home *** CD-ROM | disk | FTP | other *** search
/ PC World Komputer 2010 April / PCWorld0410.iso / winbuilder.7z / Projects / VistaPE-Core / Addons / share.script < prev    next >
INI File  |  2010-02-10  |  49KB  |  336 lines
  1. [main]
  2. Title=File Sharing
  3. Description=Request Windows Vista as source
  4. Selected=False
  5. Level=3
  6. Locked=false
  7. Author=Steelbone, NightMan
  8. Version=12
  9. Contact=vistape@vistape.net
  10. Date=09.03.2008
  11. Credits=
  12. Updates=
  13. Download_Level=1
  14.  
  15. [process]
  16. Echo,"Processing File Sharing script..."
  17. #ReadENV
  18. IniRead,%VistaInfo%,"VistaInfo","SourceType","%SourceType%"
  19. If,"%SourceType%",NotEqual,"VistaCD",Exit,"Request Windows Vista DVD..."
  20. IniRead,%VistaInfo%,"VistaInfo","Language","%DistLang%"
  21. FileCopy,"%InstallSRC%\Windows\System32\browser.dll","%TargetDir%\Windows\System32"
  22. FileCopy,"%InstallSRC%\Windows\System32\lanman.drv","%TargetDir%\Windows\System32"
  23. FileCopy,"%InstallSRC%\Windows\System32\netman.dll","%TargetDir%\Windows\System32"
  24. FileCopy,"%InstallSRC%\Windows\System32\netprof.dll","%TargetDir%\Windows\System32"
  25. FileCopy,"%InstallSRC%\Windows\System32\nlasvc.dll","%TargetDir%\Windows\System32"
  26. FileCopy,"%InstallSRC%\Windows\System32\samsrv.dll","%TargetDir%\Windows\System32"
  27. FileCopy,"%InstallSRC%\Windows\System32\sens.dll","%TargetDir%\Windows\System32"
  28. FileCopy,"%InstallSRC%\Windows\System32\shrpubw.exe","%TargetDir%\Windows\System32"
  29. FileCopy,"%InstallSRC%\Windows\System32\srvsvc.dll","%TargetDir%\Windows\System32"
  30. FileCopy,"%InstallSRC%\Windows\System32\sscore.dll","%TargetDir%\Windows\System32"
  31. FileCopy,"%InstallSRC%\Windows\System32\Drivers\srv2.sys","%TargetDir%\Windows\System32\Drivers"
  32. FileCopy,"%InstallSRC%\Windows\System32\Drivers\srv.sys","%TargetDir%\Windows\System32\Drivers"
  33. FileCopy,"%InstallSRC%\Windows\System32\Drivers\srvnet.sys","%TargetDir%\Windows\System32\Drivers"
  34. FileCopy,"%InstallSRC%\Windows\System32\%DistLang%\shrpubw.exe.mui","%TargetDir%\Windows\System32\%DistLang%"
  35. FileCopy,"%InstallSRC%\Windows\System32\%DistLang%\browser.dll.mui","%TargetDir%\Windows\System32\%DistLang%"
  36. FileCopy,"%InstallSRC%\Windows\System32\%DistLang%\netman.dll.mui","%TargetDir%\Windows\System32\%DistLang%"
  37. FileCopy,"%InstallSRC%\Windows\System32\%DistLang%\netprof.dll.mui","%TargetDir%\Windows\System32\%DistLang%"
  38. FileCopy,"%InstallSRC%\Windows\System32\%DistLang%\nlasvc.dll.mui","%TargetDir%\Windows\System32\%DistLang%"
  39. FileCopy,"%InstallSRC%\Windows\System32\%DistLang%\sens.dll.mui","%TargetDir%\Windows\System32\%DistLang%"
  40. FileCopy,"%InstallSRC%\Windows\System32\%DistLang%\shrpubw.exe.mui","%TargetDir%\Windows\System32\%DistLang%"
  41. FileCopy,"%InstallSRC%\Windows\System32\%DistLang%\sscore.dll.mui","%TargetDir%\Windows\System32\%DistLang%"
  42. #
  43. FileCopy,"%InstallSRC%\Windows\System32\ntshrui.dll","%TargetDir%\Windows\System32"
  44. FileCopy,"%InstallSRC%\Windows\System32\%DistLang%\ntshrui.dll.mui","%TargetDir%\Windows\System32\%DistLang%"
  45. #
  46. RegHiveLoad,"WB-System","%RegSystem%"
  47. RegHiveLoad,"WB-Software","%RegSoftware%"
  48. RegHiveLoad,"WB-Default","%RegUser%"
  49. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\Browser","DisplayName","@%systemroot%\system32\browser.dll,-100"
  50. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\Browser","Group","NetworkProvider"
  51. RegWrite,"HKLM","0x2","WB-System\ControlSet001\Services\Browser","ImagePath","%SystemRoot%\System32\svchost.exe -k netsvcs"
  52. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\Browser","Description","@%systemroot%\system32\browser.dll,-101"
  53. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\Browser","ObjectName","LocalSystem"
  54. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\Browser","ErrorControl","1"
  55. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\Browser","Start","2"
  56. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\Browser","Type","32"
  57. RegWrite,"HKLM","0x7","WB-System\ControlSet001\Services\Browser","DependOnService","LanmanWorkstation","LanmanServer"
  58. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\Browser","FailureActions","84","03","00","00","00","00","00","00","00","00","00","00","03","00","00","00","14","00","00","00","01","00","00","00","c0","d4","01","00","01","00","00","00","e0","93","04","00","00","00","00","00","00","00","00","00"
  59. RegWrite,"HKLM","0x2","WB-System\ControlSet001\Services\Browser\Parameters","ServiceDll","%SystemRoot%\System32\browser.dll"
  60. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\Browser\Parameters","ServiceDllUnloadOnStop","1"
  61. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\Browser\Parameters","MaintainServerList","Auto"
  62. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\Browser\Enum","0","Root\LEGACY_BROWSER\0000"
  63. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\Browser\Enum","Count","1"
  64. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\Browser\Enum","NextInstance","1"
  65. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\LanmanServer","DisplayName","@%systemroot%\system32\srvsvc.dll,-100"
  66. RegWrite,"HKLM","0x2","WB-System\ControlSet001\Services\LanmanServer","ImagePath","%SystemRoot%\system32\svchost.exe -k netsvcs"
  67. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\LanmanServer","Description","@%systemroot%\system32\srvsvc.dll,-101"
