Keyboard shift keys and upper case symbols non-functioning

Question

Translate

suyou

Asked Oct 23, 2019 at 07:09 AM

Device-related issues / Keyboard and Mouse Issues

Keyboard shift keys and upper case symbols non-functioning

Hello,
After receiving the most recent Win 10 update and installing it, both shift keys have stopped working and I can't get upper case symbols.
I'm writing this on my old desktop, winxp. the Laptop in question is running Win10 having originally run on

Win7, then Win8 and now Win 10.
iVe tried rollback, updating drivers and restarting, deleting and reinstalling, checking Sticky Keys etc, also checking language layout.
I'm at my wit's end, can you help me please?
Regards,
Sue Youell

browser: firefox.exe
oS: Windows XP x32 Professional Edition Service Pack 3 (build: 2600)
winPath: C:\WINDOWS\
userDir: C:\Documents and Settings\Susan\Application Data\
freeRam: 3756503040
locale: eng
programDir: C:\Program Files\Auslogics\BoostSpeed\
disks:
- 0:
  - n: C:\
  - freeSize: 39306661888
- 1:
  - n: E:\
  - freeSize: 360864350208
- 2:
  - n: F:\
  - freeSize: 495914561536
monitors:
- 0:
  - x: 0
  - y: 0
  - dX: 1440
  - dY: 900
  - pPI: 96
  - primary: 1
monitorDevices:
- screenW: 1440
- screenH: 900
- list:
  - 0:
    - name: LG W2242(Analog)
    - type:
    - manufacturer: LG
    - width: 1440
    - height: 900
    - ppiX: 96
    - ppiY: 96
    - availability: Running or Full Power
startups:
- list:
  - 0:
    - name: $winnt$
    - command: $winnt$.inf
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1:
    - name: 12520437
    - command: 12520437.cpx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2:
    - name: 12520850
    - command: 12520850.cpx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 3:
    - name: 3DViewer
    - command: 3DViewer.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 4:
    - name: 6to4svc
    - command: 6to4svc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 5:
    - name: 9B13A86D
    - command: 9B13A86D.plf
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 6:
    - name: aaaamon
    - command: aaaamon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 7:
    - name: aaclient
    - command: aaclient.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 8:
    - name: access
    - command: access.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 9:
    - name: acctres
    - command: acctres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 10:
    - name: accwiz
    - command: accwiz.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 11:
    - name: acelpdec
    - command: acelpdec.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 12:
    - name: acledit
    - command: acledit.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 13:
    - name: aclui
    - command: aclui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 14:
    - name: ActionCenterForms
    - command: ActionCenterForms.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 15:
    - name: activeds
    - command: activeds.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 16:
    - name: activeds
    - command: activeds.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 17:
    - name: actmovie
    - command: actmovie.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 18:
    - name: actxprxy
    - command: actxprxy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 19:
    - name: admparse
    - command: admparse.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 20:
    - name: adptif
    - command: adptif.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 21:
    - name: adsldp
    - command: adsldp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 22:
    - name: adsldpc
    - command: adsldpc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 23:
    - name: adsmsext
    - command: adsmsext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 24:
    - name: adsnds
    - command: adsnds.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 25:
    - name: adsnt
    - command: adsnt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 26:
    - name: adsnw
    - command: adsnw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 27:
    - name: advapi32
    - command: advapi32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 28:
    - name: advpack
    - command: advpack.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 29:
    - name: advpack.dll
    - command: advpack.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 30:
    - name: ahui
    - command: ahui.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 31:
    - name: Alert
    - command: Alert.bmp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 32:
    - name: alg
    - command: alg.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 33:
    - name: alrsvc
    - command: alrsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 34:
    - name: ALSNDMGR
    - command: ALSNDMGR.CPL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 35:
    - name: amcompat
    - command: amcompat.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 36:
    - name: amdpcom32
    - command: amdpcom32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 37:
    - name: amstream
    - command: amstream.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 38:
    - name: ansi
    - command: ansi.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 39:
    - name: apcups
    - command: apcups.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 40:
    - name: append
    - command: append.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 41:
    - name: apphelp
    - command: apphelp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 42:
    - name: appmgmts
    - command: appmgmts.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 43:
    - name: appmgr
    - command: appmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 44:
    - name: appwiz
    - command: appwiz.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 45:
    - name: app_filter_ui
    - command: app_filter_ui.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 46:
    - name: arp
    - command: arp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 47:
    - name: asctrls
    - command: asctrls.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 48:
    - name: asferror
    - command: asferror.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 49:
    - name: asfsipc
    - command: asfsipc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 50:
    - name: asr_fmt
    - command: asr_fmt.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 51:
    - name: asr_ldm
    - command: asr_ldm.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 52:
    - name: asr_pfu
    - command: asr_pfu.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 53:
    - name: AsusSetup
    - command: AsusSetup.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 54:
    - name: AsusSetup
    - command: AsusSetup.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 55:
    - name: asycfilt
    - command: asycfilt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 56:
    - name: at
    - command: at.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 57:
    - name: ati2cqag
    - command: ati2cqag.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 58:
    - name: ati2dvaa
    - command: ati2dvaa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 59:
    - name: ati2dvag
    - command: ati2dvag.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 60:
    - name: ati2edxx
    - command: ati2edxx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 61:
    - name: ati2evxx
    - command: ati2evxx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 62:
    - name: ati2evxx
    - command: ati2evxx.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 63:
    - name: Ati2mdxx
    - command: Ati2mdxx.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 64:
    - name: ati3d1ag
    - command: ati3d1ag.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 65:
    - name: ati3duag
    - command: ati3duag.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 66:
    - name: atiadlxx
    - command: atiadlxx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 67:
    - name: atiapfxx
    - command: atiapfxx.blb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 68:
    - name: atiapfxx
    - command: atiapfxx.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 69:
    - name: atibtmon
    - command: atibtmon.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 70:
    - name: ATIDDC
    - command: ATIDDC.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 71:
    - name: ATIDEMGX
    - command: ATIDEMGX.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 72:
    - name: atiicdxx
    - command: atiicdxx.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 73:
    - name: atiiiexx
    - command: atiiiexx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 74:
    - name: atikvmag
    - command: atikvmag.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 75:
    - name: atimpc32
    - command: atimpc32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 76:
    - name: ATIODCLI
    - command: ATIODCLI.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 77:
    - name: ATIODE
    - command: ATIODE.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 78:
    - name: atioglxx
    - command: atioglxx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 79:
    - name: atiok3x2
    - command: atiok3x2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 80:
    - name: atipdlxx
    - command: atipdlxx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 81:
    - name: atitvo32
    - command: atitvo32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 82:
    - name: ativcoxx
    - command: ativcoxx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 83:
    - name: ativdaxx
    - command: ativdaxx.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 84:
    - name: ativmvxx
    - command: ativmvxx.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 85:
    - name: ativtmxx
    - command: ativtmxx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 86:
    - name: ativva5x
    - command: ativva5x.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 87:
    - name: ativva6x
    - command: ativva6x.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 88:
    - name: ativvamv
    - command: ativvamv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 89:
    - name: ativvaxx
    - command: ativvaxx.cap
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 90:
    - name: ativvaxx
    - command: ativvaxx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 91:
    - name: atkctrs
    - command: atkctrs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 92:
    - name: atl
    - command: atl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 93:
    - name: atl100
    - command: atl100.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 94:
    - name: atl110
    - command: atl110.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 95:
    - name: atmadm
    - command: atmadm.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 96:
    - name: atmfd
    - command: atmfd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 97:
    - name: atmlib
    - command: atmlib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 98:
    - name: atmpvcno
    - command: atmpvcno.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 99:
    - name: atrace
    - command: atrace.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 100:
    - name: attrib
    - command: attrib.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 101:
    - name: audiodev
    - command: audiodev.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 102:
    - name: audiosrv
    - command: audiosrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 103:
    - name: auditusr
    - command: auditusr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 104:
    - name: authz
    - command: authz.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 105:
    - name: autochk
    - command: autochk.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 106:
    - name: autoconv
    - command: autoconv.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 107:
    - name: autodisc
    - command: autodisc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 108:
    - name: AUTOEXEC
    - command: AUTOEXEC.NT
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 109:
    - name: autofmt
    - command: autofmt.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 110:
    - name: autolfn
    - command: autolfn.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 111:
    - name: avicap
    - command: avicap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 112:
    - name: avicap32
    - command: avicap32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 113:
    - name: avifil32
    - command: avifil32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 114:
    - name: avifile
    - command: avifile.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 115:
    - name: avmeter
    - command: avmeter.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 116:
    - name: avtapi
    - command: avtapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 117:
    - name: avwav
    - command: avwav.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 118:
    - name: axaltocm
    - command: axaltocm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 119:
    - name: azroles
    - command: azroles.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 120:
    - name: basecsp
    - command: basecsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 121:
    - name: basesrv
    - command: basesrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 122:
    - name: batmeter
    - command: batmeter.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 123:
    - name: batt
    - command: batt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 124:
    - name: bcsprsrc
    - command: bcsprsrc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 125:
    - name: bdco1
    - command: bdco1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 126:
    - name: bdco1ins
    - command: bdco1ins.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 127:
    - name: bidispl
    - command: bidispl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 128:
    - name: bios1
    - command: bios1.rom
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 129:
    - name: bios4
    - command: bios4.rom
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 130:
    - name: bitsprx2
    - command: bitsprx2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 131:
    - name: bitsprx3
    - command: bitsprx3.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 132:
    - name: bitsprx4
    - command: bitsprx4.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 133:
    - name: blackbox
    - command: blackbox.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 134:
    - name: blastcln
    - command: blastcln.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 135:
    - name: bootcfg
    - command: bootcfg.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 136:
    - name: bootok
    - command: bootok.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 137:
    - name: bootvid
    - command: bootvid.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 138:
    - name: bootvrfy
    - command: bootvrfy.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 139:
    - name: bopomofo
    - command: bopomofo.uce
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 140:
    - name: browselc
    - command: browselc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 141:
    - name: browser
    - command: browser.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 142:
    - name: browserchoice
    - command: browserchoice.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 143:
    - name: browseui
    - command: browseui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 144:
    - name: browsewm
    - command: browsewm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 145:
    - name: bthci
    - command: bthci.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 146:
    - name: bthprops
    - command: bthprops.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 147:
    - name: bthserv
    - command: bthserv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 148:
    - name: btpanui
    - command: btpanui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 149:
    - name: BuzzingBee
    - command: BuzzingBee.wav
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 150:
    - name: cabinet
    - command: cabinet.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 151:
    - name: cabview
    - command: cabview.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 152:
    - name: cacls
    - command: cacls.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 153:
    - name: calc
    - command: calc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 154:
    - name: camocx
    - command: camocx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 155:
    - name: CapabilityTable
    - command: CapabilityTable.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 156:
    - name: capesnpn
    - command: capesnpn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 157:
    - name: capicom
    - command: capicom.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 158:
    - name: cards
    - command: cards.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 159:
    - name: catsrv
    - command: catsrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 160:
    - name: catsrvps
    - command: catsrvps.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 161:
    - name: catsrvut
    - command: catsrvut.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 162:
    - name: ccfgnt
    - command: ccfgnt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 163:
    - name: cdfview
    - command: cdfview.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 164:
    - name: cdm
    - command: cdm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 165:
    - name: cdmodem
    - command: cdmodem.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 166:
    - name: cdosys
    - command: cdosys.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 167:
    - name: cdplayer.exe
    - command: cdplayer.exe.manifest
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 168:
    - name: certcli
    - command: certcli.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 169:
    - name: certmgr
    - command: certmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 170:
    - name: certmgr
    - command: certmgr.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 171:
    - name: cewmdm
    - command: cewmdm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 172:
    - name: cfgbkend
    - command: cfgbkend.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 173:
    - name: cfgmgr32
    - command: cfgmgr32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 174:
    - name: charmap
    - command: charmap.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 175:
    - name: ChCfg
    - command: ChCfg.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 176:
    - name: chcp
    - command: chcp.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 177:
    - name: chkdsk
    - command: chkdsk.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 178:
    - name: chkntfs
    - command: chkntfs.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 179:
    - name: ciadmin
    - command: ciadmin.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 180:
    - name: ciadv
    - command: ciadv.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 181:
    - name: cic
    - command: cic.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 182:
    - name: cidaemon
    - command: cidaemon.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 183:
    - name: ciodm
    - command: ciodm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 184:
    - name: cipher
    - command: cipher.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 185:
    - name: cisvc
    - command: cisvc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 186:
    - name: ckcnv
    - command: ckcnv.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 187:
    - name: clb
    - command: clb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 188:
    - name: clbcatex
    - command: clbcatex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 189:
    - name: clbcatq
    - command: clbcatq.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 190:
    - name: cleanmgr
    - command: cleanmgr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 191:
    - name: cliconf
    - command: cliconf.chm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 192:
    - name: cliconfg
    - command: cliconfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 193:
    - name: cliconfg
    - command: cliconfg.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 194:
    - name: cliconfg
    - command: cliconfg.rll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 195:
    - name: clipbrd
    - command: clipbrd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 196:
    - name: clipsrv
    - command: clipsrv.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 197:
    - name: clusapi
    - command: clusapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 198:
    - name: cmcfg32
    - command: cmcfg32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 199:
    - name: cmd
    - command: cmd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 200:
    - name: cmdial32
    - command: cmdial32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 201:
    - name: cmdl32
    - command: cmdl32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 202:
    - name: cmdlib
    - command: cmdlib.wsc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 203:
    - name: cmmgr32
    - command: cmmgr32.hlp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 204:
    - name: cmmon32
    - command: cmmon32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 205:
    - name: cmos
    - command: cmos.ram
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 206:
    - name: cmpbk32
    - command: cmpbk32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 207:
    - name: cmprops
    - command: cmprops.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 208:
    - name: cmsetacl
    - command: cmsetacl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 209:
    - name: cmstp
    - command: cmstp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 210:
    - name: cmutil
    - command: cmutil.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 211:
    - name: cnbjmon
    - command: cnbjmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 212:
    - name: cnetcfg
    - command: cnetcfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 213:
    - name: cnvfat
    - command: cnvfat.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 214:
    - name: colbact
    - command: colbact.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 215:
    - name: comaddin
    - command: comaddin.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 216:
    - name: comcat
    - command: comcat.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 217:
    - name: comctl32
    - command: comctl32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 218:
    - name: comdlg32
    - command: comdlg32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 219:
    - name: comdlg32
    - command: comdlg32.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 220:
    - name: comm
    - command: comm.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 221:
    - name: command
    - command: command.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 222:
    - name: commdlg
    - command: commdlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 223:
    - name: comp
    - command: comp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 224:
    - name: compact
    - command: compact.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 225:
    - name: compatui
    - command: compatui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 226:
    - name: compmgmt
    - command: compmgmt.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 227:
    - name: compobj
    - command: compobj.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 228:
    - name: compstui
    - command: compstui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 229:
    - name: comrepl
    - command: comrepl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 230:
    - name: comres
    - command: comres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 231:
    - name: comsdupd
    - command: comsdupd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 232:
    - name: comsnap
    - command: comsnap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 233:
    - name: comsvcs
    - command: comsvcs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 234:
    - name: comuid
    - command: comuid.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 235:
    - name: CONFIG
    - command: CONFIG.NT
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 236:
    - name: CONFIG
    - command: CONFIG.TMP
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 237:
    - name: confmsp
    - command: confmsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 238:
    - name: conime
    - command: conime.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 239:
    - name: console
    - command: console.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 240:
    - name: control
    - command: control.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 241:
    - name: convert
    - command: convert.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 242:
    - name: corpol
    - command: corpol.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 243:
    - name: country
    - command: country.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 244:
    - name: cpnprt2
    - command: cpnprt2.cid
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 245:
    - name: cpnprtuk
    - command: cpnprtuk.cid
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 246:
    - name: crash
    - command: crash
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 247:
    - name: credssp
    - command: credssp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 248:
    - name: credui
    - command: credui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 249:
    - name: crtdll
    - command: crtdll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 250:
    - name: crypt32
    - command: crypt32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 251:
    - name: cryptdlg
    - command: cryptdlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 252:
    - name: cryptdll
    - command: cryptdll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 253:
    - name: cryptext
    - command: cryptext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 254:
    - name: cryptnet
    - command: cryptnet.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 255:
    - name: cryptsvc
    - command: cryptsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 256:
    - name: cryptui
    - command: cryptui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 257:
    - name: cscdll
    - command: cscdll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 258:
    - name: cscript
    - command: cscript.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 259:
    - name: cscui
    - command: cscui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 260:
    - name: csrsrv
    - command: csrsrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 261:
    - name: csrss
    - command: csrss.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 262:
    - name: csseqchk
    - command: csseqchk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 263:
    - name: CtCamMgr
    - command: CtCamMgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 264:
    - name: CtCamPin
    - command: CtCamPin.crl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 265:
    - name: ctfmon
    - command: ctfmon.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 266:
    - name: ctl3d32
    - command: ctl3d32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 267:
    - name: ctl3dv2
    - command: ctl3dv2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 268:
    - name: CtRegApp
    - command: CtRegApp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 269:
    - name: ctype
    - command: ctype.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 270:
    - name: c_037
    - command: c_037.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 271:
    - name: c_10000
    - command: c_10000.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 272:
    - name: c_10006
    - command: c_10006.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 273:
    - name: c_10007
    - command: c_10007.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 274:
    - name: c_10010
    - command: c_10010.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 275:
    - name: c_10017
    - command: c_10017.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 276:
    - name: c_10029
    - command: c_10029.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 277:
    - name: c_10079
    - command: c_10079.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 278:
    - name: c_10081
    - command: c_10081.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 279:
    - name: c_10082
    - command: c_10082.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 280:
    - name: c_1026
    - command: c_1026.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 281:
    - name: c_1250
    - command: c_1250.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 282:
    - name: c_1251
    - command: c_1251.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 283:
    - name: c_1252
    - command: c_1252.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 284:
    - name: c_1253
    - command: c_1253.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 285:
    - name: c_1254
    - command: c_1254.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 286:
    - name: c_1255
    - command: c_1255.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 287:
    - name: c_1256
    - command: c_1256.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 288:
    - name: c_1257
    - command: c_1257.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 289:
    - name: c_1258
    - command: c_1258.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 290:
    - name: c_20127
    - command: c_20127.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 291:
    - name: c_20261
    - command: c_20261.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 292:
    - name: c_20866
    - command: c_20866.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 293:
    - name: c_20905
    - command: c_20905.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 294:
    - name: c_21866
    - command: c_21866.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 295:
    - name: c_28591
    - command: c_28591.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 296:
    - name: c_28592
    - command: c_28592.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 297:
    - name: c_28593
    - command: c_28593.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 298:
    - name: C_28594
    - command: C_28594.NLS
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 299:
    - name: C_28595
    - command: C_28595.NLS
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 300:
    - name: C_28597
    - command: C_28597.NLS
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 301:
    - name: c_28598
    - command: c_28598.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 302:
    - name: c_28599
    - command: c_28599.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 303:
    - name: c_28603
    - command: c_28603.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 304:
    - name: c_28605
    - command: c_28605.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 305:
    - name: c_437
    - command: c_437.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 306:
    - name: c_500
    - command: c_500.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 307:
    - name: c_737
    - command: c_737.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 308:
    - name: c_775
    - command: c_775.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 309:
    - name: c_850
    - command: c_850.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 310:
    - name: c_852
    - command: c_852.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 311:
    - name: c_855
    - command: c_855.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 312:
    - name: c_857
    - command: c_857.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 313:
    - name: c_860
    - command: c_860.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 314:
    - name: c_861
    - command: c_861.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 315:
    - name: c_863
    - command: c_863.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 316:
    - name: c_865
    - command: c_865.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 317:
    - name: c_866
    - command: c_866.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 318:
    - name: c_869
    - command: c_869.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 319:
    - name: c_874
    - command: c_874.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 320:
    - name: c_875
    - command: c_875.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 321:
    - name: c_932
    - command: c_932.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 322:
    - name: c_936
    - command: c_936.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 323:
    - name: c_949
    - command: c_949.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 324:
    - name: c_950
    - command: c_950.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 325:
    - name: d3d8
    - command: d3d8.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 326:
    - name: d3d8caps
    - command: d3d8caps.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 327:
    - name: d3d8thk
    - command: d3d8thk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 328:
    - name: d3d9
    - command: d3d9.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 329:
    - name: d3d9caps
    - command: d3d9caps.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 330:
    - name: d3dim
    - command: d3dim.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 331:
    - name: d3dim700
    - command: d3dim700.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 332:
    - name: d3dpmesh
    - command: d3dpmesh.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 333:
    - name: d3dramp
    - command: d3dramp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 334:
    - name: d3drm
    - command: d3drm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 335:
    - name: d3dx9_27
    - command: d3dx9_27.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 336:
    - name: d3dx9_32
    - command: d3dx9_32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 337:
    - name: D3DX9_37
    - command: D3DX9_37.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 338:
    - name: D3DX9_38
    - command: D3DX9_38.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 339:
    - name: d3dxof
    - command: d3dxof.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 340:
    - name: danim
    - command: danim.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 341:
    - name: dataclen
    - command: dataclen.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 342:
    - name: datime
    - command: datime.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 343:
    - name: Dav3_32
    - command: Dav3_32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 344:
    - name: davclnt
    - command: davclnt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 345:
    - name: daxctle
    - command: daxctle.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 346:
    - name: dbgeng
    - command: dbgeng.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 347:
    - name: dbghelp
    - command: dbghelp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 348:
    - name: dbmsadsn
    - command: dbmsadsn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 349:
    - name: dbmsrpcn
    - command: dbmsrpcn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 350:
    - name: dbmsvinn
    - command: dbmsvinn.dLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 351:
    - name: dbnetlib
    - command: dbnetlib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 352:
    - name: dbnmpntw
    - command: dbnmpntw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 353:
    - name: dcache
    - command: dcache.bin
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 354:
    - name: dciman32
    - command: dciman32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 355:
    - name: dcomcnfg
    - command: dcomcnfg.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 356:
    - name: ddeml
    - command: ddeml.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 357:
    - name: ddeshare
    - command: ddeshare.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 358:
    - name: ddraw
    - command: ddraw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 359:
    - name: ddrawex
    - command: ddrawex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 360:
    - name: debug
    - command: debug.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 361:
    - name: defrag
    - command: defrag.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 362:
    - name: desk
    - command: desk.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 363:
    - name: deskadp
    - command: deskadp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 364:
    - name: deskmon
    - command: deskmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 365:
    - name: deskperf
    - command: deskperf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 366:
    - name: desktop
    - command: desktop.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 367:
    - name: devenum
    - command: devenum.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 368:
    - name: devmgmt
    - command: devmgmt.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 369:
    - name: devmgr
    - command: devmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 370:
    - name: dfrg
    - command: dfrg.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 371:
    - name: dfrgfat
    - command: dfrgfat.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 372:
    - name: dfrgntfs
    - command: dfrgntfs.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 373:
    - name: dfrgres
    - command: dfrgres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 374:
    - name: dfrgsnap
    - command: dfrgsnap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 375:
    - name: dfrgui
    - command: dfrgui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 376:
    - name: dfshim
    - command: dfshim.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 377:
    - name: dfsshlex
    - command: dfsshlex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 378:
    - name: dgnet
    - command: dgnet.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 379:
    - name: dgrpsetu
    - command: dgrpsetu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 380:
    - name: dgsetup
    - command: dgsetup.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 381:
    - name: dhcpcsvc
    - command: dhcpcsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 382:
    - name: dhcpmon
    - command: dhcpmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 383:
    - name: dhcpqec
    - command: dhcpqec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 384:
    - name: dhcpsapi
    - command: dhcpsapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 385:
    - name: diactfrm
    - command: diactfrm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 386:
    - name: diantz
    - command: diantz.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 387:
    - name: digest
    - command: digest.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 388:
    - name: dimap
    - command: dimap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 389:
    - name: dimsntfy
    - command: dimsntfy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 390:
    - name: dimsroam
    - command: dimsroam.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 391:
    - name: dinput
    - command: dinput.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 392:
    - name: dinput8
    - command: dinput8.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 393:
    - name: diskcomp
    - command: diskcomp.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 394:
    - name: diskcopy
    - command: diskcopy.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 395:
    - name: diskcopy
    - command: diskcopy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 396:
    - name: diskmgmt
    - command: diskmgmt.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 397:
    - name: diskpart
    - command: diskpart.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 398:
    - name: diskperf
    - command: diskperf.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 399:
    - name: dispex
    - command: dispex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 400:
    - name: DLLAV32
    - command: DLLAV32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 401:
    - name: DLLAV32
    - command: DLLAV32.lib
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 402:
    - name: DLLCDA32
    - command: DLLCDA32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 403:
    - name: DLLCDF32
    - command: DLLCDF32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 404:
    - name: DLLCPY32
    - command: DLLCPY32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 405:
    - name: DLLDEV32
    - command: DLLDEV32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 406:
    - name: DLLDEV32i
    - command: DLLDEV32i.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 407:
    - name: DLLDIR32
    - command: DLLDIR32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 408:
    - name: DLLDRV32
    - command: DLLDRV32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 409:
    - name: dllhost
    - command: dllhost.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 410:
    - name: dllhst3g
    - command: dllhst3g.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 411:
    - name: DLLIMG32
    - command: DLLIMG32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 412:
    - name: DLLIO32
    - command: DLLIO32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 413:
    - name: DLLISO32
    - command: DLLISO32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 414:
    - name: DLLIX
    - command: DLLIX.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 415:
    - name: DLLMSC32
    - command: DLLMSC32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 416:
    - name: DLLPNT32
    - command: DLLPNT32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 417:
    - name: DLLPRF32
    - command: DLLPRF32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 418:
    - name: DLLPRJ32
    - command: DLLPRJ32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 419:
    - name: DLLPTL32
    - command: DLLPTL32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 420:
    - name: DLLRD32
    - command: DLLRD32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 421:
    - name: DLLRES32
    - command: DLLRES32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 422:
    - name: DLLTPO32
    - command: DLLTPO32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 423:
    - name: dmadmin
    - command: dmadmin.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 424:
    - name: dmband
    - command: dmband.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 425:
    - name: dmcompos
    - command: dmcompos.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 426:
    - name: dmconfig
    - command: dmconfig.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 427:
    - name: dmdlgs
    - command: dmdlgs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 428:
    - name: dmdskmgr
    - command: dmdskmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 429:
    - name: dmdskres
    - command: dmdskres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 430:
    - name: dmime
    - command: dmime.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 431:
    - name: dmintf
    - command: dmintf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 432:
    - name: dmloader
    - command: dmloader.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 433:
    - name: dmocx
    - command: dmocx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 434:
    - name: dmremote
    - command: dmremote.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 435:
    - name: dmscript
    - command: dmscript.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 436:
    - name: dmserver
    - command: dmserver.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 437:
    - name: dmstyle
    - command: dmstyle.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 438:
    - name: dmsynth
    - command: dmsynth.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 439:
    - name: dmusic
    - command: dmusic.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 440:
    - name: dmutil
    - command: dmutil.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 441:
    - name: dmview
    - command: dmview.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 442:
    - name: dns-sd
    - command: dns-sd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 443:
    - name: dnsapi
    - command: dnsapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 444:
    - name: dnsrslvr
    - command: dnsrslvr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 445:
    - name: dnssd
    - command: dnssd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 446:
    - name: dnssdX
    - command: dnssdX.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 447:
    - name: docprop
    - command: docprop.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 448:
    - name: docprop2
    - command: docprop2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 449:
    - name: doskey
    - command: doskey.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 450:
    - name: dosx
    - command: dosx.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 451:
    - name: dot3api
    - command: dot3api.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 452:
    - name: dot3cfg
    - command: dot3cfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 453:
    - name: dot3dlg
    - command: dot3dlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 454:
    - name: dot3gpclnt
    - command: dot3gpclnt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 455:
    - name: dot3msm
    - command: dot3msm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 456:
    - name: dot3svc
    - command: dot3svc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 457:
    - name: dot3ui
    - command: dot3ui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 458:
    - name: dpcdll
    - command: dpcdll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 459:
    - name: dplay
    - command: dplay.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 460:
    - name: dplaysvr
    - command: dplaysvr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 461:
    - name: dplayx
    - command: dplayx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 462:
    - name: dpmodemx
    - command: dpmodemx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 463:
    - name: dpnaddr
    - command: dpnaddr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 464:
    - name: dpnet
    - command: dpnet.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 465:
    - name: dpnhpast
    - command: dpnhpast.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 466:
    - name: dpnhupnp
    - command: dpnhupnp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 467:
    - name: dpnlobby
    - command: dpnlobby.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 468:
    - name: dpnmodem
    - command: dpnmodem.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 469:
    - name: dpnsvr
    - command: dpnsvr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 470:
    - name: dpnwsock
    - command: dpnwsock.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 471:
    - name: dpserial
    - command: dpserial.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 472:
    - name: dpvacm
    - command: dpvacm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 473:
    - name: dpvoice
    - command: dpvoice.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 474:
    - name: dpvsetup
    - command: dpvsetup.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 475:
    - name: dpvvox
    - command: dpvvox.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 476:
    - name: dpwsock
    - command: dpwsock.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 477:
    - name: dpwsockx
    - command: dpwsockx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 478:
    - name: driverquery
    - command: driverquery.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 479:
    - name: drmclien
    - command: drmclien.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 480:
    - name: drmstor
    - command: drmstor.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 481:
    - name: drmupgds
    - command: drmupgds.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 482:
    - name: drmv2clt
    - command: drmv2clt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 483:
    - name: drprov
    - command: drprov.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 484:
    - name: drwatson
    - command: drwatson.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 485:
    - name: drwtsn32
    - command: drwtsn32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 486:
    - name: ds16gt
    - command: ds16gt.dLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 487:
    - name: ds32gt
    - command: ds32gt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 488:
    - name: dsauth
    - command: dsauth.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 489:
    - name: dsdmo
    - command: dsdmo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 490:
    - name: dsdmoprp
    - command: dsdmoprp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 491:
    - name: dskquota
    - command: dskquota.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 492:
    - name: dskquoui
    - command: dskquoui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 493:
    - name: dsound
    - command: dsound.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 494:
    - name: dsound
    - command: dsound.vxd
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 495:
    - name: dsound3d
    - command: dsound3d.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 496:
    - name: dsprop
    - command: dsprop.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 497:
    - name: dsprpres
    - command: dsprpres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 498:
    - name: dsquery
    - command: dsquery.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 499:
    - name: dssec
    - command: dssec.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 500:
    - name: dssec
    - command: dssec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 501:
    - name: dssenh
    - command: dssenh.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 502:
    - name: dsuiext
    - command: dsuiext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 503:
    - name: dswave
    - command: dswave.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 504:
    - name: dumprep
    - command: dumprep.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 505:
    - name: duser
    - command: duser.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 506:
    - name: dvdplay
    - command: dvdplay.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 507:
    - name: dvdupgrd
    - command: dvdupgrd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 508:
    - name: dwwin
    - command: dwwin.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 509:
    - name: dx7vb
    - command: dx7vb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 510:
    - name: dx8vb
    - command: dx8vb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 511:
    - name: dxdiag
    - command: dxdiag.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 512:
    - name: dxdiagn
    - command: dxdiagn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 513:
    - name: dxmasf
    - command: dxmasf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 514:
    - name: dxtmsft
    - command: dxtmsft.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 515:
    - name: dxtrans
    - command: dxtrans.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 516:
    - name: dxva2
    - command: dxva2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 517:
