查杀新变种3448的办法 及 查杀后不能进入安全模式的修复办法

查杀新变种3448的办法 及 查杀后不能进入安全模式的修复办法 @h!*ZMk P  
Y4}.];.;p  
MGYhP  
]) 17Cw*|  
最近两天来新变种3448爆发，病毒特征：不能安装360安全卫士。 Gg
k/r_U  
Vb6Aa,e  
修复工具：1、System Repair Engineer（SREng）的扫描报告； sf0/ams  
2、unlocker 用于删除病毒文件。 cS'BJ^o  
!cA}cNS@}j  
kXVUor,7I  
在 System Repair Engineer（SREng）的扫描报告中查找病毒文件的办法： tw%CwCR5  
O)p-YgI2  
在“正在运行的进程”下面查找注入到进程的dll文件：以★嘎嘎★的报告为例（比较典型） T|.w9#8_2z  
.9CDec2Z  
[PID: 532][C:\WINDOWS\system32\k6s.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] pSJ29C  
[C:\WINDOWS\system32\drivers\nmprt.sys] [N/A, N/A] 8o9KkR^D  
[C:\WINDOWS\system32\rdzl7.dll] [N/A, N/A] Ws)Il5xaO  
hE2+^K*  
这个进程和附带的两个文件就是病毒。一般nmprt.sys是昨天发现的共有名称，但今天的报告中发现了随机名字的sys文件。但这3个病毒文件的存放路径是固定的。 n!-N-Lt[s  
exe文件的名字和位数不固定，特征是包含数字。 g><yj#  
dll文件是5位包含数字的随机名字。 }y
Z{Ah+  
这个exe进程下可能还寄生其他的dll文件，最典型的就是cnnic的dll文件。本文不讨论cnnic. l=QX$hPw`  
dll文件的特征是同时注入到其他进程下，几乎每个进程都有他们的踪迹：比如C:\WINDOWS\Explorer.EXE进程、rundll32.exe、ctfmon.exe下肯定有。 [yl&2J^fM  
~kNCj[?b]^  
快速判定以上病毒文件的办法是用百度搜索一下文件名字，一般不会有搜索结果的定是病毒无疑。 (2smuHm)?  
[/_._HP2)'  
删除病毒文件不用到安全模式（也进不去），用unlocker即可删除。一次删除不了请重新安装unlocker或重起，多试几次就删掉了。 \!j-8/vO  
具体下载地址和教程：http://btbaicai.com/read-htm-tid-661.html 5lC:Da  
IRK^H0fW`  
dyoJ(sEw  
删除病毒文件后的后遗症是不能进安全模式，原因是病毒文件吧关键的安全模式需要加载的注册表项删除了，请下载以下文件解压后双击，导入注册表即可。 k=_?F3)  
请把下面内容另存为任意reg文件，然后双击导入注册表即可. q~z
.!sMC  
FO0`Bz>  
*3e]^gi  
%"aK 9-2  
Windows Registry Editor Version 5.00  MW)?8-  
7+Vs
  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot] c >B;  
"AlternateShell"="cmd.exe" F`VtHN)
 
