,65,00
"ObjectName"="LocalSystem"
"Start"=dword:00000004
"Type"=dword:00000010

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ClipSrv\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,8d,00,02,00,01,01,00,00,00,00,00,\
05,0b,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,18,00,8d,00,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,\
02,00,00,00,00,14,00,9d,00,00,00,01,01,00,00,00,00,00,05,04,00,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\CmdIde]
"ErrorControl"=dword:00000001
"Group"="System Bus Extender"
"Start"=dword:00000004
"Tag"=dword:00000004
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService]
"Type"=dword:00000110

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService\Enum]
"0"="Root\\LEGACY_CMDSERVICE\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\COMSysApp]
"Type"=dword:00000010
"Start"=dword:00000003
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
64,6c,6c,68,6f,73,74,2e,65,78,65,20,2f,50,72,6f,63,65,73,73,69,64,3a,7b,30,\
32,44,34,42,33,46,31,2d,46,44,38,38,2d,31,31,44,31,2d,39,36,30,44,2d,30,30,\
38,30,35,46,43,37,39,32,33,35,7d,00
"DisplayName"="COM+ System Application"
"DependOnService"=hex(7):72,70,63,73,73,00,00
"DependOnGroup"=hex(7):00
"ObjectName"="LocalSystem"
"Description"="Manages the configuration and tracking of Component Object Model (COM)+-based components. If the service is stopped, most COM+-based components will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."
"FailureActions"=hex:1e,00,00,00,00,00,00,00,00,00,00,00,03,00,00,00,04,00,03,\
00,01,00,00,00,e8,03,00,00,01,00,00,00,88,13,00,00,00,00,00,00,e8,03,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\COMSysApp\Security]
"Security"=hex:01,00,14,80,90,00,00,00,9c,00,00,00,14,00,00,00,30,00,00,00,02,\
00,1c,00,01,00,00,00,02,80,14,00,ff,01,0f,00,01,01,00,00,00,00,00,01,00,00,\
00,00,02,00,60,00,04,00,00,00,00,00,14,00,fd,01,02,00,01,01,00,00,00,00,00,\
05,12,00,00,00,00,00,18,00,ff,01,0f,00,01,02,00,00,00,00,00,05,20,00,00,00,\
20,02,00,00,00,00,14,00,8d,01,02,00,01,01,00,00,00,00,00,05,0b,00,00,00,00,\
00,18,00,fd,01,02,00,01,02,00,00,00,00,00,05,20,00,00,00,23,02,00,00,01,01,\
00,00,00,00,00,05,12,00,00,00,01,01,00,00,00,00,00,05,12,00,00,00

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\COMSysApp\Enum]
"0"="Root\\LEGACY_COMSYSAPP\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ContentFilter]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ContentFilter\Linkage]
"Bind"="\\Dummy"
"Export"="\\Dummy"
"Route"="\\Dummy"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ContentFilter\Performance]
"Close"="DoneFILTERPerformanceData"
"Collect"="CollectFILTERPerformanceData"
"Open"="InitializeFILTERPerformanceData"
"Library"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,53,79,73,74,65,6d,33,\
32,5c,71,75,65,72,79,2e,64,6c,6c,00
"Last Counter"=dword:000008c8
"Last Help"=dword:000008c9
"First Counter"=dword:000008c2
"First Help"=dword:000008c3
"Object List"="2242"
"WbemAdapFileSignature"=hex:0e,5a,34,78,55,08,cd,55,5e,d1,bb,15,d3,71,55,79
"WbemAdapFileTime"=hex:00,5b,4e,ea,bd,79,c4,01
"WbemAdapFileSize"=dword:0015e800
"WbemAdapStatus"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ContentIndex]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ContentIndex\Linkage]
"Bind"="\\Dummy"
"Export"="\\Dummy"
"Route"="\\Dummy"

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ContentIndex\Performance]
"Close"="DoneCIPerformanceData"
"Collect"="CollectCIPerformanceData"
"Open"="InitializeCIPerformanceData"
"Library"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,53,79,73,74,65,6d,33,\
32,5c,71,75,65,72,79,2e,64,6c,6c,00
"Last Counter"=dword:000008c0
"Last Help"=dword:000008c1
"First Counter"=dword:000008aa
"First Help"=dword:000008ab
"Object List"="2218"
"WbemAdapFileSignature"=hex:0e,5a,34,78,55,08,cd,55,5e,d1,bb,15,d3,71,55,79
"WbemAdapFileTime"=hex:00,5b,4e,ea,bd,79,c4,01
"WbemAdapFileSize"=dword:0015e800
"WbemAdapStatus"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Cpqarray]
"ErrorControl"=dword:00000001
"Group"="SCSI miniport"
"Start"=dword:00000004
"Tag"=dword:00000100
"Type"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Cpqarray\Parameters]

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Cpqarray\Parameters\PnpInterface]
"2"=dword:00000001
"5"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Creative Service for CDROM Access]
"Type"=dword:00000010
"Start"=dword:00000004
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):43,3a,5c,57,49,4e,44,4f,57,53,5c,73,79,73,74,65,6d,33,32,5c,\
43,54,73,76,63,43,44,41,2e,65,78,65,00
"DisplayName"="Creative Service for CDROM Access"
"ObjectName"="LocalSystem"

Command Service

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

Security Expert: Emeritus

New member

New member

Security Expert: Emeritus

Security Expert: Emeritus

New member

New member

New member

New member

New member