    - name: eapolqec
    - command: eapolqec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 518:
    - name: eapp3hst
    - command: eapp3hst.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 519:
    - name: eappcfg
    - command: eappcfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 520:
    - name: eappgnui
    - command: eappgnui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 521:
    - name: eapphost
    - command: eapphost.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 522:
    - name: eappprxy
    - command: eappprxy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 523:
    - name: eapqec
    - command: eapqec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 524:
    - name: eapsvc
    - command: eapsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 525:
    - name: EBPMON24
    - command: EBPMON24.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 526:
    - name: EBPPORT4
    - command: EBPPORT4.DAT
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 527:
    - name: edit
    - command: edit.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 528:
    - name: edit
    - command: edit.hlp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 529:
    - name: edlin
    - command: edlin.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 530:
    - name: efsadu
    - command: efsadu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 531:
    - name: ega
    - command: ega.cpi
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 532:
    - name: els
    - command: els.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 533:
    - name: emptyregdb
    - command: emptyregdb.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 534:
    - name: encapi
    - command: encapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 535:
    - name: encdec
    - command: encdec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 536:
    - name: enppmon
    - command: enppmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 537:
    - name: enppui
    - command: enppui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 538:
    - name: enpres
    - command: enpres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 539:
    - name: ensppmon
    - command: ensppmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 540:
    - name: ensppui
    - command: ensppui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 541:
    - name: enspres
    - command: enspres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 542:
    - name: Epcmlib
    - command: Epcmlib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 543:
    - name: EPPICLocal_BP
    - command: EPPICLocal_BP.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 544:
    - name: EPPICLocal_CF
    - command: EPPICLocal_CF.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 545:
    - name: EPPICLocal_DU
    - command: EPPICLocal_DU.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 546:
    - name: EPPICLocal_EN
    - command: EPPICLocal_EN.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 547:
    - name: EPPICLocal_ES
    - command: EPPICLocal_ES.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 548:
    - name: EPPICLocal_FR
    - command: EPPICLocal_FR.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 549:
    - name: EPPICLocal_GE
    - command: EPPICLocal_GE.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 550:
    - name: EPPICLocal_IT
    - command: EPPICLocal_IT.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 551:
    - name: EPPICLocal_KO
    - command: EPPICLocal_KO.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 552:
    - name: EPPICLocal_PT
    - command: EPPICLocal_PT.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 553:
    - name: EPPICLocal_RU
    - command: EPPICLocal_RU.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 554:
    - name: EPPICLocal_SC
    - command: EPPICLocal_SC.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 555:
    - name: EPPICLocal_TC
    - command: EPPICLocal_TC.cfg
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 556:
    - name: EPPicMgr
    - command: EPPicMgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 557:
    - name: EPPICPattern1
    - command: EPPICPattern1.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 558:
    - name: EPPICPattern121
    - command: EPPICPattern121.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 559:
    - name: EPPICPattern131
    - command: EPPICPattern131.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 560:
    - name: EPPICPattern2
    - command: EPPICPattern2.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 561:
    - name: EPPICPattern3
    - command: EPPICPattern3.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 562:
    - name: EPPICPattern4
    - command: EPPICPattern4.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 563:
    - name: EPPICPattern5
    - command: EPPICPattern5.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 564:
    - name: EPPICPattern6
    - command: EPPICPattern6.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 565:
    - name: EPPICPresetData_BP
    - command: EPPICPresetData_BP.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 566:
    - name: EPPICPresetData_CF
    - command: EPPICPresetData_CF.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 567:
    - name: EPPICPresetData_DU
    - command: EPPICPresetData_DU.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 568:
    - name: EPPICPresetData_EN
    - command: EPPICPresetData_EN.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 569:
    - name: EPPICPresetData_ES
    - command: EPPICPresetData_ES.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 570:
    - name: EPPICPresetData_FR
    - command: EPPICPresetData_FR.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 571:
    - name: EPPICPresetData_GE
    - command: EPPICPresetData_GE.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 572:
    - name: EPPICPresetData_IT
    - command: EPPICPresetData_IT.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 573:
    - name: EPPICPresetData_PT
    - command: EPPICPresetData_PT.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 574:
    - name: EPPICPrinterDB
    - command: EPPICPrinterDB.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 575:
    - name: EpPicPrt
    - command: EpPicPrt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 576:
    - name: EPPICResdb
    - command: EPPICResdb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 577:
    - name: EPPICResdb0000
    - command: EPPICResdb0000
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 578:
    - name: EPSMTL32
    - command: EPSMTL32.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 579:
    - name: EPSTP32U
    - command: EPSTP32U.EXE
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 580:
    - name: EqnClass
    - command: EqnClass.Dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 581:
    - name: ersvc
    - command: ersvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 582:
    - name: es
    - command: es.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 583:
    - name: escsvc
    - command: escsvc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 584:
    - name: esent
    - command: esent.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 585:
    - name: esent97
    - command: esent97.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 586:
    - name: esentprf
    - command: esentprf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 587:
    - name: esentprf
    - command: esentprf.hxx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 588:
    - name: esentprf
    - command: esentprf.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 589:
    - name: esentutl
    - command: esentutl.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 590:
    - name: eswiau2
    - command: eswiau2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 591:
    - name: eudcedit
    - command: eudcedit.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 592:
    - name: eula
    - command: eula.txt
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 593:
    - name: eventcls
    - command: eventcls.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 594:
    - name: eventcreate
    - command: eventcreate.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 595:
    - name: eventlog
    - command: eventlog.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 596:
    - name: eventquery
    - command: eventquery.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 597:
    - name: eventtriggers
    - command: eventtriggers.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 598:
    - name: eventvwr
    - command: eventvwr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 599:
    - name: eventvwr
    - command: eventvwr.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 600:
    - name: evr
    - command: evr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 601:
    - name: exe2bin
    - command: exe2bin.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 602:
    - name: expand
    - command: expand.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 603:
    - name: expsrv
    - command: expsrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 604:
    - name: extmgr
    - command: extmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 605:
    - name: extrac32
    - command: extrac32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 606:
    - name: exts
    - command: exts.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 607:
    - name: ezsidmv
    - command: ezsidmv.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 608:
    - name: E_DCINST
    - command: E_DCINST.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 609:
    - name: E_FD4BHQE
    - command: E_FD4BHQE.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 610:
    - name: E_FLBHQE
    - command: E_FLBHQE.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 611:
    - name: E_TD4BTAE
    - command: E_TD4BTAE.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 612:
    - name: E_TLMBTAE
    - command: E_TLMBTAE.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 613:
    - name: fastopen
    - command: fastopen.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 614:
    - name: faultrep
    - command: faultrep.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 615:
    - name: faxpatch
    - command: faxpatch.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 616:
    - name: fc
    - command: fc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 617:
    - name: FCLKBTN
    - command: FCLKBTN.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 618:
    - name: fdco1
    - command: fdco1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 619:
    - name: fdco1ins
    - command: fdco1ins.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 620:
    - name: fdco_l1028
    - command: fdco_l1028.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 621:
    - name: fdco_l1031
    - command: fdco_l1031.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 622:
    - name: fdco_l1034
    - command: fdco_l1034.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 623:
    - name: fdco_l1036
    - command: fdco_l1036.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 624:
    - name: fdco_l1040
    - command: fdco_l1040.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 625:
    - name: fdco_l1041
    - command: fdco_l1041.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 626:
    - name: fdco_l1042
    - command: fdco_l1042.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 627:
    - name: fdco_l1046
    - command: fdco_l1046.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 628:
    - name: fdco_l2052
    - command: fdco_l2052.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 629:
    - name: fde
    - command: fde.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 630:
    - name: fdeploy
    - command: fdeploy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 631:
    - name: FE05DA0D
    - command: FE05DA0D.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 632:
    - name: FE05DA0D
    - command: FE05DA0D.FCL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 633:
    - name: FE05DA0D
    - command: FE05DA0D.FCP
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 634:
    - name: FE05EFED
    - command: FE05EFED.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 635:
    - name: FE05EFED
    - command: FE05EFED.FCL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 636:
    - name: FE05EFED
    - command: FE05EFED.FCP
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 637:
    - name: FE05F051
    - command: FE05F051.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 638:
    - name: FE05F051
    - command: FE05F051.FCL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 639:
    - name: FE05F051
    - command: FE05F051.FCP
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 640:
    - name: FE05F3D5
    - command: FE05F3D5.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 641:
    - name: FE05F3D5
    - command: FE05F3D5.FCL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 642:
    - name: FE05F3D5
    - command: FE05F3D5.FCP
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 643:
    - name: feclient
    - command: feclient.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 644:
    - name: FFRAFLIB
    - command: FFRAFLIB.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 645:
    - name: FFTIFF16
    - command: FFTIFF16.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 646:
    - name: filemgmt
    - command: filemgmt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 647:
    - name: find
    - command: find.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 648:
    - name: findstr
    - command: findstr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 649:
    - name: FINFCHECK
    - command: FINFCHECK.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 650:
    - name: FINFCOPY
    - command: FINFCOPY.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 651:
    - name: finger
    - command: finger.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 652:
    - name: firewall
    - command: firewall.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 653:
    - name: fixmapi
    - command: fixmapi.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 654:
    - name: FlashPlayerApp
    - command: FlashPlayerApp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 655:
    - name: FlashPlayerCPLApp
    - command: FlashPlayerCPLApp.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 656:
    - name: fldrclnr
    - command: fldrclnr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 657:
    - name: fltlib
    - command: fltlib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 658:
    - name: fltmc
    - command: fltmc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 659:
    - name: FM20
    - command: FM20.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 660:
    - name: FM20ENU
    - command: FM20ENU.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 661:
    - name: fmifs
    - command: fmifs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 662:
    - name: fnfilter
    - command: fnfilter.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 663:
    - name: FNTCACHE
    - command: FNTCACHE.DAT
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 664:
    - name: fontext
    - command: fontext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 665:
    - name: fontsub
    - command: fontsub.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 666:
    - name: fontview
    - command: fontview.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 667:
    - name: forcedos
    - command: forcedos.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 668:
    - name: format
    - command: format.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 669:
    - name: FPXS2Pro
    - command: FPXS2Pro.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 670:
    - name: framebuf
    - command: framebuf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 671:
    - name: freecell
    - command: freecell.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 672:
    - name: FREGSHEX
    - command: FREGSHEX.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 673:
    - name: fsmgmt
    - command: fsmgmt.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 674:
    - name: fsquirt
    - command: fsquirt.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 675:
    - name: fsusd
    - command: fsusd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 676:
    - name: fsutil
    - command: fsutil.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 677:
    - name: ftp
    - command: ftp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 678:
    - name: ftsrch
    - command: ftsrch.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 679:
    - name: fuusd
    - command: fuusd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 680:
    - name: fwcfg
    - command: fwcfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 681:
    - name: g711codc
    - command: g711codc.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 682:
    - name: gb2312
    - command: gb2312.uce
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 683:
    - name: gcdef
    - command: gcdef.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 684:
    - name: gdi
    - command: gdi.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 685:
    - name: gdi32
    - command: gdi32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 686:
    - name: GEARAspi
    - command: GEARAspi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 687:
    - name: geo
    - command: geo.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 688:
    - name: geoforms
    - command: geoforms.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 689:
    - name: getmac
    - command: getmac.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 690:
    - name: getuname
    - command: getuname.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 691:
    - name: giveio
    - command: giveio.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 692:
    - name: glmf32
    - command: glmf32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 693:
    - name: glu32
    - command: glu32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 694:
    - name: gpedit
    - command: gpedit.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 695:
    - name: gpedit
    - command: gpedit.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 696:
    - name: gpkcsp
    - command: gpkcsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 697:
    - name: gpkrsrc
    - command: gpkrsrc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 698:
    - name: gpresult
    - command: gpresult.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 699:
    - name: gptext
    - command: gptext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 700:
    - name: gpupdate
    - command: gpupdate.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 701:
    - name: graftabl
    - command: graftabl.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 702:
    - name: graphics
    - command: graphics.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 703:
    - name: graphics
    - command: graphics.pro
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 704:
    - name: grpconv
    - command: grpconv.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 705:
    - name: gsrvctr
    - command: gsrvctr.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 706:
    - name: gsrvctr
    - command: gsrvctr.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 707:
    - name: gthrctr
    - command: gthrctr.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 708:
    - name: gthrctr
    - command: gthrctr.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 709:
    - name: h323
    - command: h323.tsp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 710:
    - name: h323log
    - command: h323log.txt
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 711:
    - name: h323msp
    - command: h323msp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 712:
    - name: HAL
    - command: HAL.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 713:
    - name: hccoin
    - command: hccoin.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 714:
    - name: HdAProp
    - command: HdAProp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 715:
    - name: HdAShCut
    - command: HdAShCut.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 716:
    - name: HdAudRes
    - command: HdAudRes.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 717:
    - name: hdwwiz
    - command: hdwwiz.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 718:
    - name: help
    - command: help.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 719:
    - name: hhctrl
    - command: hhctrl.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 720:
    - name: hhsetup
    - command: hhsetup.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 721:
    - name: hid
    - command: hid.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 722:
    - name: hidphone
    - command: hidphone.tsp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 723:
    - name: hidserv
    - command: hidserv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 724:
    - name: himem
    - command: himem.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 725:
    - name: hlink
    - command: hlink.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 726:
    - name: hnetcfg
    - command: hnetcfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 727:
    - name: hnetmon
    - command: hnetmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 728:
    - name: hnetwiz
    - command: hnetwiz.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 729:
    - name: homepage
    - command: homepage.inf
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 730:
    - name: hostname
    - command: hostname.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 731:
    - name: hotplug
    - command: hotplug.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 732:
    - name: hsfcisp2
    - command: hsfcisp2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 733:
    - name: hticons
    - command: hticons.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 734:
    - name: html
    - command: html.iec
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 735:
    - name: httpapi
    - command: httpapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 736:
    - name: htui
    - command: htui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 737:
    - name: hypertrm
    - command: hypertrm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 738:
    - name: iac25_32
    - command: iac25_32.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 739:
    - name: iacenc
    - command: iacenc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 740:
    - name: iasacct
    - command: iasacct.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 741:
    - name: iasads
    - command: iasads.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 742:
    - name: iashlpr
    - command: iashlpr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 743:
    - name: iasnap
    - command: iasnap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 744:
    - name: iaspolcy
    - command: iaspolcy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 745:
    - name: iasrad
    - command: iasrad.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 746:
    - name: iasrecst
    - command: iasrecst.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 747:
    - name: iassam
    - command: iassam.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 748:
    - name: iassdo
    - command: iassdo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 749:
    - name: iassvcs
    - command: iassvcs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 750:
    - name: icaapi
    - command: icaapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 751:
    - name: icardagt
    - command: icardagt.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 752:
    - name: icardie
    - command: icardie.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 753:
    - name: icardres
    - command: icardres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 754:
    - name: icardres.dll
    - command: icardres.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 755:
    - name: iccvid
    - command: iccvid.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 756:
    - name: icfgnt5
    - command: icfgnt5.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 757:
    - name: icm32
    - command: icm32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 758:
    - name: icmp
    - command: icmp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 759:
    - name: icmui
    - command: icmui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 760:
    - name: icrav03
    - command: icrav03.rat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 761:
    - name: icwdial
    - command: icwdial.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 762:
    - name: icwphbk
    - command: icwphbk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 763:
    - name: idecoi
    - command: idecoi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 764:
    - name: idecoiins
    - command: idecoiins.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 765:
    - name: ideograf
    - command: ideograf.uce
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 766:
    - name: idndl
    - command: idndl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 767:
    - name: idq
    - command: idq.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 768:
    - name: idxcntrs
    - command: idxcntrs.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 769:
    - name: idxcntrs
    - command: idxcntrs.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 770:
    - name: ie4uinit
    - command: ie4uinit.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 771:
    - name: ie4uinit.exe
    - command: ie4uinit.exe.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 772:
    - name: IE7Eula
    - command: IE7Eula.rtf
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 773:
    - name: IE8Eula
    - command: IE8Eula.rtf
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 774:
    - name: ieakeng
    - command: ieakeng.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 775:
    - name: ieaksie
    - command: ieaksie.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 776:
    - name: ieakui
    - command: ieakui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 777:
    - name: ieapfltr
    - command: ieapfltr.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 778:
    - name: ieapfltr
    - command: ieapfltr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 779:
    - name: iedkcs32
    - command: iedkcs32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 780:
    - name: iedkcs32.dll
    - command: iedkcs32.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 781:
    - name: ieframe
    - command: ieframe.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 782:
    - name: ieframe.dll
    - command: ieframe.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 783:
    - name: iepeers
    - command: iepeers.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 784:
    - name: iernonce
    - command: iernonce.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 785:
    - name: iertutil
    - command: iertutil.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 786:
    - name: iesetup
    - command: iesetup.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 787:
    - name: ieudinit
    - command: ieudinit.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 788:
    - name: ieui
    - command: ieui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 789:
    - name: ieuinit
    - command: ieuinit.inf
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 790:
    - name: iexpress
    - command: iexpress.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 791:
    - name: ifmon
    - command: ifmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 792:
    - name: ifsutil
    - command: ifsutil.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 793:
    - name: ifxcardm
    - command: ifxcardm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 794:
    - name: igmpagnt
    - command: igmpagnt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 795:
    - name: iissuba
    - command: iissuba.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 796:
    - name: ils
    - command: ils.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 797:
    - name: imaadp32
    - command: imaadp32.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 798:
    - name: imagehlp
    - command: imagehlp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 799:
    - name: ImagX7
    - command: ImagX7.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 800:
    - name: ImagXpr7
    - command: ImagXpr7.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 801:
    - name: ImagXR7
    - command: ImagXR7.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 802:
    - name: ImagXRA7
    - command: ImagXRA7.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 803:
    - name: imapi
    - command: imapi.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 804:
    - name: imeshare
    - command: imeshare.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 805:
    - name: imgutil
    - command: imgutil.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 806:
    - name: imm32
    - command: imm32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 807:
    - name: Indeo4
    - command: Indeo4.qtx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 808:
    - name: inetcfg
    - command: inetcfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 809:
    - name: inetcomm(2)
    - command: inetcomm(2).dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 810:
    - name: inetcomm
    - command: inetcomm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 811:
    - name: inetcpl
    - command: inetcpl.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 812:
    - name: inetcplc
    - command: inetcplc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 813:
    - name: inetmib1
    - command: inetmib1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 814:
    - name: inetpp
    - command: inetpp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 815:
    - name: inetppui
    - command: inetppui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 816:
    - name: inetres
    - command: inetres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 817:
    - name: infocardapi
    - command: infocardapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 818:
    - name: infocardcpl
    - command: infocardcpl.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 819:
    - name: infosoft
    - command: infosoft.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 820:
    - name: initpki
    - command: initpki.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 821:
    - name: INKED
    - command: INKED.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 822:
    - name: input
    - command: input.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 823:
    - name: inseng
    - command: inseng.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 824:
    - name: instcat
    - command: instcat.sql
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 825:
    - name: intl
    - command: intl.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 826:
    - name: iologmsg
    - command: iologmsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 827:
    - name: ipconf
    - command: ipconf.tsp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 828:
    - name: ipconfig
    - command: ipconfig.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 829:
    - name: iphlpapi
    - command: iphlpapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 830:
    - name: ipmontr
    - command: ipmontr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 831:
    - name: ipnathlp
    - command: ipnathlp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 832:
    - name: ippromon
    - command: ippromon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 833:
    - name: iprop
    - command: iprop.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 834:
    - name: iprtprio
    - command: iprtprio.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 835:
    - name: iprtrmgr
    - command: iprtrmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 836:
    - name: ipsec6
    - command: ipsec6.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 837:
    - name: ipsecsnp
    - command: ipsecsnp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 838:
    - name: ipsecsvc
    - command: ipsecsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 839:
    - name: ipsink
    - command: ipsink.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 840:
    - name: ipsmsnap
    - command: ipsmsnap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 841:
    - name: ipv6
    - command: ipv6.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 842:
    - name: ipv6mon
    - command: ipv6mon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 843:
    - name: ipxmontr
    - command: ipxmontr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 844:
    - name: ipxpromn
    - command: ipxpromn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 845:
    - name: ipxrip
    - command: ipxrip.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 846:
    - name: ipxroute
    - command: ipxroute.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 847:
    - name: ipxrtmgr
    - command: ipxrtmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 848:
    - name: ipxsap
    - command: ipxsap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 849:
    - name: ipxwan
    - command: ipxwan.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 850:
    - name: ir32_32
    - command: ir32_32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 851:
    - name: ir41_32
    - command: ir41_32.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 852:
    - name: ir41_qc
    - command: ir41_qc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 853:
    - name: ir41_qcx
    - command: ir41_qcx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 854:
    - name: ir50_32
    - command: ir50_32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 855:
    - name: ir50_qc
    - command: ir50_qc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 856:
    - name: ir50_qcx
    - command: ir50_qcx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 857:
    - name: irclass
    - command: irclass.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 858:
    - name: irprops
    - command: irprops.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 859:
    - name: isign32
    - command: isign32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 860:
    - name: isrdbg32
    - command: isrdbg32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 861:
    - name: itircl
    - command: itircl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 862:
    - name: itss
    - command: itss.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 863:
    - name: iuengine
    - command: iuengine.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 864:
    - name: ivfsrc
    - command: ivfsrc.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 865:
    - name: ixsso
    - command: ixsso.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 866:
    - name: iyuv_32
    - command: iyuv_32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 867:
    - name: javacpl
    - command: javacpl.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 868:
    - name: jdns_sd
    - command: jdns_sd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 869:
    - name: jet500
    - command: jet500.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 870:
    - name: jgaw400
    - command: jgaw400.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 871:
    - name: jgdw400
    - command: jgdw400.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 872:
    - name: jgmd400
    - command: jgmd400.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 873:
    - name: jgpl400
    - command: jgpl400.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 874:
    - name: jgsd400
    - command: jgsd400.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 875:
    - name: jgsh400
    - command: jgsh400.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 876:
    - name: JMRaidAPI
    - command: JMRaidAPI.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 877:
    - name: JMRaidSetup
    - command: JMRaidSetup.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 878:
    - name: JMRaidTool
    - command: JMRaidTool.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 879:
    - name: jobexec
    - command: jobexec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 880:
    - name: joy
    - command: joy.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 881:
    - name: jscript
    - command: jscript.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 882:
    - name: jsproxy
    - command: jsproxy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 883:
    - name: jupdate-1.6.0_13-b03
    - command: jupdate-1.6.0_13-b03.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 884:
    - name: jupdate-1.6.0_15-b03
    - command: jupdate-1.6.0_15-b03.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 885:
    - name: jupdate-1.6.0_17-b04
    - command: jupdate-1.6.0_17-b04.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 886:
    - name: jupdate-1.6.0_20-b02
    - command: jupdate-1.6.0_20-b02.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 887:
    - name: jupdate-1.6.0_21-b07
    - command: jupdate-1.6.0_21-b07.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 888:
    - name: jupdate-1.6.0_22-b04
    - command: jupdate-1.6.0_22-b04.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 889:
    - name: jupdate-1.6.0_23-b05
    - command: jupdate-1.6.0_23-b05.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 890:
    - name: jupdate-1.6.0_24-b07
    - command: jupdate-1.6.0_24-b07.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 891:
    - name: jupdate-1.6.0_26-b03
    - command: jupdate-1.6.0_26-b03.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 892:
    - name: jupdate-1.6.0_29-b11
    - command: jupdate-1.6.0_29-b11.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 893:
    - name: jupdate-1.7.0_51-b13
    - command: jupdate-1.7.0_51-b13.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 894:
    - name: jupdate-1.7.0_60-b19
    - command: jupdate-1.7.0_60-b19.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 895:
    - name: jupdate-1.7.0_65-b20
    - command: jupdate-1.7.0_65-b20.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 896:
    - name: kanji_1
    - command: kanji_1.uce
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 897:
    - name: kanji_2
    - command: kanji_2.uce
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 898:
    - name: kb16
    - command: kb16.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 899:
    - name: KBDAL
    - command: KBDAL.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 900:
    - name: kbdaze
    - command: kbdaze.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 901:
    - name: kbdazel
    - command: kbdazel.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 902:
    - name: kbdbe
    - command: kbdbe.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 903:
    - name: kbdbene
    - command: kbdbene.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 904:
    - name: kbdbhc
    - command: kbdbhc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 905:
    - name: kbdblr
    - command: kbdblr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 906:
    - name: kbdbr
    - command: kbdbr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 907:
    - name: kbdbu
    - command: kbdbu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 908:
    - name: kbdca
    - command: kbdca.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 909:
    - name: kbdcan
    - command: kbdcan.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 910:
    - name: kbdcr
    - command: kbdcr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 911:
    - name: kbdcz
    - command: kbdcz.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 912:
    - name: kbdcz1
    - command: kbdcz1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 913:
    - name: kbdcz2
    - command: kbdcz2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 914:
    - name: kbdda
    - command: kbdda.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 915:
    - name: kbddv
    - command: kbddv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 916:
    - name: kbdes
    - command: kbdes.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 917:
    - name: kbdest
    - command: kbdest.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 918:
    - name: kbdfc
    - command: kbdfc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 919:
    - name: kbdfi
    - command: kbdfi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 920:
    - name: kbdfi1
    - command: kbdfi1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 921:
    - name: kbdfo
    - command: kbdfo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 922:
    - name: kbdfr
    - command: kbdfr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 923:
    - name: kbdgae
    - command: kbdgae.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 924:
    - name: kbdgkl
    - command: kbdgkl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 925:
    - name: kbdgr
    - command: kbdgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 926:
    - name: kbdgr1
    - command: kbdgr1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 927:
    - name: kbdhe
    - command: kbdhe.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 928:
    - name: kbdhe220
    - command: kbdhe220.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 929:
    - name: kbdhe319
    - command: kbdhe319.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 930:
    - name: kbdhela2
    - command: kbdhela2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 931:
    - name: kbdhela3
    - command: kbdhela3.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 932:
    - name: kbdhept
    - command: kbdhept.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 933:
    - name: kbdhu
    - command: kbdhu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 934:
    - name: kbdhu1
    - command: kbdhu1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 935:
    - name: kbdic
    - command: kbdic.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 936:
    - name: kbdinbe1
    - command: kbdinbe1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 937:
    - name: kbdinben
    - command: kbdinben.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 938:
    - name: kbdinmal
    - command: kbdinmal.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 939:
    - name: kbdir
    - command: kbdir.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 940:
    - name: kbdit
    - command: kbdit.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 941:
    - name: kbdit142
    - command: kbdit142.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 942:
    - name: kbdiultn
    - command: kbdiultn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 943:
    - name: kbdkaz
    - command: kbdkaz.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 944:
    - name: kbdkyr
    - command: kbdkyr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 945:
    - name: kbdla
    - command: kbdla.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 946:
    - name: kbdlt
    - command: kbdlt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 947:
    - name: kbdlt1
    - command: kbdlt1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 948:
    - name: kbdlv
    - command: kbdlv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 949:
    - name: kbdlv1
    - command: kbdlv1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 950:
    - name: kbdmac
    - command: kbdmac.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 951:
    - name: kbdmaori
    - command: kbdmaori.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 952:
    - name: kbdmlt47
    - command: kbdmlt47.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 953:
    - name: kbdmlt48
    - command: kbdmlt48.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 954:
    - name: kbdmon
    - command: kbdmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 955:
    - name: kbdne
    - command: kbdne.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 956:
    - name: kbdnec
    - command: kbdnec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 957:
    - name: kbdnepr
    - command: kbdnepr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 958:
    - name: kbdno
    - command: kbdno.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 959:
    - name: kbdno1
    - command: kbdno1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 960:
    - name: kbdpash
    - command: kbdpash.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 961:
    - name: kbdpl
    - command: kbdpl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 962:
    - name: kbdpl1
    - command: kbdpl1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 963:
    - name: kbdpo
    - command: kbdpo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 964:
    - name: kbdro
    - command: kbdro.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 965:
    - name: kbdru
    - command: kbdru.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 966:
    - name: kbdru1
    - command: kbdru1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 967:
    - name: kbdsf
    - command: kbdsf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 968:
    - name: kbdsg
    - command: kbdsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 969:
    - name: kbdsl
    - command: kbdsl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 970:
    - name: kbdsl1
    - command: kbdsl1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 971:
    - name: kbdsmsfi
    - command: kbdsmsfi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 972:
    - name: kbdsmsno
    - command: kbdsmsno.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 973:
    - name: kbdsp
    - command: kbdsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 974:
    - name: kbdsw
    - command: kbdsw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 975:
    - name: kbdtat
    - command: kbdtat.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 976:
    - name: kbdtuf
    - command: kbdtuf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 977:
    - name: kbdtuq
    - command: kbdtuq.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 978:
    - name: kbduk
    - command: kbduk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 979:
    - name: kbdukx
    - command: kbdukx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 980:
    - name: kbdur
    - command: kbdur.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 981:
    - name: kbdus
    - command: kbdus.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 982:
    - name: kbdusl
    - command: kbdusl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 983:
    - name: kbdusr
    - command: kbdusr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 984:
    - name: kbdusx
    - command: kbdusx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 985:
    - name: kbduzb
    - command: kbduzb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 986:
    - name: kbdycc
    - command: kbdycc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 987:
    - name: kbdycl
    - command: kbdycl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 988:
    - name: kd1394
    - command: kd1394.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 989:
    - name: kdcom
    - command: kdcom.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 990:
    - name: kerberos
    - command: kerberos.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 991:
    - name: kernel32
    - command: kernel32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 992:
    - name: key01
    - command: key01.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 993:
    - name: keyboard
    - command: keyboard.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 994:
    - name: keyboard
    - command: keyboard.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 995:
    - name: keymgr
    - command: keymgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 996:
    - name: kmddsp
    - command: kmddsp.tsp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 997:
    - name: kmsvc
    - command: kmsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 998:
    - name: korean
    - command: korean.uce
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 999:
    - name: krnl386
    - command: krnl386.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1000:
    - name: ksproxy
    - command: ksproxy.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1001:
    - name: kstvtune
    - command: kstvtune.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1002:
    - name: ksuser
    - command: ksuser.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1003:
    - name: kswdmcap
    - command: kswdmcap.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1004:
    - name: ksxbar
    - command: ksxbar.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1005:
    - name: l2gpstore
    - command: l2gpstore.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1006:
    - name: l3codeca
    - command: l3codeca.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1007:
    - name: l3codecp
    - command: l3codecp.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1008:
    - name: l3codecx
    - command: l3codecx.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1009:
    - name: label
    - command: label.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1010:
    - name: langwrbk
    - command: langwrbk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1011:
    - name: lanman
    - command: lanman.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1012:
    - name: LAPRXY
    - command: LAPRXY.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1013:
    - name: LegitCheckControl
    - command: LegitCheckControl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1014:
    - name: leon3_32
    - command: leon3_32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1015:
    - name: licdll
    - command: licdll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1016:
    - name: licmgr10
    - command: licmgr10.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1017:
    - name: licwmi
    - command: licwmi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1018:
    - name: lights
    - command: lights.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1019:
    - name: linkinfo
    - command: linkinfo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1020:
    - name: lmhsvc
    - command: lmhsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1021:
    - name: lmrt
    - command: lmrt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1022:
    - name: lnkstub
    - command: lnkstub.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1023:
    - name: loadfix
    - command: loadfix.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1024:
    - name: loadperf
    - command: loadperf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1025:
    - name: locale
    - command: locale.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1026:
    - name: localsec
    - command: localsec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1027:
    - name: localspl
    - command: localspl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1028:
    - name: localui
    - command: localui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1029:
    - name: locator
    - command: locator.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1030:
    - name: lodctr
    - command: lodctr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1031:
    - name: logagent
    - command: logagent.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1032:
    - name: loghours
    - command: loghours.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1033:
    - name: login
    - command: login.cmd
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1034:
    - name: logman
    - command: logman.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1035:
    - name: logoff
    - command: logoff.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1036:
    - name: logon
    - command: logon.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1037:
    - name: logonui
    - command: logonui.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1038:
    - name: logonui.exe
    - command: logonui.exe.manifest
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1039:
