查杀新变种3448的办法 及 查杀后不能进入安全模式的修复办法

查杀新变种3448的办法 及 查杀后不能进入安全模式的修复办法 |OE8R~Rs  
gL9!pErI  
x2jPc@kj "  
[(Z(AgvAt  
最近两天来新变种3448爆发，病毒特征：不能安装360安全卫士。 UKH<a  
!CuUQ`8Kt  
修复工具：1、System Repair Engineer（SREng）的扫描报告； 9$*A7y8QIs  
2、unlocker 用于删除病毒文件。 ";@L83PN  
UgmbC@@t  
eRpjKgz:T  
在 System Repair Engineer（SREng）的扫描报告中查找病毒文件的办法： ,q qXz  
ny]@$D,u4  
在“正在运行的进程”下面查找注入到进程的dll文件：以★嘎嘎★的报告为例（比较典型） y;Eb25t)  
yw(Wm  
[PID: 532][C:\WINDOWS\system32\k6s.exe] [Microsoft Corporation, 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)] uFwWQqZ  
[C:\WINDOWS\system32\drivers\nmprt.sys] [N/A, N/A] H6s<%2qN  
[C:\WINDOWS\system32\rdzl7.dll] [N/A, N/A] oO+Z$G W  
E;T@D!Ba:  
这个进程和附带的两个文件就是病毒。一般nmprt.sys是昨天发现的共有名称，但今天的报告中发现了随机名字的sys文件。但这3个病毒文件的存放路径是固定的。 _,=C1:  
exe文件的名字和位数不固定，特征是包含数字。 ?5N]4dbx  
dll文件是5位包含数字的随机名字。 +% Yuk  
这个exe进程下可能还寄生其他的dll文件，最典型的就是cnnic的dll文件。本文不讨论cnnic. Qj5r+v  
dll文件的特征是同时注入到其他进程下，几乎每个进程都有他们的踪迹：比如C:\WINDOWS\Explorer.EXE进程、rundll32.exe、ctfmon.exe下肯定有。 Uc 6c>**  
1~]T=  
快速判定以上病毒文件的办法是用百度搜索一下文件名字，一般不会有搜索结果的定是病毒无疑。 i9SP?>dz2+  
WT/(-9i  
删除病毒文件不用到安全模式（也进不去），用unlocker即可删除。一次删除不了请重新安装unlocker或重起，多试几次就删掉了。 ((!h5{-@  
具体下载地址和教程：http://btbaicai.com/read-htm-tid-661.html P`x r^Z$k  
Ba(?KQUF|  
u.bXZbC  
删除病毒文件后的后遗症是不能进安全模式，原因是病毒文件吧关键的安全模式需要加载的注册表项删除了，请下载以下文件解压后双击，导入注册表即可。 i`G RT&z  
请把下面内容另存为任意reg文件，然后双击导入注册表即可.  BG8fbV7  
oC&-n@Dzk  
(>[ zz6  
ku7fai^>  
Windows Registry Editor Version 5.00 V<2o_ax  
#*:St+Y'  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot] Fo!*Wy  
"AlternateShell"="cmd.exe" 2\rgQ_B  
rA-VmNj0  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal] XCn2tzE  
bWO9QAYU  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppMgmt] r2tH =dx6!  
@="Service" )l""e
 
WS4`a!\  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Base] FDDbA7
 
@="Driver Group" \/?}4sD  
em&=+:{'  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot Bus Extender] -7A:{\Fzq  
@="Driver Group" fRir?6HUC  
N&fZ][C_  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Boot file system] r$wg])hc6  
@="Driver Group" %FAp1t T  
3<9x  <=  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\CryptSvc] #34~1+S   
@="Service" &%@5'Vu[#  
j8"5h  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DcomLaunch] (O+mQ5x  
@="Service" /?MT?N*.  
/Jz$7-  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmadmin] ),dY{6-^N  
@="Service" p]B]SMA
^  
R/bxWz(a  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmboot.sys] Um!;hGO  
@="Driver" N_0q  
Jgqf2NxeOP  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmio.sys] Mt L=]DJ+=  
@="Driver" h+Z(S]CX  
wbnJZqRk  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmload.sys] ~{0q,  
@="Driver" "DAqeC|m  
G;G I]1G7  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\dmserver] < 2y9or8  
@="Service" \,hvjIH  
j O@6X  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\EventLog] sK[kBn0lgI  
@="Service" 54mFy3j  
c=tL/=ro  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system] RxuP2  
@="Driver Group" 9 mH+P-C~
 