  68. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\LanmanServer","ObjectName","LocalSystem"
  69. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer","ErrorControl","1"
  70. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer","Start","2"
  71. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer","Type","32"
  72. RegWrite,"HKLM","0x7","WB-System\ControlSet001\Services\LanmanServer","DependOnService","SamSS","Srv"
  73. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer","ServiceSidType","1"
  74. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer","FailureActions","80","51","01","00","00","00","00","00","00","00","00","00","03","00","00","00","14","00","00","00","01","00","00","00","60","ea","00","00","01","00","00","00","c0","d4","01","00","00","00","00","00","00","00","00","00"
  75. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcConfigInfo","01","00","04","80","a0","00","00","00","ac","00","00","00","00","00","00","00","14","00","00","00","02","00","8c","00","06","00","00","00","00","00","18","00","17","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","17","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","14","00","17","00","0f","00","01","01","00","00","00","00","00","05","12","00","00","00","00","00","18","00","03","00","00","00","01","02","00","00","00","00","00","05","20","00","00","00","23","02","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","01","00","00","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","05","07","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  76. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcTransportEnum","01","00","04","80","8c","00","00","00","98","00","00","00","00","00","00","00","14","00","00","00","02","00","78","00","05","00","00","00","00","00","18","00","17","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","17","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","14","00","17","00","0f","00","01","01","00","00","00","00","00","05","12","00","00","00","00","00","18","00","03","00","00","00","01","02","00","00","00","00","00","05","20","00","00","00","23","02","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","05","0b","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  77. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcConnection","01","00","04","80","7c","00","00","00","88","00","00","00","00","00","00","00","14","00","00","00","02","00","68","00","04","00","00","00","00","00","18","00","01","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","01","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","18","00","01","00","00","00","01","02","00","00","00","00","00","05","20","00","00","00","26","02","00","00","00","00","18","00","01","00","00","00","01","02","00","00","00","00","00","05","20","00","00","00","23","02","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  78. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcServerDiskEnum","01","00","04","80","4c","00","00","00","58","00","00","00","00","00","00","00","14","00","00","00","02","00","38","00","02","00","00","00","00","00","18","00","01","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","01","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  79. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcFile","01","00","04","80","64","00","00","00","70","00","00","00","00","00","00","00","14","00","00","00","02","00","50","00","03","00","00","00","00","00","18","00","11","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","11","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","18","00","11","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","23","02","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  80. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcSessionInfo","01","00","04","80","78","00","00","00","84","00","00","00","00","00","00","00","14","00","00","00","02","00","64","00","04","00","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","23","02","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","05","0b","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  81. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcShareFileInfo","01","00","04","80","a0","00","00","00","ac","00","00","00","00","00","00","00","14","00","00","00","02","00","8c","00","06","00","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","23","02","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","01","00","00","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","05","07","00","00","00","00","00","14","00","02","00","00","00","01","01","00","00","00","00","00","05","04","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  82. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcSharePrintInfo","01","00","04","80","b8","00","00","00","c4","00","00","00","00","00","00","00","14","00","00","00","02","00","a4","00","07","00","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","26","02","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","23","02","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","01","00","00","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","05","07","00","00","00","00","00","14","00","02","00","00","00","01","01","00","00","00","00","00","05","04","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  83. