Joined
·
74 Posts
SystemLook 30.07.11 by jpshortstuff
Log created at 17:39 on 22/04/2012 by Derek
Administrator - Elevation successful
========== dir ==========
c:\documents and settings\LocalService\Local Settings\Application Data - Parameters: "/sub"
---Files---
avqfnftv.log --a---- 551408 bytes [21:23 13/04/2012] [21:24 13/04/2012]
bnxbxwgj.log --a---- 0 bytes [18:21 06/04/2012] [18:21 06/04/2012]
bvgulmwm.log --a---- 239 bytes [21:24 13/04/2012] [22:16 16/04/2012]
eoemwbgq.log --a---- 4048 bytes [21:30 13/04/2012] [21:30 13/04/2012]
FontCache3.0.0.0.dat --a---- 296384 bytes [19:47 08/01/2012] [23:49 09/03/2012]
lxkvoxxm.log --a---- 2633 bytes [21:30 13/04/2012] [21:30 13/04/2012]
nqbpxwcp.log --a---- 120364 bytes [21:30 13/04/2012] [21:30 13/04/2012]
rftfdgcn.log --a---- 3265 bytes [21:24 13/04/2012] [21:24 13/04/2012]
tpyfnrir.log --a---- 0 bytes [18:21 06/04/2012] [21:42 13/04/2012]
uimqgfvs.log --a---- 0 bytes [23:40 12/03/2012] [23:40 12/03/2012]
WPFFontCache_v0400-S-1-5-21-117609710-682003330-1801674531-1003-0.dat --a---- 256768 bytes [22:30 23/02/2012] [22:30 23/02/2012]
WPFFontCache_v0400-System.dat --a---- 123526 bytes [22:30 23/02/2012] [22:30 23/02/2012]
wwvngfkl.log --a---- 0 bytes [23:04 17/03/2012] [21:43 13/04/2012]
yfjruipv.log --a---- 24 bytes [13:32 11/03/2012] [22:23 16/04/2012]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft d------ [18:39 03/05/2011]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Credentials d---s-- [18:39 03/05/2011]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19 d---s-- [18:39 03/05/2011]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Portable Devices d------ [10:27 15/05/2011]
wpdlog00.sqm --a---- 320 bytes [10:27 15/05/2011] [10:27 15/05/2011]
wpdlog01.sqm --a---- 290 bytes [21:19 23/02/2012] [21:19 23/02/2012]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Windows d------ [18:39 03/05/2011]
UsrClass.dat --a---- 8192 bytes [18:39 03/05/2011] [21:12 23/02/2012]
UsrClass.dat.LOG --ah--- 1024 bytes [18:39 03/05/2011] [16:25 22/04/2012]
c:\documents and settings\LocalService\Local Settings\Application Data\pxrnjgxj d------ [21:23 13/04/2012]
C:\Documents and Settings\Derek\Bmnw4HwPl - Unable to find folder.
C:\Documents and Settings\Derek\Desktop\UjPrn7vu - Unable to find folder.
C:\Documents and Settings\Derek\Local Settings\Application Data\462siw7cfe - Unable to find folder.
C:\Documents and Settings\All Users\Application Data\462siw7cfe - Unable to find folder.
C:\4dccc7ee1d20cbdce7877a489daa - Parameters: "/sub"
---Files---
$shtdwn$.req --ah--- 788 bytes [23:10 28/09/2011] [23:10 28/09/2011]
mrt.exe._p --a---- 854561 bytes [09:47 16/09/2011] [09:47 16/09/2011]
mrtstub.exe --a---- 83912 bytes [09:38 16/09/2011] [09:38 16/09/2011]
No folders found.
C:\ae4857cf8a2db1e047a0b67fde094f - Parameters: "/sub"
---Files---
None found.