e`=. ^i  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal] ;9;7kibF  
;S5 PFUf  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt] zn~d5QEx(  
@="Service" ,Km@W^:?0  
Vl
]yi5H  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base] jAJhdCN~T?  
@="Driver Group" [".#Dz  
h ~S.#^#^  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender] +xE[6FZ2  
@="Driver Group" \\Ys
) \  
[8RoZxT}  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system] Z*{/k+&=1}  
@="Driver Group" 'm-hdB  
lT=-|#,'  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc] ]<[/u@V  
@="Service" {%Xe
A!8  
?OhJK^g  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch] `~BBh_=  
@="Service" %F!bIk  
i"w
eR
r  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmadmin] r"X%m  
@="Service" tXTbrKI3  
e:8'Y=R  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmboot.sys] oDVkN1  
@="Driver" wE)2H1l  
""~<>5{!  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmio.sys] 1i[H]A ;O  
@="Driver" F4y
v}R  
hv>H0PvDs  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmload.sys] T:wOX%.+k7  
@="Driver" D~Kn E  
itsa*D  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmserver] F-jjb(t  
@="Service" ZQT9;z  
SrJ$fP  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog] ,9ed72  
@="Service" LR;~4<6miq  
Nq?""b
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system] kD>d~TB'  
@="Driver Group" x*$KCS  
Cvf3}cNi  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter] H{TMYx$Qd  
@="Driver Group" kD77  
gB(FQq  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc] JIa >-$P  
@="Service" [\(?2"O&{W  
!
*\>5H>  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon] VLpc"aKrd  
@="Service" fdNC7 A  
ar=Y,Z  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration] )a%XvGPYw<  
@="Driver Group" nLGs?hab  
1w.DgxMNTd  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay] /=m8a0}  
@="Service" {VVB5Z  
p$z98 jpB$  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter] \&W#A\+iR  
@="Driver Group" [$Q^4}?  
rVmG?.&  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk] w96[?B,  
@="Driver Group" 8/]xU|NL  
H&0@* V"1  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs] Mr*+_UPe#  
@="Service" {|N]9D  
5NyDw2-
'T  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class] PCNs>)H  
@="Driver Group" gC%6Zo,2  
:N*UE$0azP  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys] ]hge\  
@="Driver" ncoc(9M  
;4,3./" W  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys] rRz
ae-7  
@="FSFilter System Recovery" 1~:7(  
,<tg)lW  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SRService] ,00-[2e  
@="Service" v</&N  
S#lu7CE  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender] >nDCi.[:  
@="Driver Group" ~7eYIt}T  
 ,}x*wJ K  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys] e@|x:  
@="Driver" "}X!ZP,a  
M.LV3j  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys] G`y3UWh1  
@="Driver" KTUk/<  
\IHbwW9,  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt] P@gO~iEY  
@="Service" 6SK|q(  
%aQT1f~,c  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}] A"/8Nq6  
@="Universal Serial Bus controllers" fAoBvFl  
UU. `2iI  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}] \-J{1JHCz  
@="CD-ROM Drive" ECs^9('  
3W~T!29#  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}] ;33E4  
@="DiskDrive" :ij?\?3nRt  
#
@5~b p  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}] H0ku)
.  
@="Standard floppy disk controller" -zNkTm  
a$D#;ks9t  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}] 28fPy\[  
@="Hdc" -+)l-k}  
.%1 $+  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}] Bt$0LU>"  
@="Keyboard" t.,V:mR  
Cf8N?i(f{  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}] G"s7-I  
@="Mouse" 9e3 P  
Fc+8w8{Y  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}] jr|\z0f  
@="PCMCIA Adapters" z1Jr@+L=  
oKL~U"y,  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}] 'z@Wn'9)vi  
@="SCSIAdapter" k3[8'kR )  
b"l=oO  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}] zFr E!qVE  
@="System" 7YsB"FJ@=  
8D\JG6\\M"  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}] tVYk\zog  
@="Floppy disk drive" qlt##v],  
]<`a/eH  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] >L>K|:jk  
@="Volume" -[s>w~23  
=2d (A:S  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}] N`^0`k8  
@="Human Interface Devices" 2B\.`x ,  
x%[2ej!e  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network] j}!dT4  
~ -q)s  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AFD] 9R;a2f'7  
@="Service" PkQ,t  
ms.\Q^mj  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppMgmt] s9W$h-U  
@="Service" E.BuO<oQ  
MtESY&  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Base] v~@M9  
@="Driver Group" ^D%~$~5Q  
i V(EFcqE  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Boot Bus Extender] Nj4a%Wn  
@="Driver Group" wJ8i0iS  
?rd}^i|p  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Boot file system] V *~F  
@="Driver Group" {0gHk{k?  
ox+8k  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Browser] -cN9i~yV  
@="Service" T%*:\*"Z]{  
0fT)2xh{  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CryptSvc] n:;7-
  