G&/qM  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Filter] lUDwsT. M{  
@="Driver Group" zk]Tfy~k  
wH*AGB6  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HelpSvc] zEB8B*aU  
@="Service" b]u/p'ta  
W),Y=z$  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Netlogon] 6'd{n|JQ5  
@="Service" oQK_&K#l5  
[J?hC^2  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PCI Configuration] .I&~6^
wg@  
@="Driver Group" ;_
^&YA  
e tQL !D5  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PlugPlay] GUBA;  
@="Service" 9D1T4rp}U  
y.B%1dc  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PNP Filter] m2uD[B[yb  
@="Driver Group" EHJvw`N  

J5iO%IiDE  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Primary disk] +V,%JG{y)  
@="Driver Group" =$|A$Vw  
~z_{k%O }c  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\RpcSs] T:aw6  
@="Service" ^+~Q?%z  
JqQWo{!V  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SCSI Class] 4G7~:HO_  
@="Driver Group" r3ebk'`  
FF.IN[6O  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sermouse.sys] eP&kM\+,  
@="Driver" Q;U,m)M~  
RnmNDRnJ}'  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\sr.sys] .g:c' 9-I  
@="FSFilter System Recovery" Jpd|EZ/q'  
nXIG\1=*U  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SRService] ~UWG{sm)  
@="Service" v1U
o}F  
GR <Iu  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\System Bus Extender] ER(PVBrG  
@="Driver Group" aAvO=:  
7TQr"o[q  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vga.sys] he-qNYfA>  
@="Driver" b3AHVcN`0N  
t[_c;&)  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys] ,% !(H  
@="Driver" {H[yw%mD  
@$%/BeM  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinMgmt] ciw r[6K  
@="Service" Y?@6&  
Cf, ^?:si  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{36FC9E60-C465-11CF-8056-444553540000}] @"#b }"z  
@="Universal Serial Bus controllers" B#i;F iq  
msI}@P
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E965-E325-11CE-BFC1-08002BE10318}] 95 -N,f  
@="CD-ROM Drive" =dk c,  
UXX<f~Z  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}] N=Rf~4Kd  
@="DiskDrive" X|v$LRzS  
)HW>1m,  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E969-E325-11CE-BFC1-08002BE10318}] HE$%1  
@="Standard floppy disk controller" FE0BI^{<  
'%C^n
#7  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}] |'DOw#Q.A  
@="Hdc" l.d_f/VFL  
[W5[|H4~V  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}] MhOnh2]0  
@="Keyboard" u]
zlvH  
sY
0*(KQ,  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}] !#VB(<r-q  
@="Mouse" F.BV2M  
Ig"q%P{  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E977-E325-11CE-BFC1-08002BE10318}] ,Ql>5Dy2.  
@="PCMCIA Adapters" h0aJs'(1Y  
A9S+  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97B-E325-11CE-BFC1-08002BE10318}] "[c>E"($  
@="SCSIAdapter" ab>cfrRN  
3=B
\  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}] {N]u!G!  
@="System" ;I <#e  
acOmpeC|  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E980-E325-11CE-BFC1-08002BE10318}] "!@Ls IB  
@="Floppy disk drive" Rk^Do1F  
>x4=FjwZ  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] Z~h>ZjT  
@="Volume" @jk D ET  
"Xx>{S[\[  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}] .\|zGi  
@="Human Interface Devices" .6z(LH86^  
T<E(
nlQ  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network] k'7|Ri v  
,?B;0 F  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AFD] # t6li  
@="Service" #}u7=zji  
Pz`bo  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppMgmt] d[@S*Sc '  
@="Service" {Ex+kS;7  
(5= ;}v+  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Base] 8 r4? 6eT  
@="Driver Group" MWEU2zQ49R  
nb_<Vc8'  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Boot Bus Extender] KM_\XyR;  
@="Driver Group" n;8$6@N  
3q$87>n  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Boot file system] Wg4E*  
@="Driver Group" tO sl#iLJ  
FO.TX8!
{  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Browser] p T\ .  
@="Service" Z8;"bDhL  
vGyGS
,  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\CryptSvc] TbrJ,Nd  
@="Service" Tj0ww`0C  
#_$k\\ff  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DcomLaunch] Q4Ycz!8"  
@="Service" SV>"uwT  
IJ([o"?qw  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Dhcp] Y?B?E7H"*  
@="Service" SMW@3Gt-  
B,?]oTlm  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmadmin] @;~kR \  
@="Service" k!gJZ1{  
e#fF&*4P  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmboot.sys] D:2L_&  
@="Driver" Yw|3[0(4  
|j9T5/%>9  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmio.sys] FV(NL+  
@="Driver" gQ2my+2+  
TI+v\h[t  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmload.sys] $Z'hk l f  