C:\ae4857cf8a2db1e047a0b67fde094f\amd64 d------ [19:56 03/05/2011]
filterpipelineprintproc.dll ------- 147456 bytes [19:56 03/05/2011] [12:06 06/07/2008]
msxpsdrv.cat ------- 10929 bytes [19:56 03/05/2011] [12:06 06/07/2008]
msxpsdrv.inf ------- 2204 bytes [19:56 03/05/2011] [05:33 19/06/2008]
msxpsinc.gpd ------- 73 bytes [10:03 19/06/2008] [10:03 19/06/2008]
msxpsinc.ppd ------- 72 bytes [19:56 03/05/2011] [05:33 19/06/2008]
mxdwdrv.dll ------- 748032 bytes [19:56 03/05/2011] [12:06 06/07/2008]
xpssvcs.dll ------- 2936832 bytes [16:36 06/07/2008] [16:36 06/07/2008]
C:\ae4857cf8a2db1e047a0b67fde094f\i386 d------ [19:56 03/05/2011]
filterpipelineprintproc.dll ------- 189952 bytes [19:56 03/05/2011] [12:06 06/07/2008]
msxpsdrv.cat ------- 10929 bytes [19:56 03/05/2011] [12:06 06/07/2008]
msxpsdrv.inf ------- 2204 bytes [19:56 03/05/2011] [05:33 19/06/2008]
msxpsinc.gpd ------- 73 bytes [19:56 03/05/2011] [10:03 19/06/2008]
msxpsinc.ppd ------- 72 bytes [19:56 03/05/2011] [05:33 19/06/2008]
mxdwdrv.dll ------- 866304 bytes [19:56 03/05/2011] [12:06 06/07/2008]
xpssvcs.dll ------- 1777152 bytes [19:56 03/05/2011] [12:06 06/07/2008]
========== file ==========
c:\windows\system32\drivers\MyBusinessWorks.sys - File found and opened.
MD5: B8E08BFCAB2BE31804CEA983D2094FAF
Created at 14:00 on 14/05/2011
Modified at 06:17 on 29/03/2011
Size: 54776 bytes
Attributes: --a----
FileDescription: Mozy Change Monitor Filter Driver
FileVersion: 2,4,0,0
ProductVersion: 2,4,0,0
OriginalFilename: mozy.sys
InternalName: mozy.sys
ProductName: Mozy
CompanyName: Mozy, Inc.
LegalCopyright: Copyright © 2005-2010 - Mozy, Inc.
c:\program files\MozyPro (Corporate Edition)\MyBusinessWorksstat.exe - File found and opened.
MD5: DD6550A84EA03C97DE5F0FB62D5EA80F
Created at 06:17 on 29/03/2011
Modified at 06:17 on 29/03/2011
Size: 3571520 bytes
Attributes: --a----
FileDescription: MozyPro Remote Backup Status Application
FileVersion: 2.4.3.0
ProductVersion: 2.4.0.0
InternalName: stat.exe
ProductName: MozyPro Remote Backup
CompanyName: MyBusinessWorks
LegalCopyright: Copyright © 2005-2008 - %1%ntest
C:\Documents and Settings\Derek\Bmnw4HwPl - File found and opened.
MD5: F0E3970EA616B1217D7663AB4878EAB7
Created at 21:29 on 13/04/2012
Modified at 21:29 on 13/04/2012
Size: 98224 bytes
Attributes: --ah---
No version information available.
C:\Documents and Settings\Derek\Desktop\UjPrn7vu - File found and opened.
MD5: F0E3970EA616B1217D7663AB4878EAB7
Created at 21:00 on 13/04/2012
Modified at 21:00 on 13/04/2012
Size: 98224 bytes
Attributes: --ah---
No version information available.
C:\Documents and Settings\Derek\Local Settings\Application Data\462siw7cfe - File found and opened.
MD5: F3E6467D8BB9138F88DDCA8DCFE9BC49
Created at 11:06 on 21/05/2011
Modified at 12:23 on 21/05/2011
Size: 11878 bytes
Attributes: --ahs--
No version information available.
C:\Documents and Settings\All Users\Application Data\462siw7cfe - File found and opened.
MD5: F3E6467D8BB9138F88DDCA8DCFE9BC49
Created at 11:06 on 21/05/2011
Modified at 12:23 on 21/05/2011
Size: 11878 bytes
Attributes: --ahs--
No version information available.