    - name: LoopyMusic
    - command: LoopyMusic.wav
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1040:
    - name: lpk
    - command: lpk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1041:
    - name: lpq
    - command: lpq.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1042:
    - name: lpr
    - command: lpr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1043:
    - name: lprhelp
    - command: lprhelp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1044:
    - name: lprmonui
    - command: lprmonui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1045:
    - name: lsasrv
    - command: lsasrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1046:
    - name: lsass
    - command: lsass.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1047:
    - name: lusrmgr
    - command: lusrmgr.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1048:
    - name: lz32
    - command: lz32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1049:
    - name: lzexpand
    - command: lzexpand.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1050:
    - name: l_except
    - command: l_except.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1051:
    - name: l_intl
    - command: l_intl.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1052:
    - name: magnify
    - command: magnify.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1053:
    - name: mag_hook
    - command: mag_hook.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1054:
    - name: main
    - command: main.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1055:
    - name: makecab
    - command: makecab.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1056:
    - name: mapi32
    - command: mapi32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1057:
    - name: mapistub
    - command: mapistub.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1058:
    - name: mcastmib
    - command: mcastmib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1059:
    - name: mcd32
    - command: mcd32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1060:
    - name: mcdsrv32
    - command: mcdsrv32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1061:
    - name: mchgrcoi
    - command: mchgrcoi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1062:
    - name: mciavi
    - command: mciavi.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1063:
    - name: mciavi32
    - command: mciavi32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1064:
    - name: mcicda
    - command: mcicda.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1065:
    - name: mciole16
    - command: mciole16.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1066:
    - name: mciole32
    - command: mciole32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1067:
    - name: mciqtz32
    - command: mciqtz32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1068:
    - name: mciseq
    - command: mciseq.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1069:
    - name: mciseq
    - command: mciseq.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1070:
    - name: mciwave
    - command: mciwave.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1071:
    - name: mciwave
    - command: mciwave.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1072:
    - name: mdhcp
    - command: mdhcp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1073:
    - name: mdminst
    - command: mdminst.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1074:
    - name: mdmxsdk
    - command: mdmxsdk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1075:
    - name: mdwmdmsp
    - command: mdwmdmsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1076:
    - name: mem
    - command: mem.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1077:
    - name: mf3216
    - command: mf3216.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1078:
    - name: mfc100
    - command: mfc100.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1079:
    - name: mfc100chs
    - command: mfc100chs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1080:
    - name: mfc100cht
    - command: mfc100cht.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1081:
    - name: mfc100deu
    - command: mfc100deu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1082:
    - name: mfc100enu
    - command: mfc100enu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1083:
    - name: mfc100esn
    - command: mfc100esn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1084:
    - name: mfc100fra
    - command: mfc100fra.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1085:
    - name: mfc100ita
    - command: mfc100ita.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1086:
    - name: mfc100jpn
    - command: mfc100jpn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1087:
    - name: mfc100kor
    - command: mfc100kor.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1088:
    - name: mfc100rus
    - command: mfc100rus.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1089:
    - name: mfc100u
    - command: mfc100u.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1090:
    - name: mfc110
    - command: mfc110.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1091:
    - name: mfc110u
    - command: mfc110u.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1092:
    - name: mfc40
    - command: mfc40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1093:
    - name: mfc40u
    - command: mfc40u.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1094:
    - name: mfc42
    - command: mfc42.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1095:
    - name: mfc42u
    - command: mfc42u.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1096:
    - name: MFC71
    - command: MFC71.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1097:
    - name: mfcm100
    - command: mfcm100.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1098:
    - name: mfcm100u
    - command: mfcm100u.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1099:
    - name: mfcm110
    - command: mfcm110.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1100:
    - name: mfcm110u
    - command: mfcm110u.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1101:
    - name: mfcsubs
    - command: mfcsubs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1102:
    - name: MFPLAT
    - command: MFPLAT.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1103:
    - name: mgmtapi
    - command: mgmtapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1104:
    - name: mgxasio2
    - command: mgxasio2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1105:
    - name: mgxcdr
    - command: mgxcdr.txt
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1106:
    - name: mgxoschk
    - command: mgxoschk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1107:
    - name: mib
    - command: mib.bin
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1108:
    - name: microsoft.managementconsole
    - command: microsoft.managementconsole.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1109:
    - name: midimap
    - command: midimap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1110:
    - name: miglibnt
    - command: miglibnt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1111:
    - name: migpwd
    - command: migpwd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1112:
    - name: mimefilt
    - command: mimefilt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1113:
    - name: mindex
    - command: mindex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1114:
    - name: mlang
    - command: mlang.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1115:
    - name: mlang
    - command: mlang.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1116:
    - name: mlfcache
    - command: mlfcache.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1117:
    - name: mll_hp
    - command: mll_hp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1118:
    - name: mll_mtf
    - command: mll_mtf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1119:
    - name: mll_qic
    - command: mll_qic.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1120:
    - name: mmc
    - command: mmc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1121:
    - name: mmcbase
    - command: mmcbase.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1122:
    - name: mmcex
    - command: mmcex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1123:
    - name: mmcfxcommon
    - command: mmcfxcommon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1124:
    - name: mmcndmgr
    - command: mmcndmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1125:
    - name: mmcperf
    - command: mmcperf.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1126:
    - name: mmcshext
    - command: mmcshext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1127:
    - name: mmdriver
    - command: mmdriver.inf
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1128:
    - name: mmdrv
    - command: mmdrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1129:
    - name: mmfutil
    - command: mmfutil.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1130:
    - name: mmsys
    - command: mmsys.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1131:
    - name: mmsystem
    - command: mmsystem.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1132:
    - name: mmtask
    - command: mmtask.tsk
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1133:
    - name: mmutilse
    - command: mmutilse.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1134:
    - name: mnmdd
    - command: mnmdd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1135:
    - name: mnmsrvc
    - command: mnmsrvc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1136:
    - name: mobsync
    - command: mobsync.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1137:
    - name: mobsync
    - command: mobsync.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1138:
    - name: mode
    - command: mode.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1139:
    - name: modemui
    - command: modemui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1140:
    - name: modex
    - command: modex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1141:
    - name: more
    - command: more.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1142:
    - name: moricons
    - command: moricons.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1143:
    - name: mountvol
    - command: mountvol.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1144:
    - name: mouse
    - command: mouse.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1145:
    - name: MP43DECD
    - command: MP43DECD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1146:
    - name: MP43DMOD
    - command: MP43DMOD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1147:
    - name: mp4sdecd
    - command: mp4sdecd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1148:
    - name: MP4SDMOD
    - command: MP4SDMOD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1149:
    - name: mp4sds32
    - command: mp4sds32.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1150:
    - name: mpeg2data
    - command: mpeg2data.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1151:
    - name: mpg2splt
    - command: mpg2splt.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1152:
    - name: mpg4c32
    - command: mpg4c32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1153:
    - name: MPG4DECD
    - command: MPG4DECD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1154:
    - name: MPG4DMOD
    - command: MPG4DMOD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1155:
    - name: mpg4ds32
    - command: mpg4ds32.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1156:
    - name: mplay32
    - command: mplay32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1157:
    - name: mpnotify
    - command: mpnotify.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1158:
    - name: mpr
    - command: mpr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1159:
    - name: mprapi
    - command: mprapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1160:
    - name: mprddm
    - command: mprddm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1161:
    - name: mprdim
    - command: mprdim.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1162:
    - name: mprmsg
    - command: mprmsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1163:
    - name: mprui
    - command: mprui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1164:
    - name: MpSigStub
    - command: MpSigStub.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1165:
    - name: mqad
    - command: mqad.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1166:
    - name: mqbkup
    - command: mqbkup.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1167:
    - name: mqcertui
    - command: mqcertui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1168:
    - name: mqdscli
    - command: mqdscli.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1169:
    - name: mqgentr
    - command: mqgentr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1170:
    - name: mqise
    - command: mqise.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1171:
    - name: mqlogmgr
    - command: mqlogmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1172:
    - name: mqoa
    - command: mqoa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1173:
    - name: mqoa
    - command: mqoa.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1174:
    - name: mqoa10
    - command: mqoa10.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1175:
    - name: mqoa20
    - command: mqoa20.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1176:
    - name: mqperf
    - command: mqperf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1177:
    - name: mqperf
    - command: mqperf.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1178:
    - name: mqprfsym
    - command: mqprfsym.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1179:
    - name: mqqm
    - command: mqqm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1180:
    - name: mqrt
    - command: mqrt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1181:
    - name: mqrtdep
    - command: mqrtdep.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1182:
    - name: mqsec
    - command: mqsec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1183:
    - name: mqsnap
    - command: mqsnap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1184:
    - name: mqsvc
    - command: mqsvc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1185:
    - name: mqtgsvc
    - command: mqtgsvc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1186:
    - name: mqtrig
    - command: mqtrig.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1187:
    - name: mqupgrd
    - command: mqupgrd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1188:
    - name: mqutil
    - command: mqutil.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1189:
    - name: mrinfo
    - command: mrinfo.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1190:
    - name: MRT
    - command: MRT.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1191:
    - name: msaatext
    - command: msaatext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1192:
    - name: msacm
    - command: msacm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1193:
    - name: msacm32
    - command: msacm32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1194:
    - name: msacm32
    - command: msacm32.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1195:
    - name: msadds32
    - command: msadds32.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1196:
    - name: msadodc
    - command: msadodc.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1197:
    - name: msadp32
    - command: msadp32.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1198:
    - name: msafd
    - command: msafd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1199:
    - name: msapsspc
    - command: msapsspc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1200:
    - name: msasn1
    - command: msasn1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1201:
    - name: msaud32
    - command: msaud32.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1202:
    - name: msaudite
    - command: msaudite.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1203:
    - name: mscat32
    - command: mscat32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1204:
    - name: mscdexnt
    - command: mscdexnt.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1205:
    - name: mscms
    - command: mscms.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1206:
    - name: Mscomct2
    - command: Mscomct2.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1207:
    - name: MSCOMCTL
    - command: MSCOMCTL.OCX
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1208:
    - name: msconf
    - command: msconf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1209:
    - name: mscoree
    - command: mscoree.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1210:
    - name: mscorier
    - command: mscorier.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1211:
    - name: mscories
    - command: mscories.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1212:
    - name: mscpx32r
    - command: mscpx32r.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1213:
    - name: mscpxl32
    - command: mscpxl32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1214:
    - name: msctf
    - command: msctf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1215:
    - name: msctfime
    - command: msctfime.ime
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1216:
    - name: msctfp
    - command: msctfp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1217:
    - name: msdadiag
    - command: msdadiag.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1218:
    - name: msdart
    - command: msdart.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1219:
    - name: msdart32
    - command: msdart32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1220:
    - name: msdatsrc
    - command: msdatsrc.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1221:
    - name: msdbg2
    - command: msdbg2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1222:
    - name: msdelta
    - command: msdelta.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1223:
    - name: msdmo
    - command: msdmo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1224:
    - name: msdtc
    - command: msdtc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1225:
    - name: msdtclog
    - command: msdtclog.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1226:
    - name: msdtcprf
    - command: msdtcprf.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1227:
    - name: msdtcprf
    - command: msdtcprf.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1228:
    - name: msdtcprx
    - command: msdtcprx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1229:
    - name: msdtctm
    - command: msdtctm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1230:
    - name: msdtcuiu
    - command: msdtcuiu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1231:
    - name: msdxm
    - command: msdxm.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1232:
    - name: msdxmlc
    - command: msdxmlc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1233:
    - name: msencode
    - command: msencode.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1234:
    - name: msexch40
    - command: msexch40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1235:
    - name: msexcl40
    - command: msexcl40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1236:
    - name: msfeeds
    - command: msfeeds.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1237:
    - name: msfeedsbs
    - command: msfeedsbs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1238:
    - name: msfeedssync
    - command: msfeedssync.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1239:
    - name: msftedit
    - command: msftedit.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1240:
    - name: msg
    - command: msg.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1241:
    - name: msg711
    - command: msg711.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1242:
    - name: msg723
    - command: msg723.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1243:
    - name: msgina
    - command: msgina.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1244:
    - name: msgsm32
    - command: msgsm32.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1245:
    - name: msgsvc
    - command: msgsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1246:
    - name: msh261
    - command: msh261.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1247:
    - name: msh263
    - command: msh263.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1248:
    - name: mshearts
    - command: mshearts.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1249:
    - name: mshta
    - command: mshta.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1250:
    - name: mshta.exe
    - command: mshta.exe.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1251:
    - name: mshtml
    - command: mshtml.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1252:
    - name: mshtml
    - command: mshtml.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1253:
    - name: mshtmled
    - command: mshtmled.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1254:
    - name: mshtmler
    - command: mshtmler.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1255:
    - name: msi
    - command: msi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1256:
    - name: msident
    - command: msident.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1257:
    - name: msidle
    - command: msidle.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1258:
    - name: msidntld
    - command: msidntld.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1259:
    - name: msieftp
    - command: msieftp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1260:
    - name: msiexec
    - command: msiexec.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1261:
    - name: msihnd
    - command: msihnd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1262:
    - name: msimg32
    - command: msimg32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1263:
    - name: msimsg
    - command: msimsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1264:
    - name: msimtf
    - command: msimtf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1265:
    - name: msisam11
    - command: msisam11.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1266:
    - name: msisip
    - command: msisip.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1267:
    - name: msjet40
    - command: msjet40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1268:
    - name: msjetoledb40
    - command: msjetoledb40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1269:
    - name: msjint40
    - command: msjint40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1270:
    - name: msjter40
    - command: msjter40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1271:
    - name: msjtes40
    - command: msjtes40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1272:
    - name: mslbui
    - command: mslbui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1273:
    - name: msls31
    - command: msls31.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1274:
    - name: msltus40
    - command: msltus40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1275:
    - name: msnetobj
    - command: msnetobj.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1276:
    - name: msnsspc
    - command: msnsspc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1277:
    - name: msobjs
    - command: msobjs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1278:
    - name: msoeacct
    - command: msoeacct.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1279:
    - name: msoert2
    - command: msoert2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1280:
    - name: msonpmon
    - command: msonpmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1281:
    - name: msorc32r
    - command: msorc32r.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1282:
    - name: msorcl32
    - command: msorcl32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1283:
    - name: mspaint
    - command: mspaint.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1284:
    - name: mspatcha
    - command: mspatcha.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1285:
    - name: mspbde40
    - command: mspbde40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1286:
    - name: mspmsnsv
    - command: mspmsnsv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1287:
    - name: mspmsp
    - command: mspmsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1288:
    - name: msports
    - command: msports.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1289:
    - name: msprivs
    - command: msprivs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1290:
    - name: msr2c
    - command: msr2c.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1291:
    - name: msr2cenu
    - command: msr2cenu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1292:
    - name: msratelc
    - command: msratelc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1293:
    - name: msrating
    - command: msrating.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1294:
    - name: msrating.dll
    - command: msrating.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1295:
    - name: msrclr40
    - command: msrclr40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1296:
    - name: msrd2x40
    - command: msrd2x40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1297:
    - name: msrd3x40
    - command: msrd3x40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1298:
    - name: msrecr40
    - command: msrecr40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1299:
    - name: msrepl40
    - command: msrepl40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1300:
    - name: msrle32
    - command: msrle32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1301:
    - name: mssap
    - command: mssap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1302:
    - name: msscb
    - command: msscb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1303:
    - name: msscds32
    - command: msscds32.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1304:
    - name: msscntrs
    - command: msscntrs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1305:
    - name: msscp
    - command: msscp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1306:
    - name: msscript
    - command: msscript.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1307:
    - name: mssha
    - command: mssha.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1308:
    - name: msshavmsg
    - command: msshavmsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1309:
    - name: msshooks
    - command: msshooks.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1310:
    - name: msshsq
    - command: msshsq.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1311:
    - name: mssign32
    - command: mssign32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1312:
    - name: mssip32
    - command: mssip32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1313:
    - name: mssitlb
    - command: mssitlb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1314:
    - name: mssph
    - command: mssph.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1315:
    - name: mssph.dll
    - command: mssph.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1316:
    - name: mssphtb
    - command: mssphtb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1317:
    - name: mssphtb.dll
    - command: mssphtb.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1318:
    - name: mssprxy
    - command: mssprxy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1319:
    - name: mssrch
    - command: mssrch.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1320:
    - name: mssrch.dll
    - command: mssrch.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1321:
    - name: MSSTDFMT
    - command: MSSTDFMT.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1322:
    - name: msstrc
    - command: msstrc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1323:
    - name: msswch
    - command: msswch.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1324:
    - name: msswchx
    - command: msswchx.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1325:
    - name: mstask
    - command: mstask.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1326:
    - name: mstext40
    - command: mstext40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1327:
    - name: mstime
    - command: mstime.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1328:
    - name: mstinit
    - command: mstinit.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1329:
    - name: mstlsapi
    - command: mstlsapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1330:
    - name: mstsc
    - command: mstsc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1331:
    - name: mstscax
    - command: mstscax.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1332:
    - name: msuni11
    - command: msuni11.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1333:
    - name: msutb
    - command: msutb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1334:
    - name: msv1_0
    - command: msv1_0.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1335:
    - name: msvbvm50
    - command: msvbvm50.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1336:
    - name: msvbvm60
    - command: msvbvm60.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1337:
    - name: msvcirt
    - command: msvcirt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1338:
    - name: msvcp100
    - command: msvcp100.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1339:
    - name: msvcp110
    - command: msvcp110.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1340:
    - name: msvcp50
    - command: msvcp50.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1341:
    - name: msvcp60
    - command: msvcp60.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1342:
    - name: msvcp71
    - command: msvcp71.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1343:
    - name: msvcr100
    - command: msvcr100.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1344:
    - name: msvcr100_clr0400
    - command: msvcr100_clr0400.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1345:
    - name: msvcr110
    - command: msvcr110.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1346:
    - name: msvcr70
    - command: msvcr70.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1347:
    - name: msvcr71
    - command: msvcr71.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1348:
    - name: msvcrt
    - command: msvcrt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1349:
    - name: msvcrt20
    - command: msvcrt20.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1350:
    - name: msvcrt40
    - command: msvcrt40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1351:
    - name: msvfw32
    - command: msvfw32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1352:
    - name: msvidc32
    - command: msvidc32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1353:
    - name: msvidctl
    - command: msvidctl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1354:
    - name: msvideo
    - command: msvideo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1355:
    - name: msw3prt
    - command: msw3prt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1356:
    - name: mswdat10
    - command: mswdat10.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1357:
    - name: mswebdvd
    - command: mswebdvd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1358:
    - name: mswmdm
    - command: mswmdm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1359:
    - name: mswsock
    - command: mswsock.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1360:
    - name: mswstr10
    - command: mswstr10.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1361:
    - name: msxbde40
    - command: msxbde40.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1362:
    - name: msxml
    - command: msxml.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1363:
    - name: msxml2
    - command: msxml2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1364:
    - name: msxml2r
    - command: msxml2r.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1365:
    - name: msxml3
    - command: msxml3.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1366:
    - name: msxml3r
    - command: msxml3r.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1367:
    - name: msxml4
    - command: msxml4.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1368:
    - name: msxml4a
    - command: msxml4a.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1369:
    - name: msxml4r
    - command: msxml4r.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1370:
    - name: msxml6
    - command: msxml6.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1371:
    - name: msxml6r
    - command: msxml6r.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1372:
    - name: msxmlr
    - command: msxmlr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1373:
    - name: msyuv
    - command: msyuv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1374:
    - name: mtxclu
    - command: mtxclu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1375:
    - name: mtxdm
    - command: mtxdm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1376:
    - name: mtxex
    - command: mtxex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1377:
    - name: mtxlegih
    - command: mtxlegih.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1378:
    - name: mtxoci
    - command: mtxoci.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1379:
    - name: mtxparhd
    - command: mtxparhd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1380:
    - name: mucltui
    - command: mucltui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1381:
    - name: mucltui.dll
    - command: mucltui.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1382:
    - name: muweb
    - command: muweb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1383:
    - name: MXRestore
    - command: MXRestore.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1384:
    - name: mycomput
    - command: mycomput.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1385:
    - name: mydocs
    - command: mydocs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1386:
    - name: napipsec
    - command: napipsec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1387:
    - name: napmontr
    - command: napmontr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1388:
    - name: napstat
    - command: napstat.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1389:
    - name: narrator
    - command: narrator.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1390:
    - name: narrhook
    - command: narrhook.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1391:
    - name: nbtstat
    - command: nbtstat.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1392:
    - name: ncobjapi
    - command: ncobjapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1393:
    - name: ncpa
    - command: ncpa.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1394:
    - name: ncpa.cpl
    - command: ncpa.cpl.manifest
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1395:
    - name: ncxpnt
    - command: ncxpnt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1396:
    - name: nddeapi
    - command: nddeapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1397:
    - name: nddeapir
    - command: nddeapir.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1398:
    - name: nddenb32
    - command: nddenb32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1399:
    - name: ndptsp
    - command: ndptsp.tsp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1400:
    - name: net
    - command: net.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1401:
    - name: net
    - command: net.hlp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1402:
    - name: net1
    - command: net1.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1403:
    - name: netapi
    - command: netapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1404:
    - name: netapi32
    - command: netapi32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1405:
    - name: netcfgx
    - command: netcfgx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1406:
    - name: netdde
    - command: netdde.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1407:
    - name: netevent
    - command: netevent.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1408:
    - name: netfxperf
    - command: netfxperf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1409:
    - name: neth
    - command: neth.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1410:
    - name: netid
    - command: netid.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1411:
    - name: netlogon
    - command: netlogon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1412:
    - name: netman
    - command: netman.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1413:
    - name: netmsg
    - command: netmsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1414:
    - name: netplwiz
    - command: netplwiz.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1415:
    - name: netrap
    - command: netrap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1416:
    - name: netsetup
    - command: netsetup.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1417:
    - name: netsetup
    - command: netsetup.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1418:
    - name: netsh
    - command: netsh.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1419:
    - name: netshell
    - command: netshell.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1420:
    - name: netstat
    - command: netstat.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1421:
    - name: netui0
    - command: netui0.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1422:
    - name: netui1
    - command: netui1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1423:
    - name: netui2
    - command: netui2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1424:
    - name: netware
    - command: netware.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1425:
    - name: newdev
    - command: newdev.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1426:
    - name: nlhtml
    - command: nlhtml.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1427:
    - name: nlsdl
    - command: nlsdl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1428:
    - name: nlsfunc
    - command: nlsfunc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1429:
    - name: nmevtmsg
    - command: nmevtmsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1430:
    - name: nmmkcert
    - command: nmmkcert.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1431:
    - name: nmp
    - command: nmp.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1432:
    - name: nmwcdcls
    - command: nmwcdcls.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1433:
    - name: noise
    - command: noise.chs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1434:
    - name: noise
    - command: noise.cht
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1435:
    - name: noise
    - command: noise.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1436:
    - name: noise
    - command: noise.deu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1437:
    - name: noise
    - command: noise.eng
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1438:
    - name: noise
    - command: noise.enu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1439:
    - name: noise
    - command: noise.esn
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1440:
    - name: noise
    - command: noise.fra
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1441:
    - name: noise
    - command: noise.ita
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1442:
    - name: noise
    - command: noise.nld
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1443:
    - name: noise
    - command: noise.sve
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1444:
    - name: noise
    - command: noise.tha
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1445:
    - name: normaliz
    - command: normaliz.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1446:
    - name: normidna
    - command: normidna.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1447:
    - name: normnfc
    - command: normnfc.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1448:
    - name: normnfd
    - command: normnfd.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1449:
    - name: normnfkc
    - command: normnfkc.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1450:
    - name: normnfkd
    - command: normnfkd.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1451:
    - name: notepad
    - command: notepad.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1452:
    - name: npptools
    - command: npptools.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1453:
    - name: nscompat
    - command: nscompat.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1454:
    - name: nslookup
    - command: nslookup.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1455:
    - name: ntbackup
    - command: ntbackup.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1456:
    - name: ntdll
    - command: ntdll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1457:
    - name: ntdos
    - command: ntdos.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1458:
    - name: ntdos404
    - command: ntdos404.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1459:
    - name: ntdos411
    - command: ntdos411.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1460:
    - name: ntdos412
    - command: ntdos412.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1461:
    - name: ntdos804
    - command: ntdos804.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1462:
    - name: ntdsapi
    - command: ntdsapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1463:
    - name: ntdsbcli
    - command: ntdsbcli.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1464:
    - name: ntimage
    - command: ntimage.gif
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1465:
    - name: ntio
    - command: ntio.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1466:
    - name: ntio404
    - command: ntio404.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1467:
    - name: ntio411
    - command: ntio411.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1468:
    - name: ntio412
    - command: ntio412.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1469:
    - name: ntio804
    - command: ntio804.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1470:
    - name: ntkrnlpa
    - command: ntkrnlpa.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1471:
    - name: ntlanman
    - command: ntlanman.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1472:
    - name: ntlanui
    - command: ntlanui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1473:
    - name: ntlanui2
    - command: ntlanui2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1474:
    - name: ntlsapi
    - command: ntlsapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1475:
    - name: ntmarta
    - command: ntmarta.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1476:
    - name: ntmsapi
    - command: ntmsapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1477:
    - name: ntmsdba
    - command: ntmsdba.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1478:
    - name: ntmsevt
    - command: ntmsevt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1479:
    - name: ntmsmgr
    - command: ntmsmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1480:
    - name: ntmsmgr
    - command: ntmsmgr.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1481:
    - name: ntmsoprq
    - command: ntmsoprq.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1482:
    - name: ntmssvc
    - command: ntmssvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1483:
    - name: ntoskrnl
    - command: ntoskrnl.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1484:
    - name: ntprint
    - command: ntprint.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1485:
    - name: ntsd
    - command: ntsd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1486:
    - name: ntsdexts
    - command: ntsdexts.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1487:
    - name: ntshrui
    - command: ntshrui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1488:
    - name: ntvdm
    - command: ntvdm.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1489:
    - name: ntvdmd
    - command: ntvdmd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1490:
    - name: nusrmgr
    - command: nusrmgr.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1491:
    - name: nv4_disp
    - command: nv4_disp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1492:
    - name: nvapi
    - command: nvapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1493:
    - name: nvappfilter
    - command: nvappfilter.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1494:
    - name: nvapps
    - command: nvapps.xml
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1495:
    - name: nvcod
    - command: nvcod.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1496:
    - name: nvcodins
    - command: nvcodins.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1497:
    - name: NVCOI
    - command: NVCOI.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1498:
    - name: nvcolor
    - command: nvcolor.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1499:
    - name: nvcompiler
    - command: nvcompiler.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1500:
    - name: nvconrm
    - command: nvconrm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1501:
    - name: NVCOSMB
    - command: NVCOSMB.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1502:
    - name: nvcpl
    - command: nvcpl.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1503:
    - name: nvcpl
    - command: nvcpl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1504:
    - name: nvcplui
    - command: nvcplui.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1505:
    - name: nvcpluir
    - command: nvcpluir.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1506:
    - name: nvcuda
    - command: nvcuda.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1507:
    - name: nvcuvenc
    - command: nvcuvenc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1508:
    - name: nvcuvid
    - command: nvcuvid.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1509:
    - name: nvdata
    - command: nvdata.data
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1510:
    - name: nvdisp
    - command: nvdisp.nvu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1511:
    - name: nvdispco32
    - command: nvdispco32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1512:
    - name: nvdispco3220150
    - command: nvdispco3220150.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1513:
    - name: nvdispgenco32
    - command: nvdispgenco32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1514:
    - name: nvdisps
    - command: nvdisps.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1515:
    - name: nvdispsr
    - command: nvdispsr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1516:
    - name: nvdrsdb0
    - command: nvdrsdb0.bin
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1517:
    - name: nvdrsdb1
    - command: nvdrsdb1.bin
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1518:
    - name: nvdrssel
    - command: nvdrssel.bin
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1519:
    - name: nvdrswr
    - command:
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1520:
    - name: nvexpbar
    - command: nvexpbar.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1521:
    - name: nvgames
    - command: nvgames.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1522:
    - name: nvgamesr
    - command: nvgamesr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1523:
    - name: nvgenco32
    - command: nvgenco32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1524:
    - name: nvgenco322090
    - command: nvgenco322090.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1525:
    - name: nvide
    - command: nvide.nvu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1526:
    - name: nvinfo
    - command: nvinfo.pb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1527:
    - name: nvmccs
    - command: nvmccs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1528:
    - name: nvmccsrs
    - command: nvmccsrs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1529:
    - name: nvmccss
    - command: nvmccss.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1530:
    - name: nvmccssr
    - command: nvmccssr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1531:
    - name: nvmctray
    - command: nvmctray.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1532:
    - name: nvmobls
    - command: nvmobls.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1533:
    - name: nvmoblsr
    - command: nvmoblsr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1534:
    - name: nvnrm
    - command: nvnrm.nvu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1535:
    - name: nvnt4cpl
    - command: nvnt4cpl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1536:
    - name: nvoglnt
    - command: nvoglnt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1537:
    - name: nvopencl
    - command: nvopencl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1538:
    - name: nvraidco
    - command: nvraidco.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1539:
    - name: nvraiins
    - command: nvraiins.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1540:
    - name: NvRCoDa
    - command: NvRCoDa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1541:
    - name: NvRCoDe
    - command: NvRCoDe.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1542:
    - name: NvRCoEng
    - command: NvRCoEng.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1543:
    - name: NvRCoENU
    - command: NvRCoENU.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1544:
    - name: NvRCoEs
    - command: NvRCoEs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1545:
    - name: NvRCoEsm
    - command: NvRCoEsm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1546:
    - name: NvRCoFi
    - command: NvRCoFi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1547:
    - name: NvRCoFr
    - command: NvRCoFr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1548:
    - name: NvRCoIt
    - command: NvRCoIt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1549:
    - name: NvRCoJa
    - command: NvRCoJa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1550:
    - name: NvRCoKo
    - command: NvRCoKo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1551:
    - name: NvRCoNl
    - command: NvRCoNl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1552:
    - name: NvRCoNo
    - command: NvRCoNo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1553:
    - name: NvRCoPtb
    - command: NvRCoPtb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1554:
    - name: NvRCoRu
    - command: NvRCoRu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1555:
    - name: NvRCoSv
    - command: NvRCoSv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1556:
    - name: NvRCoZhc
    - command: NvRCoZhc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1557:
    - name: NvRCoZht
    - command: NvRCoZht.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1558:
    - name: nvrsar
    - command: nvrsar.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1559:
    - name: nvrscs
    - command: nvrscs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1560:
    - name: nvrsda
    - command: nvrsda.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1561:
    - name: nvrsde
    - command: nvrsde.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1562:
    - name: nvrsel
    - command: nvrsel.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1563:
    - name: nvrseng
    - command: nvrseng.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1564:
    - name: nvrses
    - command: nvrses.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1565:
    - name: nvrsesm
    - command: nvrsesm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1566:
    - name: nvrsfi
    - command: nvrsfi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1567:
    - name: nvrsfr
    - command: nvrsfr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1568:
    - name: nvrshe
    - command: nvrshe.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1569:
    - name: nvrshu
    - command: nvrshu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1570:
    - name: nvrsit
    - command: nvrsit.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1571:
    - name: nvrsja
    - command: nvrsja.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1572:
    - name: nvrsko
    - command: nvrsko.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1573:
    - name: nvrsnl
    - command: nvrsnl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1574:
    - name: nvrsno
    - command: nvrsno.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1575:
    - name: nvrspl
    - command: nvrspl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1576:
    - name: nvrspt
    - command: nvrspt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1577:
    - name: nvrsptb
    - command: nvrsptb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1578:
    - name: nvrsru
    - command: nvrsru.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1579:
    - name: nvrssk
    - command: nvrssk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1580:
    - name: nvrssl
    - command: nvrssl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1581:
    - name: nvrssv
    - command: nvrssv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1582:
    - name: nvrsth
    - command: nvrsth.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1583:
    - name: nvrstr
    - command: nvrstr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1584:
    - name: nvrszhc
    - command: nvrszhc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1585:
    - name: nvrszht
    - command: nvrszht.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1586:
    - name: nvsmb
    - command: nvsmb.nvu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1587:
    - name: nvsvc32
    - command: nvsvc32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1588:
    - name: nvudisp
    - command: nvudisp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1589:
    - name: nvuide
    - command: nvuide.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1590:
    - name: NVUNINST
    - command: NVUNINST.EXE
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1591:
    - name: nvunrm
    - command: nvunrm.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1592:
    - name: nvusmb
    - command: nvusmb.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1593:
    - name: nvvitvs
    - command: nvvitvs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1594:
    - name: nvvitvsr
    - command: nvvitvsr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1595:
    - name: nvwddi
    - command: nvwddi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1596:
    - name: nvwss
    - command: nvwss.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1597:
    - name: nvwssr
    - command: nvwssr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1598:
    - name: nw16
    - command: nw16.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1599:
    - name: nwapi16
    - command: nwapi16.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1600:
    - name: nwapi32
    - command: nwapi32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1601:
    - name: nwc
    - command: nwc.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1602:
    - name: nwc.cpl
    - command: nwc.cpl.manifest
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1603:
    - name: nwcfg
    - command: nwcfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1604:
    - name: nwevent
    - command: nwevent.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1605:
    - name: nwprovau
    - command: nwprovau.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1606:
    - name: nwscript
    - command: nwscript.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1607:
    - name: nwwks
    - command: nwwks.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1608:
    - name: oakley
    - command: oakley.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1609:
    - name: objsafe
    - command: objsafe.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1610:
    - name: objsel
    - command: objsel.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1611:
    - name: occache
    - command: occache.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1612:
    - name: ocmanage
    - command: ocmanage.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1613:
    - name: odbc16gt
    - command: odbc16gt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1614:
    - name: odbc32
    - command: odbc32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1615:
    - name: odbc32gt
    - command: odbc32gt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1616:
    - name: odbcad32
    - command: odbcad32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1617:
    - name: odbcbcp
    - command: odbcbcp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1618:
    - name: odbcconf
    - command: odbcconf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1619:
    - name: odbcconf
    - command: odbcconf.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1620:
    - name: odbcconf
    - command: odbcconf.rsp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1621:
    - name: odbccp32
    - command: odbccp32.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1622:
    - name: odbccp32
    - command: odbccp32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1623:
    - name: odbccr32
    - command: odbccr32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1624:
    - name: odbccu32
    - command: odbccu32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1625:
    - name: odbcint
    - command: odbcint.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1626:
    - name: odbcji32
    - command: odbcji32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1627:
    - name: odbcjt32
    - command: odbcjt32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1628:
    - name: odbcp32r
    - command: odbcp32r.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1629:
    - name: odbctrac
    - command: odbctrac.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1630:
    - name: oddbse32
    - command: oddbse32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1631:
    - name: odexl32
    - command: odexl32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1632:
    - name: odfox32
    - command: odfox32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1633:
    - name: odpdx32
    - command: odpdx32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1634:
    - name: odtext32
    - command: odtext32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1635:
    - name: oembios
    - command: oembios.bin
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1636:
    - name: oembios
    - command: oembios.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1637:
    - name: oembios
    - command: oembios.sig
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1638:
    - name: Oemdspif
    - command: Oemdspif.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1639:
    - name: oeph
    - command: oeph.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1640:
    - name: oephRes
    - command: oephRes.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1641:
    - name: offfilt
    - command: offfilt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1642:
    - name: OGAAddin
    - command: OGAAddin.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1643:
    - name: OGACheckControl
    - command: OGACheckControl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1644:
    - name: OGAEXEC
    - command: OGAEXEC.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1645:
    - name: ole2
    - command: ole2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1646:
    - name: ole2disp
    - command: ole2disp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1647:
    - name: ole2nls
    - command: ole2nls.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1648:
    - name: ole32
    - command: ole32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1649:
    - name: oleacc
    - command: oleacc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1650:
    - name: oleaccrc
    - command: oleaccrc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1651:
    - name: oleaut32
    - command: oleaut32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1652:
    - name: olecli
    - command: olecli.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1653:
    - name: olecli32
    - command: olecli32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1654:
    - name: olecnv32
    - command: olecnv32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1655:
    - name: oledlg
    - command: oledlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1656:
    - name: oleprn
    - command: oleprn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1657:
    - name: olepro32
    - command: olepro32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1658:
    - name: olesvr
    - command: olesvr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1659:
    - name: olesvr32
    - command: olesvr32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1660:
    - name: olethk32
    - command: olethk32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1661:
    - name: onex
    - command: onex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1662:
    - name: OpenCL
    - command: OpenCL.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1663:
    - name: openfiles
    - command: openfiles.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1664:
    - name: opengl32
    - command: opengl32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1665:
    - name: osk
    - command: osk.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1666:
    - name: osuninst
    - command: osuninst.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1667:
    - name: osuninst
    - command: osuninst.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1668:
    - name: p2p
    - command: p2p.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1669:
    - name: p2pgasvc
    - command: p2pgasvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1670:
    - name: p2pgraph
    - command: p2pgraph.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1671:
    - name: p2pnetsh
    - command: p2pnetsh.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1672:
    - name: p2psvc
    - command: p2psvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1673:
    - name: packager
    - command: packager.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1674:
    - name: pagefileconfig
    - command: pagefileconfig.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1675:
    - name: panmap
    - command: panmap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1676:
    - name: paqsp
    - command: paqsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1677:
    - name: pathping
    - command: pathping.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1678:
    - name: pautoenr
    - command: pautoenr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1679:
    - name: pcl
    - command: pcl.sep
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1680:
    - name: pdh
    - command: pdh.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1681:
    - name: pentnt
    - command: pentnt.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1682:
    - name: perfc009
    - command: perfc009.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1683:
    - name: perfci
    - command: perfci.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1684:
    - name: perfci
    - command: perfci.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1685:
    - name: perfctrs
    - command: perfctrs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1686:
    - name: perfd009
    - command: perfd009.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1687:
    - name: perfdisk
    - command: perfdisk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1688:
    - name: perffilt
    - command: perffilt.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1689:
    - name: perffilt
    - command: perffilt.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1690:
    - name: perfh009
    - command: perfh009.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1691:
    - name: perfi009
    - command: perfi009.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1692:
    - name: perfmon
    - command: perfmon.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1693:
    - name: perfmon
    - command: perfmon.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1694:
    - name: perfnet
    - command: perfnet.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1695:
    - name: perfnw
    - command: perfnw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1696:
    - name: perfos
    - command: perfos.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1697:
    - name: perfproc
    - command: perfproc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1698:
    - name: PerfStringBackup
    - command: PerfStringBackup.INI
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1699:
    - name: perfts
    - command: perfts.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1700:
    - name: perfwci
    - command: perfwci.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1701:
    - name: perfwci
    - command: perfwci.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1702:
    - name: photometadatahandler
    - command: photometadatahandler.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1703:
    - name: photowiz
    - command: photowiz.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1704:
    - name: Picclp32
    - command: Picclp32.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1705:
    - name: PICEntry
    - command: PICEntry.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1706:
    - name: picn20
    - command: picn20.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1707:
    - name: PICSDK
    - command: PICSDK.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1708:
    - name: PICSDK
    - command: PICSDK.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1709:
    - name: PICSDK2
    - command: PICSDK2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1710:
    - name: pid
    - command: pid.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1711:
    - name: pid
    - command: pid.inf
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1712:
    - name: pidgen
    - command: pidgen.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1713:
    - name: pifmgr
    - command: pifmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1714:
    - name: ping
    - command: ping.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1715:
    - name: ping6
    - command: ping6.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1716:
    - name: pintool
    - command: pintool.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1717:
    - name: pjlmon
    - command: pjlmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1718:
    - name: plustab
    - command: plustab.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1719:
    - name: pmspl
    - command: pmspl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1720:
    - name: pngfilt
    - command: pngfilt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1721:
    - name: pnrpnsp
    - command: pnrpnsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1722:
    - name: polstore
    - command: polstore.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1723:
    - name: PortableDeviceApi
    - command: PortableDeviceApi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1724:
    - name: PortableDeviceClassExtension
    - command: PortableDeviceClassExtension.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1725:
    - name: PortableDeviceTypes
    - command: PortableDeviceTypes.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1726:
    - name: PortableDeviceWiaCompat
    - command: PortableDeviceWiaCompat.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1727:
    - name: PortableDeviceWMDRM
    - command: PortableDeviceWMDRM.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1728:
    - name: powercfg
    - command: powercfg.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1729:
    - name: powercfg
    - command: powercfg.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1730:
    - name: powrprof
    - command: powrprof.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1731:
    - name: PPPFilt
    - command: PPPFilt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1732:
    - name: PresentationCFFRasterizerNative_v0300
    - command: PresentationCFFRasterizerNative_v0300.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1733:
    - name: PresentationHost
    - command: PresentationHost.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1734:
    - name: PresentationHostProxy
    - command: PresentationHostProxy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1735:
    - name: PresentationNative_v0300
    - command: PresentationNative_v0300.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1736:
    - name: prflbmsg
    - command: prflbmsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1737:
    - name: print
    - command: print.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1738:
    - name: printui
    - command: printui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1739:
    - name: prncnfg
    - command: prncnfg.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1740:
    - name: prndrvr
    - command: prndrvr.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1741:
    - name: prnjobs
    - command: prnjobs.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1742:
    - name: prnmngr
    - command: prnmngr.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1743:
    - name: prnport
    - command: prnport.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1744:
    - name: prnqctl
    - command: prnqctl.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1745:
    - name: prntvpt
    - command: prntvpt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1746:
    - name: proctexe
    - command: proctexe.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1747:
    - name: prodspec
    - command: prodspec.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1748:
    - name: profmap
    - command: profmap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1749:
    - name: progman
    - command: progman.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1750:
    - name: Project2-1
    - command: Project2-1.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1751:
    - name: Project2
    - command: Project2.INF
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1752:
    - name: propdefs
    - command: propdefs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1753:
    - name: propsys
    - command: propsys.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1754:
    - name: propsys.dll
    - command: propsys.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1755:
    - name: proquota
    - command: proquota.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1756:
    - name: proxycfg
    - command: proxycfg.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1757:
    - name: psapi
    - command: psapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1758:
    - name: psbase
    - command: psbase.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1759:
    - name: pschdcnt
    - command: pschdcnt.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1760:
    - name: pschdprf
    - command: pschdprf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1761:
    - name: pschdprf
    - command: pschdprf.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1762:
    - name: pscript
    - command: pscript.sep
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1763:
    - name: psnppagn
    - command: psnppagn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1764:
    - name: pstorec
    - command: pstorec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1765:
    - name: pstorsvc
    - command: pstorsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1766:
    - name: pubprn
    - command: pubprn.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1767:
    - name: pwrshplugin
    - command: pwrshplugin.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1768:
    - name: px
    - command: px.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1769:
    - name: pxdrv
    - command: pxdrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1770:
    - name: pxmas
    - command: pxmas.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1771:
    - name: pxwave
    - command: pxwave.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1772:
    - name: pxwma
    - command: pxwma.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1773:
    - name: qagent
    - command: qagent.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1774:
    - name: qagentrt
    - command: qagentrt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1775:
    - name: qappsrv
    - command: qappsrv.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1776:
    - name: qasf
    - command: qasf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1777:
    - name: qcap
    - command: qcap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1778:
    - name: qcliprov
    - command: qcliprov.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1779:
    - name: qd3d
    - command: qd3d.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1780:
    - name: QD3DCustomElements
    - command: QD3DCustomElements.q3x
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1781:
    - name: QD3D_IR2
    - command: QD3D_IR2.q3x
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1782:
    - name: qdv
    - command: qdv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1783:
    - name: qdvd
    - command: qdvd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1784:
    - name: qedit
    - command: qedit.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1785:
    - name: qedwipes
    - command: qedwipes.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1786:
    - name: qmgr
    - command: qmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1787:
    - name: qmgrprxy
    - command: qmgrprxy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1788:
    - name: qosname
    - command: qosname.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1789:
    - name: qprocess
    - command: qprocess.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1790:
    - name: QTUninst
    - command: QTUninst.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1791:
    - name: quartz
    - command: quartz.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1792:
    - name: query
    - command: query.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1793:
    - name: QuickTime
    - command: QuickTime.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1794:
    - name: QuickTime
    - command: QuickTime.qts
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1795:
    - name: QuickTimeMusicalInstruments
    - command: QuickTimeMusicalInstruments.qtx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1796:
    - name: QuickTimeVR
    - command: QuickTimeVR.qtx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1797:
    - name: qutil
    - command: qutil.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1798:
    - name: qwinsta
    - command: qwinsta.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1799:
    - name: racpldlg
    - command: racpldlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1800:
    - name: raidmgmt
    - command: raidmgmt.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1801:
    - name: rasadhlp
    - command: rasadhlp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1802:
    - name: rasapi32
    - command: rasapi32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1803:
    - name: rasauto
    - command: rasauto.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1804:
    - name: rasautou
    - command: rasautou.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1805:
    - name: raschap
    - command: raschap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1806:
    - name: rasctrnm
    - command: rasctrnm.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1807:
    - name: rasctrs
    - command: rasctrs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1808:
    - name: rasctrs
    - command: rasctrs.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1809:
    - name: rasdial
    - command: rasdial.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1810:
    - name: rasdlg
    - command: rasdlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1811:
    - name: rasman
    - command: rasman.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1812:
    - name: rasmans
    - command: rasmans.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1813:
    - name: rasmontr
    - command: rasmontr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1814:
    - name: rasmxs
    - command: rasmxs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1815:
    - name: rasphone
    - command: rasphone.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1816:
    - name: rasppp
    - command: rasppp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1817:
    - name: rasqec
    - command: rasqec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1818:
    - name: rasrad
    - command: rasrad.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1819:
    - name: rassapi
    - command: rassapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1820:
    - name: rasser
    - command: rasser.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1821:
    - name: rastapi
    - command: rastapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1822:
    - name: rastls
    - command: rastls.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1823:
    - name: rave
    - command: rave.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1824:
    - name: rcbdyctl
    - command: rcbdyctl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1825:
    - name: rcimlby
    - command: rcimlby.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1826:
    - name: rcp
    - command: rcp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1827:
    - name: rdchost
    - command: rdchost.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1828:
    - name: rdpcfgex
    - command: rdpcfgex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1829:
    - name: rdpclip
    - command: rdpclip.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1830:
    - name: rdpdd
    - command: rdpdd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1831:
    - name: rdpsnd
    - command: rdpsnd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1832:
    - name: rdpwsx
    - command: rdpwsx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1833:
    - name: rdsaddin
    - command: rdsaddin.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1834:
    - name: rdshost
    - command: rdshost.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1835:
    - name: recover
    - command: recover.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1836:
    - name: redir
    - command: redir.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1837:
    - name: reg
    - command: reg.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1838:
    - name: regapi
    - command: regapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1839:
    - name: regedt32
    - command: regedt32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1840:
    - name: regini
    - command: regini.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1841:
    - name: regsvc
    - command: regsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1842:
    - name: regsvr32
    - command: regsvr32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1843:
    - name: regwiz
    - command: regwiz.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1844:
    - name: regwizc
    - command: regwizc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1845:
    - name: relog
    - command: relog.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1846:
    - name: remotepg
    - command: remotepg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1847:
    - name: remotesp
    - command: remotesp.tsp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1848:
    - name: rend
    - command: rend.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1849:
    - name: replace
    - command: replace.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1850:
    - name: reset
    - command: reset.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1851:
    - name: resutils
    - command: resutils.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1852:
    - name: rexec
    - command: rexec.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1853:
    - name: rgb9rast_2
    - command: rgb9rast_2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1854:
    - name: rhttpaa
    - command: rhttpaa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1855:
    - name: riched20
    - command: riched20.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1856:
    - name: riched32
    - command: riched32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1857:
    - name: rnr20
    - command: rnr20.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1858:
    - name: route
    - command: route.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1859:
    - name: routemon
    - command: routemon.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1860:
    - name: routetab
    - command: routetab.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1861:
    - name: rpcns4
    - command: rpcns4.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1862:
    - name: rpcrt4
    - command: rpcrt4.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1863:
    - name: rpcss
    - command: rpcss.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1864:
    - name: rsaci
    - command: rsaci.rat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1865:
    - name: rsaenh
    - command: rsaenh.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1866:
    - name: rsfsaps
    - command: rsfsaps.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1867:
    - name: rsh
    - command: rsh.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1868:
    - name: rshx32
    - command: rshx32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1869:
    - name: rsm
    - command: rsm.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1870:
    - name: rsmps
    - command: rsmps.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1871:
    - name: rsmsink
    - command: rsmsink.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1872:
    - name: rsmui
    - command: rsmui.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1873:
    - name: rsnotify
    - command: rsnotify.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1874:
    - name: rsop
    - command: rsop.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1875:
    - name: rsopprov
    - command: rsopprov.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1876:
    - name: rsvp
    - command: rsvp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1877:
    - name: rsvp
    - command: rsvp.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1878:
    - name: rsvpcnts
    - command: rsvpcnts.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1879:
    - name: rsvpmsg
    - command: rsvpmsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1880:
    - name: rsvpperf
    - command: rsvpperf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1881:
    - name: rsvpsp
    - command: rsvpsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1882:
    - name: rtcshare
    - command: rtcshare.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1883:
    - name: rtffilt
    - command: rtffilt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1884:
    - name: rtipxmib
    - command: rtipxmib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1885:
    - name: RtkCoInstXP
    - command: RtkCoInstXP.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1886:
    - name: rtm
    - command: rtm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1887:
    - name: RTSndMgr
    - command: RTSndMgr.CPL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1888:
    - name: rtutils
    - command: rtutils.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1889:
    - name: runas
    - command: runas.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1890:
    - name: rundll32
    - command: rundll32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1891:
    - name: runonce
    - command: runonce.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1892:
    - name: rwinsta
    - command: rwinsta.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1893:
    - name: s3gnb
    - command: s3gnb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1894:
    - name: safrcdlg
    - command: safrcdlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1895:
    - name: safrdm
    - command: safrdm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1896:
    - name: safrslv
    - command: safrslv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1897:
    - name: samlib
    - command: samlib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1898:
    - name: samsrv
    - command: samsrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1899:
    - name: sapi.cpl
    - command: sapi.cpl.manifest
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1900:
    - name: savedump
    - command: savedump.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1901:
    - name: sbe
    - command: sbe.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1902:
    - name: sbeio
    - command: sbeio.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1903:
    - name: sc
    - command: sc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1904:
    - name: scarddlg
    - command: scarddlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1905:
    - name: scardssp
    - command: scardssp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1906:
    - name: scardsvr
    - command: scardsvr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1907:
    - name: sccbase
    - command: sccbase.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1908:
    - name: sccsccp
    - command: sccsccp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1909:
    - name: scecli
    - command: scecli.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1910:
    - name: scesrv
    - command: scesrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1911:
    - name: schannel
    - command: schannel.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1912:
    - name: schedsvc
    - command: schedsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1913:
    - name: schtasks
    - command: schtasks.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1914:
    - name: sclaudio
    - command: sclaudio.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1915:
    - name: sclgntfy
    - command: sclgntfy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1916:
    - name: sclvideo
    - command: sclvideo.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1917:
    - name: SCP32
    - command: SCP32.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1918:
    - name: scredir
    - command: scredir.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1919:
    - name: scripto
    - command: scripto.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1920:
    - name: scriptpw
    - command: scriptpw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1921:
    - name: scrnsave
    - command: scrnsave.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1922:
    - name: scrobj
    - command: scrobj.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1923:
    - name: scrrun
    - command: scrrun.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1924:
    - name: sdbinst
    - command: sdbinst.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1925:
    - name: sdhcinst
    - command: sdhcinst.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1926:
    - name: sdpblb
    - command: sdpblb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1927:
    - name: searchfilterhost
    - command: searchfilterhost.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1928:
    - name: searchindexer
    - command: searchindexer.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1929:
    - name: searchindexer.exe
    - command: searchindexer.exe.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1930:
    - name: searchprotocolhost
    - command: searchprotocolhost.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1931:
    - name: secedit
    - command: secedit.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1932:
    - name: seclogon
    - command: seclogon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1933:
    - name: secpol
    - command: secpol.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1934:
    - name: secupd
    - command: secupd.dat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1935:
    - name: secupd
    - command: secupd.sig
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1936:
    - name: secur32
    - command: secur32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1937:
    - name: security
    - command: security.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1938:
    - name: sendcmsg
    - command: sendcmsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1939:
    - name: sendmail
    - command: sendmail.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1940:
    - name: sens
    - command: sens.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1941:
    - name: sensapi
    - command: sensapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1942:
    - name: senscfg
    - command: senscfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1943:
    - name: serialui
    - command: serialui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1944:
    - name: Serif AlbumPlus
    - command: Serif AlbumPlus.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1945:
    - name: servdeps
    - command: servdeps.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1946:
    - name: services
    - command: services.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1947:
    - name: services
    - command: services.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1948:
    - name: serwvdrv
    - command: serwvdrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1949:
    - name: sessmgr
    - command: sessmgr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1950:
    - name: SET42
    - command: SET42.tmp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1951:
    - name: SET46
    - command: SET46.tmp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1952:
    - name: SET4E
    - command: SET4E.tmp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1953:
    - name: sethc
    - command: sethc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1954:
    - name: setup
    - command: setup.bmp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1955:
    - name: setup
    - command: setup.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1956:
    - name: setupapi
    - command: setupapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1957:
    - name: setupdll
    - command: setupdll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1958:
    - name: setupn
    - command: setupn.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1959:
    - name: setver
    - command: setver.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1960:
    - name: sfc
    - command: sfc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1961:
    - name: sfc
    - command: sfc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1962:
    - name: sfcfiles
    - command: sfcfiles.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1963:
    - name: sfc_os
    - command: sfc_os.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1964:
    - name: sfmapi
    - command: sfmapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1965:
    - name: shadow
    - command: shadow.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1966:
    - name: share
    - command: share.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1967:
    - name: shdoclc
    - command: shdoclc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1968:
    - name: shdocvw
    - command: shdocvw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1969:
    - name: shell
    - command: shell.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1970:
    - name: shell32
    - command: shell32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1971:
    - name: shellstyle
    - command: shellstyle.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1972:
    - name: shfolder
    - command: shfolder.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1973:
    - name: shgina
    - command: shgina.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1974:
    - name: shiftjis
    - command: shiftjis.uce
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1975:
    - name: shimeng
    - command: shimeng.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1976:
    - name: shimgvw
    - command: shimgvw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1977:
    - name: shlwapi
    - command: shlwapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1978:
    - name: shmedia
    - command: shmedia.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1979:
    - name: shmgrate
    - command: shmgrate.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1980:
    - name: shrpubw
    - command: shrpubw.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1981:
    - name: shscrap
    - command: shscrap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1982:
    - name: shsvcs
    - command: shsvcs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1983:
    - name: shutdown
    - command: shutdown.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1984:
    - name: sigtab
    - command: sigtab.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1985:
    - name: sigverif
    - command: sigverif.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1986:
    - name: simpdata
    - command: simpdata.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1987:
    - name: sirenacm
    - command: sirenacm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1988:
    - name: sisbkup
    - command: sisbkup.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1989:
    - name: skdll
    - command: skdll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1990:
    - name: skeys
    - command: skeys.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1991:
    - name: slayerxp
    - command: slayerxp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1992:
    - name: slbcsp
    - command: slbcsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1993:
    - name: slbiop
    - command: slbiop.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1994:
    - name: slbrccsp
    - command: slbrccsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1995:
    - name: slcoinst
    - command: slcoinst.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1996:
    - name: slextspk
    - command: slextspk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1997:
    - name: slgen
    - command: slgen.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1998:
    - name: slrundll
    - command: slrundll.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 1999:
    - name: slserv
    - command: slserv.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2000:
    - name: sl_anet
    - command: sl_anet.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2001:
    - name: smbinst
    - command: smbinst.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2002:
    - name: smlogcfg
    - command: smlogcfg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2003:
    - name: smlogsvc
    - command: smlogsvc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2004:
    - name: smss
    - command: smss.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2005:
    - name: sndrec32
    - command: sndrec32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2006:
    - name: sndvol32
    - command: sndvol32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2007:
    - name: snmpapi
    - command: snmpapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2008:
    - name: snmpsnap
    - command: snmpsnap.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2009:
    - name: softpub
    - command: softpub.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2010:
    - name: sol
    - command: sol.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2011:
    - name: sort
    - command: sort.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2012:
    - name: sortkey
    - command: sortkey.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2013:
    - name: sorttbls
    - command: sorttbls.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2014:
    - name: sound
    - command: sound.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2015:
    - name: spdwnwxp
    - command: spdwnwxp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2016:
    - name: spider
    - command: spider.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2017:
    - name: spiisupd
    - command: spiisupd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2018:
    - name: spmsg
    - command: spmsg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2019:
    - name: spmsgXP_2k3
    - command: spmsgXP_2k3.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2020:
    - name: spnike
    - command: spnike.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2021:
    - name: spnpinst
    - command: spnpinst.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2022:
    - name: spoolss
    - command: spoolss.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2023:
    - name: spoolsv
    - command: spoolsv.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2024:
    - name: sprestrt
    - command: sprestrt.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2025:
    - name: sprio600
    - command: sprio600.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2026:
    - name: sprio800
    - command: sprio800.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2027:
    - name: spupdsvc
    - command: spupdsvc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2028:
    - name: spupdwxp
    - command: spupdwxp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2029:
    - name: spupdwxp
    - command: spupdwxp.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2030:
    - name: spxcoins
    - command: spxcoins.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2031:
    - name: sqlctr90
    - command: sqlctr90.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2032:
    - name: sqlncli
    - command: sqlncli.chm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2033:
    - name: sqlncli
    - command: sqlncli.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2034:
    - name: sqlnclir
    - command: sqlnclir.rll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2035:
    - name: SQLServerManager
    - command: SQLServerManager.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2036:
    - name: sqlsodbc
    - command: sqlsodbc.chm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2037:
    - name: sqlsrv32
    - command: sqlsrv32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2038:
    - name: sqlsrv32
    - command: sqlsrv32.rll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2039:
    - name: sqlunirl
    - command: sqlunirl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2040:
    - name: sqlwid
    - command: sqlwid.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2041:
    - name: sqlwoa
    - command: sqlwoa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2042:
    - name: srchadmin
    - command: srchadmin.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2043:
    - name: srchadmin.dll
    - command: srchadmin.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2044:
    - name: srclient
    - command: srclient.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2045:
    - name: srrstr
    - command: srrstr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2046:
    - name: srsvc
    - command: srsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2047:
    - name: srvsvc
    - command: srvsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2048:
    - name: ss3dfo
    - command: ss3dfo.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2049:
    - name: ssbezier
    - command: ssbezier.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2050:
    - name: ssdpapi
    - command: ssdpapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2051:
    - name: ssdpsrv
    - command: ssdpsrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2052:
    - name: ssflwbox
    - command: ssflwbox.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2053:
    - name: ssmarque
    - command: ssmarque.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2054:
    - name: ssmypics
    - command: ssmypics.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2055:
    - name: ssmyst
    - command: ssmyst.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2056:
    - name: sspipes
    - command: sspipes.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2057:
    - name: ssstars
    - command: ssstars.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2058:
    - name: sstext3d
    - command: sstext3d.scr
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2059:
    - name: SSubTmr6
    - command: SSubTmr6.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2060:
    - name: stclient
    - command: stclient.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2061:
    - name: stdole2
    - command: stdole2.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2062:
    - name: stdole32
    - command: stdole32.tlb
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2063:
    - name: sti
    - command: sti.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2064:
    - name: stimon
    - command: stimon.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2065:
    - name: sti_ci
    - command: sti_ci.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2066:
    - name: stobject
    - command: stobject.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2067:
    - name: storage
    - command: storage.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2068:
    - name: storprop
    - command: storprop.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2069:
    - name: streamci
    - command: streamci.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2070:
    - name: STRING32
    - command: STRING32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2071:
    - name: strmdll
    - command: strmdll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2072:
    - name: strmfilt
    - command: strmfilt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2073:
    - name: structuredqueryschema
    - command: structuredqueryschema.bin
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2074:
    - name: structuredqueryschematrivial
    - command: structuredqueryschematrivial.bin
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2075:
    - name: subrange
    - command: subrange.uce
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2076:
    - name: subst
    - command: subst.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2077:
    - name: svchost
    - command: svchost.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2078:
    - name: svcpack
    - command: svcpack.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2079:
    - name: SV_SQL3_Config
    - command: SV_SQL3_Config.db
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2080:
    - name: SV_SQL3_Events
    - command: SV_SQL3_Events.db
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2081:
    - name: swprv
    - command: swprv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2082:
    - name: sxs
    - command: sxs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2083:
    - name: syncapp
    - command: syncapp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2084:
    - name: synceng
    - command: synceng.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2085:
    - name: syncui
    - command: syncui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2086:
    - name: sysdm
    - command: sysdm.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2087:
    - name: sysedit
    - command: sysedit.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2088:
    - name: sysinv
    - command: sysinv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2089:
    - name: syskey
    - command: syskey.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2090:
    - name: sysmon
    - command: sysmon.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2091:
    - name: sysocmgr
    - command: sysocmgr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2092:
    - name: sysprint
    - command: sysprint.sep
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2093:
    - name: sysprtj
    - command: sysprtj.sep