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcShareAdminInfo","01","00","04","80","8c","00","00","00","98","00","00","00","00","00","00","00","14","00","00","00","02","00","78","00","05","00","00","00","00","00","18","00","13","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","02","00","00","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","18","00","02","00","00","00","01","02","00","00","00","00","00","05","20","00","00","00","23","02","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","01","00","00","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","05","07","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  84. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcShareConnect","01","00","04","80","8c","00","00","00","98","00","00","00","00","00","00","00","14","00","00","00","02","00","78","00","05","00","00","00","00","00","18","00","03","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","03","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","18","00","03","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","27","02","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","01","00","00","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","05","07","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  85. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcShareAdminConnect","01","00","04","80","78","00","00","00","84","00","00","00","00","00","00","00","14","00","00","00","02","00","64","00","04","00","00","00","00","00","18","00","03","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","03","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","18","00","03","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","27","02","00","00","00","00","14","00","03","00","0f","00","01","01","00","00","00","00","00","05","04","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  86. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SrvsvcStatisticsInfo","01","00","04","80","60","00","00","00","6c","00","00","00","00","00","00","00","14","00","00","00","02","00","4c","00","03","00","00","00","00","00","18","00","01","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","01","00","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","14","00","01","00","00","00","01","01","00","00","00","00","00","02","00","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  87. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","AnonymousDescriptorsUpgraded","1"
  88. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","PreviousAnonymousRestriction","0"
  89. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","SessionSecurityDescriptorRegenerated","1"
  90. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\DefaultSecurity","InteractiveDescriptorsRegenerated","0"
  91. RegWrite,"HKLM","0x7","WB-System\ControlSet001\Services\LanmanServer\Linkage","Bind","\Device\Smb_Tcpip_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\Smb_Tcpip6_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\NetbiosSmb","\Device\Tcpip6_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\Tcpip_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\NetBT_Tcpip_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\NetBT_Tcpip6_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}"
  92. RegWrite,"HKLM","0x7","WB-System\ControlSet001\Services\LanmanServer\Linkage","Route",""Smb" "Tcpip" "{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}"",""Smb" "Tcpip6" "{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}"",""NetbiosSmb"",""Tcpip6" "{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}"",""Tcpip" "{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}"",""NetBT" "Tcpip" "{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}"",""NetBT" "Tcpip6" "{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}""
  93. RegWrite,"HKLM","0x7","WB-System\ControlSet001\Services\LanmanServer\Linkage","Export","\Device\LanmanServer_Smb_Tcpip_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\LanmanServer_Smb_Tcpip6_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\LanmanServer_NetbiosSmb","\Device\LanmanServer_Tcpip6_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\LanmanServer_Tcpip_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\LanmanServer_NetBT_Tcpip_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}","\Device\LanmanServer_NetBT_Tcpip6_{AE63B719-1F97-46A5-8448-3E7EC85FA2BC}"
  94. RegWrite,"HKLM","0x2","WB-System\ControlSet001\Services\LanmanServer\Parameters","ServiceDll","%SystemRoot%\system32\srvsvc.dll"
  95. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Parameters","ServiceDllUnloadOnStop","1"
  96. RegWrite,"HKLM","0x7","WB-System\ControlSet001\Services\LanmanServer\Parameters","NullSessionPipes","netlogon","lsarpc","samr","browser"
  97. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Parameters","autodisconnect","15"
  98. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Parameters","enableforcedlogoff","1"
  99. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Parameters","enablesecuritysignature","0"
  100. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Parameters","requiresecuritysignature","0"
  101. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Parameters","restrictnullsessaccess","1"
  102. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Parameters","Lmannounce","0"
  103. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Parameters","Size","1"
  104. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Parameters","AdjustedNullSessionPipes","2"
  105. RegWrite,"HKLM","0x3","WB-System\ControlSet001\Services\LanmanServer\Parameters","Guid","e0","3c","5e","a9","b7","88","ab","44","b2","df","b9","6f","5d","44","87","7c"
  106. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\LanmanServer\Enum","0","Root\LEGACY_LANMANSERVER\0000"
  107. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Enum","Count","1"