========== filefind ==========
Searching for "*462siw7cfe*"
C:\Documents and Settings\All Users\Application Data\462siw7cfe --ahs-- 11878 bytes [11:06 21/05/2011] [12:23 21/05/2011] F3E6467D8BB9138F88DDCA8DCFE9BC49
C:\Documents and Settings\Derek\Local Settings\Application Data\462siw7cfe --ahs-- 11878 bytes [11:06 21/05/2011] [12:23 21/05/2011] F3E6467D8BB9138F88DDCA8DCFE9BC49
C:\Documents and Settings\Derek\Templates\462siw7cfe --ahs-- 11878 bytes [11:06 21/05/2011] [12:23 21/05/2011] F3E6467D8BB9138F88DDCA8DCFE9BC49
Searching for "*UjPrn7vu*"
C:\Documents and Settings\Derek\Desktop\UjPrn7vu --ah--- 98224 bytes [21:00 13/04/2012] [21:00 13/04/2012] F0E3970EA616B1217D7663AB4878EAB7
Searching for "*Bmnw4HwPl*"
C:\Documents and Settings\Derek\Bmnw4HwPl --ah--- 98224 bytes [21:29 13/04/2012] [21:29 13/04/2012] F0E3970EA616B1217D7663AB4878EAB7
Searching for "*Micorsoft*"
C:\Qoobox\Quarantine\Registry_backups\Legacy_MICORSOFT_WINDOWS_SERVICE.reg.dat --a---- 1304 bytes [21:17 13/04/2012] [21:17 13/04/2012] 8E771BAB94713F4A4AA3DF67BD558386
C:\Qoobox\Quarantine\Registry_backups\Service_Micorsoft Windows Service.reg.dat --a---- 2888 bytes [21:17 13/04/2012] [21:17 13/04/2012] 8AA8196C8058931E1BEE253595CA9736
========== folderfind ==========
Searching for "*462siw7cfe*"
No folders found.
Searching for "*UjPrn7vu*"
No folders found.
Searching for "*Bmnw4HwPl*"
No folders found.
Searching for "*Micorsoft*"
No folders found.
========== regfind ==========
Searching for "Micorsoft"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"Service"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"DeviceDesc"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Micorsoft Windows Service]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Micorsoft Windows Service]
"DisplayName"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"Service"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"DeviceDesc"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000\Control]
"ActiveService"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Micorsoft Windows Service]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Micorsoft Windows Service]
"DisplayName"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Micorsoft Windows Service\Enum]
"0"="Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Micorsoft Windows Service]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Micorsoft Windows Service]
"DisplayName"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"Service"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"DeviceDesc"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000\Control]
"ActiveService"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Micorsoft Windows Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Micorsoft Windows Service]
"DisplayName"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Micorsoft Windows Service\Enum]
"0"="Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000"
-= EOF =-
Log created at 17:39 on 22/04/2012 by Derek
Administrator - Elevation successful
========== dir ==========
c:\documents and settings\LocalService\Local Settings\Application Data - Parameters: "/sub"
---Files---
avqfnftv.log --a---- 551408 bytes [21:23 13/04/2012] [21:24 13/04/2012]
bnxbxwgj.log --a---- 0 bytes [18:21 06/04/2012] [18:21 06/04/2012]
bvgulmwm.log --a---- 239 bytes [21:24 13/04/2012] [22:16 16/04/2012]
eoemwbgq.log --a---- 4048 bytes [21:30 13/04/2012] [21:30 13/04/2012]
FontCache3.0.0.0.dat --a---- 296384 bytes [19:47 08/01/2012] [23:49 09/03/2012]
lxkvoxxm.log --a---- 2633 bytes [21:30 13/04/2012] [21:30 13/04/2012]
nqbpxwcp.log --a---- 120364 bytes [21:30 13/04/2012] [21:30 13/04/2012]
rftfdgcn.log --a---- 3265 bytes [21:24 13/04/2012] [21:24 13/04/2012]
tpyfnrir.log --a---- 0 bytes [18:21 06/04/2012] [21:42 13/04/2012]
uimqgfvs.log --a---- 0 bytes [23:40 12/03/2012] [23:40 12/03/2012]
WPFFontCache_v0400-S-1-5-21-117609710-682003330-1801674531-1003-0.dat --a---- 256768 bytes [22:30 23/02/2012] [22:30 23/02/2012]
WPFFontCache_v0400-System.dat --a---- 123526 bytes [22:30 23/02/2012] [22:30 23/02/2012]
wwvngfkl.log --a---- 0 bytes [23:04 17/03/2012] [21:43 13/04/2012]
yfjruipv.log --a---- 24 bytes [13:32 11/03/2012] [22:23 16/04/2012]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft d------ [18:39 03/05/2011]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Credentials d---s-- [18:39 03/05/2011]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19 d---s-- [18:39 03/05/2011]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Portable Devices d------ [10:27 15/05/2011]
wpdlog00.sqm --a---- 320 bytes [10:27 15/05/2011] [10:27 15/05/2011]
wpdlog01.sqm --a---- 290 bytes [21:19 23/02/2012] [21:19 23/02/2012]
c:\documents and settings\LocalService\Local Settings\Application Data\Microsoft\Windows d------ [18:39 03/05/2011]
UsrClass.dat --a---- 8192 bytes [18:39 03/05/2011] [21:12 23/02/2012]
UsrClass.dat.LOG --ah--- 1024 bytes [18:39 03/05/2011] [16:25 22/04/2012]
c:\documents and settings\LocalService\Local Settings\Application Data\pxrnjgxj d------ [21:23 13/04/2012]
C:\Documents and Settings\Derek\Bmnw4HwPl - Unable to find folder.