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2094:
    - name: syssetup
    - command: syssetup.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2095:
    - name: system
    - command: system.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2096:
    - name: systeminfo
    - command: systeminfo.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2097:
    - name: systray
    - command: systray.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2098:
    - name: t2embed
    - command: t2embed.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2099:
    - name: tapi
    - command: tapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2100:
    - name: tapi3
    - command: tapi3.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2101:
    - name: tapi32
    - command: tapi32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2102:
    - name: tapiperf
    - command: tapiperf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2103:
    - name: tapisrv
    - command: tapisrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2104:
    - name: tapiui
    - command: tapiui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2105:
    - name: taskkill
    - command: taskkill.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2106:
    - name: tasklist
    - command: tasklist.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2107:
    - name: taskman
    - command: taskman.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2108:
    - name: taskmgr
    - command: taskmgr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2109:
    - name: tcmsetup
    - command: tcmsetup.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2110:
    - name: tcpmib
    - command: tcpmib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2111:
    - name: tcpmon
    - command: tcpmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2112:
    - name: tcpmon
    - command: tcpmon.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2113:
    - name: tcpmonui
    - command: tcpmonui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2114:
    - name: tcpsvcs
    - command: tcpsvcs.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2115:
    - name: tdc
    - command: tdc.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2116:
    - name: telephon
    - command: telephon.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2117:
    - name: telnet
    - command: telnet.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2118:
    - name: termcap
    - command: termcap
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2119:
    - name: termmgr
    - command: termmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2120:
    - name: termsrv
    - command: termsrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2121:
    - name: tftp
    - command: tftp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2122:
    - name: themeui
    - command: themeui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2123:
    - name: ticrf
    - command: ticrf.rat
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2124:
    - name: timedate
    - command: timedate.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2125:
    - name: timer
    - command: timer.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2126:
    - name: tlntadmn
    - command: tlntadmn.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2127:
    - name: tlntsess
    - command: tlntsess.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2128:
    - name: tlntsvr
    - command: tlntsvr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2129:
    - name: tlntsvrp
    - command: tlntsvrp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2130:
    - name: toolhelp
    - command: toolhelp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2131:
    - name: tourstart
    - command: tourstart.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2132:
    - name: tquery
    - command: tquery.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2133:
    - name: tquery.dll
    - command: tquery.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2134:
    - name: tracerpt
    - command: tracerpt.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2135:
    - name: tracert
    - command: tracert.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2136:
    - name: tracert6
    - command: tracert6.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2137:
    - name: traffic
    - command: traffic.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2138:
    - name: tree
    - command: tree.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2139:
    - name: trkwks
    - command: trkwks.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2140:
    - name: tsappcmp
    - command: tsappcmp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2141:
    - name: tsbyuv
    - command: tsbyuv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2142:
    - name: tscfgwmi
    - command: tscfgwmi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2143:
    - name: tscon
    - command: tscon.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2144:
    - name: tscupgrd
    - command: tscupgrd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2145:
    - name: tsd32
    - command: tsd32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2146:
    - name: tsddd
    - command: tsddd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2147:
    - name: tsdiscon
    - command: tsdiscon.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2148:
    - name: tsgqec
    - command: tsgqec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2149:
    - name: tskill
    - command: tskill.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2150:
    - name: tslabels
    - command: tslabels.h
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2151:
    - name: tslabels
    - command: tslabels.ini
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2152:
    - name: tspkg
    - command: tspkg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2153:
    - name: tsshutdn
    - command: tsshutdn.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2154:
    - name: tssoft32
    - command: tssoft32.acm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2155:
    - name: TsWpfWrp
    - command: TsWpfWrp.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2156:
    - name: TTI32
    - command: TTI32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2157:
    - name: TTIC32
    - command: TTIC32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2158:
    - name: twaindsm
    - command: twaindsm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2159:
    - name: twext
    - command: twext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2160:
    - name: TwnLib20
    - command: TwnLib20.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2161:
    - name: TwnLib4
    - command: TwnLib4.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2162:
    - name: txflog
    - command: txflog.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2163:
    - name: typelib
    - command: typelib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2164:
    - name: typeperf
    - command: typeperf.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2165:
    - name: tzchange
    - command: tzchange.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2166:
    - name: TZLog
    - command: TZLog.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2167:
    - name: udhisapi
    - command: udhisapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2168:
    - name: ufat
    - command: ufat.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2169:
    - name: uiautomationcore
    - command: uiautomationcore.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2170:
    - name: ulib
    - command: ulib.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2171:
    - name: umandlg
    - command: umandlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2172:
    - name: umdmxfrm
    - command: umdmxfrm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2173:
    - name: umpnpmgr
    - command: umpnpmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2174:
    - name: UncCplExt
    - command: UncCplExt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2175:
    - name: UncDMS
    - command: UncDMS.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2176:
    - name: UncNE
    - command: UncNE.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2177:
    - name: UncPH
    - command: UncPH.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2178:
    - name: UncRes
    - command: UncRes.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2179:
    - name: unicode
    - command: unicode.nls
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2180:
    - name: unimdm
    - command: unimdm.tsp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2181:
    - name: unimdmat
    - command: unimdmat.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2182:
    - name: uniplat
    - command: uniplat.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2183:
    - name: unlodctr
    - command: unlodctr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2184:
    - name: untfs
    - command: untfs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2185:
    - name: upnp
    - command: upnp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2186:
    - name: upnpcont
    - command: upnpcont.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2187:
    - name: upnphost
    - command: upnphost.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2188:
    - name: upnpui
    - command: upnpui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2189:
    - name: ups
    - command: ups.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2190:
    - name: ureg
    - command: ureg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2191:
    - name: url
    - command: url.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2192:
    - name: urlmon
    - command: urlmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2193:
    - name: usbmon
    - command: usbmon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2194:
    - name: usbui
    - command: usbui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2195:
    - name: user
    - command: user.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2196:
    - name: user32
    - command: user32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2197:
    - name: userenv
    - command: userenv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2198:
    - name: userinit
    - command: userinit.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2199:
    - name: user_gensett
    - command: user_gensett.xml
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2200:
    - name: usp10
    - command: usp10.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2201:
    - name: usrcntra
    - command: usrcntra.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2202:
    - name: usrcoina
    - command: usrcoina.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2203:
    - name: usrdpa
    - command: usrdpa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2204:
    - name: usrdtea
    - command: usrdtea.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2205:
    - name: usrfaxa
    - command: usrfaxa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2206:
    - name: usrlbva
    - command: usrlbva.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2207:
    - name: usrlogon
    - command: usrlogon.cmd
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2208:
    - name: usrmlnka
    - command: usrmlnka.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2209:
    - name: usrprbda
    - command: usrprbda.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2210:
    - name: usrrtosa
    - command: usrrtosa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2211:
    - name: usrsdpia
    - command: usrsdpia.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2212:
    - name: usrshuta
    - command: usrshuta.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2213:
    - name: usrsvpia
    - command: usrsvpia.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2214:
    - name: usrv42a
    - command: usrv42a.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2215:
    - name: usrv80a
    - command: usrv80a.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2216:
    - name: usrvoica
    - command: usrvoica.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2217:
    - name: usrvpa
    - command: usrvpa.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2218:
    - name: utildll
    - command: utildll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2219:
    - name: utilman
    - command: utilman.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2220:
    - name: uwdf
    - command: uwdf.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2221:
    - name: uxtheme
    - command: uxtheme.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2222:
    - name: V0080Ext
    - command: V0080Ext.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2223:
    - name: V0080Ext
    - command: V0080Ext.crl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2224:
    - name: V0080Hwx
    - command: V0080Hwx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2225:
    - name: V0080Pin
    - command: V0080Pin.crl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2226:
    - name: V0080Pin
    - command: V0080Pin.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2227:
    - name: V0080Srv
    - command: V0080Srv.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2228:
    - name: V0080Sti
    - command: V0080Sti.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2229:
    - name: V0080Vfw
    - command: V0080Vfw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2230:
    - name: v7vga
    - command: v7vga.rom
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2231:
    - name: Vb6stkit
    - command: Vb6stkit.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2232:
    - name: VBAEN32
    - command: VBAEN32.OLB
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2233:
    - name: VBAEND32
    - command: VBAEND32.OLB
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2234:
    - name: vbajet32
    - command: vbajet32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2235:
    - name: vbalNCSM6
    - command: vbalNCSM6.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2236:
    - name: VBAME
    - command: VBAME.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2237:
    - name: vbicodec
    - command: vbicodec.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2238:
    - name: vbisurf
    - command: vbisurf.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2239:
    - name: vbscript
    - command: vbscript.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2240:
    - name: vcdex
    - command: vcdex.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2241:
    - name: vcomp100
    - command: vcomp100.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2242:
    - name: vcomp110
    - command: vcomp110.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2243:
    - name: vdmdbg
    - command: vdmdbg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2244:
    - name: vdmredir
    - command: vdmredir.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2245:
    - name: VEN2232
    - command: VEN2232.OLB
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2246:
    - name: ver
    - command: ver.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2247:
    - name: verclsid
    - command: verclsid.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2248:
    - name: verifier
    - command: verifier.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2249:
    - name: verifier
    - command: verifier.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2250:
    - name: version
    - command: version.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2251:
    - name: vfpodbc
    - command: vfpodbc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2252:
    - name: vfwwdm32
    - command: vfwwdm32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2253:
    - name: vga
    - command: vga.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2254:
    - name: vga
    - command: vga.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2255:
    - name: vga256
    - command: vga256.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2256:
    - name: vga64k
    - command: vga64k.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2257:
    - name: vidcap
    - command: vidcap.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2258:
    - name: View Channels
    - command: View Channels.scf
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2259:
    - name: vjoy
    - command: vjoy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2260:
    - name: vssadmin
    - command: vssadmin.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2261:
    - name: vssapi
    - command: vssapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2262:
    - name: vssvc
    - command: vssvc.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2263:
    - name: vss_ps
    - command: vss_ps.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2264:
    - name: vwipxspx
    - command: vwipxspx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2265:
    - name: vwipxspx
    - command: vwipxspx.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2266:
    - name: vxblock
    - command: vxblock.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2267:
    - name: w32time
    - command: w32time.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2268:
    - name: w32tm
    - command: w32tm.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2269:
    - name: w32topl
    - command: w32topl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2270:
    - name: w3ssl
    - command: w3ssl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2271:
    - name: watchdog
    - command: watchdog.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2272:
    - name: wavemsp
    - command: wavemsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2273:
    - name: wbcache
    - command: wbcache.deu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2274:
    - name: wbcache
    - command: wbcache.enu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2275:
    - name: wbcache
    - command: wbcache.esn
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2276:
    - name: wbcache
    - command: wbcache.fra
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2277:
    - name: wbcache
    - command: wbcache.ita
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2278:
    - name: wbcache
    - command: wbcache.nld
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2279:
    - name: wbcache
    - command: wbcache.sve
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2280:
    - name: wbdbase
    - command: wbdbase.deu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2281:
    - name: wbdbase
    - command: wbdbase.enu
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2282:
    - name: wbdbase
    - command: wbdbase.esn
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2283:
    - name: wbdbase
    - command: wbdbase.fra
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2284:
    - name: wbdbase
    - command: wbdbase.ita
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2285:
    - name: wbdbase
    - command: wbdbase.nld
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2286:
    - name: wbdbase
    - command: wbdbase.sve
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2287:
    - name: wdfapi
    - command: wdfapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2288:
    - name: WdfCoInstaller01007
    - command: WdfCoInstaller01007.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2289:
    - name: WdfCoInstaller01009
    - command: WdfCoInstaller01009.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2290:
    - name: wdfmgr
    - command: wdfmgr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2291:
    - name: wdigest
    - command: wdigest.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2292:
    - name: wdl
    - command: wdl.trm
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2293:
    - name: wdmaud
    - command: wdmaud.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2294:
    - name: webcheck
    - command: webcheck.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2295:
    - name: webclnt
    - command: webclnt.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2296:
    - name: WebEx Document Loader Port
    - command:
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2297:
    - name: webfldrs
    - command: webfldrs.msi
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2298:
    - name: webhits
    - command: webhits.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2299:
    - name: webvw
    - command: webvw.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2300:
    - name: wevtfwd
    - command: wevtfwd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2301:
    - name: wextract
    - command: wextract.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2302:
    - name: wfwnet
    - command: wfwnet.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2303:
    - name: WgaLogon
    - command: WgaLogon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2304:
    - name: WgaTray
    - command: WgaTray.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2305:
    - name: wiaacmgr
    - command: wiaacmgr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2306:
    - name: wiadefui
    - command: wiadefui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2307:
    - name: wiadss
    - command: wiadss.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2308:
    - name: wiascr
    - command: wiascr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2309:
    - name: wiaservc
    - command: wiaservc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2310:
    - name: wiasf
    - command: wiasf.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2311:
    - name: wiashext
    - command: wiashext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2312:
    - name: wiavideo
    - command: wiavideo.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2313:
    - name: wiavusd
    - command: wiavusd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2314:
    - name: wifeman
    - command: wifeman.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2315:
    - name: win
    - command: win.com
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2316:
    - name: win32k
    - command: win32k.sys
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2317:
    - name: win32spl
    - command: win32spl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2318:
    - name: win87em
    - command: win87em.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2319:
    - name: winbrand
    - command: winbrand.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2320:
    - name: winchat
    - command: winchat.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2321:
    - name: WindowsAccessBridge
    - command: WindowsAccessBridge.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2322:
    - name: windowscodecs
    - command: windowscodecs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2323:
    - name: windowscodecsext
    - command: windowscodecsext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2324:
    - name: WindowsLogon
    - command: WindowsLogon.manifest
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2325:
    - name: winfax
    - command: winfax.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2326:
    - name: WinFXDocObj
    - command: WinFXDocObj.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2327:
    - name: winhelp
    - command: winhelp.hlp
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2328:
    - name: winhlp32
    - command: winhlp32.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2329:
    - name: winhttp
    - command: winhttp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2330:
    - name: wininet
    - command: wininet.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2331:
    - name: winipsec
    - command: winipsec.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2332:
    - name: winlogon
    - command: winlogon.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2333:
    - name: winmine
    - command: winmine.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2334:
    - name: winmm
    - command: winmm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2335:
    - name: winmsd
    - command: winmsd.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2336:
    - name: winnls
    - command: winnls.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2337:
    - name: winntbbu
    - command: winntbbu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2338:
    - name: winoldap
    - command: winoldap.mod
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2339:
    - name: winrm
    - command: winrm.cmd
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2340:
    - name: winrm
    - command: winrm.vbs
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2341:
    - name: winrmprov
    - command: winrmprov.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2342:
    - name: winrmprov
    - command: winrmprov.mof
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2343:
    - name: winrnr
    - command: winrnr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2344:
    - name: winrs
    - command: winrs.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2345:
    - name: winrscmd
    - command: winrscmd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2346:
    - name: winrshost
    - command: winrshost.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2347:
    - name: winrsmgr
    - command: winrsmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2348:
    - name: winrssrv
    - command: winrssrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2349:
    - name: winscard
    - command: winscard.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2350:
    - name: winshfhc
    - command: winshfhc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2351:
    - name: winsock
    - command: winsock.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2352:
    - name: winspool
    - command: winspool.drv
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2353:
    - name: winspool
    - command: winspool.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2354:
    - name: winsrv
    - command: winsrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2355:
    - name: winsta
    - command: winsta.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2356:
    - name: winstrm
    - command: winstrm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2357:
    - name: wintrust
    - command: wintrust.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2358:
    - name: winusb
    - command: winusb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2359:
    - name: WinUSBCoInstaller
    - command: WinUSBCoInstaller.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2360:
    - name: WinUSBCoInstaller2
    - command: WinUSBCoInstaller2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2361:
    - name: winver
    - command: winver.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2362:
    - name: WISPTIS
    - command: WISPTIS.EXE
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2363:
    - name: wkssvc
    - command: wkssvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2364:
    - name: wlanapi
    - command: wlanapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2365:
    - name: wldap32
    - command: wldap32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2366:
    - name: wlnotify
    - command: wlnotify.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2367:
    - name: WMADMOD
    - command: WMADMOD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2368:
    - name: WMADMOE
    - command: WMADMOE.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2369:
    - name: wmasf
    - command: wmasf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2370:
    - name: wmaudsdk
    - command: wmaudsdk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2371:
    - name: wmdmlog
    - command: wmdmlog.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2372:
    - name: wmdmps
    - command: wmdmps.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2373:
    - name: wmdrmdev
    - command: wmdrmdev.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2374:
    - name: wmdrmnet
    - command: wmdrmnet.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2375:
    - name: wmdrmsdk
    - command: wmdrmsdk.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2376:
    - name: wmerrenu
    - command: wmerrenu.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2377:
    - name: wmerror
    - command: wmerror.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2378:
    - name: wmi
    - command: wmi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2379:
    - name: wmidx
    - command: wmidx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2380:
    - name: wmidx
    - command: wmidx.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2381:
    - name: wmimgmt
    - command: wmimgmt.msc
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2382:
    - name: wmiprop
    - command: wmiprop.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2383:
    - name: wmiscmgr
    - command: wmiscmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2384:
    - name: WMNetmgr
    - command: WMNetmgr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2385:
    - name: wmp
    - command: wmp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2386:
    - name: wmp
    - command: wmp.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2387:
    - name: wmpasf
    - command: wmpasf.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2388:
    - name: wmpcd
    - command: wmpcd.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2389:
    - name: wmpcore
    - command: wmpcore.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2390:
    - name: wmpdxm
    - command: wmpdxm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2391:
    - name: wmpeffects
    - command: wmpeffects.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2392:
    - name: wmpencen
    - command: wmpencen.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2393:
    - name: wmphoto
    - command: wmphoto.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2394:
    - name: wmploc
    - command: wmploc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2395:
    - name: wmpmde
    - command: wmpmde.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2396:
    - name: wmpns
    - command: wmpns.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2397:
    - name: wmpps
    - command: wmpps.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2398:
    - name: wmpscheme
    - command: wmpscheme.xml
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2399:
    - name: wmpshell
    - command: wmpshell.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2400:
    - name: wmpsrcwp
    - command: wmpsrcwp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2401:
    - name: wmpstub
    - command: wmpstub.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2402:
    - name: wmpui
    - command: wmpui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2403:
    - name: wmsdmod
    - command: wmsdmod.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2404:
    - name: wmsdmoe
    - command: wmsdmoe.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2405:
    - name: wmsdmoe2
    - command: wmsdmoe2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2406:
    - name: wmspdmod
    - command: wmspdmod.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2407:
    - name: WMSPDMOE
    - command: WMSPDMOE.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2408:
    - name: wmstream
    - command: wmstream.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2409:
    - name: wmv8dmod
    - command: wmv8dmod.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2410:
    - name: wmv8ds32
    - command: wmv8ds32.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2411:
    - name: WMVADVD
    - command: WMVADVD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2412:
    - name: WMVADVE
    - command: WMVADVE.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2413:
    - name: WMVCore
    - command: WMVCore.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2414:
    - name: wmvdecod
    - command: wmvdecod.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2415:
    - name: wmvdmod
    - command: wmvdmod.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2416:
    - name: wmvdmoe
    - command: wmvdmoe.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2417:
    - name: wmvdmoe2
    - command: wmvdmoe2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2418:
    - name: wmvds32
    - command: wmvds32.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2419:
    - name: WMVENCOD
    - command: WMVENCOD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2420:
    - name: WMVSDECD
    - command: WMVSDECD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2421:
    - name: WMVSENCD
    - command: WMVSENCD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2422:
    - name: WMVXENCD
    - command: WMVXENCD.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2423:
    - name: WNASPI32
    - command: WNASPI32.DLL
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2424:
    - name: wow32
    - command: wow32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2425:
    - name: wowdeb
    - command: wowdeb.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2426:
    - name: wowexec
    - command: wowexec.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2427:
    - name: wowfax
    - command: wowfax.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2428:
    - name: wowfaxui
    - command: wowfaxui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2429:
    - name: wpa
    - command: wpa.dbl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2430:
    - name: wpabaln
    - command: wpabaln.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2431:
    - name: wpdconns
    - command: wpdconns.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2432:
    - name: wpdmtp
    - command: wpdmtp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2433:
    - name: wpdmtpus
    - command: wpdmtpus.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2434:
    - name: WpdShext
    - command: WpdShext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2435:
    - name: wpdshextautoplay
    - command: wpdshextautoplay.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2436:
    - name: wpdshextres
    - command: wpdshextres.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2437:
    - name: WPDShServiceObj
    - command: WPDShServiceObj.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2438:
    - name: wpdsp
    - command: wpdsp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2439:
    - name: wpd_ci
    - command: wpd_ci.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2440:
    - name: wpnpinst
    - command: wpnpinst.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2441:
    - name: write
    - command: write.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2442:
    - name: ws2help
    - command: ws2help.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2443:
    - name: ws2_32
    - command: ws2_32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2444:
    - name: wscntfy
    - command: wscntfy.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2445:
    - name: wscript
    - command: wscript.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2446:
    - name: wscsvc
    - command: wscsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2447:
    - name: wscui
    - command: wscui.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2448:
    - name: wsecedit
    - command: wsecedit.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2449:
    - name: wshatm
    - command: wshatm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2450:
    - name: wshbth
    - command: wshbth.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2451:
    - name: wshcon
    - command: wshcon.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2452:
    - name: wshext
    - command: wshext.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2453:
    - name: wship6
    - command: wship6.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2454:
    - name: wshisn
    - command: wshisn.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2455:
    - name: wshnetbs
    - command: wshnetbs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2456:
    - name: wshom
    - command: wshom.ocx
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2457:
    - name: wshrm
    - command: wshrm.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2458:
    - name: wshtcpip
    - command: wshtcpip.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2459:
    - name: wsmanhttpconfig
    - command: wsmanhttpconfig.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2460:
    - name: WsmAuto
    - command: WsmAuto.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2461:
    - name: wsmplpxy
    - command: wsmplpxy.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2462:
    - name: wsmprovhost
    - command: wsmprovhost.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2463:
    - name: WsmPty
    - command: WsmPty.xsl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2464:
    - name: WsmRes
    - command: WsmRes.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2465:
    - name: WsmSvc
    - command: WsmSvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2466:
    - name: WsmTxt
    - command: WsmTxt.xsl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2467:
    - name: WsmWmiPl
    - command: WsmWmiPl.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2468:
    - name: wsnmp32
    - command: wsnmp32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2469:
    - name: wsock32
    - command: wsock32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2470:
    - name: wstdecod
    - command: wstdecod.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2471:
    - name: wstpager
    - command: wstpager.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2472:
    - name: wstrenderer
    - command: wstrenderer.ax
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2473:
    - name: wtsapi32
    - command: wtsapi32.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2474:
    - name: wuapi
    - command: wuapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2475:
    - name: wuapi.dll
    - command: wuapi.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2476:
    - name: wuauclt
    - command: wuauclt.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2477:
    - name: wuauclt1
    - command: wuauclt1.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2478:
    - name: wuaucpl
    - command: wuaucpl.cpl
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2479:
    - name: wuaucpl.cpl
    - command: wuaucpl.cpl.manifest
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2480:
    - name: wuaucpl.cpl
    - command: wuaucpl.cpl.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2481:
    - name: wuaueng
    - command: wuaueng.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2482:
    - name: wuaueng.dll
    - command: wuaueng.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2483:
    - name: wuaueng1
    - command: wuaueng1.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2484:
    - name: wuauserv
    - command: wuauserv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2485:
    - name: wucltui
    - command: wucltui.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2486:
    - name: wucltui.dll
    - command: wucltui.dll.mui
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2487:
    - name: WUDFCoinstaller
    - command: WUDFCoinstaller.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2488:
    - name: WudfHost
    - command: WudfHost.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2489:
    - name: WudfPlatform
    - command: WudfPlatform.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2490:
    - name: WudfSvc
    - command: WudfSvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2491:
    - name: WUDFUpdate_01009
    - command: WUDFUpdate_01009.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2492:
    - name: WUDFx
    - command: WUDFx.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2493:
    - name: wupdmgr
    - command: wupdmgr.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2494:
    - name: wups
    - command: wups.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2495:
    - name: wups2
    - command: wups2.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2496:
    - name: wuweb
    - command: wuweb.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2497:
    - name: wzcdlg
    - command: wzcdlg.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2498:
    - name: wzcsapi
    - command: wzcsapi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2499:
    - name: wzcsvc
    - command: wzcsvc.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2500:
    - name: xactsrv
    - command: xactsrv.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2501:
    - name: xcopy
    - command: xcopy.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2502:
    - name: xenroll
    - command: xenroll.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2503:
    - name: xmlfilter
    - command: xmlfilter.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2504:
    - name: xmllite
    - command: xmllite.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2505:
    - name: xmlprov
    - command: xmlprov.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2506:
    - name: xmlprovi
    - command: xmlprovi.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2507:
    - name: xolehlp
    - command: xolehlp.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2508:
    - name: xpob2res
    - command: xpob2res.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2509:
    - name: xpsp1res
    - command: xpsp1res.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2510:
    - name: xpsp2res
    - command: xpsp2res.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2511:
    - name: xpsp3res
    - command: xpsp3res.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2512:
    - name: xpsp4res
    - command: xpsp4res.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2513:
    - name: xpsshhdr
    - command: xpsshhdr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2514:
    - name: xpssvcs
    - command: xpssvcs.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2515:
    - name: xp_eos
    - command: xp_eos.exe
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2516:
    - name: zipfldr
    - command: zipfldr.dll
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2517:
    - name: _upd
    - command: _upd.log
    - location: Startup
    - user: NT AUTHORITY\SYSTEM
  - 2518:
    - name: CTFMON.EXE
    - command: C:\WINDOWS\System32\CTFMON.EXE
    - location: HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: NT AUTHORITY\SYSTEM
  - 2519:
    - name: DWQueuedReporting
    - command: "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
    - location: HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: NT AUTHORITY\SYSTEM
  - 2520:
    - name: CTFMON.EXE
    - command: C:\WINDOWS\System32\CTFMON.EXE
    - location: HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: NT AUTHORITY\LOCAL SERVICE
  - 2521:
    - name: CTFMON.EXE
    - command: C:\WINDOWS\System32\CTFMON.EXE
    - location: HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: NT AUTHORITY\NETWORK SERVICE
  - 2522:
    - name: desktop
    - command: desktop.ini
    - location: Startup
    - user: BUSINESS\Susan
  - 2523:
    - name: ctfmon.exe
    - command: C:\WINDOWS\system32\ctfmon.exe
    - location: HKU\S-1-5-21-1547161642-884357618-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: BUSINESS\Susan
  - 2524:
    - name: EPLTarget\P0000000000000001
    - command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_TATITAE.EXE /EPT "EPLTarget\P0000000000000001" /M "XP-8500 Series" /EF "HKCU"
    - location: HKU\S-1-5-21-1547161642-884357618-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: BUSINESS\Susan
  - 2525:
    - name: EPLTarget\P0000000000000000
    - command: C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_TATITAE.EXE /EPT "EPLTarget\P0000000000000000" /M "XP-8500 Series" /EF "HKCU"
    - location: HKU\S-1-5-21-1547161642-884357618-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: BUSINESS\Susan
  - 2526:
    - name: $winnt$
    - command: $winnt$.inf
    - location: Startup
    - user: .DEFAULT
  - 2527:
    - name: 12520437
    - command: 12520437.cpx
    - location: Startup
    - user: .DEFAULT
  - 2528:
    - name: 12520850
    - command: 12520850.cpx
    - location: Startup
    - user: .DEFAULT
  - 2529:
    - name: 3DViewer
    - command: 3DViewer.dll
    - location: Startup
    - user: .DEFAULT
  - 2530:
    - name: 6to4svc
    - command: 6to4svc.dll
    - location: Startup
    - user: .DEFAULT
  - 2531:
    - name: 9B13A86D
    - command: 9B13A86D.plf
    - location: Startup
    - user: .DEFAULT
  - 2532:
    - name: aaaamon
    - command: aaaamon.dll
    - location: Startup
    - user: .DEFAULT
  - 2533:
    - name: aaclient
    - command: aaclient.dll
    - location: Startup
    - user: .DEFAULT
  - 2534:
    - name: access
    - command: access.cpl
    - location: Startup
    - user: .DEFAULT
  - 2535:
    - name: acctres
    - command: acctres.dll
    - location: Startup
    - user: .DEFAULT
  - 2536:
    - name: accwiz
    - command: accwiz.exe
    - location: Startup
    - user: .DEFAULT
  - 2537:
    - name: acelpdec
    - command: acelpdec.ax
    - location: Startup
    - user: .DEFAULT
  - 2538:
    - name: acledit
    - command: acledit.dll
    - location: Startup
    - user: .DEFAULT
  - 2539:
    - name: aclui
    - command: aclui.dll
    - location: Startup
    - user: .DEFAULT
  - 2540:
    - name: ActionCenterForms
    - command: ActionCenterForms.dll
    - location: Startup
    - user: .DEFAULT
  - 2541:
    - name: activeds
    - command: activeds.dll
    - location: Startup
    - user: .DEFAULT
  - 2542:
    - name: activeds
    - command: activeds.tlb
    - location: Startup
    - user: .DEFAULT
  - 2543:
    - name: actmovie
    - command: actmovie.exe
    - location: Startup
    - user: .DEFAULT
  - 2544:
    - name: actxprxy
    - command: actxprxy.dll
    - location: Startup
    - user: .DEFAULT
  - 2545:
    - name: admparse
    - command: admparse.dll
    - location: Startup
    - user: .DEFAULT
  - 2546:
    - name: adptif
    - command: adptif.dll
    - location: Startup
    - user: .DEFAULT
  - 2547:
    - name: adsldp
    - command: adsldp.dll
    - location: Startup
    - user: .DEFAULT
  - 2548:
    - name: adsldpc
    - command: adsldpc.dll
    - location: Startup
    - user: .DEFAULT
  - 2549:
    - name: adsmsext
    - command: adsmsext.dll
    - location: Startup
    - user: .DEFAULT
  - 2550:
    - name: adsnds
    - command: adsnds.dll
    - location: Startup
    - user: .DEFAULT
  - 2551:
    - name: adsnt
    - command: adsnt.dll
    - location: Startup
    - user: .DEFAULT
  - 2552:
    - name: adsnw
    - command: adsnw.dll
    - location: Startup
    - user: .DEFAULT
  - 2553:
    - name: advapi32
    - command: advapi32.dll
    - location: Startup
    - user: .DEFAULT
  - 2554:
    - name: advpack
    - command: advpack.dll
    - location: Startup
    - user: .DEFAULT
  - 2555:
    - name: advpack.dll
    - command: advpack.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 2556:
    - name: ahui
    - command: ahui.exe
    - location: Startup
    - user: .DEFAULT
  - 2557:
    - name: Alert
    - command: Alert.bmp
    - location: Startup
    - user: .DEFAULT
  - 2558:
    - name: alg
    - command: alg.exe
    - location: Startup
    - user: .DEFAULT
  - 2559:
    - name: alrsvc
    - command: alrsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 2560:
    - name: ALSNDMGR
    - command: ALSNDMGR.CPL
    - location: Startup
    - user: .DEFAULT
  - 2561:
    - name: amcompat
    - command: amcompat.tlb
    - location: Startup
    - user: .DEFAULT
  - 2562:
    - name: amdpcom32
    - command: amdpcom32.dll
    - location: Startup
    - user: .DEFAULT
  - 2563:
    - name: amstream
    - command: amstream.dll
    - location: Startup
    - user: .DEFAULT
  - 2564:
    - name: ansi
    - command: ansi.sys
    - location: Startup
    - user: .DEFAULT
  - 2565:
    - name: apcups
    - command: apcups.dll
    - location: Startup
    - user: .DEFAULT
  - 2566:
    - name: append
    - command: append.exe
    - location: Startup
    - user: .DEFAULT
  - 2567:
    - name: apphelp
    - command: apphelp.dll
    - location: Startup
    - user: .DEFAULT
  - 2568:
    - name: appmgmts
    - command: appmgmts.dll
    - location: Startup
    - user: .DEFAULT
  - 2569:
    - name: appmgr
    - command: appmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 2570:
    - name: appwiz
    - command: appwiz.cpl
    - location: Startup
    - user: .DEFAULT
  - 2571:
    - name: app_filter_ui
    - command: app_filter_ui.log
    - location: Startup
    - user: .DEFAULT
  - 2572:
    - name: arp
    - command: arp.exe
    - location: Startup
    - user: .DEFAULT
  - 2573:
    - name: asctrls
    - command: asctrls.ocx
    - location: Startup
    - user: .DEFAULT
  - 2574:
    - name: asferror
    - command: asferror.dll
    - location: Startup
    - user: .DEFAULT
  - 2575:
    - name: asfsipc
    - command: asfsipc.dll
    - location: Startup
    - user: .DEFAULT
  - 2576:
    - name: asr_fmt
    - command: asr_fmt.exe
    - location: Startup
    - user: .DEFAULT
  - 2577:
    - name: asr_ldm
    - command: asr_ldm.exe
    - location: Startup
    - user: .DEFAULT
  - 2578:
    - name: asr_pfu
    - command: asr_pfu.exe
    - location: Startup
    - user: .DEFAULT
  - 2579:
    - name: AsusSetup
    - command: AsusSetup.exe
    - location: Startup
    - user: .DEFAULT
  - 2580:
    - name: AsusSetup
    - command: AsusSetup.ini
    - location: Startup
    - user: .DEFAULT
  - 2581:
    - name: asycfilt
    - command: asycfilt.dll
    - location: Startup
    - user: .DEFAULT
  - 2582:
    - name: at
    - command: at.exe
    - location: Startup
    - user: .DEFAULT
  - 2583:
    - name: ati2cqag
    - command: ati2cqag.dll
    - location: Startup
    - user: .DEFAULT
  - 2584:
    - name: ati2dvaa
    - command: ati2dvaa.dll
    - location: Startup
    - user: .DEFAULT
  - 2585:
    - name: ati2dvag
    - command: ati2dvag.dll
    - location: Startup
    - user: .DEFAULT
  - 2586:
    - name: ati2edxx
    - command: ati2edxx.dll
    - location: Startup
    - user: .DEFAULT
  - 2587:
    - name: ati2evxx
    - command: ati2evxx.dll
    - location: Startup
    - user: .DEFAULT
  - 2588:
    - name: ati2evxx
    - command: ati2evxx.exe
    - location: Startup
    - user: .DEFAULT
  - 2589:
    - name: Ati2mdxx
    - command: Ati2mdxx.exe
    - location: Startup
    - user: .DEFAULT
  - 2590:
    - name: ati3d1ag
    - command: ati3d1ag.dll
    - location: Startup
    - user: .DEFAULT
  - 2591:
    - name: ati3duag
    - command: ati3duag.dll
    - location: Startup
    - user: .DEFAULT
  - 2592:
    - name: atiadlxx
    - command: atiadlxx.dll
    - location: Startup
    - user: .DEFAULT
  - 2593:
    - name: atiapfxx
    - command: atiapfxx.blb
    - location: Startup
    - user: .DEFAULT
  - 2594:
    - name: atiapfxx
    - command: atiapfxx.exe
    - location: Startup
    - user: .DEFAULT
  - 2595:
    - name: atibtmon
    - command: atibtmon.exe
    - location: Startup
    - user: .DEFAULT
  - 2596:
    - name: ATIDDC
    - command: ATIDDC.DLL
    - location: Startup
    - user: .DEFAULT
  - 2597:
    - name: ATIDEMGX
    - command: ATIDEMGX.dll
    - location: Startup
    - user: .DEFAULT
  - 2598:
    - name: atiicdxx
    - command: atiicdxx.dat
    - location: Startup
    - user: .DEFAULT
  - 2599:
    - name: atiiiexx
    - command: atiiiexx.dll
    - location: Startup
    - user: .DEFAULT
  - 2600:
    - name: atikvmag
    - command: atikvmag.dll
    - location: Startup
    - user: .DEFAULT
  - 2601:
    - name: atimpc32
    - command: atimpc32.dll
    - location: Startup
    - user: .DEFAULT
  - 2602:
    - name: ATIODCLI
    - command: ATIODCLI.exe
    - location: Startup
    - user: .DEFAULT
  - 2603:
    - name: ATIODE
    - command: ATIODE.exe
    - location: Startup
    - user: .DEFAULT
  - 2604:
    - name: atioglxx
    - command: atioglxx.dll
    - location: Startup
    - user: .DEFAULT
  - 2605:
    - name: atiok3x2
    - command: atiok3x2.dll
    - location: Startup
    - user: .DEFAULT
  - 2606:
    - name: atipdlxx
    - command: atipdlxx.dll
    - location: Startup
    - user: .DEFAULT
  - 2607:
    - name: atitvo32
    - command: atitvo32.dll
    - location: Startup
    - user: .DEFAULT
  - 2608:
    - name: ativcoxx
    - command: ativcoxx.dll
    - location: Startup
    - user: .DEFAULT
  - 2609:
    - name: ativdaxx
    - command: ativdaxx.ax
    - location: Startup
    - user: .DEFAULT
  - 2610:
    - name: ativmvxx
    - command: ativmvxx.ax
    - location: Startup
    - user: .DEFAULT
  - 2611:
    - name: ativtmxx
    - command: ativtmxx.dll
    - location: Startup
    - user: .DEFAULT
  - 2612:
    - name: ativva5x
    - command: ativva5x.dat
    - location: Startup
    - user: .DEFAULT
  - 2613:
    - name: ativva6x
    - command: ativva6x.dat
    - location: Startup
    - user: .DEFAULT
  - 2614:
    - name: ativvamv
    - command: ativvamv.dll
    - location: Startup
    - user: .DEFAULT
  - 2615:
    - name: ativvaxx
    - command: ativvaxx.cap
    - location: Startup
    - user: .DEFAULT
  - 2616:
    - name: ativvaxx
    - command: ativvaxx.dll
    - location: Startup
    - user: .DEFAULT
  - 2617:
    - name: atkctrs
    - command: atkctrs.dll
    - location: Startup
    - user: .DEFAULT
  - 2618:
    - name: atl
    - command: atl.dll
    - location: Startup
    - user: .DEFAULT
  - 2619:
    - name: atl100
    - command: atl100.dll
    - location: Startup
    - user: .DEFAULT
  - 2620:
    - name: atl110
    - command: atl110.dll
    - location: Startup
    - user: .DEFAULT
  - 2621:
    - name: atmadm
    - command: atmadm.exe
    - location: Startup
    - user: .DEFAULT
  - 2622:
    - name: atmfd
    - command: atmfd.dll
    - location: Startup
    - user: .DEFAULT
  - 2623:
    - name: atmlib
    - command: atmlib.dll
    - location: Startup
    - user: .DEFAULT
  - 2624:
    - name: atmpvcno
    - command: atmpvcno.dll
    - location: Startup
    - user: .DEFAULT
  - 2625:
    - name: atrace
    - command: atrace.dll
    - location: Startup
    - user: .DEFAULT
  - 2626:
    - name: attrib
    - command: attrib.exe
    - location: Startup
    - user: .DEFAULT
  - 2627:
    - name: audiodev
    - command: audiodev.dll
    - location: Startup
    - user: .DEFAULT
  - 2628:
    - name: audiosrv
    - command: audiosrv.dll
    - location: Startup
    - user: .DEFAULT
  - 2629:
    - name: auditusr
    - command: auditusr.exe
    - location: Startup
    - user: .DEFAULT
  - 2630:
    - name: authz
    - command: authz.dll
    - location: Startup
    - user: .DEFAULT
  - 2631:
    - name: autochk
    - command: autochk.exe
    - location: Startup
    - user: .DEFAULT
  - 2632:
    - name: autoconv
    - command: autoconv.exe
    - location: Startup
    - user: .DEFAULT
  - 2633:
    - name: autodisc
    - command: autodisc.dll
    - location: Startup
    - user: .DEFAULT
  - 2634:
    - name: AUTOEXEC
    - command: AUTOEXEC.NT
    - location: Startup
    - user: .DEFAULT
  - 2635:
    - name: autofmt
    - command: autofmt.exe
    - location: Startup
    - user: .DEFAULT
  - 2636:
    - name: autolfn
    - command: autolfn.exe
    - location: Startup
    - user: .DEFAULT
  - 2637:
    - name: avicap
    - command: avicap.dll
    - location: Startup
    - user: .DEFAULT
  - 2638:
    - name: avicap32
    - command: avicap32.dll
    - location: Startup
    - user: .DEFAULT
  - 2639:
    - name: avifil32
    - command: avifil32.dll
    - location: Startup
    - user: .DEFAULT
  - 2640:
    - name: avifile
    - command: avifile.dll
    - location: Startup
    - user: .DEFAULT
  - 2641:
    - name: avmeter
    - command: avmeter.dll
    - location: Startup
    - user: .DEFAULT
  - 2642:
    - name: avtapi
    - command: avtapi.dll
    - location: Startup
    - user: .DEFAULT
  - 2643:
    - name: avwav
    - command: avwav.dll
    - location: Startup
    - user: .DEFAULT
  - 2644:
    - name: axaltocm
    - command: axaltocm.dll
    - location: Startup
    - user: .DEFAULT
  - 2645:
    - name: azroles
    - command: azroles.dll
    - location: Startup
    - user: .DEFAULT
  - 2646:
    - name: basecsp
    - command: basecsp.dll
    - location: Startup
    - user: .DEFAULT
  - 2647:
    - name: basesrv
    - command: basesrv.dll
    - location: Startup
    - user: .DEFAULT
  - 2648:
    - name: batmeter
    - command: batmeter.dll
    - location: Startup
    - user: .DEFAULT
  - 2649:
    - name: batt
    - command: batt.dll
    - location: Startup
    - user: .DEFAULT
  - 2650:
    - name: bcsprsrc
    - command: bcsprsrc.dll
    - location: Startup
    - user: .DEFAULT
  - 2651:
    - name: bdco1
    - command: bdco1.dll
    - location: Startup
    - user: .DEFAULT
  - 2652:
    - name: bdco1ins
    - command: bdco1ins.dll
    - location: Startup
    - user: .DEFAULT
  - 2653:
    - name: bidispl
    - command: bidispl.dll
    - location: Startup
    - user: .DEFAULT
  - 2654:
    - name: bios1
    - command: bios1.rom
    - location: Startup
    - user: .DEFAULT
  - 2655:
    - name: bios4
    - command: bios4.rom
    - location: Startup
    - user: .DEFAULT
  - 2656:
    - name: bitsprx2
    - command: bitsprx2.dll
    - location: Startup
    - user: .DEFAULT
  - 2657:
    - name: bitsprx3
    - command: bitsprx3.dll
    - location: Startup
    - user: .DEFAULT
  - 2658:
    - name: bitsprx4
    - command: bitsprx4.dll
    - location: Startup
    - user: .DEFAULT
  - 2659:
    - name: blackbox
    - command: blackbox.dll
    - location: Startup
    - user: .DEFAULT
  - 2660:
    - name: blastcln
    - command: blastcln.exe
    - location: Startup
    - user: .DEFAULT
  - 2661:
    - name: bootcfg
    - command: bootcfg.exe
    - location: Startup
    - user: .DEFAULT
  - 2662:
    - name: bootok
    - command: bootok.exe
    - location: Startup
    - user: .DEFAULT
  - 2663:
    - name: bootvid
    - command: bootvid.dll
    - location: Startup
    - user: .DEFAULT
  - 2664:
    - name: bootvrfy
    - command: bootvrfy.exe
    - location: Startup
    - user: .DEFAULT
  - 2665:
    - name: bopomofo
    - command: bopomofo.uce
    - location: Startup
    - user: .DEFAULT
  - 2666:
    - name: browselc
    - command: browselc.dll
    - location: Startup
    - user: .DEFAULT
  - 2667:
    - name: browser
    - command: browser.dll
    - location: Startup
    - user: .DEFAULT
  - 2668:
    - name: browserchoice
    - command: browserchoice.exe
    - location: Startup
    - user: .DEFAULT
  - 2669:
    - name: browseui
    - command: browseui.dll
    - location: Startup
    - user: .DEFAULT
  - 2670:
    - name: browsewm
    - command: browsewm.dll
    - location: Startup
    - user: .DEFAULT
  - 2671:
    - name: bthci
    - command: bthci.dll
    - location: Startup
    - user: .DEFAULT
  - 2672:
    - name: bthprops
    - command: bthprops.cpl
    - location: Startup
    - user: .DEFAULT
  - 2673:
    - name: bthserv
    - command: bthserv.dll
    - location: Startup
    - user: .DEFAULT
  - 2674:
    - name: btpanui
    - command: btpanui.dll
    - location: Startup
    - user: .DEFAULT
  - 2675:
    - name: BuzzingBee
    - command: BuzzingBee.wav
    - location: Startup
    - user: .DEFAULT
  - 2676:
    - name: cabinet
    - command: cabinet.dll
    - location: Startup
    - user: .DEFAULT
  - 2677:
    - name: cabview
    - command: cabview.dll
    - location: Startup
    - user: .DEFAULT
  - 2678:
    - name: cacls
    - command: cacls.exe
    - location: Startup
    - user: .DEFAULT
  - 2679:
    - name: calc
    - command: calc.exe
    - location: Startup
    - user: .DEFAULT
  - 2680:
    - name: camocx
    - command: camocx.dll
    - location: Startup
    - user: .DEFAULT
  - 2681:
    - name: CapabilityTable
    - command: CapabilityTable.exe
    - location: Startup
    - user: .DEFAULT
  - 2682:
    - name: capesnpn
    - command: capesnpn.dll
    - location: Startup
    - user: .DEFAULT
  - 2683:
    - name: capicom
    - command: capicom.dll
    - location: Startup
    - user: .DEFAULT
  - 2684:
    - name: cards
    - command: cards.dll
    - location: Startup
    - user: .DEFAULT
  - 2685:
    - name: catsrv
    - command: catsrv.dll
    - location: Startup
    - user: .DEFAULT
  - 2686:
    - name: catsrvps
    - command: catsrvps.dll
    - location: Startup
    - user: .DEFAULT
  - 2687:
    - name: catsrvut
    - command: catsrvut.dll
    - location: Startup
    - user: .DEFAULT
  - 2688:
    - name: ccfgnt
    - command: ccfgnt.dll
    - location: Startup
    - user: .DEFAULT
  - 2689:
    - name: cdfview
    - command: cdfview.dll
    - location: Startup
    - user: .DEFAULT
  - 2690:
    - name: cdm
    - command: cdm.dll
    - location: Startup
    - user: .DEFAULT
  - 2691:
    - name: cdmodem
    - command: cdmodem.dll
    - location: Startup
    - user: .DEFAULT
  - 2692:
    - name: cdosys
    - command: cdosys.dll
    - location: Startup
    - user: .DEFAULT
  - 2693:
    - name: cdplayer.exe
    - command: cdplayer.exe.manifest
    - location: Startup
    - user: .DEFAULT
  - 2694:
    - name: certcli
    - command: certcli.dll
    - location: Startup
    - user: .DEFAULT
  - 2695:
    - name: certmgr
    - command: certmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 2696:
    - name: certmgr
    - command: certmgr.msc
    - location: Startup
    - user: .DEFAULT
  - 2697:
    - name: cewmdm
    - command: cewmdm.dll
    - location: Startup
    - user: .DEFAULT
  - 2698:
    - name: cfgbkend
    - command: cfgbkend.dll
    - location: Startup
    - user: .DEFAULT
  - 2699:
    - name: cfgmgr32
    - command: cfgmgr32.dll
    - location: Startup
    - user: .DEFAULT
  - 2700:
    - name: charmap
    - command: charmap.exe
    - location: Startup
    - user: .DEFAULT
  - 2701:
    - name: ChCfg
    - command: ChCfg.exe
    - location: Startup
    - user: .DEFAULT
  - 2702:
    - name: chcp
    - command: chcp.com
    - location: Startup
    - user: .DEFAULT
  - 2703:
    - name: chkdsk
    - command: chkdsk.exe
    - location: Startup
    - user: .DEFAULT
  - 2704:
    - name: chkntfs
    - command: chkntfs.exe
    - location: Startup
    - user: .DEFAULT
  - 2705:
    - name: ciadmin
    - command: ciadmin.dll
    - location: Startup
    - user: .DEFAULT
  - 2706:
    - name: ciadv
    - command: ciadv.msc
    - location: Startup
    - user: .DEFAULT
  - 2707:
    - name: cic
    - command: cic.dll
    - location: Startup
    - user: .DEFAULT
  - 2708:
    - name: cidaemon
    - command: cidaemon.exe
    - location: Startup
    - user: .DEFAULT
  - 2709:
    - name: ciodm
    - command: ciodm.dll
    - location: Startup
    - user: .DEFAULT
  - 2710:
    - name: cipher
    - command: cipher.exe
    - location: Startup
    - user: .DEFAULT
  - 2711:
    - name: cisvc
    - command: cisvc.exe
    - location: Startup
    - user: .DEFAULT
  - 2712:
    - name: ckcnv
    - command: ckcnv.exe
    - location: Startup
    - user: .DEFAULT
  - 2713:
    - name: clb
    - command: clb.dll
    - location: Startup
    - user: .DEFAULT
  - 2714:
    - name: clbcatex
    - command: clbcatex.dll
    - location: Startup
    - user: .DEFAULT
  - 2715:
    - name: clbcatq
    - command: clbcatq.dll
    - location: Startup
    - user: .DEFAULT
  - 2716:
    - name: cleanmgr
    - command: cleanmgr.exe
    - location: Startup
    - user: .DEFAULT
  - 2717:
    - name: cliconf
    - command: cliconf.chm
    - location: Startup
    - user: .DEFAULT
  - 2718:
    - name: cliconfg
    - command: cliconfg.dll
    - location: Startup
    - user: .DEFAULT
  - 2719:
    - name: cliconfg
    - command: cliconfg.exe
    - location: Startup
    - user: .DEFAULT
  - 2720:
    - name: cliconfg
    - command: cliconfg.rll
    - location: Startup
    - user: .DEFAULT
  - 2721:
    - name: clipbrd
    - command: clipbrd.exe
    - location: Startup
    - user: .DEFAULT
  - 2722:
    - name: clipsrv
    - command: clipsrv.exe
    - location: Startup
    - user: .DEFAULT
  - 2723:
    - name: clusapi
    - command: clusapi.dll
    - location: Startup
    - user: .DEFAULT
  - 2724:
    - name: cmcfg32
    - command: cmcfg32.dll
    - location: Startup
    - user: .DEFAULT
  - 2725:
    - name: cmd
    - command: cmd.exe
    - location: Startup
    - user: .DEFAULT
  - 2726:
    - name: cmdial32
    - command: cmdial32.dll
    - location: Startup
    - user: .DEFAULT
  - 2727:
    - name: cmdl32
    - command: cmdl32.exe
    - location: Startup
    - user: .DEFAULT
  - 2728:
    - name: cmdlib
    - command: cmdlib.wsc
    - location: Startup
    - user: .DEFAULT
  - 2729:
    - name: cmmgr32
    - command: cmmgr32.hlp
    - location: Startup
    - user: .DEFAULT
  - 2730:
    - name: cmmon32
    - command: cmmon32.exe
    - location: Startup
    - user: .DEFAULT
  - 2731:
    - name: cmos
    - command: cmos.ram
    - location: Startup
    - user: .DEFAULT
  - 2732:
    - name: cmpbk32
    - command: cmpbk32.dll
    - location: Startup
    - user: .DEFAULT
  - 2733:
    - name: cmprops
    - command: cmprops.dll
    - location: Startup
    - user: .DEFAULT
  - 2734:
    - name: cmsetacl
    - command: cmsetacl.dll
    - location: Startup
    - user: .DEFAULT
  - 2735:
    - name: cmstp
    - command: cmstp.exe
    - location: Startup
    - user: .DEFAULT
  - 2736:
    - name: cmutil
    - command: cmutil.dll
    - location: Startup
    - user: .DEFAULT
  - 2737:
    - name: cnbjmon
    - command: cnbjmon.dll
    - location: Startup
    - user: .DEFAULT
  - 2738:
    - name: cnetcfg
    - command: cnetcfg.dll
    - location: Startup
    - user: .DEFAULT
  - 2739:
    - name: cnvfat
    - command: cnvfat.dll
    - location: Startup
    - user: .DEFAULT
  - 2740:
    - name: colbact
    - command: colbact.dll
    - location: Startup
    - user: .DEFAULT
  - 2741:
    - name: comaddin
    - command: comaddin.dll
    - location: Startup
    - user: .DEFAULT
  - 2742:
    - name: comcat
    - command: comcat.dll
    - location: Startup
    - user: .DEFAULT
  - 2743:
    - name: comctl32
    - command: comctl32.dll
    - location: Startup
    - user: .DEFAULT
  - 2744:
    - name: comdlg32
    - command: comdlg32.dll
    - location: Startup
    - user: .DEFAULT
  - 2745:
    - name: comdlg32
    - command: comdlg32.ocx
    - location: Startup
    - user: .DEFAULT
  - 2746:
    - name: comm
    - command: comm.drv
    - location: Startup
    - user: .DEFAULT
  - 2747:
    - name: command
    - command: command.com
    - location: Startup
    - user: .DEFAULT
  - 2748:
    - name: commdlg
    - command: commdlg.dll
    - location: Startup
    - user: .DEFAULT
  - 2749:
    - name: comp
    - command: comp.exe
    - location: Startup
    - user: .DEFAULT
  - 2750:
    - name: compact
    - command: compact.exe
    - location: Startup
    - user: .DEFAULT
  - 2751:
    - name: compatui
    - command: compatui.dll
    - location: Startup
    - user: .DEFAULT
  - 2752:
    - name: compmgmt
    - command: compmgmt.msc
    - location: Startup
    - user: .DEFAULT
  - 2753:
    - name: compobj
    - command: compobj.dll
    - location: Startup
    - user: .DEFAULT
  - 2754:
    - name: compstui
    - command: compstui.dll
    - location: Startup
    - user: .DEFAULT
  - 2755:
    - name: comrepl
    - command: comrepl.dll
    - location: Startup
    - user: .DEFAULT
  - 2756:
    - name: comres
    - command: comres.dll
    - location: Startup
    - user: .DEFAULT
  - 2757:
    - name: comsdupd
    - command: comsdupd.exe
    - location: Startup
    - user: .DEFAULT
  - 2758:
    - name: comsnap
    - command: comsnap.dll
    - location: Startup
    - user: .DEFAULT
  - 2759:
    - name: comsvcs
    - command: comsvcs.dll
    - location: Startup
    - user: .DEFAULT
  - 2760:
    - name: comuid
    - command: comuid.dll
    - location: Startup
    - user: .DEFAULT
  - 2761:
    - name: CONFIG
    - command: CONFIG.NT
    - location: Startup
    - user: .DEFAULT
  - 2762:
    - name: CONFIG
    - command: CONFIG.TMP
    - location: Startup
    - user: .DEFAULT
  - 2763:
    - name: confmsp
    - command: confmsp.dll
    - location: Startup
    - user: .DEFAULT
  - 2764:
    - name: conime
    - command: conime.exe
    - location: Startup
    - user: .DEFAULT
  - 2765:
    - name: console
    - command: console.dll
    - location: Startup
    - user: .DEFAULT
  - 2766:
    - name: control
    - command: control.exe
    - location: Startup
    - user: .DEFAULT
  - 2767:
    - name: convert
    - command: convert.exe
    - location: Startup
    - user: .DEFAULT
  - 2768:
    - name: corpol
    - command: corpol.dll
    - location: Startup
    - user: .DEFAULT
  - 2769:
    - name: country
    - command: country.sys
    - location: Startup
    - user: .DEFAULT
  - 2770:
    - name: cpnprt2
    - command: cpnprt2.cid
    - location: Startup
    - user: .DEFAULT
  - 2771:
    - name: cpnprtuk
    - command: cpnprtuk.cid
    - location: Startup
    - user: .DEFAULT
  - 2772:
    - name: crash
    - command: crash
    - location: Startup
    - user: .DEFAULT
  - 2773:
    - name: credssp
    - command: credssp.dll
    - location: Startup
    - user: .DEFAULT
  - 2774:
    - name: credui
    - command: credui.dll
    - location: Startup
    - user: .DEFAULT
  - 2775:
    - name: crtdll
    - command: crtdll.dll
    - location: Startup
    - user: .DEFAULT
  - 2776:
    - name: crypt32
    - command: crypt32.dll
    - location: Startup
    - user: .DEFAULT
  - 2777:
    - name: cryptdlg
    - command: cryptdlg.dll
    - location: Startup
    - user: .DEFAULT
  - 2778:
    - name: cryptdll
    - command: cryptdll.dll
    - location: Startup
    - user: .DEFAULT
  - 2779:
    - name: cryptext
    - command: cryptext.dll
    - location: Startup
    - user: .DEFAULT
  - 2780:
    - name: cryptnet
    - command: cryptnet.dll
    - location: Startup
    - user: .DEFAULT
  - 2781:
    - name: cryptsvc
    - command: cryptsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 2782:
    - name: cryptui
    - command: cryptui.dll
    - location: Startup
    - user: .DEFAULT
  - 2783:
    - name: cscdll
    - command: cscdll.dll
    - location: Startup
    - user: .DEFAULT
  - 2784:
    - name: cscript
    - command: cscript.exe
    - location: Startup
    - user: .DEFAULT
  - 2785:
    - name: cscui
    - command: cscui.dll
    - location: Startup
    - user: .DEFAULT
  - 2786:
    - name: csrsrv
    - command: csrsrv.dll
    - location: Startup
    - user: .DEFAULT
  - 2787:
    - name: csrss
    - command: csrss.exe
    - location: Startup
    - user: .DEFAULT
  - 2788:
    - name: csseqchk
    - command: csseqchk.dll
    - location: Startup
    - user: .DEFAULT
  - 2789:
    - name: CtCamMgr
    - command: CtCamMgr.dll
    - location: Startup
    - user: .DEFAULT
  - 2790:
    - name: CtCamPin
    - command: CtCamPin.crl
    - location: Startup
    - user: .DEFAULT
  - 2791:
    - name: ctfmon
    - command: ctfmon.exe
    - location: Startup
    - user: .DEFAULT
  - 2792:
    - name: ctl3d32
    - command: ctl3d32.dll
    - location: Startup
    - user: .DEFAULT
  - 2793:
    - name: ctl3dv2
    - command: ctl3dv2.dll
    - location: Startup
    - user: .DEFAULT
  - 2794:
    - name: CtRegApp
    - command: CtRegApp.dll
    - location: Startup
    - user: .DEFAULT
  - 2795:
    - name: ctype
    - command: ctype.nls
    - location: Startup
    - user: .DEFAULT
  - 2796:
    - name: c_037
    - command: c_037.nls
    - location: Startup
    - user: .DEFAULT
  - 2797:
    - name: c_10000
    - command: c_10000.nls
    - location: Startup
    - user: .DEFAULT
  - 2798:
    - name: c_10006
    - command: c_10006.nls
    - location: Startup
    - user: .DEFAULT
  - 2799:
    - name: c_10007
    - command: c_10007.nls
    - location: Startup
    - user: .DEFAULT
  - 2800:
    - name: c_10010
    - command: c_10010.nls
    - location: Startup
    - user: .DEFAULT
  - 2801:
    - name: c_10017
    - command: c_10017.nls
    - location: Startup
    - user: .DEFAULT
  - 2802:
    - name: c_10029
    - command: c_10029.nls
    - location: Startup
    - user: .DEFAULT
  - 2803:
    - name: c_10079
    - command: c_10079.nls
    - location: Startup
    - user: .DEFAULT
  - 2804:
    - name: c_10081
    - command: c_10081.nls
    - location: Startup
    - user: .DEFAULT
  - 2805:
    - name: c_10082
    - command: c_10082.nls
    - location: Startup
    - user: .DEFAULT
  - 2806:
    - name: c_1026
    - command: c_1026.nls
    - location: Startup
    - user: .DEFAULT
  - 2807:
    - name: c_1250
    - command: c_1250.nls
    - location: Startup
    - user: .DEFAULT
  - 2808:
    - name: c_1251
    - command: c_1251.nls
    - location: Startup
    - user: .DEFAULT
  - 2809:
    - name: c_1252
    - command: c_1252.nls
    - location: Startup
    - user: .DEFAULT
  - 2810:
    - name: c_1253
    - command: c_1253.nls
    - location: Startup
    - user: .DEFAULT
  - 2811:
    - name: c_1254
    - command: c_1254.nls
    - location: Startup
    - user: .DEFAULT
  - 2812:
    - name: c_1255
    - command: c_1255.nls
    - location: Startup
    - user: .DEFAULT
  - 2813:
    - name: c_1256
    - command: c_1256.nls
    - location: Startup
    - user: .DEFAULT
  - 2814:
    - name: c_1257
    - command: c_1257.nls
    - location: Startup
    - user: .DEFAULT
  - 2815:
    - name: c_1258
    - command: c_1258.nls
    - location: Startup
    - user: .DEFAULT
  - 2816:
    - name: c_20127
    - command: c_20127.nls
    - location: Startup
    - user: .DEFAULT
  - 2817:
    - name: c_20261
    - command: c_20261.nls
    - location: Startup
    - user: .DEFAULT
  - 2818:
    - name: c_20866
    - command: c_20866.nls
    - location: Startup
    - user: .DEFAULT
  - 2819:
    - name: c_20905
    - command: c_20905.nls
    - location: Startup
    - user: .DEFAULT
  - 2820:
    - name: c_21866
    - command: c_21866.nls
    - location: Startup
    - user: .DEFAULT
  - 2821:
    - name: c_28591
    - command: c_28591.nls
    - location: Startup
    - user: .DEFAULT
  - 2822:
    - name: c_28592
    - command: c_28592.nls
    - location: Startup
    - user: .DEFAULT
  - 2823:
    - name: c_28593
    - command: c_28593.nls
    - location: Startup
    - user: .DEFAULT
  - 2824:
    - name: C_28594
    - command: C_28594.NLS
    - location: Startup
    - user: .DEFAULT
  - 2825:
    - name: C_28595
    - command: C_28595.NLS
    - location: Startup
    - user: .DEFAULT
  - 2826:
    - name: C_28597
    - command: C_28597.NLS
    - location: Startup
    - user: .DEFAULT
  - 2827:
    - name: c_28598
    - command: c_28598.nls
    - location: Startup
    - user: .DEFAULT
  - 2828:
    - name: c_28599
    - command: c_28599.nls
    - location: Startup
    - user: .DEFAULT
  - 2829:
    - name: c_28603
    - command: c_28603.nls
    - location: Startup
    - user: .DEFAULT
  - 2830:
    - name: c_28605
    - command: c_28605.nls
    - location: Startup
    - user: .DEFAULT
  - 2831:
    - name: c_437
    - command: c_437.nls
    - location: Startup
    - user: .DEFAULT
  - 2832:
    - name: c_500
    - command: c_500.nls
    - location: Startup
    - user: .DEFAULT
  - 2833:
    - name: c_737
    - command: c_737.nls
    - location: Startup
    - user: .DEFAULT
  - 2834:
    - name: c_775
    - command: c_775.nls
    - location: Startup
    - user: .DEFAULT
  - 2835:
    - name: c_850
    - command: c_850.nls
    - location: Startup
    - user: .DEFAULT
  - 2836:
    - name: c_852
    - command: c_852.nls
    - location: Startup
    - user: .DEFAULT
  - 2837:
    - name: c_855
    - command: c_855.nls
    - location: Startup
    - user: .DEFAULT
  - 2838:
    - name: c_857
    - command: c_857.nls
    - location: Startup
    - user: .DEFAULT
  - 2839:
    - name: c_860
    - command: c_860.nls
    - location: Startup
    - user: .DEFAULT
  - 2840:
    - name: c_861
    - command: c_861.nls
    - location: Startup
    - user: .DEFAULT
  - 2841:
    - name: c_863
    - command: c_863.nls
    - location: Startup
    - user: .DEFAULT
  - 2842:
    - name: c_865
    - command: c_865.nls
    - location: Startup
    - user: .DEFAULT
  - 2843:
    - name: c_866
    - command: c_866.nls
    - location: Startup
    - user: .DEFAULT
  - 2844:
    - name: c_869
    - command: c_869.nls
    - location: Startup
    - user: .DEFAULT
  - 2845:
    - name: c_874
    - command: c_874.nls
    - location: Startup
    - user: .DEFAULT
  - 2846:
    - name: c_875
    - command: c_875.nls
    - location: Startup
    - user: .DEFAULT
  - 2847:
    - name: c_932
    - command: c_932.nls
    - location: Startup
    - user: .DEFAULT
  - 2848:
    - name: c_936
    - command: c_936.nls
    - location: Startup
    - user: .DEFAULT
  - 2849:
    - name: c_949
    - command: c_949.nls
    - location: Startup
    - user: .DEFAULT
  - 2850:
    - name: c_950
    - command: c_950.nls
    - location: Startup
    - user: .DEFAULT
  - 2851:
    - name: d3d8
    - command: d3d8.dll
    - location: Startup
    - user: .DEFAULT
  - 2852:
    - name: d3d8caps
    - command: d3d8caps.dat
    - location: Startup
    - user: .DEFAULT
  - 2853:
    - name: d3d8thk
    - command: d3d8thk.dll
    - location: Startup
    - user: .DEFAULT
  - 2854:
    - name: d3d9
    - command: d3d9.dll
    - location: Startup
    - user: .DEFAULT
  - 2855:
    - name: d3d9caps
    - command: d3d9caps.dat
    - location: Startup
    - user: .DEFAULT
  - 2856:
    - name: d3dim
    - command: d3dim.dll
    - location: Startup
    - user: .DEFAULT
  - 2857:
    - name: d3dim700
    - command: d3dim700.dll
    - location: Startup
    - user: .DEFAULT
  - 2858:
    - name: d3dpmesh
    - command: d3dpmesh.dll
    - location: Startup
    - user: .DEFAULT
  - 2859:
    - name: d3dramp
    - command: d3dramp.dll
    - location: Startup
    - user: .DEFAULT
  - 2860:
    - name: d3drm
    - command: d3drm.dll
    - location: Startup
    - user: .DEFAULT
  - 2861:
    - name: d3dx9_27
    - command: d3dx9_27.dll
    - location: Startup
    - user: .DEFAULT
  - 2862:
    - name: d3dx9_32
    - command: d3dx9_32.dll
    - location: Startup
    - user: .DEFAULT
  - 2863:
    - name: D3DX9_37
    - command: D3DX9_37.dll
    - location: Startup
    - user: .DEFAULT
  - 2864:
    - name: D3DX9_38
    - command: D3DX9_38.dll
    - location: Startup
    - user: .DEFAULT
  - 2865:
    - name: d3dxof
    - command: d3dxof.dll
    - location: Startup
    - user: .DEFAULT
  - 2866:
    - name: danim
    - command: danim.dll
    - location: Startup
    - user: .DEFAULT
  - 2867:
    - name: dataclen
    - command: dataclen.dll
    - location: Startup
    - user: .DEFAULT
  - 2868:
    - name: datime
    - command: datime.dll
    - location: Startup
    - user: .DEFAULT
  - 2869:
    - name: Dav3_32
    - command: Dav3_32.dll
    - location: Startup
    - user: .DEFAULT
  - 2870:
    - name: davclnt
    - command: davclnt.dll
    - location: Startup
    - user: .DEFAULT
  - 2871:
    - name: daxctle
    - command: daxctle.ocx
    - location: Startup
    - user: .DEFAULT
  - 2872:
    - name: dbgeng
    - command: dbgeng.dll
    - location: Startup
    - user: .DEFAULT
  - 2873:
    - name: dbghelp
    - command: dbghelp.dll
    - location: Startup
    - user: .DEFAULT
  - 2874:
    - name: dbmsadsn
    - command: dbmsadsn.dll
    - location: Startup
    - user: .DEFAULT
  - 2875:
    - name: dbmsrpcn
    - command: dbmsrpcn.dll
    - location: Startup
    - user: .DEFAULT
  - 2876:
    - name: dbmsvinn
    - command: dbmsvinn.dLL
    - location: Startup
    - user: .DEFAULT
  - 2877:
    - name: dbnetlib
    - command: dbnetlib.dll
    - location: Startup
    - user: .DEFAULT
  - 2878:
    - name: dbnmpntw
    - command: dbnmpntw.dll
    - location: Startup
    - user: .DEFAULT
  - 2879:
    - name: dcache
    - command: dcache.bin
    - location: Startup
    - user: .DEFAULT
  - 2880:
    - name: dciman32
    - command: dciman32.dll
    - location: Startup
    - user: .DEFAULT
  - 2881:
    - name: dcomcnfg
    - command: dcomcnfg.exe
    - location: Startup
    - user: .DEFAULT
  - 2882:
    - name: ddeml
    - command: ddeml.dll
    - location: Startup
    - user: .DEFAULT
  - 2883:
    - name: ddeshare
    - command: ddeshare.exe
    - location: Startup
    - user: .DEFAULT
  - 2884:
    - name: ddraw
    - command: ddraw.dll
    - location: Startup
    - user: .DEFAULT
  - 2885:
    - name: ddrawex
    - command: ddrawex.dll
    - location: Startup
    - user: .DEFAULT
  - 2886:
    - name: debug
    - command: debug.exe
    - location: Startup
    - user: .DEFAULT
  - 2887:
    - name: defrag
    - command: defrag.exe
    - location: Startup
    - user: .DEFAULT
  - 2888:
    - name: desk
    - command: desk.cpl
    - location: Startup
    - user: .DEFAULT
  - 2889:
    - name: deskadp
    - command: deskadp.dll
    - location: Startup
    - user: .DEFAULT
  - 2890:
    - name: deskmon
    - command: deskmon.dll
    - location: Startup
    - user: .DEFAULT
  - 2891:
    - name: deskperf
    - command: deskperf.dll
    - location: Startup
    - user: .DEFAULT
  - 2892:
    - name: desktop
    - command: desktop.ini
    - location: Startup
    - user: .DEFAULT
  - 2893:
    - name: devenum
    - command: devenum.dll
    - location: Startup
    - user: .DEFAULT
  - 2894:
    - name: devmgmt
    - command: devmgmt.msc
    - location: Startup
    - user: .DEFAULT
  - 2895:
    - name: devmgr
    - command: devmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 2896:
    - name: dfrg
    - command: dfrg.msc
    - location: Startup
    - user: .DEFAULT
  - 2897:
    - name: dfrgfat
    - command: dfrgfat.exe
    - location: Startup
    - user: .DEFAULT
  - 2898:
    - name: dfrgntfs
    - command: dfrgntfs.exe
    - location: Startup
    - user: .DEFAULT
  - 2899:
    - name: dfrgres
    - command: dfrgres.dll
    - location: Startup
    - user: .DEFAULT
  - 2900:
    - name: dfrgsnap
    - command: dfrgsnap.dll
    - location: Startup
    - user: .DEFAULT
  - 2901:
    - name: dfrgui
    - command: dfrgui.dll
    - location: Startup
    - user: .DEFAULT
  - 2902:
    - name: dfshim
    - command: dfshim.dll
    - location: Startup
    - user: .DEFAULT
  - 2903:
    - name: dfsshlex
    - command: dfsshlex.dll
    - location: Startup
    - user: .DEFAULT
  - 2904:
    - name: dgnet
    - command: dgnet.dll
    - location: Startup
    - user: .DEFAULT
  - 2905:
    - name: dgrpsetu
    - command: dgrpsetu.dll
    - location: Startup
    - user: .DEFAULT
  - 2906:
    - name: dgsetup
    - command: dgsetup.dll
    - location: Startup
    - user: .DEFAULT
  - 2907:
    - name: dhcpcsvc
    - command: dhcpcsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 2908:
    - name: dhcpmon
    - command: dhcpmon.dll
    - location: Startup
    - user: .DEFAULT
  - 2909:
    - name: dhcpqec
    - command: dhcpqec.dll
    - location: Startup
    - user: .DEFAULT
  - 2910:
    - name: dhcpsapi
    - command: dhcpsapi.dll
    - location: Startup
    - user: .DEFAULT
  - 2911:
    - name: diactfrm
    - command: diactfrm.dll
    - location: Startup
    - user: .DEFAULT
  - 2912:
    - name: diantz
    - command: diantz.exe
    - location: Startup
    - user: .DEFAULT
  - 2913:
    - name: digest
    - command: digest.dll
    - location: Startup
    - user: .DEFAULT
  - 2914:
    - name: dimap
    - command: dimap.dll
    - location: Startup
    - user: .DEFAULT
  - 2915:
    - name: dimsntfy
    - command: dimsntfy.dll
    - location: Startup
    - user: .DEFAULT
  - 2916:
    - name: dimsroam
    - command: dimsroam.dll
    - location: Startup
    - user: .DEFAULT
  - 2917:
    - name: dinput
    - command: dinput.dll
    - location: Startup
    - user: .DEFAULT
  - 2918:
    - name: dinput8
    - command: dinput8.dll
    - location: Startup
    - user: .DEFAULT
  - 2919:
    - name: diskcomp
    - command: diskcomp.com
    - location: Startup
    - user: .DEFAULT
  - 2920:
    - name: diskcopy
    - command: diskcopy.com
    - location: Startup
    - user: .DEFAULT
  - 2921:
    - name: diskcopy
    - command: diskcopy.dll
    - location: Startup
    - user: .DEFAULT
  - 2922:
    - name: diskmgmt
    - command: diskmgmt.msc
    - location: Startup
    - user: .DEFAULT
  - 2923:
    - name: diskpart
    - command: diskpart.exe
    - location: Startup
    - user: .DEFAULT
  - 2924:
    - name: diskperf
    - command: diskperf.exe
    - location: Startup
    - user: .DEFAULT
  - 2925:
    - name: dispex
    - command: dispex.dll
    - location: Startup
    - user: .DEFAULT
  - 2926:
    - name: DLLAV32
    - command: DLLAV32.dll
    - location: Startup
    - user: .DEFAULT
  - 2927:
    - name: DLLAV32
    - command: DLLAV32.lib
    - location: Startup
    - user: .DEFAULT
  - 2928:
    - name: DLLCDA32
    - command: DLLCDA32.dll
    - location: Startup
    - user: .DEFAULT
  - 2929:
    - name: DLLCDF32
    - command: DLLCDF32.dll
    - location: Startup
    - user: .DEFAULT
  - 2930:
    - name: DLLCPY32
    - command: DLLCPY32.dll
    - location: Startup
    - user: .DEFAULT
  - 2931:
    - name: DLLDEV32
    - command: DLLDEV32.dll
    - location: Startup
    - user: .DEFAULT
  - 2932:
    - name: DLLDEV32i
    - command: DLLDEV32i.dll
    - location: Startup
    - user: .DEFAULT
  - 2933:
    - name: DLLDIR32
    - command: DLLDIR32.dll
    - location: Startup
    - user: .DEFAULT
  - 2934:
    - name: DLLDRV32
    - command: DLLDRV32.dll
    - location: Startup
    - user: .DEFAULT
  - 2935:
    - name: dllhost
    - command: dllhost.exe
    - location: Startup
    - user: .DEFAULT
  - 2936:
    - name: dllhst3g
    - command: dllhst3g.exe
    - location: Startup
    - user: .DEFAULT
  - 2937:
    - name: DLLIMG32
    - command: DLLIMG32.dll
    - location: Startup
    - user: .DEFAULT
  - 2938:
    - name: DLLIO32
    - command: DLLIO32.dll
    - location: Startup
    - user: .DEFAULT
  - 2939:
    - name: DLLISO32
    - command: DLLISO32.dll
    - location: Startup
    - user: .DEFAULT
  - 2940:
    - name: DLLIX
    - command: DLLIX.dll
    - location: Startup
    - user: .DEFAULT
  - 2941:
    - name: DLLMSC32
    - command: DLLMSC32.dll
    - location: Startup
    - user: .DEFAULT
  - 2942:
    - name: DLLPNT32
    - command: DLLPNT32.dll
    - location: Startup
    - user: .DEFAULT
  - 2943:
    - name: DLLPRF32
    - command: DLLPRF32.dll
    - location: Startup
    - user: .DEFAULT
  - 2944:
    - name: DLLPRJ32
    - command: DLLPRJ32.dll
    - location: Startup
    - user: .DEFAULT
  - 2945:
    - name: DLLPTL32
    - command: DLLPTL32.dll
    - location: Startup
    - user: .DEFAULT
  - 2946:
    - name: DLLRD32
    - command: DLLRD32.dll
    - location: Startup
    - user: .DEFAULT
  - 2947:
    - name: DLLRES32
    - command: DLLRES32.dll
    - location: Startup
    - user: .DEFAULT
  - 2948:
    - name: DLLTPO32
    - command: DLLTPO32.dll
    - location: Startup
    - user: .DEFAULT
  - 2949:
    - name: dmadmin
    - command: dmadmin.exe
    - location: Startup
    - user: .DEFAULT
  - 2950:
    - name: dmband
    - command: dmband.dll
    - location: Startup
    - user: .DEFAULT
  - 2951:
    - name: dmcompos
    - command: dmcompos.dll
    - location: Startup
    - user: .DEFAULT
  - 2952:
    - name: dmconfig
    - command: dmconfig.dll
    - location: Startup
    - user: .DEFAULT
  - 2953:
    - name: dmdlgs
    - command: dmdlgs.dll
    - location: Startup
    - user: .DEFAULT
  - 2954:
    - name: dmdskmgr
    - command: dmdskmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 2955:
    - name: dmdskres
    - command: dmdskres.dll
    - location: Startup
    - user: .DEFAULT
  - 2956:
    - name: dmime
    - command: dmime.dll
    - location: Startup
    - user: .DEFAULT
  - 2957:
    - name: dmintf
    - command: dmintf.dll
    - location: Startup
    - user: .DEFAULT
  - 2958:
    - name: dmloader
    - command: dmloader.dll
    - location: Startup
    - user: .DEFAULT
  - 2959:
    - name: dmocx
    - command: dmocx.dll
    - location: Startup
    - user: .DEFAULT
  - 2960:
    - name: dmremote
    - command: dmremote.exe
    - location: Startup
    - user: .DEFAULT
  - 2961:
    - name: dmscript
    - command: dmscript.dll
    - location: Startup
    - user: .DEFAULT
  - 2962:
    - name: dmserver
    - command: dmserver.dll
    - location: Startup
    - user: .DEFAULT
  - 2963:
    - name: dmstyle
    - command: dmstyle.dll
    - location: Startup
    - user: .DEFAULT
  - 2964:
    - name: dmsynth
    - command: dmsynth.dll
    - location: Startup
    - user: .DEFAULT
  - 2965:
    - name: dmusic
    - command: dmusic.dll
    - location: Startup
    - user: .DEFAULT
  - 2966:
    - name: dmutil
    - command: dmutil.dll
    - location: Startup
    - user: .DEFAULT
  - 2967:
    - name: dmview
    - command: dmview.ocx
    - location: Startup
    - user: .DEFAULT
  - 2968:
    - name: dns-sd
    - command: dns-sd.exe
    - location: Startup
    - user: .DEFAULT
  - 2969:
    - name: dnsapi
    - command: dnsapi.dll
    - location: Startup
    - user: .DEFAULT
  - 2970:
    - name: dnsrslvr
    - command: dnsrslvr.dll
    - location: Startup
    - user: .DEFAULT
  - 2971:
    - name: dnssd
    - command: dnssd.dll
    - location: Startup
    - user: .DEFAULT
  - 2972:
    - name: dnssdX
    - command: dnssdX.dll
    - location: Startup
    - user: .DEFAULT
  - 2973:
    - name: docprop
    - command: docprop.dll
    - location: Startup
    - user: .DEFAULT
  - 2974:
    - name: docprop2
    - command: docprop2.dll
    - location: Startup
    - user: .DEFAULT
  - 2975:
    - name: doskey
    - command: doskey.exe
    - location: Startup
    - user: .DEFAULT
  - 2976:
    - name: dosx
    - command: dosx.exe
    - location: Startup
    - user: .DEFAULT
  - 2977:
    - name: dot3api
    - command: dot3api.dll
    - location: Startup
    - user: .DEFAULT
  - 2978:
    - name: dot3cfg
    - command: dot3cfg.dll
    - location: Startup
    - user: .DEFAULT
  - 2979:
    - name: dot3dlg
    - command: dot3dlg.dll
    - location: Startup
    - user: .DEFAULT
  - 2980:
    - name: dot3gpclnt
    - command: dot3gpclnt.dll
    - location: Startup
    - user: .DEFAULT
  - 2981:
    - name: dot3msm
    - command: dot3msm.dll
    - location: Startup
    - user: .DEFAULT
  - 2982:
    - name: dot3svc
    - command: dot3svc.dll
    - location: Startup
    - user: .DEFAULT
  - 2983:
    - name: dot3ui
    - command: dot3ui.dll
    - location: Startup
    - user: .DEFAULT
  - 2984:
    - name: dpcdll
    - command: dpcdll.dll
    - location: Startup
    - user: .DEFAULT
  - 2985:
    - name: dplay
    - command: dplay.dll
    - location: Startup
    - user: .DEFAULT
  - 2986:
    - name: dplaysvr
    - command: dplaysvr.exe
    - location: Startup
    - user: .DEFAULT
  - 2987:
    - name: dplayx
    - command: dplayx.dll
    - location: Startup
    - user: .DEFAULT
  - 2988:
    - name: dpmodemx
    - command: dpmodemx.dll
    - location: Startup
    - user: .DEFAULT
  - 2989:
    - name: dpnaddr
    - command: dpnaddr.dll
    - location: Startup
    - user: .DEFAULT
  - 2990:
    - name: dpnet
    - command: dpnet.dll
    - location: Startup
    - user: .DEFAULT
  - 2991:
    - name: dpnhpast
    - command: dpnhpast.dll
    - location: Startup
    - user: .DEFAULT
  - 2992:
    - name: dpnhupnp
    - command: dpnhupnp.dll
    - location: Startup
    - user: .DEFAULT
  - 2993:
    - name: dpnlobby
    - command: dpnlobby.dll
    - location: Startup
    - user: .DEFAULT
  - 2994:
    - name: dpnmodem
    - command: dpnmodem.dll
    - location: Startup
    - user: .DEFAULT
  - 2995:
    - name: dpnsvr
    - command: dpnsvr.exe
    - location: Startup
    - user: .DEFAULT
  - 2996:
    - name: dpnwsock
    - command: dpnwsock.dll
    - location: Startup
    - user: .DEFAULT
  - 2997:
    - name: dpserial
    - command: dpserial.dll
    - location: Startup
    - user: .DEFAULT
  - 2998:
    - name: dpvacm
    - command: dpvacm.dll
    - location: Startup
    - user: .DEFAULT
  - 2999:
    - name: dpvoice
    - command: dpvoice.dll
    - location: Startup
    - user: .DEFAULT
  - 3000:
    - name: dpvsetup
    - command: dpvsetup.exe
    - location: Startup
    - user: .DEFAULT
  - 3001:
    - name: dpvvox
    - command: dpvvox.dll
    - location: Startup
    - user: .DEFAULT
  - 3002:
    - name: dpwsock
    - command: dpwsock.dll
    - location: Startup
    - user: .DEFAULT
  - 3003:
    - name: dpwsockx
    - command: dpwsockx.dll
    - location: Startup
    - user: .DEFAULT
  - 3004:
    - name: driverquery
    - command: driverquery.exe
    - location: Startup
    - user: .DEFAULT
  - 3005:
    - name: drmclien
    - command: drmclien.dll
    - location: Startup
    - user: .DEFAULT
  - 3006:
    - name: drmstor
    - command: drmstor.dll
    - location: Startup
    - user: .DEFAULT
  - 3007:
    - name: drmupgds
    - command: drmupgds.exe
    - location: Startup
    - user: .DEFAULT
  - 3008:
    - name: drmv2clt
    - command: drmv2clt.dll
    - location: Startup
    - user: .DEFAULT
  - 3009:
    - name: drprov
    - command: drprov.dll
    - location: Startup
    - user: .DEFAULT
  - 3010:
    - name: drwatson
    - command: drwatson.exe
    - location: Startup
    - user: .DEFAULT
  - 3011:
    - name: drwtsn32
    - command: drwtsn32.exe
    - location: Startup
    - user: .DEFAULT
  - 3012:
    - name: ds16gt
    - command: ds16gt.dLL
    - location: Startup
    - user: .DEFAULT
  - 3013:
    - name: ds32gt
    - command: ds32gt.dll
    - location: Startup
    - user: .DEFAULT
  - 3014:
    - name: dsauth
    - command: dsauth.dll
    - location: Startup
    - user: .DEFAULT
  - 3015:
    - name: dsdmo
    - command: dsdmo.dll
    - location: Startup
    - user: .DEFAULT
  - 3016:
    - name: dsdmoprp
    - command: dsdmoprp.dll
    - location: Startup
    - user: .DEFAULT
  - 3017:
    - name: dskquota
    - command: dskquota.dll
    - location: Startup
    - user: .DEFAULT
  - 3018:
    - name: dskquoui
    - command: dskquoui.dll
    - location: Startup
    - user: .DEFAULT
  - 3019:
    - name: dsound
    - command: dsound.dll
    - location: Startup
    - user: .DEFAULT
  - 3020:
    - name: dsound
    - command: dsound.vxd
    - location: Startup
    - user: .DEFAULT
  - 3021:
    - name: dsound3d
    - command: dsound3d.dll
    - location: Startup
    - user: .DEFAULT
  - 3022:
    - name: dsprop
    - command: dsprop.dll
    - location: Startup
    - user: .DEFAULT
  - 3023:
    - name: dsprpres
    - command: dsprpres.dll
    - location: Startup
    - user: .DEFAULT
  - 3024:
    - name: dsquery
    - command: dsquery.dll
    - location: Startup
    - user: .DEFAULT
  - 3025:
    - name: dssec
    - command: dssec.dat
    - location: Startup
    - user: .DEFAULT
  - 3026:
    - name: dssec
    - command: dssec.dll
    - location: Startup
    - user: .DEFAULT
  - 3027:
    - name: dssenh
    - command: dssenh.dll
    - location: Startup
    - user: .DEFAULT
  - 3028:
    - name: dsuiext
    - command: dsuiext.dll
    - location: Startup
    - user: .DEFAULT
  - 3029:
    - name: dswave
    - command: dswave.dll
    - location: Startup
    - user: .DEFAULT
  - 3030:
    - name: dumprep
    - command: dumprep.exe
    - location: Startup
    - user: .DEFAULT
  - 3031:
    - name: duser
    - command: duser.dll
    - location: Startup
    - user: .DEFAULT
  - 3032:
    - name: dvdplay
    - command: dvdplay.exe
    - location: Startup
    - user: .DEFAULT
  - 3033:
    - name: dvdupgrd
    - command: dvdupgrd.exe
    - location: Startup
    - user: .DEFAULT
  - 3034:
    - name: dwwin
    - command: dwwin.exe
    - location: Startup
    - user: .DEFAULT
  - 3035:
    - name: dx7vb
    - command: dx7vb.dll
    - location: Startup
    - user: .DEFAULT
  - 3036:
    - name: dx8vb
    - command: dx8vb.dll
    - location: Startup
    - user: .DEFAULT
  - 3037:
    - name: dxdiag
    - command: dxdiag.exe
    - location: Startup
    - user: .DEFAULT
  - 3038:
    - name: dxdiagn
    - command: dxdiagn.dll
    - location: Startup
    - user: .DEFAULT
  - 3039:
    - name: dxmasf
    - command: dxmasf.dll
    - location: Startup
    - user: .DEFAULT
  - 3040:
    - name: dxtmsft
    - command: dxtmsft.dll
    - location: Startup
    - user: .DEFAULT
  - 3041:
    - name: dxtrans
    - command: dxtrans.dll
    - location: Startup
    - user: .DEFAULT
  - 3042:
    - name: dxva2
    - command: dxva2.dll
    - location: Startup
    - user: .DEFAULT
  - 3043:
    - name: eapolqec
    - command: eapolqec.dll
    - location: Startup
    - user: .DEFAULT
  - 3044:
    - name: eapp3hst
    - command: eapp3hst.dll
    - location: Startup
    - user: .DEFAULT
  - 3045:
    - name: eappcfg
    - command: eappcfg.dll
    - location: Startup
    - user: .DEFAULT
  - 3046:
    - name: eappgnui
    - command: eappgnui.dll
    - location: Startup
    - user: .DEFAULT
  - 3047:
    - name: eapphost
    - command: eapphost.dll
    - location: Startup
    - user: .DEFAULT
  - 3048:
    - name: eappprxy
    - command: eappprxy.dll
    - location: Startup
    - user: .DEFAULT
  - 3049:
    - name: eapqec
    - command: eapqec.dll
    - location: Startup
    - user: .DEFAULT
  - 3050:
    - name: eapsvc
    - command: eapsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 3051:
    - name: EBPMON24
    - command: EBPMON24.DLL
    - location: Startup
    - user: .DEFAULT
  - 3052:
    - name: EBPPORT4
    - command: EBPPORT4.DAT
    - location: Startup
    - user: .DEFAULT
  - 3053:
    - name: edit
    - command: edit.com
    - location: Startup
    - user: .DEFAULT
  - 3054:
    - name: edit
    - command: edit.hlp
    - location: Startup
    - user: .DEFAULT
  - 3055:
    - name: edlin
    - command: edlin.exe
    - location: Startup
    - user: .DEFAULT
  - 3056:
    - name: efsadu
    - command: efsadu.dll
    - location: Startup
    - user: .DEFAULT
  - 3057:
    - name: ega
    - command: ega.cpi
    - location: Startup
    - user: .DEFAULT
  - 3058:
    - name: els
    - command: els.dll
    - location: Startup
    - user: .DEFAULT
  - 3059:
    - name: emptyregdb
    - command: emptyregdb.dat
    - location: Startup
    - user: .DEFAULT
  - 3060:
    - name: encapi
    - command: encapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3061:
    - name: encdec
    - command: encdec.dll
    - location: Startup
    - user: .DEFAULT
  - 3062:
    - name: enppmon
    - command: enppmon.dll
    - location: Startup
    - user: .DEFAULT
  - 3063:
    - name: enppui
    - command: enppui.dll
    - location: Startup
    - user: .DEFAULT
  - 3064:
    - name: enpres
    - command: enpres.dll
    - location: Startup
    - user: .DEFAULT
  - 3065:
    - name: ensppmon
    - command: ensppmon.dll
    - location: Startup
    - user: .DEFAULT
  - 3066:
    - name: ensppui
    - command: ensppui.dll
    - location: Startup
    - user: .DEFAULT
  - 3067:
    - name: enspres
    - command: enspres.dll
    - location: Startup
    - user: .DEFAULT
  - 3068:
    - name: Epcmlib
    - command: Epcmlib.dll
    - location: Startup
    - user: .DEFAULT
  - 3069:
    - name: EPPICLocal_BP
    - command: EPPICLocal_BP.cfg
    - location: Startup
    - user: .DEFAULT
  - 3070:
    - name: EPPICLocal_CF
    - command: EPPICLocal_CF.cfg
    - location: Startup
    - user: .DEFAULT
  - 3071:
    - name: EPPICLocal_DU
    - command: EPPICLocal_DU.cfg
    - location: Startup
    - user: .DEFAULT
  - 3072:
    - name: EPPICLocal_EN
    - command: EPPICLocal_EN.cfg
    - location: Startup
    - user: .DEFAULT
  - 3073:
    - name: EPPICLocal_ES
    - command: EPPICLocal_ES.cfg
    - location: Startup
    - user: .DEFAULT
  - 3074:
    - name: EPPICLocal_FR
    - command: EPPICLocal_FR.cfg
    - location: Startup
    - user: .DEFAULT
  - 3075:
    - name: EPPICLocal_GE
    - command: EPPICLocal_GE.cfg
    - location: Startup
    - user: .DEFAULT
  - 3076:
    - name: EPPICLocal_IT
    - command: EPPICLocal_IT.cfg
    - location: Startup
    - user: .DEFAULT
  - 3077:
    - name: EPPICLocal_KO
    - command: EPPICLocal_KO.cfg
    - location: Startup
    - user: .DEFAULT
  - 3078:
    - name: EPPICLocal_PT
    - command: EPPICLocal_PT.cfg
    - location: Startup
    - user: .DEFAULT
  - 3079:
    - name: EPPICLocal_RU
    - command: EPPICLocal_RU.cfg
    - location: Startup
    - user: .DEFAULT
  - 3080:
    - name: EPPICLocal_SC
    - command: EPPICLocal_SC.cfg
    - location: Startup
    - user: .DEFAULT
  - 3081:
    - name: EPPICLocal_TC
    - command: EPPICLocal_TC.cfg
    - location: Startup
    - user: .DEFAULT
  - 3082:
    - name: EPPicMgr
    - command: EPPicMgr.dll
    - location: Startup
    - user: .DEFAULT
  - 3083:
    - name: EPPICPattern1
    - command: EPPICPattern1.dat
    - location: Startup
    - user: .DEFAULT
  - 3084:
    - name: EPPICPattern121
    - command: EPPICPattern121.dat
    - location: Startup
    - user: .DEFAULT
  - 3085:
    - name: EPPICPattern131
    - command: EPPICPattern131.dat
    - location: Startup
    - user: .DEFAULT
  - 3086:
    - name: EPPICPattern2
    - command: EPPICPattern2.dat
    - location: Startup
    - user: .DEFAULT
  - 3087:
    - name: EPPICPattern3
    - command: EPPICPattern3.dat
    - location: Startup
    - user: .DEFAULT
  - 3088:
    - name: EPPICPattern4
    - command: EPPICPattern4.dat
    - location: Startup
    - user: .DEFAULT
  - 3089:
    - name: EPPICPattern5
    - command: EPPICPattern5.dat
    - location: Startup
    - user: .DEFAULT
  - 3090:
    - name: EPPICPattern6
    - command: EPPICPattern6.dat
    - location: Startup
    - user: .DEFAULT
  - 3091:
    - name: EPPICPresetData_BP
    - command: EPPICPresetData_BP.dat
    - location: Startup
    - user: .DEFAULT
  - 3092:
    - name: EPPICPresetData_CF
    - command: EPPICPresetData_CF.dat
    - location: Startup
    - user: .DEFAULT
  - 3093:
    - name: EPPICPresetData_DU
    - command: EPPICPresetData_DU.dat
    - location: Startup
    - user: .DEFAULT
  - 3094:
    - name: EPPICPresetData_EN
    - command: EPPICPresetData_EN.dat
    - location: Startup
    - user: .DEFAULT
  - 3095:
    - name: EPPICPresetData_ES
    - command: EPPICPresetData_ES.dat
    - location: Startup
    - user: .DEFAULT
  - 3096:
    - name: EPPICPresetData_FR
    - command: EPPICPresetData_FR.dat
    - location: Startup
    - user: .DEFAULT
  - 3097:
    - name: EPPICPresetData_GE
    - command: EPPICPresetData_GE.dat
    - location: Startup
    - user: .DEFAULT
  - 3098:
    - name: EPPICPresetData_IT
    - command: EPPICPresetData_IT.dat
    - location: Startup
    - user: .DEFAULT
  - 3099:
    - name: EPPICPresetData_PT
    - command: EPPICPresetData_PT.dat
    - location: Startup
    - user: .DEFAULT
  - 3100:
    - name: EPPICPrinterDB
    - command: EPPICPrinterDB.dat
    - location: Startup
    - user: .DEFAULT
  - 3101:
    - name: EpPicPrt
    - command: EpPicPrt.dll
    - location: Startup
    - user: .DEFAULT
  - 3102:
    - name: EPPICResdb
    - command: EPPICResdb
    - location: Startup
    - user: .DEFAULT
  - 3103:
    - name: EPPICResdb0000
    - command: EPPICResdb0000
    - location: Startup
    - user: .DEFAULT
  - 3104:
    - name: EPSMTL32
    - command: EPSMTL32.DLL
    - location: Startup
    - user: .DEFAULT
  - 3105:
    - name: EPSTP32U
    - command: EPSTP32U.EXE
    - location: Startup
    - user: .DEFAULT
  - 3106:
    - name: EqnClass
    - command: EqnClass.Dll
    - location: Startup
    - user: .DEFAULT
  - 3107:
    - name: ersvc
    - command: ersvc.dll
    - location: Startup
    - user: .DEFAULT
  - 3108:
    - name: es
    - command: es.dll
    - location: Startup
    - user: .DEFAULT
  - 3109:
    - name: escsvc
    - command: escsvc.exe
    - location: Startup
    - user: .DEFAULT
  - 3110:
    - name: esent
    - command: esent.dll
    - location: Startup
    - user: .DEFAULT
  - 3111:
    - name: esent97
    - command: esent97.dll
    - location: Startup
    - user: .DEFAULT
  - 3112:
    - name: esentprf
    - command: esentprf.dll
    - location: Startup
    - user: .DEFAULT
  - 3113:
    - name: esentprf
    - command: esentprf.hxx
    - location: Startup
    - user: .DEFAULT
  - 3114:
    - name: esentprf
    - command: esentprf.ini
    - location: Startup
    - user: .DEFAULT
  - 3115:
    - name: esentutl
    - command: esentutl.exe
    - location: Startup
    - user: .DEFAULT
  - 3116:
    - name: eswiau2
    - command: eswiau2.dll
    - location: Startup
    - user: .DEFAULT
  - 3117:
    - name: eudcedit
    - command: eudcedit.exe
    - location: Startup
    - user: .DEFAULT
  - 3118:
    - name: eula
    - command: eula.txt
    - location: Startup
    - user: .DEFAULT
  - 3119:
    - name: eventcls
    - command: eventcls.dll
    - location: Startup
    - user: .DEFAULT
  - 3120:
    - name: eventcreate
    - command: eventcreate.exe
    - location: Startup
    - user: .DEFAULT
  - 3121:
    - name: eventlog
    - command: eventlog.dll
    - location: Startup
    - user: .DEFAULT
  - 3122:
    - name: eventquery
    - command: eventquery.vbs
    - location: Startup
    - user: .DEFAULT
  - 3123:
    - name: eventtriggers
    - command: eventtriggers.exe
    - location: Startup
    - user: .DEFAULT
  - 3124:
    - name: eventvwr
    - command: eventvwr.exe
    - location: Startup
    - user: .DEFAULT
  - 3125:
    - name: eventvwr
    - command: eventvwr.msc
    - location: Startup
    - user: .DEFAULT
  - 3126:
    - name: evr
    - command: evr.dll
    - location: Startup
    - user: .DEFAULT
  - 3127:
    - name: exe2bin
    - command: exe2bin.exe
    - location: Startup
    - user: .DEFAULT
  - 3128:
    - name: expand
    - command: expand.exe
    - location: Startup
    - user: .DEFAULT
  - 3129:
    - name: expsrv
    - command: expsrv.dll
    - location: Startup
    - user: .DEFAULT
  - 3130:
    - name: extmgr
    - command: extmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 3131:
    - name: extrac32
    - command: extrac32.exe
    - location: Startup
    - user: .DEFAULT
  - 3132:
    - name: exts
    - command: exts.dll
    - location: Startup
    - user: .DEFAULT
  - 3133:
    - name: ezsidmv
    - command: ezsidmv.dat
    - location: Startup
    - user: .DEFAULT
  - 3134:
    - name: E_DCINST
    - command: E_DCINST.DLL
    - location: Startup
    - user: .DEFAULT
  - 3135:
    - name: E_FD4BHQE
    - command: E_FD4BHQE.DLL
    - location: Startup
    - user: .DEFAULT
  - 3136:
    - name: E_FLBHQE
    - command: E_FLBHQE.DLL
    - location: Startup
    - user: .DEFAULT
  - 3137:
    - name: E_TD4BTAE
    - command: E_TD4BTAE.DLL
    - location: Startup
    - user: .DEFAULT
  - 3138:
    - name: E_TLMBTAE
    - command: E_TLMBTAE.DLL
    - location: Startup
    - user: .DEFAULT
  - 3139:
    - name: fastopen
    - command: fastopen.exe
    - location: Startup
    - user: .DEFAULT
  - 3140:
    - name: faultrep
    - command: faultrep.dll
    - location: Startup
    - user: .DEFAULT
  - 3141:
    - name: faxpatch
    - command: faxpatch.exe
    - location: Startup
    - user: .DEFAULT
  - 3142:
    - name: fc
    - command: fc.exe
    - location: Startup
    - user: .DEFAULT
  - 3143:
    - name: FCLKBTN
    - command: FCLKBTN.DLL
    - location: Startup
    - user: .DEFAULT
  - 3144:
    - name: fdco1
    - command: fdco1.dll
    - location: Startup
    - user: .DEFAULT
  - 3145:
    - name: fdco1ins
    - command: fdco1ins.dll
    - location: Startup
    - user: .DEFAULT
  - 3146:
    - name: fdco_l1028
    - command: fdco_l1028.dll
    - location: Startup
    - user: .DEFAULT
  - 3147:
    - name: fdco_l1031
    - command: fdco_l1031.dll
    - location: Startup
    - user: .DEFAULT
  - 3148:
    - name: fdco_l1034
    - command: fdco_l1034.dll
    - location: Startup
    - user: .DEFAULT
  - 3149:
    - name: fdco_l1036
    - command: fdco_l1036.dll
    - location: Startup
    - user: .DEFAULT
  - 3150:
    - name: fdco_l1040
    - command: fdco_l1040.dll
    - location: Startup
    - user: .DEFAULT
  - 3151:
    - name: fdco_l1041
    - command: fdco_l1041.dll
    - location: Startup
    - user: .DEFAULT
  - 3152:
    - name: fdco_l1042
    - command: fdco_l1042.dll
    - location: Startup
    - user: .DEFAULT
  - 3153:
    - name: fdco_l1046
    - command: fdco_l1046.dll
    - location: Startup
    - user: .DEFAULT
  - 3154:
    - name: fdco_l2052
    - command: fdco_l2052.dll
    - location: Startup
    - user: .DEFAULT
  - 3155:
    - name: fde
    - command: fde.dll
    - location: Startup
    - user: .DEFAULT
  - 3156:
    - name: fdeploy
    - command: fdeploy.dll
    - location: Startup
    - user: .DEFAULT
  - 3157:
    - name: FE05DA0D
    - command: FE05DA0D.dll
    - location: Startup
    - user: .DEFAULT
  - 3158:
    - name: FE05DA0D
    - command: FE05DA0D.FCL
    - location: Startup
    - user: .DEFAULT
  - 3159:
    - name: FE05DA0D
    - command: FE05DA0D.FCP
    - location: Startup
    - user: .DEFAULT
  - 3160:
    - name: FE05EFED
    - command: FE05EFED.dll
    - location: Startup
    - user: .DEFAULT
  - 3161:
    - name: FE05EFED
    - command: FE05EFED.FCL
    - location: Startup
    - user: .DEFAULT
  - 3162:
    - name: FE05EFED
    - command: FE05EFED.FCP
    - location: Startup
    - user: .DEFAULT
  - 3163:
    - name: FE05F051
    - command: FE05F051.dll
    - location: Startup
    - user: .DEFAULT
  - 3164:
    - name: FE05F051
    - command: FE05F051.FCL
    - location: Startup
    - user: .DEFAULT
  - 3165:
    - name: FE05F051
    - command: FE05F051.FCP
    - location: Startup
    - user: .DEFAULT
  - 3166:
    - name: FE05F3D5
    - command: FE05F3D5.dll
    - location: Startup
    - user: .DEFAULT
  - 3167:
    - name: FE05F3D5
    - command: FE05F3D5.FCL
    - location: Startup
    - user: .DEFAULT
  - 3168:
    - name: FE05F3D5
    - command: FE05F3D5.FCP
    - location: Startup
    - user: .DEFAULT
  - 3169:
    - name: feclient
    - command: feclient.dll
    - location: Startup
    - user: .DEFAULT
  - 3170:
    - name: FFRAFLIB
    - command: FFRAFLIB.DLL
    - location: Startup
    - user: .DEFAULT
  - 3171:
    - name: FFTIFF16
    - command: FFTIFF16.dll
    - location: Startup
    - user: .DEFAULT
  - 3172:
    - name: filemgmt
    - command: filemgmt.dll
    - location: Startup
    - user: .DEFAULT
  - 3173:
    - name: find
    - command: find.exe
    - location: Startup
    - user: .DEFAULT
  - 3174:
    - name: findstr
    - command: findstr.exe
    - location: Startup
    - user: .DEFAULT
  - 3175:
    - name: FINFCHECK
    - command: FINFCHECK.dll
    - location: Startup
    - user: .DEFAULT
  - 3176:
    - name: FINFCOPY
    - command: FINFCOPY.dll
    - location: Startup
    - user: .DEFAULT
  - 3177:
    - name: finger
    - command: finger.exe
    - location: Startup
    - user: .DEFAULT
  - 3178:
    - name: firewall
    - command: firewall.cpl
    - location: Startup
    - user: .DEFAULT
  - 3179:
    - name: fixmapi
    - command: fixmapi.exe
    - location: Startup
    - user: .DEFAULT
  - 3180:
    - name: FlashPlayerApp
    - command: FlashPlayerApp.exe
    - location: Startup
    - user: .DEFAULT
  - 3181:
    - name: FlashPlayerCPLApp
    - command: FlashPlayerCPLApp.cpl
    - location: Startup
    - user: .DEFAULT
  - 3182:
    - name: fldrclnr
    - command: fldrclnr.dll
    - location: Startup
    - user: .DEFAULT
  - 3183:
    - name: fltlib
    - command: fltlib.dll
    - location: Startup
    - user: .DEFAULT
  - 3184:
    - name: fltmc
    - command: fltmc.exe
    - location: Startup
    - user: .DEFAULT
  - 3185:
    - name: FM20
    - command: FM20.DLL
    - location: Startup
    - user: .DEFAULT
  - 3186:
    - name: FM20ENU
    - command: FM20ENU.DLL
    - location: Startup
    - user: .DEFAULT
  - 3187:
    - name: fmifs
    - command: fmifs.dll
    - location: Startup
    - user: .DEFAULT
  - 3188:
    - name: fnfilter
    - command: fnfilter.dll
    - location: Startup
    - user: .DEFAULT
  - 3189:
    - name: FNTCACHE
    - command: FNTCACHE.DAT
    - location: Startup
    - user: .DEFAULT
  - 3190:
    - name: fontext
    - command: fontext.dll
    - location: Startup
    - user: .DEFAULT
  - 3191:
    - name: fontsub
    - command: fontsub.dll
    - location: Startup
    - user: .DEFAULT
  - 3192:
    - name: fontview
    - command: fontview.exe
    - location: Startup
    - user: .DEFAULT
  - 3193:
    - name: forcedos
    - command: forcedos.exe
    - location: Startup
    - user: .DEFAULT
  - 3194:
    - name: format
    - command: format.com
    - location: Startup
    - user: .DEFAULT
  - 3195:
    - name: FPXS2Pro
    - command: FPXS2Pro.dll
    - location: Startup
    - user: .DEFAULT
  - 3196:
    - name: framebuf
    - command: framebuf.dll
    - location: Startup
    - user: .DEFAULT
  - 3197:
    - name: freecell
    - command: freecell.exe
    - location: Startup
    - user: .DEFAULT
  - 3198:
    - name: FREGSHEX
    - command: FREGSHEX.DLL
    - location: Startup
    - user: .DEFAULT
  - 3199:
    - name: fsmgmt
    - command: fsmgmt.msc
    - location: Startup
    - user: .DEFAULT
  - 3200:
    - name: fsquirt
    - command: fsquirt.exe
    - location: Startup
    - user: .DEFAULT
  - 3201:
    - name: fsusd
    - command: fsusd.dll
    - location: Startup
    - user: .DEFAULT
  - 3202:
    - name: fsutil
    - command: fsutil.exe
    - location: Startup
    - user: .DEFAULT
  - 3203:
    - name: ftp
    - command: ftp.exe
    - location: Startup
    - user: .DEFAULT
  - 3204:
    - name: ftsrch
    - command: ftsrch.dll
    - location: Startup
    - user: .DEFAULT
  - 3205:
    - name: fuusd
    - command: fuusd.dll
    - location: Startup
    - user: .DEFAULT
  - 3206:
    - name: fwcfg
    - command: fwcfg.dll
    - location: Startup
    - user: .DEFAULT
  - 3207:
    - name: g711codc
    - command: g711codc.ax
    - location: Startup
    - user: .DEFAULT
  - 3208:
    - name: gb2312
    - command: gb2312.uce
    - location: Startup
    - user: .DEFAULT
  - 3209:
    - name: gcdef
    - command: gcdef.dll
    - location: Startup
    - user: .DEFAULT
  - 3210:
    - name: gdi
    - command: gdi.exe
    - location: Startup
    - user: .DEFAULT
  - 3211:
    - name: gdi32
    - command: gdi32.dll
    - location: Startup
    - user: .DEFAULT
  - 3212:
    - name: GEARAspi
    - command: GEARAspi.dll
    - location: Startup
    - user: .DEFAULT
  - 3213:
    - name: geo
    - command: geo.nls
    - location: Startup
    - user: .DEFAULT
  - 3214:
    - name: geoforms
    - command: geoforms.scr
    - location: Startup
    - user: .DEFAULT
  - 3215:
    - name: getmac
    - command: getmac.exe
    - location: Startup
    - user: .DEFAULT
  - 3216:
    - name: getuname
    - command: getuname.dll
    - location: Startup
    - user: .DEFAULT
  - 3217:
    - name: giveio
    - command: giveio.sys
    - location: Startup
    - user: .DEFAULT
  - 3218:
    - name: glmf32
    - command: glmf32.dll
    - location: Startup
    - user: .DEFAULT
  - 3219:
    - name: glu32
    - command: glu32.dll
    - location: Startup
    - user: .DEFAULT
  - 3220:
    - name: gpedit
    - command: gpedit.dll
    - location: Startup
    - user: .DEFAULT
  - 3221:
    - name: gpedit
    - command: gpedit.msc
    - location: Startup
    - user: .DEFAULT
  - 3222:
    - name: gpkcsp
    - command: gpkcsp.dll
    - location: Startup
    - user: .DEFAULT
  - 3223:
    - name: gpkrsrc
    - command: gpkrsrc.dll
    - location: Startup
    - user: .DEFAULT
  - 3224:
    - name: gpresult
    - command: gpresult.exe
    - location: Startup
    - user: .DEFAULT
  - 3225:
    - name: gptext
    - command: gptext.dll
    - location: Startup
    - user: .DEFAULT
  - 3226:
    - name: gpupdate
    - command: gpupdate.exe
    - location: Startup
    - user: .DEFAULT
  - 3227:
    - name: graftabl
    - command: graftabl.com
    - location: Startup
    - user: .DEFAULT
  - 3228:
    - name: graphics
    - command: graphics.com
    - location: Startup
    - user: .DEFAULT
  - 3229:
    - name: graphics
    - command: graphics.pro
    - location: Startup
    - user: .DEFAULT
  - 3230:
    - name: grpconv
    - command: grpconv.exe
    - location: Startup
    - user: .DEFAULT
  - 3231:
    - name: gsrvctr
    - command: gsrvctr.h
    - location: Startup
    - user: .DEFAULT
  - 3232:
    - name: gsrvctr
    - command: gsrvctr.ini
    - location: Startup
    - user: .DEFAULT
  - 3233:
    - name: gthrctr
    - command: gthrctr.h
    - location: Startup
    - user: .DEFAULT
  - 3234:
    - name: gthrctr
    - command: gthrctr.ini
    - location: Startup
    - user: .DEFAULT
  - 3235:
    - name: h323
    - command: h323.tsp
    - location: Startup
    - user: .DEFAULT
  - 3236:
    - name: h323log
    - command: h323log.txt
    - location: Startup
    - user: .DEFAULT
  - 3237:
    - name: h323msp
    - command: h323msp.dll
    - location: Startup
    - user: .DEFAULT
  - 3238:
    - name: HAL
    - command: HAL.DLL
    - location: Startup
    - user: .DEFAULT
  - 3239:
    - name: hccoin
    - command: hccoin.dll
    - location: Startup
    - user: .DEFAULT
  - 3240:
    - name: HdAProp
    - command: HdAProp.dll
    - location: Startup
    - user: .DEFAULT
  - 3241:
    - name: HdAShCut
    - command: HdAShCut.exe
    - location: Startup
    - user: .DEFAULT
  - 3242:
    - name: HdAudRes
    - command: HdAudRes.dll
    - location: Startup
    - user: .DEFAULT
  - 3243:
    - name: hdwwiz
    - command: hdwwiz.cpl
    - location: Startup
    - user: .DEFAULT
  - 3244:
    - name: help
    - command: help.exe
    - location: Startup
    - user: .DEFAULT
  - 3245:
    - name: hhctrl
    - command: hhctrl.ocx
    - location: Startup
    - user: .DEFAULT
  - 3246:
    - name: hhsetup
    - command: hhsetup.dll
    - location: Startup
    - user: .DEFAULT
  - 3247:
    - name: hid
    - command: hid.dll
    - location: Startup
    - user: .DEFAULT
  - 3248:
    - name: hidphone
    - command: hidphone.tsp
    - location: Startup
    - user: .DEFAULT
  - 3249:
    - name: hidserv
    - command: hidserv.dll
    - location: Startup
    - user: .DEFAULT
  - 3250:
    - name: himem
    - command: himem.sys
    - location: Startup
    - user: .DEFAULT
  - 3251:
    - name: hlink
    - command: hlink.dll
    - location: Startup
    - user: .DEFAULT
  - 3252:
    - name: hnetcfg
    - command: hnetcfg.dll
    - location: Startup
    - user: .DEFAULT
  - 3253:
    - name: hnetmon
    - command: hnetmon.dll
    - location: Startup
    - user: .DEFAULT
  - 3254:
    - name: hnetwiz
    - command: hnetwiz.dll
    - location: Startup
    - user: .DEFAULT
  - 3255:
    - name: homepage
    - command: homepage.inf
    - location: Startup
    - user: .DEFAULT
  - 3256:
    - name: hostname
    - command: hostname.exe
    - location: Startup
    - user: .DEFAULT
  - 3257:
    - name: hotplug
    - command: hotplug.dll
    - location: Startup
    - user: .DEFAULT
  - 3258:
    - name: hsfcisp2
    - command: hsfcisp2.dll
    - location: Startup
    - user: .DEFAULT
  - 3259:
    - name: hticons
    - command: hticons.dll
    - location: Startup
    - user: .DEFAULT
  - 3260:
    - name: html
    - command: html.iec
    - location: Startup
    - user: .DEFAULT
  - 3261:
    - name: httpapi
    - command: httpapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3262:
    - name: htui
    - command: htui.dll
    - location: Startup
    - user: .DEFAULT
  - 3263:
    - name: hypertrm
    - command: hypertrm.dll
    - location: Startup
    - user: .DEFAULT
  - 3264:
    - name: iac25_32
    - command: iac25_32.ax
    - location: Startup
    - user: .DEFAULT
  - 3265:
    - name: iacenc
    - command: iacenc.dll
    - location: Startup
    - user: .DEFAULT
  - 3266:
    - name: iasacct
    - command: iasacct.dll
    - location: Startup
    - user: .DEFAULT
  - 3267:
    - name: iasads
    - command: iasads.dll
    - location: Startup
    - user: .DEFAULT
  - 3268:
    - name: iashlpr
    - command: iashlpr.dll
    - location: Startup
    - user: .DEFAULT
  - 3269:
    - name: iasnap
    - command: iasnap.dll
    - location: Startup
    - user: .DEFAULT
  - 3270:
    - name: iaspolcy
    - command: iaspolcy.dll
    - location: Startup
    - user: .DEFAULT
  - 3271:
    - name: iasrad
    - command: iasrad.dll
    - location: Startup
    - user: .DEFAULT
  - 3272:
    - name: iasrecst
    - command: iasrecst.dll
    - location: Startup
    - user: .DEFAULT
  - 3273:
    - name: iassam
    - command: iassam.dll
    - location: Startup
    - user: .DEFAULT
  - 3274:
    - name: iassdo
    - command: iassdo.dll
    - location: Startup
    - user: .DEFAULT
  - 3275:
    - name: iassvcs
    - command: iassvcs.dll
    - location: Startup
    - user: .DEFAULT
  - 3276:
    - name: icaapi
    - command: icaapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3277:
    - name: icardagt
    - command: icardagt.exe
    - location: Startup
    - user: .DEFAULT
  - 3278:
    - name: icardie
    - command: icardie.dll
    - location: Startup
    - user: .DEFAULT
  - 3279:
    - name: icardres
    - command: icardres.dll
    - location: Startup
    - user: .DEFAULT
  - 3280:
    - name: icardres.dll
    - command: icardres.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 3281:
    - name: iccvid
    - command: iccvid.dll
    - location: Startup
    - user: .DEFAULT
  - 3282:
    - name: icfgnt5
    - command: icfgnt5.dll
    - location: Startup
    - user: .DEFAULT
  - 3283:
    - name: icm32
    - command: icm32.dll
    - location: Startup
    - user: .DEFAULT
  - 3284:
    - name: icmp
    - command: icmp.dll
    - location: Startup
    - user: .DEFAULT
  - 3285:
    - name: icmui
    - command: icmui.dll
    - location: Startup
    - user: .DEFAULT
  - 3286:
    - name: icrav03
    - command: icrav03.rat
    - location: Startup
    - user: .DEFAULT
  - 3287:
    - name: icwdial
    - command: icwdial.dll
    - location: Startup
    - user: .DEFAULT
  - 3288:
    - name: icwphbk
    - command: icwphbk.dll
    - location: Startup
    - user: .DEFAULT
  - 3289:
    - name: idecoi
    - command: idecoi.dll
    - location: Startup
    - user: .DEFAULT
  - 3290:
    - name: idecoiins
    - command: idecoiins.dll
    - location: Startup
    - user: .DEFAULT
  - 3291:
    - name: ideograf
    - command: ideograf.uce
    - location: Startup
    - user: .DEFAULT
  - 3292:
    - name: idndl
    - command: idndl.dll
    - location: Startup
    - user: .DEFAULT
  - 3293:
    - name: idq
    - command: idq.dll
    - location: Startup
    - user: .DEFAULT
  - 3294:
    - name: idxcntrs
    - command: idxcntrs.h
    - location: Startup
    - user: .DEFAULT
  - 3295:
    - name: idxcntrs
    - command: idxcntrs.ini
    - location: Startup
    - user: .DEFAULT
  - 3296:
    - name: ie4uinit
    - command: ie4uinit.exe
    - location: Startup
    - user: .DEFAULT
  - 3297:
    - name: ie4uinit.exe
    - command: ie4uinit.exe.mui
    - location: Startup
    - user: .DEFAULT
  - 3298:
    - name: IE7Eula
    - command: IE7Eula.rtf
    - location: Startup
    - user: .DEFAULT
  - 3299:
    - name: IE8Eula
    - command: IE8Eula.rtf
    - location: Startup
    - user: .DEFAULT
  - 3300:
    - name: ieakeng
    - command: ieakeng.dll
    - location: Startup
    - user: .DEFAULT
  - 3301:
    - name: ieaksie
    - command: ieaksie.dll
    - location: Startup
    - user: .DEFAULT
  - 3302:
    - name: ieakui
    - command: ieakui.dll
    - location: Startup
    - user: .DEFAULT
  - 3303:
    - name: ieapfltr
    - command: ieapfltr.dat
    - location: Startup
    - user: .DEFAULT
  - 3304:
    - name: ieapfltr
    - command: ieapfltr.dll
    - location: Startup
    - user: .DEFAULT
  - 3305:
    - name: iedkcs32
    - command: iedkcs32.dll
    - location: Startup
    - user: .DEFAULT
  - 3306:
    - name: iedkcs32.dll
    - command: iedkcs32.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 3307:
    - name: ieframe
    - command: ieframe.dll
    - location: Startup
    - user: .DEFAULT
  - 3308:
    - name: ieframe.dll
    - command: ieframe.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 3309:
    - name: iepeers
    - command: iepeers.dll
    - location: Startup
    - user: .DEFAULT
  - 3310:
    - name: iernonce
    - command: iernonce.dll
    - location: Startup
    - user: .DEFAULT
  - 3311:
    - name: iertutil
    - command: iertutil.dll
    - location: Startup
    - user: .DEFAULT
  - 3312:
    - name: iesetup
    - command: iesetup.dll
    - location: Startup
    - user: .DEFAULT
  - 3313:
    - name: ieudinit
    - command: ieudinit.exe
    - location: Startup
    - user: .DEFAULT
  - 3314:
    - name: ieui
    - command: ieui.dll
    - location: Startup
    - user: .DEFAULT
  - 3315:
    - name: ieuinit
    - command: ieuinit.inf
    - location: Startup
    - user: .DEFAULT
  - 3316:
    - name: iexpress
    - command: iexpress.exe
    - location: Startup
    - user: .DEFAULT
  - 3317:
    - name: ifmon
    - command: ifmon.dll
    - location: Startup
    - user: .DEFAULT
  - 3318:
    - name: ifsutil
    - command: ifsutil.dll
    - location: Startup
    - user: .DEFAULT
  - 3319:
    - name: ifxcardm
    - command: ifxcardm.dll
    - location: Startup
    - user: .DEFAULT
  - 3320:
    - name: igmpagnt
    - command: igmpagnt.dll
    - location: Startup
    - user: .DEFAULT
  - 3321:
    - name: iissuba
    - command: iissuba.dll
    - location: Startup
    - user: .DEFAULT
  - 3322:
    - name: ils
    - command: ils.dll
    - location: Startup
    - user: .DEFAULT
  - 3323:
    - name: imaadp32
    - command: imaadp32.acm
    - location: Startup
    - user: .DEFAULT
  - 3324:
    - name: imagehlp
    - command: imagehlp.dll
    - location: Startup
    - user: .DEFAULT
  - 3325:
    - name: ImagX7
    - command: ImagX7.dll
    - location: Startup
    - user: .DEFAULT
  - 3326:
    - name: ImagXpr7
    - command: ImagXpr7.dll
    - location: Startup
    - user: .DEFAULT
  - 3327:
    - name: ImagXR7
    - command: ImagXR7.dll
    - location: Startup
    - user: .DEFAULT
  - 3328:
    - name: ImagXRA7
    - command: ImagXRA7.dll
    - location: Startup
    - user: .DEFAULT
  - 3329:
    - name: imapi
    - command: imapi.exe
    - location: Startup
    - user: .DEFAULT
  - 3330:
    - name: imeshare
    - command: imeshare.dll
    - location: Startup
    - user: .DEFAULT
  - 3331:
    - name: imgutil
    - command: imgutil.dll
    - location: Startup
    - user: .DEFAULT
  - 3332:
    - name: imm32
    - command: imm32.dll
    - location: Startup
    - user: .DEFAULT
  - 3333:
    - name: Indeo4
    - command: Indeo4.qtx
    - location: Startup
    - user: .DEFAULT
  - 3334:
    - name: inetcfg
    - command: inetcfg.dll
    - location: Startup
    - user: .DEFAULT
  - 3335:
    - name: inetcomm(2)
    - command: inetcomm(2).dll
    - location: Startup
    - user: .DEFAULT
  - 3336:
    - name: inetcomm
    - command: inetcomm.dll
    - location: Startup
    - user: .DEFAULT
  - 3337:
    - name: inetcpl
    - command: inetcpl.cpl
    - location: Startup
    - user: .DEFAULT
  - 3338:
    - name: inetcplc
    - command: inetcplc.dll
    - location: Startup
    - user: .DEFAULT
  - 3339:
    - name: inetmib1
    - command: inetmib1.dll
    - location: Startup
    - user: .DEFAULT
  - 3340:
    - name: inetpp
    - command: inetpp.dll
    - location: Startup
    - user: .DEFAULT
  - 3341:
    - name: inetppui
    - command: inetppui.dll
    - location: Startup
    - user: .DEFAULT
  - 3342:
    - name: inetres
    - command: inetres.dll
    - location: Startup
    - user: .DEFAULT
  - 3343:
    - name: infocardapi
    - command: infocardapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3344:
    - name: infocardcpl
    - command: infocardcpl.cpl
    - location: Startup
    - user: .DEFAULT
  - 3345:
    - name: infosoft
    - command: infosoft.dll
    - location: Startup
    - user: .DEFAULT
  - 3346:
    - name: initpki
    - command: initpki.dll
    - location: Startup
    - user: .DEFAULT
  - 3347:
    - name: INKED
    - command: INKED.DLL
    - location: Startup
    - user: .DEFAULT
  - 3348:
    - name: input
    - command: input.dll
    - location: Startup
    - user: .DEFAULT
  - 3349:
    - name: inseng
    - command: inseng.dll
    - location: Startup
    - user: .DEFAULT
  - 3350:
    - name: instcat
    - command: instcat.sql
    - location: Startup
    - user: .DEFAULT
  - 3351:
    - name: intl
    - command: intl.cpl
    - location: Startup
    - user: .DEFAULT
  - 3352:
    - name: iologmsg
    - command: iologmsg.dll
    - location: Startup
    - user: .DEFAULT
  - 3353:
    - name: ipconf
    - command: ipconf.tsp
    - location: Startup
    - user: .DEFAULT
  - 3354:
    - name: ipconfig
    - command: ipconfig.exe
    - location: Startup
    - user: .DEFAULT
  - 3355:
    - name: iphlpapi
    - command: iphlpapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3356:
    - name: ipmontr
    - command: ipmontr.dll
    - location: Startup
    - user: .DEFAULT
  - 3357:
    - name: ipnathlp
    - command: ipnathlp.dll
    - location: Startup
    - user: .DEFAULT
  - 3358:
    - name: ippromon
    - command: ippromon.dll
    - location: Startup
    - user: .DEFAULT
  - 3359:
    - name: iprop
    - command: iprop.dll
    - location: Startup
    - user: .DEFAULT
  - 3360:
    - name: iprtprio
    - command: iprtprio.dll
    - location: Startup
    - user: .DEFAULT
  - 3361:
    - name: iprtrmgr
    - command: iprtrmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 3362:
    - name: ipsec6
    - command: ipsec6.exe
    - location: Startup
    - user: .DEFAULT
  - 3363:
    - name: ipsecsnp
    - command: ipsecsnp.dll
    - location: Startup
    - user: .DEFAULT
  - 3364:
    - name: ipsecsvc
    - command: ipsecsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 3365:
    - name: ipsink
    - command: ipsink.ax
    - location: Startup
    - user: .DEFAULT
  - 3366:
    - name: ipsmsnap
    - command: ipsmsnap.dll
    - location: Startup
    - user: .DEFAULT
  - 3367:
    - name: ipv6
    - command: ipv6.exe
    - location: Startup
    - user: .DEFAULT
  - 3368:
    - name: ipv6mon
    - command: ipv6mon.dll
    - location: Startup
    - user: .DEFAULT
  - 3369:
    - name: ipxmontr
    - command: ipxmontr.dll
    - location: Startup
    - user: .DEFAULT
  - 3370:
    - name: ipxpromn
    - command: ipxpromn.dll
    - location: Startup
    - user: .DEFAULT
  - 3371:
    - name: ipxrip
    - command: ipxrip.dll
    - location: Startup
    - user: .DEFAULT
  - 3372:
    - name: ipxroute
    - command: ipxroute.exe
    - location: Startup
    - user: .DEFAULT
  - 3373:
    - name: ipxrtmgr
    - command: ipxrtmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 3374:
    - name: ipxsap
    - command: ipxsap.dll
    - location: Startup
    - user: .DEFAULT
  - 3375:
    - name: ipxwan
    - command: ipxwan.dll
    - location: Startup
    - user: .DEFAULT
  - 3376:
    - name: ir32_32
    - command: ir32_32.dll
    - location: Startup
    - user: .DEFAULT
  - 3377:
    - name: ir41_32
    - command: ir41_32.ax
    - location: Startup
    - user: .DEFAULT
  - 3378:
    - name: ir41_qc
    - command: ir41_qc.dll
    - location: Startup
    - user: .DEFAULT
  - 3379:
    - name: ir41_qcx
    - command: ir41_qcx.dll
    - location: Startup
    - user: .DEFAULT
  - 3380:
    - name: ir50_32
    - command: ir50_32.dll
    - location: Startup
    - user: .DEFAULT
  - 3381:
    - name: ir50_qc
    - command: ir50_qc.dll
    - location: Startup
    - user: .DEFAULT
  - 3382:
    - name: ir50_qcx
    - command: ir50_qcx.dll
    - location: Startup
    - user: .DEFAULT
  - 3383:
    - name: irclass
    - command: irclass.dll
    - location: Startup
    - user: .DEFAULT
  - 3384:
    - name: irprops
    - command: irprops.cpl
    - location: Startup
    - user: .DEFAULT
  - 3385:
    - name: isign32
    - command: isign32.dll
    - location: Startup
    - user: .DEFAULT
  - 3386:
    - name: isrdbg32
    - command: isrdbg32.dll
    - location: Startup
    - user: .DEFAULT
  - 3387:
    - name: itircl
    - command: itircl.dll
    - location: Startup
    - user: .DEFAULT
  - 3388:
    - name: itss
    - command: itss.dll
    - location: Startup
    - user: .DEFAULT
  - 3389:
    - name: iuengine
    - command: iuengine.dll
    - location: Startup
    - user: .DEFAULT
  - 3390:
    - name: ivfsrc
    - command: ivfsrc.ax
    - location: Startup
    - user: .DEFAULT
  - 3391:
    - name: ixsso
    - command: ixsso.dll
    - location: Startup
    - user: .DEFAULT
  - 3392:
    - name: iyuv_32
    - command: iyuv_32.dll
    - location: Startup
    - user: .DEFAULT
  - 3393:
    - name: javacpl
    - command: javacpl.cpl
    - location: Startup
    - user: .DEFAULT
  - 3394:
    - name: jdns_sd
    - command: jdns_sd.dll
    - location: Startup
    - user: .DEFAULT
  - 3395:
    - name: jet500
    - command: jet500.dll
    - location: Startup
    - user: .DEFAULT
  - 3396:
    - name: jgaw400
    - command: jgaw400.dll
    - location: Startup
    - user: .DEFAULT
  - 3397:
    - name: jgdw400
    - command: jgdw400.dll
    - location: Startup
    - user: .DEFAULT
  - 3398:
    - name: jgmd400
    - command: jgmd400.dll
    - location: Startup
    - user: .DEFAULT
  - 3399:
    - name: jgpl400
    - command: jgpl400.dll
    - location: Startup
    - user: .DEFAULT
  - 3400:
    - name: jgsd400
    - command: jgsd400.dll
    - location: Startup
    - user: .DEFAULT
  - 3401:
    - name: jgsh400
    - command: jgsh400.dll
    - location: Startup
    - user: .DEFAULT
  - 3402:
    - name: JMRaidAPI
    - command: JMRaidAPI.dll
    - location: Startup
    - user: .DEFAULT
  - 3403:
    - name: JMRaidSetup
    - command: JMRaidSetup.exe
    - location: Startup
    - user: .DEFAULT
  - 3404:
    - name: JMRaidTool
    - command: JMRaidTool.exe
    - location: Startup
    - user: .DEFAULT
  - 3405:
    - name: jobexec
    - command: jobexec.dll
    - location: Startup
    - user: .DEFAULT
  - 3406:
    - name: joy
    - command: joy.cpl
    - location: Startup
    - user: .DEFAULT
  - 3407:
    - name: jscript
    - command: jscript.dll
    - location: Startup
    - user: .DEFAULT
  - 3408:
    - name: jsproxy
    - command: jsproxy.dll
    - location: Startup
    - user: .DEFAULT
  - 3409:
    - name: jupdate-1.6.0_13-b03
    - command: jupdate-1.6.0_13-b03.log
    - location: Startup
    - user: .DEFAULT
  - 3410:
    - name: jupdate-1.6.0_15-b03
    - command: jupdate-1.6.0_15-b03.log
    - location: Startup
    - user: .DEFAULT
  - 3411:
    - name: jupdate-1.6.0_17-b04
    - command: jupdate-1.6.0_17-b04.log
    - location: Startup
    - user: .DEFAULT
  - 3412:
    - name: jupdate-1.6.0_20-b02
    - command: jupdate-1.6.0_20-b02.log
    - location: Startup
    - user: .DEFAULT
  - 3413:
    - name: jupdate-1.6.0_21-b07
    - command: jupdate-1.6.0_21-b07.log
    - location: Startup
    - user: .DEFAULT
  - 3414:
    - name: jupdate-1.6.0_22-b04
    - command: jupdate-1.6.0_22-b04.log
    - location: Startup
    - user: .DEFAULT
  - 3415:
    - name: jupdate-1.6.0_23-b05
    - command: jupdate-1.6.0_23-b05.log
    - location: Startup
    - user: .DEFAULT
  - 3416:
    - name: jupdate-1.6.0_24-b07
    - command: jupdate-1.6.0_24-b07.log
    - location: Startup
    - user: .DEFAULT
  - 3417:
    - name: jupdate-1.6.0_26-b03
    - command: jupdate-1.6.0_26-b03.log
    - location: Startup
    - user: .DEFAULT
  - 3418:
    - name: jupdate-1.6.0_29-b11
    - command: jupdate-1.6.0_29-b11.log
    - location: Startup
    - user: .DEFAULT
  - 3419:
    - name: jupdate-1.7.0_51-b13
    - command: jupdate-1.7.0_51-b13.log
    - location: Startup
    - user: .DEFAULT
  - 3420:
    - name: jupdate-1.7.0_60-b19
    - command: jupdate-1.7.0_60-b19.log
    - location: Startup
    - user: .DEFAULT
  - 3421:
    - name: jupdate-1.7.0_65-b20
    - command: jupdate-1.7.0_65-b20.log
    - location: Startup
    - user: .DEFAULT
  - 3422:
    - name: kanji_1
    - command: kanji_1.uce
    - location: Startup
    - user: .DEFAULT
  - 3423:
    - name: kanji_2
    - command: kanji_2.uce
    - location: Startup
    - user: .DEFAULT
  - 3424:
    - name: kb16
    - command: kb16.com
    - location: Startup
    - user: .DEFAULT
  - 3425:
    - name: KBDAL
    - command: KBDAL.DLL
    - location: Startup
    - user: .DEFAULT
  - 3426:
    - name: kbdaze
    - command: kbdaze.dll
    - location: Startup
    - user: .DEFAULT
  - 3427:
    - name: kbdazel
    - command: kbdazel.dll
    - location: Startup
    - user: .DEFAULT
  - 3428:
    - name: kbdbe
    - command: kbdbe.dll
    - location: Startup
    - user: .DEFAULT
  - 3429:
    - name: kbdbene
    - command: kbdbene.dll
    - location: Startup
    - user: .DEFAULT
  - 3430:
    - name: kbdbhc
    - command: kbdbhc.dll
    - location: Startup
    - user: .DEFAULT
  - 3431:
    - name: kbdblr
    - command: kbdblr.dll
    - location: Startup
    - user: .DEFAULT
  - 3432:
    - name: kbdbr
    - command: kbdbr.dll
    - location: Startup
    - user: .DEFAULT
  - 3433:
    - name: kbdbu
    - command: kbdbu.dll
    - location: Startup
    - user: .DEFAULT
  - 3434:
    - name: kbdca
    - command: kbdca.dll
    - location: Startup
    - user: .DEFAULT
  - 3435:
    - name: kbdcan
    - command: kbdcan.dll
    - location: Startup
    - user: .DEFAULT
  - 3436:
    - name: kbdcr
    - command: kbdcr.dll
    - location: Startup
    - user: .DEFAULT
  - 3437:
    - name: kbdcz
    - command: kbdcz.dll
    - location: Startup
    - user: .DEFAULT
  - 3438:
    - name: kbdcz1
    - command: kbdcz1.dll
    - location: Startup
    - user: .DEFAULT
  - 3439:
    - name: kbdcz2
    - command: kbdcz2.dll
    - location: Startup
    - user: .DEFAULT
  - 3440:
    - name: kbdda
    - command: kbdda.dll
    - location: Startup
    - user: .DEFAULT
  - 3441:
    - name: kbddv
    - command: kbddv.dll
    - location: Startup
    - user: .DEFAULT
  - 3442:
    - name: kbdes
    - command: kbdes.dll
    - location: Startup
    - user: .DEFAULT
  - 3443:
    - name: kbdest
    - command: kbdest.dll
    - location: Startup
    - user: .DEFAULT
  - 3444:
    - name: kbdfc
    - command: kbdfc.dll
    - location: Startup
    - user: .DEFAULT
  - 3445:
    - name: kbdfi
    - command: kbdfi.dll
    - location: Startup
    - user: .DEFAULT
  - 3446:
    - name: kbdfi1
    - command: kbdfi1.dll
    - location: Startup
    - user: .DEFAULT
  - 3447:
    - name: kbdfo
    - command: kbdfo.dll
    - location: Startup
    - user: .DEFAULT
  - 3448:
    - name: kbdfr
    - command: kbdfr.dll
    - location: Startup
    - user: .DEFAULT
  - 3449:
    - name: kbdgae
    - command: kbdgae.dll
    - location: Startup
    - user: .DEFAULT
  - 3450:
    - name: kbdgkl
    - command: kbdgkl.dll
    - location: Startup
    - user: .DEFAULT
  - 3451:
    - name: kbdgr
    - command: kbdgr.dll
    - location: Startup
    - user: .DEFAULT
  - 3452:
    - name: kbdgr1
    - command: kbdgr1.dll
    - location: Startup
    - user: .DEFAULT
  - 3453:
    - name: kbdhe
    - command: kbdhe.dll
    - location: Startup
    - user: .DEFAULT
  - 3454:
    - name: kbdhe220
    - command: kbdhe220.dll
    - location: Startup
    - user: .DEFAULT
  - 3455:
    - name: kbdhe319
    - command: kbdhe319.dll
    - location: Startup
    - user: .DEFAULT
  - 3456:
    - name: kbdhela2
    - command: kbdhela2.dll
    - location: Startup
    - user: .DEFAULT
  - 3457:
    - name: kbdhela3
    - command: kbdhela3.dll
    - location: Startup
    - user: .DEFAULT
  - 3458:
    - name: kbdhept
    - command: kbdhept.dll
    - location: Startup
    - user: .DEFAULT
  - 3459:
    - name: kbdhu
    - command: kbdhu.dll
    - location: Startup
    - user: .DEFAULT
  - 3460:
    - name: kbdhu1
    - command: kbdhu1.dll
    - location: Startup
    - user: .DEFAULT
  - 3461:
    - name: kbdic
    - command: kbdic.dll
    - location: Startup
    - user: .DEFAULT
  - 3462:
    - name: kbdinbe1
    - command: kbdinbe1.dll
    - location: Startup
    - user: .DEFAULT
  - 3463:
    - name: kbdinben
    - command: kbdinben.dll
    - location: Startup
    - user: .DEFAULT
  - 3464:
    - name: kbdinmal
    - command: kbdinmal.dll
    - location: Startup
    - user: .DEFAULT
  - 3465:
    - name: kbdir
    - command: kbdir.dll
    - location: Startup
    - user: .DEFAULT
  - 3466:
    - name: kbdit
    - command: kbdit.dll
    - location: Startup
    - user: .DEFAULT
  - 3467:
    - name: kbdit142
    - command: kbdit142.dll
    - location: Startup
    - user: .DEFAULT
  - 3468:
    - name: kbdiultn
    - command: kbdiultn.dll
    - location: Startup
    - user: .DEFAULT
  - 3469:
    - name: kbdkaz
    - command: kbdkaz.dll
    - location: Startup
    - user: .DEFAULT
  - 3470:
    - name: kbdkyr
    - command: kbdkyr.dll
    - location: Startup
    - user: .DEFAULT
  - 3471:
    - name: kbdla
    - command: kbdla.dll
    - location: Startup
    - user: .DEFAULT
  - 3472:
    - name: kbdlt
    - command: kbdlt.dll
    - location: Startup
    - user: .DEFAULT
  - 3473:
    - name: kbdlt1
    - command: kbdlt1.dll
    - location: Startup
    - user: .DEFAULT
  - 3474:
    - name: kbdlv
    - command: kbdlv.dll
    - location: Startup
    - user: .DEFAULT
  - 3475:
    - name: kbdlv1
    - command: kbdlv1.dll
    - location: Startup
    - user: .DEFAULT
  - 3476:
    - name: kbdmac
    - command: kbdmac.dll
    - location: Startup
    - user: .DEFAULT
  - 3477:
    - name: kbdmaori
    - command: kbdmaori.dll
    - location: Startup
    - user: .DEFAULT
  - 3478:
    - name: kbdmlt47
    - command: kbdmlt47.dll
    - location: Startup
    - user: .DEFAULT
  - 3479:
    - name: kbdmlt48
    - command: kbdmlt48.dll
    - location: Startup
    - user: .DEFAULT
  - 3480:
    - name: kbdmon
    - command: kbdmon.dll
    - location: Startup
    - user: .DEFAULT
  - 3481:
    - name: kbdne
    - command: kbdne.dll
    - location: Startup
    - user: .DEFAULT
  - 3482:
    - name: kbdnec
    - command: kbdnec.dll
    - location: Startup
    - user: .DEFAULT
  - 3483:
    - name: kbdnepr
    - command: kbdnepr.dll
    - location: Startup
    - user: .DEFAULT
  - 3484:
    - name: kbdno
    - command: kbdno.dll
    - location: Startup
    - user: .DEFAULT
  - 3485:
    - name: kbdno1
    - command: kbdno1.dll
    - location: Startup
    - user: .DEFAULT
  - 3486:
    - name: kbdpash
    - command: kbdpash.dll
    - location: Startup
    - user: .DEFAULT
  - 3487:
    - name: kbdpl
    - command: kbdpl.dll
    - location: Startup
    - user: .DEFAULT
  - 3488:
    - name: kbdpl1
    - command: kbdpl1.dll
    - location: Startup
    - user: .DEFAULT
  - 3489:
    - name: kbdpo
    - command: kbdpo.dll
    - location: Startup
    - user: .DEFAULT
  - 3490:
    - name: kbdro
    - command: kbdro.dll
    - location: Startup
    - user: .DEFAULT
  - 3491:
    - name: kbdru
    - command: kbdru.dll
    - location: Startup
    - user: .DEFAULT
  - 3492:
    - name: kbdru1
    - command: kbdru1.dll
    - location: Startup
    - user: .DEFAULT
  - 3493:
    - name: kbdsf
    - command: kbdsf.dll
    - location: Startup
    - user: .DEFAULT
  - 3494:
    - name: kbdsg
    - command: kbdsg.dll
    - location: Startup
    - user: .DEFAULT
  - 3495:
    - name: kbdsl
    - command: kbdsl.dll
    - location: Startup
    - user: .DEFAULT
  - 3496:
    - name: kbdsl1
    - command: kbdsl1.dll
    - location: Startup
    - user: .DEFAULT
  - 3497:
    - name: kbdsmsfi
    - command: kbdsmsfi.dll
    - location: Startup
    - user: .DEFAULT
  - 3498:
    - name: kbdsmsno
    - command: kbdsmsno.dll
    - location: Startup
    - user: .DEFAULT
  - 3499:
    - name: kbdsp
    - command: kbdsp.dll
    - location: Startup
    - user: .DEFAULT
  - 3500:
    - name: kbdsw
    - command: kbdsw.dll
    - location: Startup
    - user: .DEFAULT
  - 3501:
    - name: kbdtat
    - command: kbdtat.dll
    - location: Startup
    - user: .DEFAULT
  - 3502:
    - name: kbdtuf
    - command: kbdtuf.dll
    - location: Startup
    - user: .DEFAULT
  - 3503:
    - name: kbdtuq
    - command: kbdtuq.dll
    - location: Startup
    - user: .DEFAULT
  - 3504:
    - name: kbduk
    - command: kbduk.dll
    - location: Startup
    - user: .DEFAULT
  - 3505:
    - name: kbdukx
    - command: kbdukx.dll
    - location: Startup
    - user: .DEFAULT
  - 3506:
    - name: kbdur
    - command: kbdur.dll
    - location: Startup
    - user: .DEFAULT
  - 3507:
    - name: kbdus
    - command: kbdus.dll
    - location: Startup
    - user: .DEFAULT
  - 3508:
    - name: kbdusl
    - command: kbdusl.dll
    - location: Startup
    - user: .DEFAULT
  - 3509:
    - name: kbdusr
    - command: kbdusr.dll
    - location: Startup
    - user: .DEFAULT
  - 3510:
    - name: kbdusx
    - command: kbdusx.dll
    - location: Startup
    - user: .DEFAULT
  - 3511:
    - name: kbduzb
    - command: kbduzb.dll
    - location: Startup
    - user: .DEFAULT
  - 3512:
    - name: kbdycc
    - command: kbdycc.dll
    - location: Startup
    - user: .DEFAULT
  - 3513:
    - name: kbdycl
    - command: kbdycl.dll
    - location: Startup
    - user: .DEFAULT
  - 3514:
    - name: kd1394
    - command: kd1394.dll
    - location: Startup
    - user: .DEFAULT
  - 3515:
    - name: kdcom
    - command: kdcom.dll
    - location: Startup
    - user: .DEFAULT
  - 3516:
    - name: kerberos
    - command: kerberos.dll
    - location: Startup
    - user: .DEFAULT
  - 3517:
    - name: kernel32
    - command: kernel32.dll
    - location: Startup
    - user: .DEFAULT
  - 3518:
    - name: key01
    - command: key01.sys
    - location: Startup
    - user: .DEFAULT
  - 3519:
    - name: keyboard
    - command: keyboard.drv
    - location: Startup
    - user: .DEFAULT
  - 3520:
    - name: keyboard
    - command: keyboard.sys
    - location: Startup
    - user: .DEFAULT
  - 3521:
    - name: keymgr
    - command: keymgr.dll
    - location: Startup
    - user: .DEFAULT
  - 3522:
    - name: kmddsp
    - command: kmddsp.tsp
    - location: Startup
    - user: .DEFAULT
  - 3523:
    - name: kmsvc
    - command: kmsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 3524:
    - name: korean
    - command: korean.uce
    - location: Startup
    - user: .DEFAULT
  - 3525:
    - name: krnl386
    - command: krnl386.exe
    - location: Startup
    - user: .DEFAULT
  - 3526:
    - name: ksproxy
    - command: ksproxy.ax
    - location: Startup
    - user: .DEFAULT
  - 3527:
    - name: kstvtune
    - command: kstvtune.ax
    - location: Startup
    - user: .DEFAULT
  - 3528:
    - name: ksuser
    - command: ksuser.dll
    - location: Startup
    - user: .DEFAULT
  - 3529:
    - name: kswdmcap
    - command: kswdmcap.ax
    - location: Startup
    - user: .DEFAULT
  - 3530:
    - name: ksxbar
    - command: ksxbar.ax
    - location: Startup
    - user: .DEFAULT
  - 3531:
    - name: l2gpstore
    - command: l2gpstore.dll
    - location: Startup
    - user: .DEFAULT
  - 3532:
    - name: l3codeca
    - command: l3codeca.acm
    - location: Startup
    - user: .DEFAULT
  - 3533:
    - name: l3codecp
    - command: l3codecp.acm
    - location: Startup
    - user: .DEFAULT
  - 3534:
    - name: l3codecx
    - command: l3codecx.ax
    - location: Startup
    - user: .DEFAULT
  - 3535:
    - name: label
    - command: label.exe
    - location: Startup
    - user: .DEFAULT
  - 3536:
    - name: langwrbk
    - command: langwrbk.dll
    - location: Startup
    - user: .DEFAULT
  - 3537:
    - name: lanman
    - command: lanman.drv
    - location: Startup
    - user: .DEFAULT
  - 3538:
    - name: LAPRXY
    - command: LAPRXY.dll
    - location: Startup
    - user: .DEFAULT
  - 3539:
    - name: LegitCheckControl
    - command: LegitCheckControl.dll
    - location: Startup
    - user: .DEFAULT
  - 3540:
    - name: leon3_32
    - command: leon3_32.dll
    - location: Startup
    - user: .DEFAULT
  - 3541:
    - name: licdll
    - command: licdll.dll
    - location: Startup
    - user: .DEFAULT
  - 3542:
    - name: licmgr10
    - command: licmgr10.dll
    - location: Startup
    - user: .DEFAULT
  - 3543:
    - name: licwmi
    - command: licwmi.dll
    - location: Startup
    - user: .DEFAULT
  - 3544:
    - name: lights
    - command: lights.exe
    - location: Startup
    - user: .DEFAULT
  - 3545:
    - name: linkinfo
    - command: linkinfo.dll
    - location: Startup
    - user: .DEFAULT
  - 3546:
    - name: lmhsvc
    - command: lmhsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 3547:
    - name: lmrt
    - command: lmrt.dll
    - location: Startup
    - user: .DEFAULT
  - 3548:
    - name: lnkstub
    - command: lnkstub.exe
    - location: Startup
    - user: .DEFAULT
  - 3549:
    - name: loadfix
    - command: loadfix.com
    - location: Startup
    - user: .DEFAULT
  - 3550:
    - name: loadperf
    - command: loadperf.dll
    - location: Startup
    - user: .DEFAULT
  - 3551:
    - name: locale
    - command: locale.nls
    - location: Startup
    - user: .DEFAULT
  - 3552:
    - name: localsec
    - command: localsec.dll
    - location: Startup
    - user: .DEFAULT
  - 3553:
    - name: localspl
    - command: localspl.dll
    - location: Startup
    - user: .DEFAULT
  - 3554:
    - name: localui
    - command: localui.dll
    - location: Startup
    - user: .DEFAULT
  - 3555:
    - name: locator
    - command: locator.exe
    - location: Startup
    - user: .DEFAULT
  - 3556:
    - name: lodctr
    - command: lodctr.exe
    - location: Startup
    - user: .DEFAULT
  - 3557:
    - name: logagent
    - command: logagent.exe
    - location: Startup
    - user: .DEFAULT
  - 3558:
    - name: loghours
    - command: loghours.dll
    - location: Startup
    - user: .DEFAULT
  - 3559:
    - name: login
    - command: login.cmd
    - location: Startup
    - user: .DEFAULT
  - 3560:
    - name: logman
    - command: logman.exe
    - location: Startup
    - user: .DEFAULT
  - 3561:
    - name: logoff
    - command: logoff.exe
    - location: Startup
    - user: .DEFAULT
  - 3562:
    - name: logon
    - command: logon.scr
    - location: Startup
    - user: .DEFAULT
  - 3563:
    - name: logonui
    - command: logonui.exe
    - location: Startup
    - user: .DEFAULT
  - 3564:
    - name: logonui.exe
    - command: logonui.exe.manifest
    - location: Startup
    - user: .DEFAULT
  - 3565:
    - name: LoopyMusic
    - command: LoopyMusic.wav
    - location: Startup
    - user: .DEFAULT
  - 3566:
    - name: lpk
    - command: lpk.dll
    - location: Startup
    - user: .DEFAULT
  - 3567:
    - name: lpq
    - command: lpq.exe
    - location: Startup
    - user: .DEFAULT
  - 3568:
    - name: lpr
    - command: lpr.exe
    - location: Startup
    - user: .DEFAULT
  - 3569:
    - name: lprhelp
    - command: lprhelp.dll
    - location: Startup
    - user: .DEFAULT
  - 3570:
    - name: lprmonui
    - command: lprmonui.dll
    - location: Startup
    - user: .DEFAULT
  - 3571:
    - name: lsasrv
    - command: lsasrv.dll
    - location: Startup
    - user: .DEFAULT
  - 3572:
    - name: lsass
    - command: lsass.exe
    - location: Startup
    - user: .DEFAULT
  - 3573:
    - name: lusrmgr
    - command: lusrmgr.msc
    - location: Startup
    - user: .DEFAULT
  - 3574:
    - name: lz32
    - command: lz32.dll
    - location: Startup
    - user: .DEFAULT
  - 3575:
    - name: lzexpand
    - command: lzexpand.dll
    - location: Startup
    - user: .DEFAULT
  - 3576:
    - name: l_except
    - command: l_except.nls
    - location: Startup
    - user: .DEFAULT
  - 3577:
    - name: l_intl
    - command: l_intl.nls
    - location: Startup
    - user: .DEFAULT
  - 3578:
    - name: magnify
    - command: magnify.exe
    - location: Startup
    - user: .DEFAULT
  - 3579:
    - name: mag_hook
    - command: mag_hook.dll
    - location: Startup
    - user: .DEFAULT
  - 3580:
    - name: main
    - command: main.cpl
    - location: Startup
    - user: .DEFAULT
  - 3581:
    - name: makecab
    - command: makecab.exe
    - location: Startup
    - user: .DEFAULT
  - 3582:
    - name: mapi32
    - command: mapi32.dll
    - location: Startup
    - user: .DEFAULT
  - 3583:
    - name: mapistub
    - command: mapistub.dll
    - location: Startup
    - user: .DEFAULT
  - 3584:
    - name: mcastmib
    - command: mcastmib.dll
    - location: Startup
    - user: .DEFAULT
  - 3585:
    - name: mcd32
    - command: mcd32.dll
    - location: Startup
    - user: .DEFAULT
  - 3586:
    - name: mcdsrv32
    - command: mcdsrv32.dll
    - location: Startup
    - user: .DEFAULT
  - 3587:
    - name: mchgrcoi
    - command: mchgrcoi.dll
    - location: Startup
    - user: .DEFAULT
  - 3588:
    - name: mciavi
    - command: mciavi.drv
    - location: Startup
    - user: .DEFAULT
  - 3589:
    - name: mciavi32
    - command: mciavi32.dll
    - location: Startup
    - user: .DEFAULT
  - 3590:
    - name: mcicda
    - command: mcicda.dll
    - location: Startup
    - user: .DEFAULT
  - 3591:
    - name: mciole16
    - command: mciole16.dll
    - location: Startup
    - user: .DEFAULT
  - 3592:
    - name: mciole32
    - command: mciole32.dll
    - location: Startup
    - user: .DEFAULT
  - 3593:
    - name: mciqtz32
    - command: mciqtz32.dll
    - location: Startup
    - user: .DEFAULT
  - 3594:
    - name: mciseq
    - command: mciseq.dll
    - location: Startup
    - user: .DEFAULT
  - 3595:
    - name: mciseq
    - command: mciseq.drv
    - location: Startup
    - user: .DEFAULT
  - 3596:
    - name: mciwave
    - command: mciwave.dll
    - location: Startup
    - user: .DEFAULT
  - 3597:
    - name: mciwave
    - command: mciwave.drv
    - location: Startup
    - user: .DEFAULT
  - 3598:
    - name: mdhcp
    - command: mdhcp.dll
    - location: Startup
    - user: .DEFAULT
  - 3599:
    - name: mdminst
    - command: mdminst.dll
    - location: Startup
    - user: .DEFAULT
  - 3600:
    - name: mdmxsdk
    - command: mdmxsdk.dll
    - location: Startup
    - user: .DEFAULT
  - 3601:
    - name: mdwmdmsp
    - command: mdwmdmsp.dll
    - location: Startup
    - user: .DEFAULT
  - 3602:
    - name: mem
    - command: mem.exe
    - location: Startup
    - user: .DEFAULT
  - 3603:
    - name: mf3216
    - command: mf3216.dll
    - location: Startup
    - user: .DEFAULT
  - 3604:
    - name: mfc100
    - command: mfc100.dll
    - location: Startup
    - user: .DEFAULT
  - 3605:
    - name: mfc100chs
    - command: mfc100chs.dll
    - location: Startup
    - user: .DEFAULT
  - 3606:
    - name: mfc100cht
    - command: mfc100cht.dll
    - location: Startup
    - user: .DEFAULT
  - 3607:
    - name: mfc100deu
    - command: mfc100deu.dll
    - location: Startup
    - user: .DEFAULT
  - 3608:
    - name: mfc100enu
    - command: mfc100enu.dll
    - location: Startup
    - user: .DEFAULT
  - 3609:
    - name: mfc100esn
    - command: mfc100esn.dll
    - location: Startup
    - user: .DEFAULT
  - 3610:
    - name: mfc100fra
    - command: mfc100fra.dll
    - location: Startup
    - user: .DEFAULT
  - 3611:
    - name: mfc100ita
    - command: mfc100ita.dll
    - location: Startup
    - user: .DEFAULT
  - 3612:
    - name: mfc100jpn
    - command: mfc100jpn.dll
    - location: Startup
    - user: .DEFAULT
  - 3613:
    - name: mfc100kor
    - command: mfc100kor.dll
    - location: Startup
    - user: .DEFAULT
  - 3614:
    - name: mfc100rus
    - command: mfc100rus.dll
    - location: Startup
    - user: .DEFAULT
  - 3615:
    - name: mfc100u
    - command: mfc100u.dll
    - location: Startup
    - user: .DEFAULT
  - 3616:
    - name: mfc110
    - command: mfc110.dll
    - location: Startup
    - user: .DEFAULT
  - 3617:
    - name: mfc110u
    - command: mfc110u.dll
    - location: Startup
    - user: .DEFAULT
  - 3618:
    - name: mfc40
    - command: mfc40.dll
    - location: Startup
    - user: .DEFAULT
  - 3619:
    - name: mfc40u
    - command: mfc40u.dll
    - location: Startup
    - user: .DEFAULT
  - 3620:
    - name: mfc42
    - command: mfc42.dll
    - location: Startup
    - user: .DEFAULT
  - 3621:
    - name: mfc42u
    - command: mfc42u.dll
    - location: Startup
    - user: .DEFAULT
  - 3622:
    - name: MFC71
    - command: MFC71.dll
    - location: Startup
    - user: .DEFAULT
  - 3623:
    - name: mfcm100
    - command: mfcm100.dll
    - location: Startup
    - user: .DEFAULT
  - 3624:
    - name: mfcm100u
    - command: mfcm100u.dll
    - location: Startup
    - user: .DEFAULT
  - 3625:
    - name: mfcm110
    - command: mfcm110.dll
    - location: Startup
    - user: .DEFAULT
  - 3626:
    - name: mfcm110u
    - command: mfcm110u.dll
    - location: Startup
    - user: .DEFAULT
  - 3627:
    - name: mfcsubs
    - command: mfcsubs.dll
    - location: Startup
    - user: .DEFAULT
  - 3628:
    - name: MFPLAT
    - command: MFPLAT.dll
    - location: Startup
    - user: .DEFAULT
  - 3629:
    - name: mgmtapi
    - command: mgmtapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3630:
    - name: mgxasio2
    - command: mgxasio2.dll
    - location: Startup
    - user: .DEFAULT
  - 3631:
    - name: mgxcdr
    - command: mgxcdr.txt
    - location: Startup
    - user: .DEFAULT
  - 3632:
    - name: mgxoschk
    - command: mgxoschk.dll
    - location: Startup
    - user: .DEFAULT
  - 3633:
    - name: mib
    - command: mib.bin
    - location: Startup
    - user: .DEFAULT
  - 3634:
    - name: microsoft.managementconsole
    - command: microsoft.managementconsole.dll
    - location: Startup
    - user: .DEFAULT
  - 3635:
    - name: midimap
    - command: midimap.dll
    - location: Startup
    - user: .DEFAULT
  - 3636:
    - name: miglibnt
    - command: miglibnt.dll
    - location: Startup
    - user: .DEFAULT
  - 3637:
    - name: migpwd
    - command: migpwd.exe
    - location: Startup
    - user: .DEFAULT
  - 3638:
    - name: mimefilt
    - command: mimefilt.dll
    - location: Startup
    - user: .DEFAULT
  - 3639:
    - name: mindex
    - command: mindex.dll
    - location: Startup
    - user: .DEFAULT
  - 3640:
    - name: mlang
    - command: mlang.dat
    - location: Startup
    - user: .DEFAULT
  - 3641:
    - name: mlang
    - command: mlang.dll
    - location: Startup
    - user: .DEFAULT
  - 3642:
    - name: mlfcache
    - command: mlfcache.dat
    - location: Startup
    - user: .DEFAULT
  - 3643:
    - name: mll_hp
    - command: mll_hp.dll
    - location: Startup
    - user: .DEFAULT
  - 3644:
    - name: mll_mtf
    - command: mll_mtf.dll
    - location: Startup
    - user: .DEFAULT
  - 3645:
    - name: mll_qic
    - command: mll_qic.dll
    - location: Startup
    - user: .DEFAULT
  - 3646:
    - name: mmc
    - command: mmc.exe
    - location: Startup
    - user: .DEFAULT
  - 3647:
    - name: mmcbase
    - command: mmcbase.dll
    - location: Startup
    - user: .DEFAULT
  - 3648:
    - name: mmcex
    - command: mmcex.dll
    - location: Startup
    - user: .DEFAULT
  - 3649:
    - name: mmcfxcommon
    - command: mmcfxcommon.dll
    - location: Startup
    - user: .DEFAULT
  - 3650:
    - name: mmcndmgr
    - command: mmcndmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 3651:
    - name: mmcperf
    - command: mmcperf.exe
    - location: Startup
    - user: .DEFAULT
  - 3652:
    - name: mmcshext
    - command: mmcshext.dll
    - location: Startup
    - user: .DEFAULT
  - 3653:
    - name: mmdriver
    - command: mmdriver.inf
    - location: Startup
    - user: .DEFAULT
  - 3654:
    - name: mmdrv
    - command: mmdrv.dll
    - location: Startup
    - user: .DEFAULT
  - 3655:
    - name: mmfutil
    - command: mmfutil.dll
    - location: Startup
    - user: .DEFAULT
  - 3656:
    - name: mmsys
    - command: mmsys.cpl
    - location: Startup
    - user: .DEFAULT
  - 3657:
    - name: mmsystem
    - command: mmsystem.dll
    - location: Startup
    - user: .DEFAULT
  - 3658:
    - name: mmtask
    - command: mmtask.tsk
    - location: Startup
    - user: .DEFAULT
  - 3659:
    - name: mmutilse
    - command: mmutilse.dll
    - location: Startup
    - user: .DEFAULT
  - 3660:
    - name: mnmdd
    - command: mnmdd.dll
    - location: Startup
    - user: .DEFAULT
  - 3661:
    - name: mnmsrvc