  108. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\LanmanServer\Enum","NextInstance","1"
  109. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\SamSs","Description","@%SystemRoot%\system32\samsrv.dll,-2"
  110. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\SamSs","DisplayName","@%SystemRoot%\system32\samsrv.dll,-1"
  111. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\SamSs","ErrorControl","1"
  112. RegWrite,"HKLM","0x2","wb-system\ControlSet001\Services\SamSs","ImagePath","%SystemRoot%\system32\lsass.exe"
  113. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\SamSs","ObjectName","LocalSystem"
  114. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\SamSs","Start","2"
  115. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\SamSs","Type","32"
  116. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\SamSs","Group","MS_WindowsLocalValidation"
  117. RegWrite,"HKLM","0x7","wb-system\ControlSet001\Services\SamSs","DependOnService","RPCSS"
  118. RegWrite,"HKLM","0x3","wb-system\ControlSet001\Services\SamSs\Security","Security","01","00","14","80","90","00","00","00","9c","00","00","00","14","00","00","00","30","00","00","00","02","00","1c","00","01","00","00","00","02","80","14","00","ff","01","0f","00","01","01","00","00","00","00","00","01","00","00","00","00","02","00","60","00","04","00","00","00","00","00","14","00","8d","00","02","00","01","01","00","00","00","00","00","05","0b","00","00","00","00","00","18","00","ff","01","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","14","00","8d","00","00","00","01","01","00","00","00","00","00","05","04","00","00","00","00","00","18","00","8d","00","00","00","01","02","00","00","00","00","00","05","20","00","00","00","21","02","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  119. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\srv2","DisplayName","srv2"
  120. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\srv2","Group","Network"
  121. RegWrite,"HKLM","0x2","WB-System\ControlSet001\Services\srv2","ImagePath","System32\DRIVERS\srv2.sys"
  122. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\srv2","Description","Default SDDL for Windows Resource Protected file"
  123. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv2","ErrorControl","1"
  124. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv2","Start","3"
  125. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv2","Type","2"
  126. RegWrite,"HKLM","0x7","WB-System\ControlSet001\Services\srv2","DependOnService","srvnet"
  127. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\srv2\Enum","0","Root\LEGACY_SRV2\0000"
  128. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv2\Enum","Count","1"
  129. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv2\Enum","NextInstance","1"
  130. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\srv","Group","Network"
  131. RegWrite,"HKLM","0x2","WB-System\ControlSet001\Services\srv","ImagePath","System32\DRIVERS\srv.sys"
  132. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv","ErrorControl","1"
  133. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv","Start","3"
  134. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv","Type","2"
  135. RegWrite,"HKLM","0x7","WB-System\ControlSet001\Services\srv","DependOnService","srv2"
  136. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\srv\Enum","0","Root\LEGACY_SRV\0000"
  137. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv\Enum","Count","1"
  138. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srv\Enum","NextInstance","1"
  139. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\srvnet","Group","Network"
  140. RegWrite,"HKLM","0x2","WB-System\ControlSet001\Services\srvnet","ImagePath","System32\DRIVERS\srvnet.sys"
  141. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srvnet","ErrorControl","1"
  142. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srvnet","Start","3"
  143. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srvnet","Type","2"
  144. RegWrite,"HKLM","0x1","WB-System\ControlSet001\Services\srvnet\Enum","0","Root\LEGACY_SRVNET\0000"
  145. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srvnet\Enum","Count","1"
  146. RegWrite,"HKLM","0x4","WB-System\ControlSet001\Services\srvnet\Enum","NextInstance","1"
  147. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_BROWSER","NextInstance","1"
  148. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_BROWSER\0000","Service","Browser"
  149. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_BROWSER\0000","Legacy","1"
  150. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_BROWSER\0000","ConfigFlags","0"
  151. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_BROWSER\0000","Class","LegacyDriver"
  152. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_BROWSER\0000","ClassGUID","{8ECC055D-047F-11D1-A537-0000F8753ED1}"
  153. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_BROWSER\0000","DeviceDesc","@%systemroot%\system32\browser.dll,-100"
  154. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_BROWSER\0000\Control","*NewlyCreated*","0"
  155. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_LANMANSERVER","NextInstance","1"
  156. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_LANMANSERVER\0000","Service","LanmanServer"
  157. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_LANMANSERVER\0000","Legacy","1"
  158. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_LANMANSERVER\0000","ConfigFlags","0"
  159. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_LANMANSERVER\0000","Class","LegacyDriver"