C:\Documents and Settings\Derek\Desktop\UjPrn7vu - Unable to find folder.
C:\Documents and Settings\Derek\Local Settings\Application Data\462siw7cfe - Unable to find folder.
C:\Documents and Settings\All Users\Application Data\462siw7cfe - Unable to find folder.
C:\4dccc7ee1d20cbdce7877a489daa - Parameters: "/sub"
---Files---
$shtdwn$.req --ah--- 788 bytes [23:10 28/09/2011] [23:10 28/09/2011]
mrt.exe._p --a---- 854561 bytes [09:47 16/09/2011] [09:47 16/09/2011]
mrtstub.exe --a---- 83912 bytes [09:38 16/09/2011] [09:38 16/09/2011]
No folders found.
C:\ae4857cf8a2db1e047a0b67fde094f - Parameters: "/sub"
---Files---
None found.
C:\ae4857cf8a2db1e047a0b67fde094f\amd64 d------ [19:56 03/05/2011]
filterpipelineprintproc.dll ------- 147456 bytes [19:56 03/05/2011] [12:06 06/07/2008]
msxpsdrv.cat ------- 10929 bytes [19:56 03/05/2011] [12:06 06/07/2008]
msxpsdrv.inf ------- 2204 bytes [19:56 03/05/2011] [05:33 19/06/2008]
msxpsinc.gpd ------- 73 bytes [10:03 19/06/2008] [10:03 19/06/2008]
msxpsinc.ppd ------- 72 bytes [19:56 03/05/2011] [05:33 19/06/2008]
mxdwdrv.dll ------- 748032 bytes [19:56 03/05/2011] [12:06 06/07/2008]
xpssvcs.dll ------- 2936832 bytes [16:36 06/07/2008] [16:36 06/07/2008]
C:\ae4857cf8a2db1e047a0b67fde094f\i386 d------ [19:56 03/05/2011]
filterpipelineprintproc.dll ------- 189952 bytes [19:56 03/05/2011] [12:06 06/07/2008]
msxpsdrv.cat ------- 10929 bytes [19:56 03/05/2011] [12:06 06/07/2008]
msxpsdrv.inf ------- 2204 bytes [19:56 03/05/2011] [05:33 19/06/2008]
msxpsinc.gpd ------- 73 bytes [19:56 03/05/2011] [10:03 19/06/2008]
msxpsinc.ppd ------- 72 bytes [19:56 03/05/2011] [05:33 19/06/2008]
mxdwdrv.dll ------- 866304 bytes [19:56 03/05/2011] [12:06 06/07/2008]
xpssvcs.dll ------- 1777152 bytes [19:56 03/05/2011] [12:06 06/07/2008]
========== file ==========
c:\windows\system32\drivers\MyBusinessWorks.sys - File found and opened.
MD5: B8E08BFCAB2BE31804CEA983D2094FAF
Created at 14:00 on 14/05/2011
Modified at 06:17 on 29/03/2011
Size: 54776 bytes
Attributes: --a----
FileDescription: Mozy Change Monitor Filter Driver
FileVersion: 2,4,0,0
ProductVersion: 2,4,0,0
OriginalFilename: mozy.sys
InternalName: mozy.sys
ProductName: Mozy
CompanyName: Mozy, Inc.
LegalCopyright: Copyright © 2005-2010 - Mozy, Inc.
c:\program files\MozyPro (Corporate Edition)\MyBusinessWorksstat.exe - File found and opened.
MD5: DD6550A84EA03C97DE5F0FB62D5EA80F
Created at 06:17 on 29/03/2011
Modified at 06:17 on 29/03/2011
Size: 3571520 bytes
Attributes: --a----
FileDescription: MozyPro Remote Backup Status Application
FileVersion: 2.4.3.0
ProductVersion: 2.4.0.0
InternalName: stat.exe
ProductName: MozyPro Remote Backup
CompanyName: MyBusinessWorks
LegalCopyright: Copyright © 2005-2008 - %1%ntest
C:\Documents and Settings\Derek\Bmnw4HwPl - File found and opened.