@="Driver" g`LX7_#  
mmH-5"hCE  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\dmserver] ^?\({w#  
@="Service" }n8O
i^S  
~ sAD*f  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\DnsCache] MC{wC%<U  
@="Service" w*jvi.J]  
}*{ DiX,;  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\EventLog] ,xr'X!pl  
@="Service" Tyq3"/7w  
(SF&HUy  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\File system] 3},?c4}?  
@="Driver Group" [*;Ho  
>kQ  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Filter] ;lz1{{J  
@="Driver Group" huFh(d-I  
^.L]<8\~  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HelpSvc] LC
eyR
(  
@="Service" kq*Wop  
??F1|Q]:  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ip6fw.sys] J;@.Hb8N  
@="Driver" JE@^3  
>U>Jrg@9  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ipnat.sys] !P?-HO  
@="Driver" (IZZd/c  
Q,,Q;|  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LanmanServer] &RSYK`JzS  
@="Service" Ki;  ++  
4bU6~<IM  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LanmanWorkstation] E|m&i>Q  
@="Service" )}_LRN@$  
[~f3,>$.n  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\LmHosts] 3^JwwZyQP'  
@="Service" B0# +sY  
U,XvT' k+  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Messenger] Y)npKhm+  
@="Service" PjHVm.v2g  
c+Ej.S1N7  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NDIS] F)$7 ?')p  
@="Driver Group" f!j
zl Rf>  
3W1j m>w5  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NDIS Wrapper] 5&RmntH  
@="Driver Group" 7$>Yw7vq  
6@XBp+C  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Ndisuio] )/Q;g9Vc  
@="Service" &XN&9]<r  
dX  Y  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBIOS] 5[/AruZD  
@="Service" M`
925MD  
hlcn<Ds  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBIOSGroup] b(
dC7  
@="Driver Group" ,pF5z4.  
-TQ}YnI@  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetBT] X![gt),(  
@="Service" aDuAI99"  
`aO"EC9  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetDDEGroup] pr. fl:\  
@="Driver Group" 2q$kT[  
9Z,8`  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Netlogon] $ V.>{ g0  
@="Service" IbS%/R  
R(W#<8k  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetMan] "r~/lCXP3  
@="Service" sHQ"E'h  
*j.oO)  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Network] |oMvDA  
@="Driver Group" :QqZj  
22,qsLt  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NetworkProvider] G\x<ls  
@="Driver Group" zv{.FBBv"  
K+lQ(PANK  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\NtLmSsp] Y``%3)k  
@="Service" <n7^iV>  
]x
b $FM6  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PCI Configuration] `|:t&,  
@="Driver Group" $J <Y^{r  
r98=C8  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PlugPlay] #:Q/j!!/  
@="Service" O7 UffPr  
>bZ=uq*8  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PNP Filter] Fk4 ?%H.  
@="Driver Group" s!XdH|)+/  
|+Bl!<g  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PNP_TDI]  .IU^'  
@="Driver Group" K22<2V`+n  
NM7'i`  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Primary disk] lY?SH[W  
@="Driver Group" (CU#>J  
#`8]R68S)  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdpcdd.sys] [Nre
X6  
@="Driver" OBnB%%0x|V  
8W]6AD^L  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdpdd.sys] d|m11ldq~  
@="Driver" _cP*qY@&H7  
2J22ORC}9  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdpwd.sys] y
$gpKm'  
@="Driver" 3^aNU  
HK0:*e=S  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\rdsessmgr] wj!YKLzZs  
@="Service" nqNMqS  
tv'F`b+  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\RpcSs] $`@ fXs  
@="Service" $ +o
27d"  
Y=D: -  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SCSI Class] 7 Z2#'Oo#  
@="Driver Group" H%d&7=^j  
&W0ai"  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sermouse.sys] ez"QwTD  
@="Driver" ub2teRg#  
)#Gn-L
@  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SharedAccess] x`*2
K  
@="Service" H>fMJl qE  
G^FzaZm(0  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\sr.sys] /'mj1QL  
@="FSFilter System Recovery" tqn!%.=Rt  
5S,!X,r#  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SRService] =fcwb0z_  
@="Service" hjlXSoX  
(\& Jy}_  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Streams Drivers] J7 |2~p  
@="Driver Group" K/pNQJoh|  
J7>6!  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\System Bus Extender] 3` U}1Y2L  
@="Driver Group" L /ZXAb  
DL)uvf  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Tcpip] 1/V?47  
@="Service" V4:ocz5  
/:N%+e/  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TDI] "\.2;5O[  
@="Driver Group" WpVEaB
  