  160. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_LANMANSERVER\0000","ClassGUID","{8ECC055D-047F-11D1-A537-0000F8753ED1}"
  161. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_LANMANSERVER\0000","DeviceDesc","@%systemroot%\system32\srvsvc.dll,-100"
  162. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_LANMANSERVER\0000\Control","*NewlyCreated*","0"
  163. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_SRV","NextInstance","1"
  164. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV\0000","Service","srv"
  165. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_SRV\0000","Legacy","1"
  166. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_SRV\0000","ConfigFlags","32"
  167. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV\0000","Class","LegacyDriver"
  168. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV\0000","ClassGUID","{8ECC055D-047F-11D1-A537-0000F8753ED1}"
  169. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV\0000","DeviceDesc","srv"
  170. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV\0000\Control","ActiveService","srv"
  171. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_SRV2","NextInstance","1"
  172. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV2\0000","Service","srv2"
  173. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_SRV2\0000","Legacy","1"
  174. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_SRV2\0000","ConfigFlags","32"
  175. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV2\0000","Class","LegacyDriver"
  176. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV2\0000","ClassGUID","{8ECC055D-047F-11D1-A537-0000F8753ED1}"
  177. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV2\0000","DeviceDesc","srv2"
  178. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRV2\0000\Control","ActiveService","srv2"
  179. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_SRVNET","NextInstance","1"
  180. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRVNET\0000","Service","srvnet"
  181. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_SRVNET\0000","Legacy","1"
  182. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_SRVNET\0000","ConfigFlags","32"
  183. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRVNET\0000","Class","LegacyDriver"
  184. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRVNET\0000","ClassGUID","{8ECC055D-047F-11D1-A537-0000F8753ED1}"
  185. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRVNET\0000","DeviceDesc","srvnet"
  186. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_SRVNET\0000\Control","ActiveService","srvnet"
  187. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\Netman","DisplayName","@%SystemRoot%\system32\netman.dll,-109"
  188. RegWrite,"HKLM","0x2","wb-system\ControlSet001\Services\Netman","ImagePath","%SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted"
  189. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\Netman","Description","@%SystemRoot%\system32\netman.dll,-110"
  190. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\Netman","ObjectName","LocalSystem"
  191. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\Netman","ErrorControl","1"
  192. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\Netman","Start","3"
  193. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\Netman","Type","32"
  194. RegWrite,"HKLM","0x7","wb-system\ControlSet001\Services\Netman","DependOnService","RpcSs","nsi"
  195. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\Netman","ServiceSidType","1"
  196. RegWrite,"HKLM","0x7","wb-system\ControlSet001\Services\Netman","RequiredPrivileges","SeImpersonatePrivilege","SeChangeNotifyPrivilege"
  197. RegWrite,"HKLM","0x3","wb-system\ControlSet001\Services\Netman","FailureActions","80","51","01","00","00","00","00","00","00","00","00","00","03","00","00","00","14","00","00","00","01","00","00","00","64","00","00","00","01","00","00","00","64","00","00","00","00","00","00","00","00","00","00","00"
  198. RegWrite,"HKLM","0x2","wb-system\ControlSet001\Services\Netman\Parameters","ServiceDll","%SystemRoot%\System32\netman.dll"
  199. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\Netman\Enum","0","Root\LEGACY_NETMAN\0000"
  200. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\Netman\Enum","Count","1"
  201. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\Netman\Enum","NextInstance","1"
  202. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_NETMAN","NextInstance","1"
  203. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_NETMAN\0000","Service","Netman"
  204. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_NETMAN\0000","Legacy","1"
  205. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_NETMAN\0000","ConfigFlags","0"
  206. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_NETMAN\0000","Class","LegacyDriver"
  207. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_NETMAN\0000","ClassGUID","{8ECC055D-047F-11D1-A537-0000F8753ED1}"
  208. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_NETMAN\0000","DeviceDesc","@%SystemRoot%\system32\netman.dll,-109"
  209. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_NETMAN\0000\Control","*NewlyCreated*","0"
  210. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\SENS","DisplayName","@%SystemRoot%\system32\Sens.dll,-200"
  211. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\SENS","Group","ProfSvc_Group"
  212. RegWrite,"HKLM","0x2","wb-system\ControlSet001\Services\SENS","ImagePath","%SystemRoot%\system32\svchost.exe -k netsvcs"