@="Service" f^\~DfhOX  
emVl'9;Y  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DcomLaunch] 39~U,PJEy  
@="Service" C[hGy&_"  
*#KZOOMv  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Dhcp] )(rd]Fq  
@="Service" ?`, \9:  
`oG HO|o  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmadmin] s19FQZs&  
@="Service" 3 +*qe[  
#)5imG }  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmboot.sys] drY 8X_  
@="Driver" Ju$;2u
 
Gww~{>3D  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmio.sys] ?nQELJF  
@="Driver" 0
c?6\|w%  
Ssww?
0  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmload.sys] I#1O:f  
@="Driver" pKZnQUZ  
<U']J9}OX  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmserver] Wm<7g  
@="Service" 6C$:]m  
ML=p!>zE  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DnsCache] >k VjS6  
@="Service" x>7j,sTY  
\Qz6Q:ao  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EventLog] yC57V.  
@="Service" xO`(onWt  
4OR#)\bv>  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\File system] t(}<IA,  
@="Driver Group" -[sH&zI[  
)NY;E/,  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Filter] zY53.67  
@="Driver Group" 5^Nx@1&  
5"5aMW  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HelpSvc] W-y(Pwgq*u  
@="Service" 9$M\J   
900<U3{  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ip6fw.sys] 8V "!FEZ1  
@="Driver" _@![X1J  
R#
G3Jq  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ipnat.sys] DJd,Cj  
@="Driver" g<@,[H i~Q  
]s92v>h`d  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LanmanServer] zl)t%{?p  
@="Service" n&_uJ  
tX3M-h{  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LanmanWorkstation] jhh{?|llis  
@="Service" mY!Q{>*  
ovB6_4 ji  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LmHosts] 8ohU
tP  
@="Service" 
w#rSPIc  
n
 
  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Messenger] Xb?U.
91  
@="Service" NgD*R9XLm  
.:tdGj@[  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NDIS] uY]\A_|  
@="Driver Group" ao954*PO  
US <#|dR\  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NDIS Wrapper] S}I-F/=$  
@="Driver Group" !/#sji,Rj  
6%K6%PL$V  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ndisuio] r}Xq>Um(  
@="Service" ,qQy<)~,!  
8
7Y_~e  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBIOS] v_1/o#q  
@="Service" 'z/j3\I  
`(0aFI}^1  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBIOSGroup] `Jub d  
@="Driver Group" \79}z)!{V  
=T!h}9jZc  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBT] m<5`;/Dy  
@="Service" |_9 97p  
8>2S=!{\  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetDDEGroup] y@8F1k  
@="Driver Group" ?eI#n3V+y  
B@%UC/Jv  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Netlogon] x^en1pH7`  
@="Service" d8-I9k*Y  
$r]-x[rp!  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetMan] J>M*M5  
@="Service" )97|yi,  
;
X?MsS5  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Network] {&G3ne77  
@="Driver Group" s\u&)/W2  
g|`9d'_  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetworkProvider] E@ _PLz  
@="Driver Group" 0"Ji"S  
$+.Vei+Gx  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NtLmSsp] \mF-&q&K  
@="Service" ';\R!n@Rs|  
% |nXts-  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PCI Configuration] 8=Ud{/c}  
@="Driver Group" 10LAIH+!  
e:/9@  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PlugPlay] 2C)4wn4  
@="Service" [k_r4/z  
3NgetPDf  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PNP Filter] eV\d
i  
@="Driver Group" Ukods$h#  
(ok
4<c  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PNP_TDI]
0Sragc[L!  
@="Driver Group" b GyJ)I  
&05^0>l(  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Primary disk] GT>#"h.L  
@="Driver Group" |>.W  
6QQLZ eC  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdpcdd.sys] $V@4W
:+  
@="Driver" W>|:r3zQL  
N,~A^aJQY  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdpdd.sys] )Uo\VK}txM  
@="Driver" .h
+PjR#  
;>S5a6Dxs  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdpwd.sys] ZLz;uKbe--  
@="Driver" ;$*Ai)L  
(GWTw$\  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdsessmgr] u0~`eEQ  
@="Service" _W.J\*  
MGxL0H~  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\RpcSs] IZ8[e1%  
@="Service" (K1~G~  
&E.E2Wj  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SCSI Class] :2Ji&l3et  
@="Driver Group" ~6V<AG  
I-[&!l  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sermouse.sys] Mzye?}  
@="Driver" 6:U@w"  
qo$  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SharedAccess] {@3}hk{  
@="Service" M)KaVW-9J  
.8c/.>,%  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sr.sys] <E{pY6K%8  
@="FSFilter System Recovery" 6+ ;K4$  
x,1V`%>n  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SRService] ~v$+y=s  
@="Service" Br|F>_\  
E% I!9  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Streams Drivers] EEs4ZrU  
@="Driver Group" 6}mu
H9~  
uMj9@O+^{  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\System Bus Extender] 4--Rl1-qT  
@="Driver Group" ">|4%  
Atx<>Qhk  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Tcpip] 16ptN=v8  
@="Service" <wCr.0  
nKMuf7/+  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TDI] jGg!@=H  
@="Driver Group" "-Qk^jV  
)LBB:RZo  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tdpipe.sys] HW}bgQ[?  
@="Driver" 2UwA}?+i  
Cu&nZ=C.  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tdtcp.sys] 6YfsK5KQ  
@="Driver" }Nu7uBX(  
1ull+%  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\termservice] `%R[0U^r  
@="Service" `zbt>}  
i=~w]0yt  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vga.sys] lzOx@^H  
@="Driver" WKbcK
 