MD5: F0E3970EA616B1217D7663AB4878EAB7
Created at 21:29 on 13/04/2012
Modified at 21:29 on 13/04/2012
Size: 98224 bytes
Attributes: --ah---
No version information available.
C:\Documents and Settings\Derek\Desktop\UjPrn7vu - File found and opened.
MD5: F0E3970EA616B1217D7663AB4878EAB7
Created at 21:00 on 13/04/2012
Modified at 21:00 on 13/04/2012
Size: 98224 bytes
Attributes: --ah---
No version information available.
C:\Documents and Settings\Derek\Local Settings\Application Data\462siw7cfe - File found and opened.
MD5: F3E6467D8BB9138F88DDCA8DCFE9BC49
Created at 11:06 on 21/05/2011
Modified at 12:23 on 21/05/2011
Size: 11878 bytes
Attributes: --ahs--
No version information available.
C:\Documents and Settings\All Users\Application Data\462siw7cfe - File found and opened.
MD5: F3E6467D8BB9138F88DDCA8DCFE9BC49
Created at 11:06 on 21/05/2011
Modified at 12:23 on 21/05/2011
Size: 11878 bytes
Attributes: --ahs--
No version information available.
========== filefind ==========
Searching for "*462siw7cfe*"
C:\Documents and Settings\All Users\Application Data\462siw7cfe --ahs-- 11878 bytes [11:06 21/05/2011] [12:23 21/05/2011] F3E6467D8BB9138F88DDCA8DCFE9BC49
C:\Documents and Settings\Derek\Local Settings\Application Data\462siw7cfe --ahs-- 11878 bytes [11:06 21/05/2011] [12:23 21/05/2011] F3E6467D8BB9138F88DDCA8DCFE9BC49
C:\Documents and Settings\Derek\Templates\462siw7cfe --ahs-- 11878 bytes [11:06 21/05/2011] [12:23 21/05/2011] F3E6467D8BB9138F88DDCA8DCFE9BC49
Searching for "*UjPrn7vu*"
C:\Documents and Settings\Derek\Desktop\UjPrn7vu --ah--- 98224 bytes [21:00 13/04/2012] [21:00 13/04/2012] F0E3970EA616B1217D7663AB4878EAB7
Searching for "*Bmnw4HwPl*"
C:\Documents and Settings\Derek\Bmnw4HwPl --ah--- 98224 bytes [21:29 13/04/2012] [21:29 13/04/2012] F0E3970EA616B1217D7663AB4878EAB7
Searching for "*Micorsoft*"
C:\Qoobox\Quarantine\Registry_backups\Legacy_MICORSOFT_WINDOWS_SERVICE.reg.dat --a---- 1304 bytes [21:17 13/04/2012] [21:17 13/04/2012] 8E771BAB94713F4A4AA3DF67BD558386
C:\Qoobox\Quarantine\Registry_backups\Service_Micorsoft Windows Service.reg.dat --a---- 2888 bytes [21:17 13/04/2012] [21:17 13/04/2012] 8AA8196C8058931E1BEE253595CA9736
========== folderfind ==========
Searching for "*462siw7cfe*"
No folders found.
Searching for "*UjPrn7vu*"
No folders found.
Searching for "*Bmnw4HwPl*"
No folders found.
Searching for "*Micorsoft*"
No folders found.
========== regfind ==========
Searching for "Micorsoft"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"Service"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"DeviceDesc"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Micorsoft Windows Service]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Micorsoft Windows Service]
"DisplayName"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"Service"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"DeviceDesc"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000\Control]
"ActiveService"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Micorsoft Windows Service]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Micorsoft Windows Service]
"DisplayName"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Micorsoft Windows Service\Enum]
"0"="Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Micorsoft Windows Service]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Micorsoft Windows Service]
"DisplayName"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"Service"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000]
"DeviceDesc"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000\Control]
"ActiveService"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Micorsoft Windows Service]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Micorsoft Windows Service]
"DisplayName"="Micorsoft Windows Service"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Micorsoft Windows Service\Enum]
"0"="Root\LEGACY_MICORSOFT_WINDOWS_SERVICE\0000"
-= EOF =-