  213. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\SENS","Description","@%SystemRoot%\system32\Sens.dll,-201"
  214. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\SENS","ObjectName","LocalSystem"
  215. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\SENS","ErrorControl","1"
  216. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\SENS","Start","2"
  217. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\SENS","Type","32"
  218. RegWrite,"HKLM","0x7","wb-system\ControlSet001\Services\SENS","DependOnService","EventSystem"
  219. RegWrite,"HKLM","0x7","wb-system\ControlSet001\Services\SENS","RequiredPrivileges","SeAuditPrivilege","SeChangeNotifyPrivilege","SeCreateGlobalPrivilege","SeImpersonatePrivilege","SeTcbPrivilege"
  220. RegWrite,"HKLM","0x3","wb-system\ControlSet001\Services\SENS","FailureActions","80","51","01","00","00","00","00","00","00","00","00","00","03","00","00","00","14","00","00","00","01","00","00","00","c0","d4","01","00","01","00","00","00","e0","93","04","00","00","00","00","00","00","00","00","00"
  221. RegWrite,"HKLM","0x2","wb-system\ControlSet001\Services\SENS\Parameters","ServiceDll","%SystemRoot%\System32\sens.dll"
  222. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\SENS\Parameters","ServiceMain","ServiceMain"
  223. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\SENS\Parameters","ServiceDllUnloadOnStop","1"
  224. RegWrite,"HKLM","0x3","wb-system\ControlSet001\Services\SENS\Security","Security","01","00","14","80","90","00","00","00","9c","00","00","00","14","00","00","00","30","00","00","00","02","00","1c","00","01","00","00","00","02","80","14","00","ff","01","0f","00","01","01","00","00","00","00","00","01","00","00","00","00","02","00","60","00","04","00","00","00","00","00","14","00","8d","01","02","00","01","01","00","00","00","00","00","05","0b","00","00","00","00","00","18","00","ff","01","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","00","18","00","ff","01","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","25","02","00","00","00","00","14","00","fd","01","02","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  225. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","LocalService","nsi","lltdsvc","SSDPSRV","upnphost","SCardSvr","w32time","EventSystem","RemoteRegistry","WinHttpAutoProxySvc","lanmanworkstation","TBS","SLUINotify","THREADORDER","fdrespub","netprofm","fdphost","wcncsvc","QWAVE","Mcx2Svc","WebClient"
  226. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","LocalSystemNetworkRestricted","hidserv","UxSms","WdiSystemHost","Netman","trkwks","AudioEndpointBuilder","WUDFSvc","irmon","sysmain","IPBusEnum","dot3svc","PcaSvc","CscService","wlansvc","UmRdpService","EMDMgmt","WPDBusEnum","TabletInputService"
  227. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","NetworkServiceNetworkRestricted","PolicyAgent"
  228. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","LocalServiceNoNetwork","PLA","DPS","BFE","mpssvc","ehstart"
  229. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","NetworkService","CryptSvc","DHCP","TermService","KtmRm","DNSCache","NapAgent","nlasvc","WinRM","WECSVC","Tapisrv"
  230. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","termsvcs","TermService"
  231. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","WerSvcGroup","wersvc"
  232. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","netsvcs","AeLookupSvc","wercplsupport","Themes","CertPropSvc","SCPolicySvc","lanmanserver","gpsvc","IKEEXT","AudioSrv","FastUserSwitchingCompatibility","Ias","Irmon","Nla","Ntmssvc","NWCWorkstation","Nwsapagent","Rasauto","Rasman","Remoteaccess","SENS","Sharedaccess","SRService","Tapisrv","Wmi","WmdmPmSp","TermService","wuauserv","BITS","ShellHWDetection","LogonHours","PCAudit","helpsvc","uploadmgr","iphlpsvc","seclogon","AppInfo","msiscsi","MMCSS","ProfSvc","EapHost","winmgmt","schedule","SessionEnv","browser","hkmsvc","AppMgmt"
  233. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","swprv","swprv"
  234. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","LocalServiceNetworkRestricted","DHCP","eventlog","AudioSrv","LmHosts","wscsvc","p2pimsvc","PNRPSvc","p2psvc","WPCSvc","PnrpAutoReg"
  235. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","rpcss","RpcSs"
  236. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","regsvc","RemoteRegistry"
  237. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","wcssvc","WcsPlugInService"
  238. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","DcomLaunch","PlugPlay","DcomLaunch"
  239. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","wdisvc","WdiServiceHost"
  240. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","sdrsvc","sdrsvc"
  241. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","imgsvc","StiSvc"
  242. RegWrite,"HKLM","0x7","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost","secsvcs","WinDefend"
  243. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\LocalService","AuthenticationCapabilities","8192"
  244. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\LocalService","CoInitializeSecurityParam","1"
  245. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\LocalSystemNetworkRestricted","CoInitializeSecurityParam","1"
  246. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs","AuthenticationCapabilities","12320"
  247. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\netsvcs","CoInitializeSecurityParam","1"
  248. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\NetworkService","CoInitializeSecurityParam","1"