=:Uc~"a  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tdpipe.sys] /lL-nSNL  
@="Driver" !^-0vTI  
#nNQ29\}  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tdtcp.sys] 'f% 0fd$WX  
@="Driver" _`~fmj.  
JCZ*:2 q|  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\termservice] ;/N&)&b  
@="Service" f5T-5IiJQ-  
]}_EA(Jh}  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vga.sys] =A7zUj g  
@="Driver" 3S9#2&Lw+  
i dX"$T+f  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vgasave.sys] /rMLa-g  
@="Driver" ZD`N>0
""  
YLw`=`@  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WinMgmt] [/@@M7Zm  
@="Service" h2o@7USL  
+Pbm *T  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WZCSVC] 7k.
'N  
@="Service" d)3ceJ:  
R2? ,Kc  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{36FC9E60-C465-11CF-8056-444553540000}] NoJ{/U&  
@="Universal Serial Bus controllers" et}C,ZIy  
6&^uhvZb69  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E965-E325-11CE-BFC1-08002BE10318}] sPGW'@&e#  
@="CD-ROM Drive" S4 5]$ wd  
qib^1+LoB  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E967-E325-11CE-BFC1-08002BE10318}] /xn=g  
@="DiskDrive" Ji;s}{HcRi  
QO:>A=u  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E969-E325-11CE-BFC1-08002BE10318}] ,#S^n _v  
@="Standard floppy disk controller" -?EZ
W`f  
R%
=}k6t"1  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96A-E325-11CE-BFC1-08002BE10318}] A>8dD%#  
@="Hdc" Bgh+>__  
q$o1dc*+:  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96B-E325-11CE-BFC1-08002BE10318}] aV3*qm
=g  
@="Keyboard" ^.2*73  
IVB_h!qzg1  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96F-E325-11CE-BFC1-08002BE10318}] f-xIQ*EA  
@="Mouse" {
UC.}x"  
8M
KJWf ^  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}] 8;73UWo[  
@="Net" JEct(f5x'  
!~rlb [[h~  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E973-E325-11CE-BFC1-08002BE10318}] ZB~!0Y]N
 
@="NetClient" )N|_,|~I
 
C|#y<(Jj  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E974-E325-11CE-BFC1-08002BE10318}] SLVi<#u6>  
@="NetService" Dysj_m2I  
js`Ts  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E975-E325-11CE-BFC1-08002BE10318}] ptu7w`!  
@="NetTrans" Lqz4-KA-  
F-FF(8;!  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E977-E325-11CE-BFC1-08002BE10318}] QxIR5XJ  
@="PCMCIA Adapters" /<fYV#*Y  
/Z
V7  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E97B-E325-11CE-BFC1-08002BE10318}] c'8-W0;[t  
@="SCSIAdapter" H186k  
0]^sd@=z  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E97D-E325-11CE-BFC1-08002BE10318}] (`ij  
@="System" :J+Wi9Bpo  
Y6ngNC  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E980-E325-11CE-BFC1-08002BE10318}] o2khSD=  
@="Floppy disk drive" -x'wePc{v%  
;)4wZ7u  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] 9fWW T  
@="Volume" b=7@lKEX  
R -|h t  
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{745A17A0-74D3-11D0-B6FE-00A0C90F57DA}] U&(UJ:I~'Q  
@="Human Interface Devices" 2YeJ5[^