Gd>.l*`]<  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vgasave.sys] B'%6.g'  
@="Driver" SP2TAz  
b]nNjeX|  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WinMgmt] J<:JGV  
@="Service" 9-h%l&4  
8S3) (  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WZCSVC] +]kU OE  
@="Service" wj!o<1I!  
wZ,<X{*?a  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{36FC9E60-C465-11CF-8056-444553540000}] w)] 8FJ%  
@="Universal Serial Bus controllers" P@nOm U`  
PbvoX  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E965-E325-11CE-BFC1-08002BE10318}] D\6JE
Lp  
@="CD-ROM Drive" w 1WU9.  
(+gf ;Lh2#  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}] n'iD:X!%  
@="DiskDrive" ]+]-%-#  
)((j^'r  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E969-E325-11CE-BFC1-08002BE10318}] /'}.U`x  
@="Standard floppy disk controller" Yh+[>v(  
%/C/5t  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}] ffvgE+  
@="Hdc" l q^yz6  
$[ &[   
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}] Yb0w-+|9  
@="Keyboard" Nw>F [6)  
+6?Vv  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}] #*F*cZW\  
@="Mouse" 3zu=}-[U  
BlB=8zk\  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}] GoPd!Tk  
@="Net" 2r6_zd|[Y}  
&kt7LD=  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}] t^?L\1P0  
@="NetClient" pcoFip  
z[mh_jN!  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}] s|Pvhbw*I  
@="NetService" U_75^AW  
7aIxP6aB  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}] rIB{I3K
 
@="NetTrans" du1zbx+~RR  
RefdM,D  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E977-E325-11CE-BFC1-08002BE10318}] _U>~z2SK  
@="PCMCIA Adapters" xA?i[b$  
TMJu<x$r@  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E97B-E325-11CE-BFC1-08002BE10318}] ^eH^f)MM  
@="SCSIAdapter" zP^:k X  
idnd![  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E97D-E325-11CE-BFC1-08002BE10318}] YKl&[$pTx  
@="System" <R5~|mR  
Apl93*lE`  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E980-E325-11CE-BFC1-08002BE10318}] B0|D[x  
@="Floppy disk drive" B)JQ{7  
;?U4:TK;Si  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] &e@HlH.F  
@="Volume" X^yt>iR  
RZu>9Xr^lj  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}] e _NWKaLm  
@="Human Interface Devices" ^ Io?O