  249. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\NetworkService","DefaultRpcStackSize","28"
  250. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\SDRSVC","CoInitializeSecurityParam","0"
  251. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\swprv","CoInitializeSecurityParam","0"
  252. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\termsvcs","CoInitializeSecurityParam","1"
  253. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\wcssvc","CoInitializeSecurityParam","1"
  254. RegWrite,"HKLM","0x1","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\wcssvc","CoInitializeSecurityAppID","{CD11FAB6-1C0E-45e1-BA31-5C6008EF2607}"
  255. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\wercplsupport","AuthenticationCapabilities","12320"
  256. RegWrite,"HKLM","0x4","WB-Software\Microsoft\Windows NT\CurrentVersion\Svchost\wercplsupport","CoInitializeSecurityParam","1"
  257. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\netprofm","DisplayName","@%SystemRoot%\system32\netprof.dll,-246"
  258. RegWrite,"HKLM","0x2","wb-system\ControlSet001\Services\netprofm","ImagePath","%SystemRoot%\System32\svchost.exe -k LocalService"
  259. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\netprofm","Description","@%SystemRoot%\system32\netprof.dll,-247"
  260. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\netprofm","ObjectName","NT AUTHORITY\LocalService"
  261. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\netprofm","ErrorControl","1"
  262. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\netprofm","Start","2"
  263. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\netprofm","Type","32"
  264. RegWrite,"HKLM","0x7","wb-system\ControlSet001\Services\netprofm","DependOnService","RpcSs","nlasvc"
  265. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\netprofm","ServiceSidType","1"
  266. RegWrite,"HKLM","0x7","wb-system\ControlSet001\Services\netprofm","RequiredPrivileges","SeImpersonatePrivilege","SeChangeNotifyPrivilege"
  267. RegWrite,"HKLM","0x3","wb-system\ControlSet001\Services\netprofm","FailureActions","80","51","01","00","00","00","00","00","00","00","00","00","03","00","00","00","14","00","00","00","01","00","00","00","64","00","00","00","01","00","00","00","64","00","00","00","00","00","00","00","64","00","00","00"
  268. RegWrite,"HKLM","0x2","wb-system\ControlSet001\Services\netprofm\Parameters","ServiceDll","%SystemRoot%\System32\netprofm.dll"
  269. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\netprofm\Parameters","ServiceDllUnloadOnStop","1"
  270. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\netprofm\Enum","0","Root\LEGACY_NETPROFM\0000"
  271. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\netprofm\Enum","Count","1"
  272. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\netprofm\Enum","NextInstance","1"
  273. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_NETPROFM","NextInstance","1"
  274. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_NETPROFM\0000","Service","netprofm"
  275. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_NETPROFM\0000","Legacy","1"
  276. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_NETPROFM\0000","ConfigFlags","0"
  277. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_NETPROFM\0000","Class","LegacyDriver"
  278. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_NETPROFM\0000","ClassGUID","{8ECC055D-047F-11D1-A537-0000F8753ED1}"
  279. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Enum\Root\LEGACY_NETPROFM\0000","DeviceDesc","@%SystemRoot%\system32\netprof.dll,-246"
  280. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Enum\Root\LEGACY_NETPROFM\0000\Control","*NewlyCreated*","0"
  281. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\NlaSvc","DisplayName","@%SystemRoot%\System32\nlasvc.dll,-1"
  282. RegWrite,"HKLM","0x2","wb-system\ControlSet001\Services\NlaSvc","ImagePath","%SystemRoot%\System32\svchost.exe -k NetworkService"
  283. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\NlaSvc","Description","@%SystemRoot%\System32\nlasvc.dll,-2"
  284. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\NlaSvc","ObjectName","NT AUTHORITY\NetworkService"
  285. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc","ErrorControl","1"
  286. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc","Start","2"
  287. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc","Type","32"
  288. RegWrite,"HKLM","0x7","wb-system\ControlSet001\Services\NlaSvc","DependOnService","NSI","RpcSs","TcpIp"
  289. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc","ServiceSidType","1"
  290. RegWrite,"HKLM","0x7","wb-system\ControlSet001\Services\NlaSvc","RequiredPrivileges","SeCreateGlobalPrivilege","SeImpersonatePrivilege","SeAuditPrivilege"
  291. RegWrite,"HKLM","0x3","wb-system\ControlSet001\Services\NlaSvc","FailureActions","80","51","01","00","00","00","00","00","00","00","00","00","03","00","00","00","14","00","00","00","01","00","00","00","64","00","00","00","01","00","00","00","64","00","00","00","00","00","00","00","00","00","00","00"
  292. RegWrite,"HKLM","0x2","wb-system\ControlSet001\Services\NlaSvc\Parameters","ServiceDll","%SystemRoot%\System32\nlasvc.dll"
  293. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc\Parameters","ServiceDllUnloadOnStop","1"
  294. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc\Parameters\Fuser","Tlag","500"
  295. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","PassivePollPeriod","5"
  296. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","StaleThreshold","30"
  297. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","WebTimeout","10"
  298. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","EnableActiveProbing","1"
  299. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","ActiveWebProbeHost","www.msftncsi.com"
  300. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","ActiveWebProbePath","ncsi.txt"
  301. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","ActiveWebProbeContent","Microsoft NCSI"
  302. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","ActiveDnsProbeHost","dns.msftncsi.com"
  303. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","ActiveDnsProbeContent","131.107.255.255"
  304. RegWrite,"HKLM","0x1","wb-system\ControlSet001\Services\NlaSvc\Parameters\Internet","KnownProxylessGateways","00-0e-d7-15-c6-21 148549"
  305. RegWrite,"HKLM","0x4","wb-system\ControlSet001\Services\NlaSvc\Parameters\PMux","Tresolve","2000"
  306. RegWrite,"HKLM","0x3","wb-system\ControlSet001\Services\NlaSvc\Security","Security","01","00","14","98","b4","00","00","00","c0","00","00","00","14","00","00","00","30","00","00","00","02","00","1c","00","01","00","00","00","02","80","14","00","ff","01","0f","00","01","01","00","00","00","00","00","01","00","00","00","00","02","00","84","00","05","00","00","00","00","02","18","00","ff","01","0f","00","01","02","00","00","00","00","00","05","20","00","00","00","20","02","00","00","00","02","14","00","ff","01","0f","00","01","01","00","00","00","00","00","05","12","00","00","00","00","00","14","00","9d","00","02","00","01","01","00","00","00","00","00","05","04","00","00","00","00","00","14","00","8d","01","02","00","01","01","00","00","00","00","00","05","06","00","00","00","00","00","28","00","1d","00","02","00","01","06","00","00","00","00","00","05","50","00","00","00","44","3e","41","bb","45","ba","a8","7a","6c","bd","92","68","f4","ad","64","8f","d5","e6","70","e9","01","01","00","00","00","00","00","05","12","00","00","00","01","01","00","00","00","00","00","05","12","00","00","00"
  307. RegWrite,"HKLM","0x1","WB-Software\Classes\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}",,"Shell extensions for sharing"
  308. RegWrite,"HKLM","0x1","WB-Software\Classes\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}\InProcServer32",,"ntshrui.dll"
  309. RegWrite,"HKLM","0x1","WB-Software\Classes\CLSID\{40dd6e20-7c17-11ce-a804-00aa003ca9f6}\InProcServer32","ThreadingModel","Apartment"
  310. RegWrite,"HKLM","0x1","WB-Software\Classes\*\shellex\ContextMenuHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  311. RegWrite,"HKLM","0x1","WB-Software\Classes\Directory\shellex\PropertySheetHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  312. RegWrite,"HKLM","0x1","WB-Software\Classes\Directory\shellex\ContextMenuHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  313. RegWrite,"HKLM","0x1","WB-Software\Classes\Drive\shellex\ContextMenuHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  314. RegWrite,"HKLM","0x1","WB-Software\Classes\Drive\shellex\PropertySheetHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  315. #09.03.2008
  316. RegWrite,"HKLM","0x1","WB-Software\Classes\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}",,"Shell extensions for sharing"
  317. RegWrite,"HKLM","0x1","WB-Software\Classes\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}\InProcServer32",,"ntshrui.dll"
  318. RegWrite,"HKLM","0x1","WB-Software\Classes\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}\InProcServer32","ThreadingModel","Apartment"
  319. RegWrite,"HKLM","0x1","WB-Software\Classes\Directory\shellex\ContextMenuHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  320. RegWrite,"HKLM","0x1","WB-Software\Classes\Directory\shellex\PropertySheetHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  321. RegWrite,"HKLM","0x1","WB-Software\Classes\Drive\shellex\ContextMenuHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  322. RegWrite,"HKLM","0x1","WB-Software\Classes\Drive\shellex\PropertySheetHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  323. RegWrite,"HKLM","0x1","WB-Software\Classes\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}",,"Shell extensions for sharing"
  324. RegWrite,"HKLM","0x1","WB-Software\Classes\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}\InProcServer32",,"ntshrui.dll"
  325. RegWrite,"HKLM","0x1","WB-Software\Classes\CLSID\{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}\InProcServer32","ThreadingModel","Apartment"
  326. RegWrite,"HKLM","0x1","WB-Software\Classes\Directory\shellex\ContextMenuHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  327. RegWrite,"HKLM","0x1","WB-Software\Classes\Directory\shellex\PropertySheetHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  328. RegWrite,"HKLM","0x1","WB-Software\Classes\Drive\shellex\ContextMenuHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  329. RegWrite,"HKLM","0x1","WB-Software\Classes\Drive\shellex\PropertySheetHandlers\Sharing",,"{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}"
  330. RegWrite,"HKLM","0x1","WB-Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved","{f81e9010-6ea4-11ce-a7ff-00aa003ca9f6}","Shell extensions for sharing"
  331. RegWrite,"HKLM","0x3","WB-Default\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached","{F81E9010-6EA4-11CE-A7FF-00AA003CA9F6} {000214E8-0000-0000-C000-000000000046} 0x401","01","00","00","00","31","00","34","00","f4","a9","8c","b7","56","a3","c7","01"
  332. RegHiveUnLoad,"WB-Software"
  333. RegHiveUnLoad,"WB-System"
  334. RegHiveUnLoad,"WB-Default"
  335.  
  336.