    - command: mnmsrvc.exe
    - location: Startup
    - user: .DEFAULT
  - 3662:
    - name: mobsync
    - command: mobsync.dll
    - location: Startup
    - user: .DEFAULT
  - 3663:
    - name: mobsync
    - command: mobsync.exe
    - location: Startup
    - user: .DEFAULT
  - 3664:
    - name: mode
    - command: mode.com
    - location: Startup
    - user: .DEFAULT
  - 3665:
    - name: modemui
    - command: modemui.dll
    - location: Startup
    - user: .DEFAULT
  - 3666:
    - name: modex
    - command: modex.dll
    - location: Startup
    - user: .DEFAULT
  - 3667:
    - name: more
    - command: more.com
    - location: Startup
    - user: .DEFAULT
  - 3668:
    - name: moricons
    - command: moricons.dll
    - location: Startup
    - user: .DEFAULT
  - 3669:
    - name: mountvol
    - command: mountvol.exe
    - location: Startup
    - user: .DEFAULT
  - 3670:
    - name: mouse
    - command: mouse.drv
    - location: Startup
    - user: .DEFAULT
  - 3671:
    - name: MP43DECD
    - command: MP43DECD.dll
    - location: Startup
    - user: .DEFAULT
  - 3672:
    - name: MP43DMOD
    - command: MP43DMOD.dll
    - location: Startup
    - user: .DEFAULT
  - 3673:
    - name: mp4sdecd
    - command: mp4sdecd.dll
    - location: Startup
    - user: .DEFAULT
  - 3674:
    - name: MP4SDMOD
    - command: MP4SDMOD.dll
    - location: Startup
    - user: .DEFAULT
  - 3675:
    - name: mp4sds32
    - command: mp4sds32.ax
    - location: Startup
    - user: .DEFAULT
  - 3676:
    - name: mpeg2data
    - command: mpeg2data.ax
    - location: Startup
    - user: .DEFAULT
  - 3677:
    - name: mpg2splt
    - command: mpg2splt.ax
    - location: Startup
    - user: .DEFAULT
  - 3678:
    - name: mpg4c32
    - command: mpg4c32.dll
    - location: Startup
    - user: .DEFAULT
  - 3679:
    - name: MPG4DECD
    - command: MPG4DECD.dll
    - location: Startup
    - user: .DEFAULT
  - 3680:
    - name: MPG4DMOD
    - command: MPG4DMOD.dll
    - location: Startup
    - user: .DEFAULT
  - 3681:
    - name: mpg4ds32
    - command: mpg4ds32.ax
    - location: Startup
    - user: .DEFAULT
  - 3682:
    - name: mplay32
    - command: mplay32.exe
    - location: Startup
    - user: .DEFAULT
  - 3683:
    - name: mpnotify
    - command: mpnotify.exe
    - location: Startup
    - user: .DEFAULT
  - 3684:
    - name: mpr
    - command: mpr.dll
    - location: Startup
    - user: .DEFAULT
  - 3685:
    - name: mprapi
    - command: mprapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3686:
    - name: mprddm
    - command: mprddm.dll
    - location: Startup
    - user: .DEFAULT
  - 3687:
    - name: mprdim
    - command: mprdim.dll
    - location: Startup
    - user: .DEFAULT
  - 3688:
    - name: mprmsg
    - command: mprmsg.dll
    - location: Startup
    - user: .DEFAULT
  - 3689:
    - name: mprui
    - command: mprui.dll
    - location: Startup
    - user: .DEFAULT
  - 3690:
    - name: MpSigStub
    - command: MpSigStub.exe
    - location: Startup
    - user: .DEFAULT
  - 3691:
    - name: mqad
    - command: mqad.dll
    - location: Startup
    - user: .DEFAULT
  - 3692:
    - name: mqbkup
    - command: mqbkup.exe
    - location: Startup
    - user: .DEFAULT
  - 3693:
    - name: mqcertui
    - command: mqcertui.dll
    - location: Startup
    - user: .DEFAULT
  - 3694:
    - name: mqdscli
    - command: mqdscli.dll
    - location: Startup
    - user: .DEFAULT
  - 3695:
    - name: mqgentr
    - command: mqgentr.dll
    - location: Startup
    - user: .DEFAULT
  - 3696:
    - name: mqise
    - command: mqise.dll
    - location: Startup
    - user: .DEFAULT
  - 3697:
    - name: mqlogmgr
    - command: mqlogmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 3698:
    - name: mqoa
    - command: mqoa.dll
    - location: Startup
    - user: .DEFAULT
  - 3699:
    - name: mqoa
    - command: mqoa.tlb
    - location: Startup
    - user: .DEFAULT
  - 3700:
    - name: mqoa10
    - command: mqoa10.tlb
    - location: Startup
    - user: .DEFAULT
  - 3701:
    - name: mqoa20
    - command: mqoa20.tlb
    - location: Startup
    - user: .DEFAULT
  - 3702:
    - name: mqperf
    - command: mqperf.dll
    - location: Startup
    - user: .DEFAULT
  - 3703:
    - name: mqperf
    - command: mqperf.ini
    - location: Startup
    - user: .DEFAULT
  - 3704:
    - name: mqprfsym
    - command: mqprfsym.h
    - location: Startup
    - user: .DEFAULT
  - 3705:
    - name: mqqm
    - command: mqqm.dll
    - location: Startup
    - user: .DEFAULT
  - 3706:
    - name: mqrt
    - command: mqrt.dll
    - location: Startup
    - user: .DEFAULT
  - 3707:
    - name: mqrtdep
    - command: mqrtdep.dll
    - location: Startup
    - user: .DEFAULT
  - 3708:
    - name: mqsec
    - command: mqsec.dll
    - location: Startup
    - user: .DEFAULT
  - 3709:
    - name: mqsnap
    - command: mqsnap.dll
    - location: Startup
    - user: .DEFAULT
  - 3710:
    - name: mqsvc
    - command: mqsvc.exe
    - location: Startup
    - user: .DEFAULT
  - 3711:
    - name: mqtgsvc
    - command: mqtgsvc.exe
    - location: Startup
    - user: .DEFAULT
  - 3712:
    - name: mqtrig
    - command: mqtrig.dll
    - location: Startup
    - user: .DEFAULT
  - 3713:
    - name: mqupgrd
    - command: mqupgrd.dll
    - location: Startup
    - user: .DEFAULT
  - 3714:
    - name: mqutil
    - command: mqutil.dll
    - location: Startup
    - user: .DEFAULT
  - 3715:
    - name: mrinfo
    - command: mrinfo.exe
    - location: Startup
    - user: .DEFAULT
  - 3716:
    - name: MRT
    - command: MRT.exe
    - location: Startup
    - user: .DEFAULT
  - 3717:
    - name: msaatext
    - command: msaatext.dll
    - location: Startup
    - user: .DEFAULT
  - 3718:
    - name: msacm
    - command: msacm.dll
    - location: Startup
    - user: .DEFAULT
  - 3719:
    - name: msacm32
    - command: msacm32.dll
    - location: Startup
    - user: .DEFAULT
  - 3720:
    - name: msacm32
    - command: msacm32.drv
    - location: Startup
    - user: .DEFAULT
  - 3721:
    - name: msadds32
    - command: msadds32.ax
    - location: Startup
    - user: .DEFAULT
  - 3722:
    - name: msadodc
    - command: msadodc.ocx
    - location: Startup
    - user: .DEFAULT
  - 3723:
    - name: msadp32
    - command: msadp32.acm
    - location: Startup
    - user: .DEFAULT
  - 3724:
    - name: msafd
    - command: msafd.dll
    - location: Startup
    - user: .DEFAULT
  - 3725:
    - name: msapsspc
    - command: msapsspc.dll
    - location: Startup
    - user: .DEFAULT
  - 3726:
    - name: msasn1
    - command: msasn1.dll
    - location: Startup
    - user: .DEFAULT
  - 3727:
    - name: msaud32
    - command: msaud32.acm
    - location: Startup
    - user: .DEFAULT
  - 3728:
    - name: msaudite
    - command: msaudite.dll
    - location: Startup
    - user: .DEFAULT
  - 3729:
    - name: mscat32
    - command: mscat32.dll
    - location: Startup
    - user: .DEFAULT
  - 3730:
    - name: mscdexnt
    - command: mscdexnt.exe
    - location: Startup
    - user: .DEFAULT
  - 3731:
    - name: mscms
    - command: mscms.dll
    - location: Startup
    - user: .DEFAULT
  - 3732:
    - name: Mscomct2
    - command: Mscomct2.ocx
    - location: Startup
    - user: .DEFAULT
  - 3733:
    - name: MSCOMCTL
    - command: MSCOMCTL.OCX
    - location: Startup
    - user: .DEFAULT
  - 3734:
    - name: msconf
    - command: msconf.dll
    - location: Startup
    - user: .DEFAULT
  - 3735:
    - name: mscoree
    - command: mscoree.dll
    - location: Startup
    - user: .DEFAULT
  - 3736:
    - name: mscorier
    - command: mscorier.dll
    - location: Startup
    - user: .DEFAULT
  - 3737:
    - name: mscories
    - command: mscories.dll
    - location: Startup
    - user: .DEFAULT
  - 3738:
    - name: mscpx32r
    - command: mscpx32r.dll
    - location: Startup
    - user: .DEFAULT
  - 3739:
    - name: mscpxl32
    - command: mscpxl32.dll
    - location: Startup
    - user: .DEFAULT
  - 3740:
    - name: msctf
    - command: msctf.dll
    - location: Startup
    - user: .DEFAULT
  - 3741:
    - name: msctfime
    - command: msctfime.ime
    - location: Startup
    - user: .DEFAULT
  - 3742:
    - name: msctfp
    - command: msctfp.dll
    - location: Startup
    - user: .DEFAULT
  - 3743:
    - name: msdadiag
    - command: msdadiag.dll
    - location: Startup
    - user: .DEFAULT
  - 3744:
    - name: msdart
    - command: msdart.dll
    - location: Startup
    - user: .DEFAULT
  - 3745:
    - name: msdart32
    - command: msdart32.dll
    - location: Startup
    - user: .DEFAULT
  - 3746:
    - name: msdatsrc
    - command: msdatsrc.tlb
    - location: Startup
    - user: .DEFAULT
  - 3747:
    - name: msdbg2
    - command: msdbg2.dll
    - location: Startup
    - user: .DEFAULT
  - 3748:
    - name: msdelta
    - command: msdelta.dll
    - location: Startup
    - user: .DEFAULT
  - 3749:
    - name: msdmo
    - command: msdmo.dll
    - location: Startup
    - user: .DEFAULT
  - 3750:
    - name: msdtc
    - command: msdtc.exe
    - location: Startup
    - user: .DEFAULT
  - 3751:
    - name: msdtclog
    - command: msdtclog.dll
    - location: Startup
    - user: .DEFAULT
  - 3752:
    - name: msdtcprf
    - command: msdtcprf.h
    - location: Startup
    - user: .DEFAULT
  - 3753:
    - name: msdtcprf
    - command: msdtcprf.ini
    - location: Startup
    - user: .DEFAULT
  - 3754:
    - name: msdtcprx
    - command: msdtcprx.dll
    - location: Startup
    - user: .DEFAULT
  - 3755:
    - name: msdtctm
    - command: msdtctm.dll
    - location: Startup
    - user: .DEFAULT
  - 3756:
    - name: msdtcuiu
    - command: msdtcuiu.dll
    - location: Startup
    - user: .DEFAULT
  - 3757:
    - name: msdxm
    - command: msdxm.ocx
    - location: Startup
    - user: .DEFAULT
  - 3758:
    - name: msdxmlc
    - command: msdxmlc.dll
    - location: Startup
    - user: .DEFAULT
  - 3759:
    - name: msencode
    - command: msencode.dll
    - location: Startup
    - user: .DEFAULT
  - 3760:
    - name: msexch40
    - command: msexch40.dll
    - location: Startup
    - user: .DEFAULT
  - 3761:
    - name: msexcl40
    - command: msexcl40.dll
    - location: Startup
    - user: .DEFAULT
  - 3762:
    - name: msfeeds
    - command: msfeeds.dll
    - location: Startup
    - user: .DEFAULT
  - 3763:
    - name: msfeedsbs
    - command: msfeedsbs.dll
    - location: Startup
    - user: .DEFAULT
  - 3764:
    - name: msfeedssync
    - command: msfeedssync.exe
    - location: Startup
    - user: .DEFAULT
  - 3765:
    - name: msftedit
    - command: msftedit.dll
    - location: Startup
    - user: .DEFAULT
  - 3766:
    - name: msg
    - command: msg.exe
    - location: Startup
    - user: .DEFAULT
  - 3767:
    - name: msg711
    - command: msg711.acm
    - location: Startup
    - user: .DEFAULT
  - 3768:
    - name: msg723
    - command: msg723.acm
    - location: Startup
    - user: .DEFAULT
  - 3769:
    - name: msgina
    - command: msgina.dll
    - location: Startup
    - user: .DEFAULT
  - 3770:
    - name: msgsm32
    - command: msgsm32.acm
    - location: Startup
    - user: .DEFAULT
  - 3771:
    - name: msgsvc
    - command: msgsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 3772:
    - name: msh261
    - command: msh261.drv
    - location: Startup
    - user: .DEFAULT
  - 3773:
    - name: msh263
    - command: msh263.drv
    - location: Startup
    - user: .DEFAULT
  - 3774:
    - name: mshearts
    - command: mshearts.exe
    - location: Startup
    - user: .DEFAULT
  - 3775:
    - name: mshta
    - command: mshta.exe
    - location: Startup
    - user: .DEFAULT
  - 3776:
    - name: mshta.exe
    - command: mshta.exe.mui
    - location: Startup
    - user: .DEFAULT
  - 3777:
    - name: mshtml
    - command: mshtml.dll
    - location: Startup
    - user: .DEFAULT
  - 3778:
    - name: mshtml
    - command: mshtml.tlb
    - location: Startup
    - user: .DEFAULT
  - 3779:
    - name: mshtmled
    - command: mshtmled.dll
    - location: Startup
    - user: .DEFAULT
  - 3780:
    - name: mshtmler
    - command: mshtmler.dll
    - location: Startup
    - user: .DEFAULT
  - 3781:
    - name: msi
    - command: msi.dll
    - location: Startup
    - user: .DEFAULT
  - 3782:
    - name: msident
    - command: msident.dll
    - location: Startup
    - user: .DEFAULT
  - 3783:
    - name: msidle
    - command: msidle.dll
    - location: Startup
    - user: .DEFAULT
  - 3784:
    - name: msidntld
    - command: msidntld.dll
    - location: Startup
    - user: .DEFAULT
  - 3785:
    - name: msieftp
    - command: msieftp.dll
    - location: Startup
    - user: .DEFAULT
  - 3786:
    - name: msiexec
    - command: msiexec.exe
    - location: Startup
    - user: .DEFAULT
  - 3787:
    - name: msihnd
    - command: msihnd.dll
    - location: Startup
    - user: .DEFAULT
  - 3788:
    - name: msimg32
    - command: msimg32.dll
    - location: Startup
    - user: .DEFAULT
  - 3789:
    - name: msimsg
    - command: msimsg.dll
    - location: Startup
    - user: .DEFAULT
  - 3790:
    - name: msimtf
    - command: msimtf.dll
    - location: Startup
    - user: .DEFAULT
  - 3791:
    - name: msisam11
    - command: msisam11.dll
    - location: Startup
    - user: .DEFAULT
  - 3792:
    - name: msisip
    - command: msisip.dll
    - location: Startup
    - user: .DEFAULT
  - 3793:
    - name: msjet40
    - command: msjet40.dll
    - location: Startup
    - user: .DEFAULT
  - 3794:
    - name: msjetoledb40
    - command: msjetoledb40.dll
    - location: Startup
    - user: .DEFAULT
  - 3795:
    - name: msjint40
    - command: msjint40.dll
    - location: Startup
    - user: .DEFAULT
  - 3796:
    - name: msjter40
    - command: msjter40.dll
    - location: Startup
    - user: .DEFAULT
  - 3797:
    - name: msjtes40
    - command: msjtes40.dll
    - location: Startup
    - user: .DEFAULT
  - 3798:
    - name: mslbui
    - command: mslbui.dll
    - location: Startup
    - user: .DEFAULT
  - 3799:
    - name: msls31
    - command: msls31.dll
    - location: Startup
    - user: .DEFAULT
  - 3800:
    - name: msltus40
    - command: msltus40.dll
    - location: Startup
    - user: .DEFAULT
  - 3801:
    - name: msnetobj
    - command: msnetobj.dll
    - location: Startup
    - user: .DEFAULT
  - 3802:
    - name: msnsspc
    - command: msnsspc.dll
    - location: Startup
    - user: .DEFAULT
  - 3803:
    - name: msobjs
    - command: msobjs.dll
    - location: Startup
    - user: .DEFAULT
  - 3804:
    - name: msoeacct
    - command: msoeacct.dll
    - location: Startup
    - user: .DEFAULT
  - 3805:
    - name: msoert2
    - command: msoert2.dll
    - location: Startup
    - user: .DEFAULT
  - 3806:
    - name: msonpmon
    - command: msonpmon.dll
    - location: Startup
    - user: .DEFAULT
  - 3807:
    - name: msorc32r
    - command: msorc32r.dll
    - location: Startup
    - user: .DEFAULT
  - 3808:
    - name: msorcl32
    - command: msorcl32.dll
    - location: Startup
    - user: .DEFAULT
  - 3809:
    - name: mspaint
    - command: mspaint.exe
    - location: Startup
    - user: .DEFAULT
  - 3810:
    - name: mspatcha
    - command: mspatcha.dll
    - location: Startup
    - user: .DEFAULT
  - 3811:
    - name: mspbde40
    - command: mspbde40.dll
    - location: Startup
    - user: .DEFAULT
  - 3812:
    - name: mspmsnsv
    - command: mspmsnsv.dll
    - location: Startup
    - user: .DEFAULT
  - 3813:
    - name: mspmsp
    - command: mspmsp.dll
    - location: Startup
    - user: .DEFAULT
  - 3814:
    - name: msports
    - command: msports.dll
    - location: Startup
    - user: .DEFAULT
  - 3815:
    - name: msprivs
    - command: msprivs.dll
    - location: Startup
    - user: .DEFAULT
  - 3816:
    - name: msr2c
    - command: msr2c.dll
    - location: Startup
    - user: .DEFAULT
  - 3817:
    - name: msr2cenu
    - command: msr2cenu.dll
    - location: Startup
    - user: .DEFAULT
  - 3818:
    - name: msratelc
    - command: msratelc.dll
    - location: Startup
    - user: .DEFAULT
  - 3819:
    - name: msrating
    - command: msrating.dll
    - location: Startup
    - user: .DEFAULT
  - 3820:
    - name: msrating.dll
    - command: msrating.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 3821:
    - name: msrclr40
    - command: msrclr40.dll
    - location: Startup
    - user: .DEFAULT
  - 3822:
    - name: msrd2x40
    - command: msrd2x40.dll
    - location: Startup
    - user: .DEFAULT
  - 3823:
    - name: msrd3x40
    - command: msrd3x40.dll
    - location: Startup
    - user: .DEFAULT
  - 3824:
    - name: msrecr40
    - command: msrecr40.dll
    - location: Startup
    - user: .DEFAULT
  - 3825:
    - name: msrepl40
    - command: msrepl40.dll
    - location: Startup
    - user: .DEFAULT
  - 3826:
    - name: msrle32
    - command: msrle32.dll
    - location: Startup
    - user: .DEFAULT
  - 3827:
    - name: mssap
    - command: mssap.dll
    - location: Startup
    - user: .DEFAULT
  - 3828:
    - name: msscb
    - command: msscb.dll
    - location: Startup
    - user: .DEFAULT
  - 3829:
    - name: msscds32
    - command: msscds32.ax
    - location: Startup
    - user: .DEFAULT
  - 3830:
    - name: msscntrs
    - command: msscntrs.dll
    - location: Startup
    - user: .DEFAULT
  - 3831:
    - name: msscp
    - command: msscp.dll
    - location: Startup
    - user: .DEFAULT
  - 3832:
    - name: msscript
    - command: msscript.ocx
    - location: Startup
    - user: .DEFAULT
  - 3833:
    - name: mssha
    - command: mssha.dll
    - location: Startup
    - user: .DEFAULT
  - 3834:
    - name: msshavmsg
    - command: msshavmsg.dll
    - location: Startup
    - user: .DEFAULT
  - 3835:
    - name: msshooks
    - command: msshooks.dll
    - location: Startup
    - user: .DEFAULT
  - 3836:
    - name: msshsq
    - command: msshsq.dll
    - location: Startup
    - user: .DEFAULT
  - 3837:
    - name: mssign32
    - command: mssign32.dll
    - location: Startup
    - user: .DEFAULT
  - 3838:
    - name: mssip32
    - command: mssip32.dll
    - location: Startup
    - user: .DEFAULT
  - 3839:
    - name: mssitlb
    - command: mssitlb.dll
    - location: Startup
    - user: .DEFAULT
  - 3840:
    - name: mssph
    - command: mssph.dll
    - location: Startup
    - user: .DEFAULT
  - 3841:
    - name: mssph.dll
    - command: mssph.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 3842:
    - name: mssphtb
    - command: mssphtb.dll
    - location: Startup
    - user: .DEFAULT
  - 3843:
    - name: mssphtb.dll
    - command: mssphtb.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 3844:
    - name: mssprxy
    - command: mssprxy.dll
    - location: Startup
    - user: .DEFAULT
  - 3845:
    - name: mssrch
    - command: mssrch.dll
    - location: Startup
    - user: .DEFAULT
  - 3846:
    - name: mssrch.dll
    - command: mssrch.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 3847:
    - name: MSSTDFMT
    - command: MSSTDFMT.DLL
    - location: Startup
    - user: .DEFAULT
  - 3848:
    - name: msstrc
    - command: msstrc.dll
    - location: Startup
    - user: .DEFAULT
  - 3849:
    - name: msswch
    - command: msswch.dll
    - location: Startup
    - user: .DEFAULT
  - 3850:
    - name: msswchx
    - command: msswchx.exe
    - location: Startup
    - user: .DEFAULT
  - 3851:
    - name: mstask
    - command: mstask.dll
    - location: Startup
    - user: .DEFAULT
  - 3852:
    - name: mstext40
    - command: mstext40.dll
    - location: Startup
    - user: .DEFAULT
  - 3853:
    - name: mstime
    - command: mstime.dll
    - location: Startup
    - user: .DEFAULT
  - 3854:
    - name: mstinit
    - command: mstinit.exe
    - location: Startup
    - user: .DEFAULT
  - 3855:
    - name: mstlsapi
    - command: mstlsapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3856:
    - name: mstsc
    - command: mstsc.exe
    - location: Startup
    - user: .DEFAULT
  - 3857:
    - name: mstscax
    - command: mstscax.dll
    - location: Startup
    - user: .DEFAULT
  - 3858:
    - name: msuni11
    - command: msuni11.dll
    - location: Startup
    - user: .DEFAULT
  - 3859:
    - name: msutb
    - command: msutb.dll
    - location: Startup
    - user: .DEFAULT
  - 3860:
    - name: msv1_0
    - command: msv1_0.dll
    - location: Startup
    - user: .DEFAULT
  - 3861:
    - name: msvbvm50
    - command: msvbvm50.dll
    - location: Startup
    - user: .DEFAULT
  - 3862:
    - name: msvbvm60
    - command: msvbvm60.dll
    - location: Startup
    - user: .DEFAULT
  - 3863:
    - name: msvcirt
    - command: msvcirt.dll
    - location: Startup
    - user: .DEFAULT
  - 3864:
    - name: msvcp100
    - command: msvcp100.dll
    - location: Startup
    - user: .DEFAULT
  - 3865:
    - name: msvcp110
    - command: msvcp110.dll
    - location: Startup
    - user: .DEFAULT
  - 3866:
    - name: msvcp50
    - command: msvcp50.dll
    - location: Startup
    - user: .DEFAULT
  - 3867:
    - name: msvcp60
    - command: msvcp60.dll
    - location: Startup
    - user: .DEFAULT
  - 3868:
    - name: msvcp71
    - command: msvcp71.dll
    - location: Startup
    - user: .DEFAULT
  - 3869:
    - name: msvcr100
    - command: msvcr100.dll
    - location: Startup
    - user: .DEFAULT
  - 3870:
    - name: msvcr100_clr0400
    - command: msvcr100_clr0400.dll
    - location: Startup
    - user: .DEFAULT
  - 3871:
    - name: msvcr110
    - command: msvcr110.dll
    - location: Startup
    - user: .DEFAULT
  - 3872:
    - name: msvcr70
    - command: msvcr70.dll
    - location: Startup
    - user: .DEFAULT
  - 3873:
    - name: msvcr71
    - command: msvcr71.dll
    - location: Startup
    - user: .DEFAULT
  - 3874:
    - name: msvcrt
    - command: msvcrt.dll
    - location: Startup
    - user: .DEFAULT
  - 3875:
    - name: msvcrt20
    - command: msvcrt20.dll
    - location: Startup
    - user: .DEFAULT
  - 3876:
    - name: msvcrt40
    - command: msvcrt40.dll
    - location: Startup
    - user: .DEFAULT
  - 3877:
    - name: msvfw32
    - command: msvfw32.dll
    - location: Startup
    - user: .DEFAULT
  - 3878:
    - name: msvidc32
    - command: msvidc32.dll
    - location: Startup
    - user: .DEFAULT
  - 3879:
    - name: msvidctl
    - command: msvidctl.dll
    - location: Startup
    - user: .DEFAULT
  - 3880:
    - name: msvideo
    - command: msvideo.dll
    - location: Startup
    - user: .DEFAULT
  - 3881:
    - name: msw3prt
    - command: msw3prt.dll
    - location: Startup
    - user: .DEFAULT
  - 3882:
    - name: mswdat10
    - command: mswdat10.dll
    - location: Startup
    - user: .DEFAULT
  - 3883:
    - name: mswebdvd
    - command: mswebdvd.dll
    - location: Startup
    - user: .DEFAULT
  - 3884:
    - name: mswmdm
    - command: mswmdm.dll
    - location: Startup
    - user: .DEFAULT
  - 3885:
    - name: mswsock
    - command: mswsock.dll
    - location: Startup
    - user: .DEFAULT
  - 3886:
    - name: mswstr10
    - command: mswstr10.dll
    - location: Startup
    - user: .DEFAULT
  - 3887:
    - name: msxbde40
    - command: msxbde40.dll
    - location: Startup
    - user: .DEFAULT
  - 3888:
    - name: msxml
    - command: msxml.dll
    - location: Startup
    - user: .DEFAULT
  - 3889:
    - name: msxml2
    - command: msxml2.dll
    - location: Startup
    - user: .DEFAULT
  - 3890:
    - name: msxml2r
    - command: msxml2r.dll
    - location: Startup
    - user: .DEFAULT
  - 3891:
    - name: msxml3
    - command: msxml3.dll
    - location: Startup
    - user: .DEFAULT
  - 3892:
    - name: msxml3r
    - command: msxml3r.dll
    - location: Startup
    - user: .DEFAULT
  - 3893:
    - name: msxml4
    - command: msxml4.dll
    - location: Startup
    - user: .DEFAULT
  - 3894:
    - name: msxml4a
    - command: msxml4a.dll
    - location: Startup
    - user: .DEFAULT
  - 3895:
    - name: msxml4r
    - command: msxml4r.dll
    - location: Startup
    - user: .DEFAULT
  - 3896:
    - name: msxml6
    - command: msxml6.dll
    - location: Startup
    - user: .DEFAULT
  - 3897:
    - name: msxml6r
    - command: msxml6r.dll
    - location: Startup
    - user: .DEFAULT
  - 3898:
    - name: msxmlr
    - command: msxmlr.dll
    - location: Startup
    - user: .DEFAULT
  - 3899:
    - name: msyuv
    - command: msyuv.dll
    - location: Startup
    - user: .DEFAULT
  - 3900:
    - name: mtxclu
    - command: mtxclu.dll
    - location: Startup
    - user: .DEFAULT
  - 3901:
    - name: mtxdm
    - command: mtxdm.dll
    - location: Startup
    - user: .DEFAULT
  - 3902:
    - name: mtxex
    - command: mtxex.dll
    - location: Startup
    - user: .DEFAULT
  - 3903:
    - name: mtxlegih
    - command: mtxlegih.dll
    - location: Startup
    - user: .DEFAULT
  - 3904:
    - name: mtxoci
    - command: mtxoci.dll
    - location: Startup
    - user: .DEFAULT
  - 3905:
    - name: mtxparhd
    - command: mtxparhd.dll
    - location: Startup
    - user: .DEFAULT
  - 3906:
    - name: mucltui
    - command: mucltui.dll
    - location: Startup
    - user: .DEFAULT
  - 3907:
    - name: mucltui.dll
    - command: mucltui.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 3908:
    - name: muweb
    - command: muweb.dll
    - location: Startup
    - user: .DEFAULT
  - 3909:
    - name: MXRestore
    - command: MXRestore.exe
    - location: Startup
    - user: .DEFAULT
  - 3910:
    - name: mycomput
    - command: mycomput.dll
    - location: Startup
    - user: .DEFAULT
  - 3911:
    - name: mydocs
    - command: mydocs.dll
    - location: Startup
    - user: .DEFAULT
  - 3912:
    - name: napipsec
    - command: napipsec.dll
    - location: Startup
    - user: .DEFAULT
  - 3913:
    - name: napmontr
    - command: napmontr.dll
    - location: Startup
    - user: .DEFAULT
  - 3914:
    - name: napstat
    - command: napstat.exe
    - location: Startup
    - user: .DEFAULT
  - 3915:
    - name: narrator
    - command: narrator.exe
    - location: Startup
    - user: .DEFAULT
  - 3916:
    - name: narrhook
    - command: narrhook.dll
    - location: Startup
    - user: .DEFAULT
  - 3917:
    - name: nbtstat
    - command: nbtstat.exe
    - location: Startup
    - user: .DEFAULT
  - 3918:
    - name: ncobjapi
    - command: ncobjapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3919:
    - name: ncpa
    - command: ncpa.cpl
    - location: Startup
    - user: .DEFAULT
  - 3920:
    - name: ncpa.cpl
    - command: ncpa.cpl.manifest
    - location: Startup
    - user: .DEFAULT
  - 3921:
    - name: ncxpnt
    - command: ncxpnt.dll
    - location: Startup
    - user: .DEFAULT
  - 3922:
    - name: nddeapi
    - command: nddeapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3923:
    - name: nddeapir
    - command: nddeapir.exe
    - location: Startup
    - user: .DEFAULT
  - 3924:
    - name: nddenb32
    - command: nddenb32.dll
    - location: Startup
    - user: .DEFAULT
  - 3925:
    - name: ndptsp
    - command: ndptsp.tsp
    - location: Startup
    - user: .DEFAULT
  - 3926:
    - name: net
    - command: net.exe
    - location: Startup
    - user: .DEFAULT
  - 3927:
    - name: net
    - command: net.hlp
    - location: Startup
    - user: .DEFAULT
  - 3928:
    - name: net1
    - command: net1.exe
    - location: Startup
    - user: .DEFAULT
  - 3929:
    - name: netapi
    - command: netapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3930:
    - name: netapi32
    - command: netapi32.dll
    - location: Startup
    - user: .DEFAULT
  - 3931:
    - name: netcfgx
    - command: netcfgx.dll
    - location: Startup
    - user: .DEFAULT
  - 3932:
    - name: netdde
    - command: netdde.exe
    - location: Startup
    - user: .DEFAULT
  - 3933:
    - name: netevent
    - command: netevent.dll
    - location: Startup
    - user: .DEFAULT
  - 3934:
    - name: netfxperf
    - command: netfxperf.dll
    - location: Startup
    - user: .DEFAULT
  - 3935:
    - name: neth
    - command: neth.dll
    - location: Startup
    - user: .DEFAULT
  - 3936:
    - name: netid
    - command: netid.dll
    - location: Startup
    - user: .DEFAULT
  - 3937:
    - name: netlogon
    - command: netlogon.dll
    - location: Startup
    - user: .DEFAULT
  - 3938:
    - name: netman
    - command: netman.dll
    - location: Startup
    - user: .DEFAULT
  - 3939:
    - name: netmsg
    - command: netmsg.dll
    - location: Startup
    - user: .DEFAULT
  - 3940:
    - name: netplwiz
    - command: netplwiz.dll
    - location: Startup
    - user: .DEFAULT
  - 3941:
    - name: netrap
    - command: netrap.dll
    - location: Startup
    - user: .DEFAULT
  - 3942:
    - name: netsetup
    - command: netsetup.cpl
    - location: Startup
    - user: .DEFAULT
  - 3943:
    - name: netsetup
    - command: netsetup.exe
    - location: Startup
    - user: .DEFAULT
  - 3944:
    - name: netsh
    - command: netsh.exe
    - location: Startup
    - user: .DEFAULT
  - 3945:
    - name: netshell
    - command: netshell.dll
    - location: Startup
    - user: .DEFAULT
  - 3946:
    - name: netstat
    - command: netstat.exe
    - location: Startup
    - user: .DEFAULT
  - 3947:
    - name: netui0
    - command: netui0.dll
    - location: Startup
    - user: .DEFAULT
  - 3948:
    - name: netui1
    - command: netui1.dll
    - location: Startup
    - user: .DEFAULT
  - 3949:
    - name: netui2
    - command: netui2.dll
    - location: Startup
    - user: .DEFAULT
  - 3950:
    - name: netware
    - command: netware.drv
    - location: Startup
    - user: .DEFAULT
  - 3951:
    - name: newdev
    - command: newdev.dll
    - location: Startup
    - user: .DEFAULT
  - 3952:
    - name: nlhtml
    - command: nlhtml.dll
    - location: Startup
    - user: .DEFAULT
  - 3953:
    - name: nlsdl
    - command: nlsdl.dll
    - location: Startup
    - user: .DEFAULT
  - 3954:
    - name: nlsfunc
    - command: nlsfunc.exe
    - location: Startup
    - user: .DEFAULT
  - 3955:
    - name: nmevtmsg
    - command: nmevtmsg.dll
    - location: Startup
    - user: .DEFAULT
  - 3956:
    - name: nmmkcert
    - command: nmmkcert.dll
    - location: Startup
    - user: .DEFAULT
  - 3957:
    - name: nmp
    - command: nmp.log
    - location: Startup
    - user: .DEFAULT
  - 3958:
    - name: nmwcdcls
    - command: nmwcdcls.dll
    - location: Startup
    - user: .DEFAULT
  - 3959:
    - name: noise
    - command: noise.chs
    - location: Startup
    - user: .DEFAULT
  - 3960:
    - name: noise
    - command: noise.cht
    - location: Startup
    - user: .DEFAULT
  - 3961:
    - name: noise
    - command: noise.dat
    - location: Startup
    - user: .DEFAULT
  - 3962:
    - name: noise
    - command: noise.deu
    - location: Startup
    - user: .DEFAULT
  - 3963:
    - name: noise
    - command: noise.eng
    - location: Startup
    - user: .DEFAULT
  - 3964:
    - name: noise
    - command: noise.enu
    - location: Startup
    - user: .DEFAULT
  - 3965:
    - name: noise
    - command: noise.esn
    - location: Startup
    - user: .DEFAULT
  - 3966:
    - name: noise
    - command: noise.fra
    - location: Startup
    - user: .DEFAULT
  - 3967:
    - name: noise
    - command: noise.ita
    - location: Startup
    - user: .DEFAULT
  - 3968:
    - name: noise
    - command: noise.nld
    - location: Startup
    - user: .DEFAULT
  - 3969:
    - name: noise
    - command: noise.sve
    - location: Startup
    - user: .DEFAULT
  - 3970:
    - name: noise
    - command: noise.tha
    - location: Startup
    - user: .DEFAULT
  - 3971:
    - name: normaliz
    - command: normaliz.dll
    - location: Startup
    - user: .DEFAULT
  - 3972:
    - name: normidna
    - command: normidna.nls
    - location: Startup
    - user: .DEFAULT
  - 3973:
    - name: normnfc
    - command: normnfc.nls
    - location: Startup
    - user: .DEFAULT
  - 3974:
    - name: normnfd
    - command: normnfd.nls
    - location: Startup
    - user: .DEFAULT
  - 3975:
    - name: normnfkc
    - command: normnfkc.nls
    - location: Startup
    - user: .DEFAULT
  - 3976:
    - name: normnfkd
    - command: normnfkd.nls
    - location: Startup
    - user: .DEFAULT
  - 3977:
    - name: notepad
    - command: notepad.exe
    - location: Startup
    - user: .DEFAULT
  - 3978:
    - name: npptools
    - command: npptools.dll
    - location: Startup
    - user: .DEFAULT
  - 3979:
    - name: nscompat
    - command: nscompat.tlb
    - location: Startup
    - user: .DEFAULT
  - 3980:
    - name: nslookup
    - command: nslookup.exe
    - location: Startup
    - user: .DEFAULT
  - 3981:
    - name: ntbackup
    - command: ntbackup.exe
    - location: Startup
    - user: .DEFAULT
  - 3982:
    - name: ntdll
    - command: ntdll.dll
    - location: Startup
    - user: .DEFAULT
  - 3983:
    - name: ntdos
    - command: ntdos.sys
    - location: Startup
    - user: .DEFAULT
  - 3984:
    - name: ntdos404
    - command: ntdos404.sys
    - location: Startup
    - user: .DEFAULT
  - 3985:
    - name: ntdos411
    - command: ntdos411.sys
    - location: Startup
    - user: .DEFAULT
  - 3986:
    - name: ntdos412
    - command: ntdos412.sys
    - location: Startup
    - user: .DEFAULT
  - 3987:
    - name: ntdos804
    - command: ntdos804.sys
    - location: Startup
    - user: .DEFAULT
  - 3988:
    - name: ntdsapi
    - command: ntdsapi.dll
    - location: Startup
    - user: .DEFAULT
  - 3989:
    - name: ntdsbcli
    - command: ntdsbcli.dll
    - location: Startup
    - user: .DEFAULT
  - 3990:
    - name: ntimage
    - command: ntimage.gif
    - location: Startup
    - user: .DEFAULT
  - 3991:
    - name: ntio
    - command: ntio.sys
    - location: Startup
    - user: .DEFAULT
  - 3992:
    - name: ntio404
    - command: ntio404.sys
    - location: Startup
    - user: .DEFAULT
  - 3993:
    - name: ntio411
    - command: ntio411.sys
    - location: Startup
    - user: .DEFAULT
  - 3994:
    - name: ntio412
    - command: ntio412.sys
    - location: Startup
    - user: .DEFAULT
  - 3995:
    - name: ntio804
    - command: ntio804.sys
    - location: Startup
    - user: .DEFAULT
  - 3996:
    - name: ntkrnlpa
    - command: ntkrnlpa.exe
    - location: Startup
    - user: .DEFAULT
  - 3997:
    - name: ntlanman
    - command: ntlanman.dll
    - location: Startup
    - user: .DEFAULT
  - 3998:
    - name: ntlanui
    - command: ntlanui.dll
    - location: Startup
    - user: .DEFAULT
  - 3999:
    - name: ntlanui2
    - command: ntlanui2.dll
    - location: Startup
    - user: .DEFAULT
  - 4000:
    - name: ntlsapi
    - command: ntlsapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4001:
    - name: ntmarta
    - command: ntmarta.dll
    - location: Startup
    - user: .DEFAULT
  - 4002:
    - name: ntmsapi
    - command: ntmsapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4003:
    - name: ntmsdba
    - command: ntmsdba.dll
    - location: Startup
    - user: .DEFAULT
  - 4004:
    - name: ntmsevt
    - command: ntmsevt.dll
    - location: Startup
    - user: .DEFAULT
  - 4005:
    - name: ntmsmgr
    - command: ntmsmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 4006:
    - name: ntmsmgr
    - command: ntmsmgr.msc
    - location: Startup
    - user: .DEFAULT
  - 4007:
    - name: ntmsoprq
    - command: ntmsoprq.msc
    - location: Startup
    - user: .DEFAULT
  - 4008:
    - name: ntmssvc
    - command: ntmssvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4009:
    - name: ntoskrnl
    - command: ntoskrnl.exe
    - location: Startup
    - user: .DEFAULT
  - 4010:
    - name: ntprint
    - command: ntprint.dll
    - location: Startup
    - user: .DEFAULT
  - 4011:
    - name: ntsd
    - command: ntsd.exe
    - location: Startup
    - user: .DEFAULT
  - 4012:
    - name: ntsdexts
    - command: ntsdexts.dll
    - location: Startup
    - user: .DEFAULT
  - 4013:
    - name: ntshrui
    - command: ntshrui.dll
    - location: Startup
    - user: .DEFAULT
  - 4014:
    - name: ntvdm
    - command: ntvdm.exe
    - location: Startup
    - user: .DEFAULT
  - 4015:
    - name: ntvdmd
    - command: ntvdmd.dll
    - location: Startup
    - user: .DEFAULT
  - 4016:
    - name: nusrmgr
    - command: nusrmgr.cpl
    - location: Startup
    - user: .DEFAULT
  - 4017:
    - name: nv4_disp
    - command: nv4_disp.dll
    - location: Startup
    - user: .DEFAULT
  - 4018:
    - name: nvapi
    - command: nvapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4019:
    - name: nvappfilter
    - command: nvappfilter.dll
    - location: Startup
    - user: .DEFAULT
  - 4020:
    - name: nvapps
    - command: nvapps.xml
    - location: Startup
    - user: .DEFAULT
  - 4021:
    - name: nvcod
    - command: nvcod.dll
    - location: Startup
    - user: .DEFAULT
  - 4022:
    - name: nvcodins
    - command: nvcodins.dll
    - location: Startup
    - user: .DEFAULT
  - 4023:
    - name: NVCOI
    - command: NVCOI.DLL
    - location: Startup
    - user: .DEFAULT
  - 4024:
    - name: nvcolor
    - command: nvcolor.exe
    - location: Startup
    - user: .DEFAULT
  - 4025:
    - name: nvcompiler
    - command: nvcompiler.dll
    - location: Startup
    - user: .DEFAULT
  - 4026:
    - name: nvconrm
    - command: nvconrm.dll
    - location: Startup
    - user: .DEFAULT
  - 4027:
    - name: NVCOSMB
    - command: NVCOSMB.DLL
    - location: Startup
    - user: .DEFAULT
  - 4028:
    - name: nvcpl
    - command: nvcpl.cpl
    - location: Startup
    - user: .DEFAULT
  - 4029:
    - name: nvcpl
    - command: nvcpl.dll
    - location: Startup
    - user: .DEFAULT
  - 4030:
    - name: nvcplui
    - command: nvcplui.exe
    - location: Startup
    - user: .DEFAULT
  - 4031:
    - name: nvcpluir
    - command: nvcpluir.dll
    - location: Startup
    - user: .DEFAULT
  - 4032:
    - name: nvcuda
    - command: nvcuda.dll
    - location: Startup
    - user: .DEFAULT
  - 4033:
    - name: nvcuvenc
    - command: nvcuvenc.dll
    - location: Startup
    - user: .DEFAULT
  - 4034:
    - name: nvcuvid
    - command: nvcuvid.dll
    - location: Startup
    - user: .DEFAULT
  - 4035:
    - name: nvdata
    - command: nvdata.data
    - location: Startup
    - user: .DEFAULT
  - 4036:
    - name: nvdisp
    - command: nvdisp.nvu
    - location: Startup
    - user: .DEFAULT
  - 4037:
    - name: nvdispco32
    - command: nvdispco32.dll
    - location: Startup
    - user: .DEFAULT
  - 4038:
    - name: nvdispco3220150
    - command: nvdispco3220150.dll
    - location: Startup
    - user: .DEFAULT
  - 4039:
    - name: nvdispgenco32
    - command: nvdispgenco32.dll
    - location: Startup
    - user: .DEFAULT
  - 4040:
    - name: nvdisps
    - command: nvdisps.dll
    - location: Startup
    - user: .DEFAULT
  - 4041:
    - name: nvdispsr
    - command: nvdispsr.dll
    - location: Startup
    - user: .DEFAULT
  - 4042:
    - name: nvdrsdb0
    - command: nvdrsdb0.bin
    - location: Startup
    - user: .DEFAULT
  - 4043:
    - name: nvdrsdb1
    - command: nvdrsdb1.bin
    - location: Startup
    - user: .DEFAULT
  - 4044:
    - name: nvdrssel
    - command: nvdrssel.bin
    - location: Startup
    - user: .DEFAULT
  - 4045:
    - name: nvdrswr
    - command:
    - location: Startup
    - user: .DEFAULT
  - 4046:
    - name: nvexpbar
    - command: nvexpbar.dll
    - location: Startup
    - user: .DEFAULT
  - 4047:
    - name: nvgames
    - command: nvgames.dll
    - location: Startup
    - user: .DEFAULT
  - 4048:
    - name: nvgamesr
    - command: nvgamesr.dll
    - location: Startup
    - user: .DEFAULT
  - 4049:
    - name: nvgenco32
    - command: nvgenco32.dll
    - location: Startup
    - user: .DEFAULT
  - 4050:
    - name: nvgenco322090
    - command: nvgenco322090.dll
    - location: Startup
    - user: .DEFAULT
  - 4051:
    - name: nvide
    - command: nvide.nvu
    - location: Startup
    - user: .DEFAULT
  - 4052:
    - name: nvinfo
    - command: nvinfo.pb
    - location: Startup
    - user: .DEFAULT
  - 4053:
    - name: nvmccs
    - command: nvmccs.dll
    - location: Startup
    - user: .DEFAULT
  - 4054:
    - name: nvmccsrs
    - command: nvmccsrs.dll
    - location: Startup
    - user: .DEFAULT
  - 4055:
    - name: nvmccss
    - command: nvmccss.dll
    - location: Startup
    - user: .DEFAULT
  - 4056:
    - name: nvmccssr
    - command: nvmccssr.dll
    - location: Startup
    - user: .DEFAULT
  - 4057:
    - name: nvmctray
    - command: nvmctray.dll
    - location: Startup
    - user: .DEFAULT
  - 4058:
    - name: nvmobls
    - command: nvmobls.dll
    - location: Startup
    - user: .DEFAULT
  - 4059:
    - name: nvmoblsr
    - command: nvmoblsr.dll
    - location: Startup
    - user: .DEFAULT
  - 4060:
    - name: nvnrm
    - command: nvnrm.nvu
    - location: Startup
    - user: .DEFAULT
  - 4061:
    - name: nvnt4cpl
    - command: nvnt4cpl.dll
    - location: Startup
    - user: .DEFAULT
  - 4062:
    - name: nvoglnt
    - command: nvoglnt.dll
    - location: Startup
    - user: .DEFAULT
  - 4063:
    - name: nvopencl
    - command: nvopencl.dll
    - location: Startup
    - user: .DEFAULT
  - 4064:
    - name: nvraidco
    - command: nvraidco.dll
    - location: Startup
    - user: .DEFAULT
  - 4065:
    - name: nvraiins
    - command: nvraiins.dll
    - location: Startup
    - user: .DEFAULT
  - 4066:
    - name: NvRCoDa
    - command: NvRCoDa.dll
    - location: Startup
    - user: .DEFAULT
  - 4067:
    - name: NvRCoDe
    - command: NvRCoDe.dll
    - location: Startup
    - user: .DEFAULT
  - 4068:
    - name: NvRCoEng
    - command: NvRCoEng.dll
    - location: Startup
    - user: .DEFAULT
  - 4069:
    - name: NvRCoENU
    - command: NvRCoENU.dll
    - location: Startup
    - user: .DEFAULT
  - 4070:
    - name: NvRCoEs
    - command: NvRCoEs.dll
    - location: Startup
    - user: .DEFAULT
  - 4071:
    - name: NvRCoEsm
    - command: NvRCoEsm.dll
    - location: Startup
    - user: .DEFAULT
  - 4072:
    - name: NvRCoFi
    - command: NvRCoFi.dll
    - location: Startup
    - user: .DEFAULT
  - 4073:
    - name: NvRCoFr
    - command: NvRCoFr.dll
    - location: Startup
    - user: .DEFAULT
  - 4074:
    - name: NvRCoIt
    - command: NvRCoIt.dll
    - location: Startup
    - user: .DEFAULT
  - 4075:
    - name: NvRCoJa
    - command: NvRCoJa.dll
    - location: Startup
    - user: .DEFAULT
  - 4076:
    - name: NvRCoKo
    - command: NvRCoKo.dll
    - location: Startup
    - user: .DEFAULT
  - 4077:
    - name: NvRCoNl
    - command: NvRCoNl.dll
    - location: Startup
    - user: .DEFAULT
  - 4078:
    - name: NvRCoNo
    - command: NvRCoNo.dll
    - location: Startup
    - user: .DEFAULT
  - 4079:
    - name: NvRCoPtb
    - command: NvRCoPtb.dll
    - location: Startup
    - user: .DEFAULT
  - 4080:
    - name: NvRCoRu
    - command: NvRCoRu.dll
    - location: Startup
    - user: .DEFAULT
  - 4081:
    - name: NvRCoSv
    - command: NvRCoSv.dll
    - location: Startup
    - user: .DEFAULT
  - 4082:
    - name: NvRCoZhc
    - command: NvRCoZhc.dll
    - location: Startup
    - user: .DEFAULT
  - 4083:
    - name: NvRCoZht
    - command: NvRCoZht.dll
    - location: Startup
    - user: .DEFAULT
  - 4084:
    - name: nvrsar
    - command: nvrsar.dll
    - location: Startup
    - user: .DEFAULT
  - 4085:
    - name: nvrscs
    - command: nvrscs.dll
    - location: Startup
    - user: .DEFAULT
  - 4086:
    - name: nvrsda
    - command: nvrsda.dll
    - location: Startup
    - user: .DEFAULT
  - 4087:
    - name: nvrsde
    - command: nvrsde.dll
    - location: Startup
    - user: .DEFAULT
  - 4088:
    - name: nvrsel
    - command: nvrsel.dll
    - location: Startup
    - user: .DEFAULT
  - 4089:
    - name: nvrseng
    - command: nvrseng.dll
    - location: Startup
    - user: .DEFAULT
  - 4090:
    - name: nvrses
    - command: nvrses.dll
    - location: Startup
    - user: .DEFAULT
  - 4091:
    - name: nvrsesm
    - command: nvrsesm.dll
    - location: Startup
    - user: .DEFAULT
  - 4092:
    - name: nvrsfi
    - command: nvrsfi.dll
    - location: Startup
    - user: .DEFAULT
  - 4093:
    - name: nvrsfr
    - command: nvrsfr.dll
    - location: Startup
    - user: .DEFAULT
  - 4094:
    - name: nvrshe
    - command: nvrshe.dll
    - location: Startup
    - user: .DEFAULT
  - 4095:
    - name: nvrshu
    - command: nvrshu.dll
    - location: Startup
    - user: .DEFAULT
  - 4096:
    - name: nvrsit
    - command: nvrsit.dll
    - location: Startup
    - user: .DEFAULT
  - 4097:
    - name: nvrsja
    - command: nvrsja.dll
    - location: Startup
    - user: .DEFAULT
  - 4098:
    - name: nvrsko
    - command: nvrsko.dll
    - location: Startup
    - user: .DEFAULT
  - 4099:
    - name: nvrsnl
    - command: nvrsnl.dll
    - location: Startup
    - user: .DEFAULT
  - 4100:
    - name: nvrsno
    - command: nvrsno.dll
    - location: Startup
    - user: .DEFAULT
  - 4101:
    - name: nvrspl
    - command: nvrspl.dll
    - location: Startup
    - user: .DEFAULT
  - 4102:
    - name: nvrspt
    - command: nvrspt.dll
    - location: Startup
    - user: .DEFAULT
  - 4103:
    - name: nvrsptb
    - command: nvrsptb.dll
    - location: Startup
    - user: .DEFAULT
  - 4104:
    - name: nvrsru
    - command: nvrsru.dll
    - location: Startup
    - user: .DEFAULT
  - 4105:
    - name: nvrssk
    - command: nvrssk.dll
    - location: Startup
    - user: .DEFAULT
  - 4106:
    - name: nvrssl
    - command: nvrssl.dll
    - location: Startup
    - user: .DEFAULT
  - 4107:
    - name: nvrssv
    - command: nvrssv.dll
    - location: Startup
    - user: .DEFAULT
  - 4108:
    - name: nvrsth
    - command: nvrsth.dll
    - location: Startup
    - user: .DEFAULT
  - 4109:
    - name: nvrstr
    - command: nvrstr.dll
    - location: Startup
    - user: .DEFAULT
  - 4110:
    - name: nvrszhc
    - command: nvrszhc.dll
    - location: Startup
    - user: .DEFAULT
  - 4111:
    - name: nvrszht
    - command: nvrszht.dll
    - location: Startup
    - user: .DEFAULT
  - 4112:
    - name: nvsmb
    - command: nvsmb.nvu
    - location: Startup
    - user: .DEFAULT
  - 4113:
    - name: nvsvc32
    - command: nvsvc32.exe
    - location: Startup
    - user: .DEFAULT
  - 4114:
    - name: nvudisp
    - command: nvudisp.exe
    - location: Startup
    - user: .DEFAULT
  - 4115:
    - name: nvuide
    - command: nvuide.exe
    - location: Startup
    - user: .DEFAULT
  - 4116:
    - name: NVUNINST
    - command: NVUNINST.EXE
    - location: Startup
    - user: .DEFAULT
  - 4117:
    - name: nvunrm
    - command: nvunrm.exe
    - location: Startup
    - user: .DEFAULT
  - 4118:
    - name: nvusmb
    - command: nvusmb.exe
    - location: Startup
    - user: .DEFAULT
  - 4119:
    - name: nvvitvs
    - command: nvvitvs.dll
    - location: Startup
    - user: .DEFAULT
  - 4120:
    - name: nvvitvsr
    - command: nvvitvsr.dll
    - location: Startup
    - user: .DEFAULT
  - 4121:
    - name: nvwddi
    - command: nvwddi.dll
    - location: Startup
    - user: .DEFAULT
  - 4122:
    - name: nvwss
    - command: nvwss.dll
    - location: Startup
    - user: .DEFAULT
  - 4123:
    - name: nvwssr
    - command: nvwssr.dll
    - location: Startup
    - user: .DEFAULT
  - 4124:
    - name: nw16
    - command: nw16.exe
    - location: Startup
    - user: .DEFAULT
  - 4125:
    - name: nwapi16
    - command: nwapi16.dll
    - location: Startup
    - user: .DEFAULT
  - 4126:
    - name: nwapi32
    - command: nwapi32.dll
    - location: Startup
    - user: .DEFAULT
  - 4127:
    - name: nwc
    - command: nwc.cpl
    - location: Startup
    - user: .DEFAULT
  - 4128:
    - name: nwc.cpl
    - command: nwc.cpl.manifest
    - location: Startup
    - user: .DEFAULT
  - 4129:
    - name: nwcfg
    - command: nwcfg.dll
    - location: Startup
    - user: .DEFAULT
  - 4130:
    - name: nwevent
    - command: nwevent.dll
    - location: Startup
    - user: .DEFAULT
  - 4131:
    - name: nwprovau
    - command: nwprovau.dll
    - location: Startup
    - user: .DEFAULT
  - 4132:
    - name: nwscript
    - command: nwscript.exe
    - location: Startup
    - user: .DEFAULT
  - 4133:
    - name: nwwks
    - command: nwwks.dll
    - location: Startup
    - user: .DEFAULT
  - 4134:
    - name: oakley
    - command: oakley.dll
    - location: Startup
    - user: .DEFAULT
  - 4135:
    - name: objsafe
    - command: objsafe.tlb
    - location: Startup
    - user: .DEFAULT
  - 4136:
    - name: objsel
    - command: objsel.dll
    - location: Startup
    - user: .DEFAULT
  - 4137:
    - name: occache
    - command: occache.dll
    - location: Startup
    - user: .DEFAULT
  - 4138:
    - name: ocmanage
    - command: ocmanage.dll
    - location: Startup
    - user: .DEFAULT
  - 4139:
    - name: odbc16gt
    - command: odbc16gt.dll
    - location: Startup
    - user: .DEFAULT
  - 4140:
    - name: odbc32
    - command: odbc32.dll
    - location: Startup
    - user: .DEFAULT
  - 4141:
    - name: odbc32gt
    - command: odbc32gt.dll
    - location: Startup
    - user: .DEFAULT
  - 4142:
    - name: odbcad32
    - command: odbcad32.exe
    - location: Startup
    - user: .DEFAULT
  - 4143:
    - name: odbcbcp
    - command: odbcbcp.dll
    - location: Startup
    - user: .DEFAULT
  - 4144:
    - name: odbcconf
    - command: odbcconf.dll
    - location: Startup
    - user: .DEFAULT
  - 4145:
    - name: odbcconf
    - command: odbcconf.exe
    - location: Startup
    - user: .DEFAULT
  - 4146:
    - name: odbcconf
    - command: odbcconf.rsp
    - location: Startup
    - user: .DEFAULT
  - 4147:
    - name: odbccp32
    - command: odbccp32.cpl
    - location: Startup
    - user: .DEFAULT
  - 4148:
    - name: odbccp32
    - command: odbccp32.dll
    - location: Startup
    - user: .DEFAULT
  - 4149:
    - name: odbccr32
    - command: odbccr32.dll
    - location: Startup
    - user: .DEFAULT
  - 4150:
    - name: odbccu32
    - command: odbccu32.dll
    - location: Startup
    - user: .DEFAULT
  - 4151:
    - name: odbcint
    - command: odbcint.dll
    - location: Startup
    - user: .DEFAULT
  - 4152:
    - name: odbcji32
    - command: odbcji32.dll
    - location: Startup
    - user: .DEFAULT
  - 4153:
    - name: odbcjt32
    - command: odbcjt32.dll
    - location: Startup
    - user: .DEFAULT
  - 4154:
    - name: odbcp32r
    - command: odbcp32r.dll
    - location: Startup
    - user: .DEFAULT
  - 4155:
    - name: odbctrac
    - command: odbctrac.dll
    - location: Startup
    - user: .DEFAULT
  - 4156:
    - name: oddbse32
    - command: oddbse32.dll
    - location: Startup
    - user: .DEFAULT
  - 4157:
    - name: odexl32
    - command: odexl32.dll
    - location: Startup
    - user: .DEFAULT
  - 4158:
    - name: odfox32
    - command: odfox32.dll
    - location: Startup
    - user: .DEFAULT
  - 4159:
    - name: odpdx32
    - command: odpdx32.dll
    - location: Startup
    - user: .DEFAULT
  - 4160:
    - name: odtext32
    - command: odtext32.dll
    - location: Startup
    - user: .DEFAULT
  - 4161:
    - name: oembios
    - command: oembios.bin
    - location: Startup
    - user: .DEFAULT
  - 4162:
    - name: oembios
    - command: oembios.dat
    - location: Startup
    - user: .DEFAULT
  - 4163:
    - name: oembios
    - command: oembios.sig
    - location: Startup
    - user: .DEFAULT
  - 4164:
    - name: Oemdspif
    - command: Oemdspif.dll
    - location: Startup
    - user: .DEFAULT
  - 4165:
    - name: oeph
    - command: oeph.dll
    - location: Startup
    - user: .DEFAULT
  - 4166:
    - name: oephRes
    - command: oephRes.dll
    - location: Startup
    - user: .DEFAULT
  - 4167:
    - name: offfilt
    - command: offfilt.dll
    - location: Startup
    - user: .DEFAULT
  - 4168:
    - name: OGAAddin
    - command: OGAAddin.dll
    - location: Startup
    - user: .DEFAULT
  - 4169:
    - name: OGACheckControl
    - command: OGACheckControl.dll
    - location: Startup
    - user: .DEFAULT
  - 4170:
    - name: OGAEXEC
    - command: OGAEXEC.exe
    - location: Startup
    - user: .DEFAULT
  - 4171:
    - name: ole2
    - command: ole2.dll
    - location: Startup
    - user: .DEFAULT
  - 4172:
    - name: ole2disp
    - command: ole2disp.dll
    - location: Startup
    - user: .DEFAULT
  - 4173:
    - name: ole2nls
    - command: ole2nls.dll
    - location: Startup
    - user: .DEFAULT
  - 4174:
    - name: ole32
    - command: ole32.dll
    - location: Startup
    - user: .DEFAULT
  - 4175:
    - name: oleacc
    - command: oleacc.dll
    - location: Startup
    - user: .DEFAULT
  - 4176:
    - name: oleaccrc
    - command: oleaccrc.dll
    - location: Startup
    - user: .DEFAULT
  - 4177:
    - name: oleaut32
    - command: oleaut32.dll
    - location: Startup
    - user: .DEFAULT
  - 4178:
    - name: olecli
    - command: olecli.dll
    - location: Startup
    - user: .DEFAULT
  - 4179:
    - name: olecli32
    - command: olecli32.dll
    - location: Startup
    - user: .DEFAULT
  - 4180:
    - name: olecnv32
    - command: olecnv32.dll
    - location: Startup
    - user: .DEFAULT
  - 4181:
    - name: oledlg
    - command: oledlg.dll
    - location: Startup
    - user: .DEFAULT
  - 4182:
    - name: oleprn
    - command: oleprn.dll
    - location: Startup
    - user: .DEFAULT
  - 4183:
    - name: olepro32
    - command: olepro32.dll
    - location: Startup
    - user: .DEFAULT
  - 4184:
    - name: olesvr
    - command: olesvr.dll
    - location: Startup
    - user: .DEFAULT
  - 4185:
    - name: olesvr32
    - command: olesvr32.dll
    - location: Startup
    - user: .DEFAULT
  - 4186:
    - name: olethk32
    - command: olethk32.dll
    - location: Startup
    - user: .DEFAULT
  - 4187:
    - name: onex
    - command: onex.dll
    - location: Startup
    - user: .DEFAULT
  - 4188:
    - name: OpenCL
    - command: OpenCL.dll
    - location: Startup
    - user: .DEFAULT
  - 4189:
    - name: openfiles
    - command: openfiles.exe
    - location: Startup
    - user: .DEFAULT
  - 4190:
    - name: opengl32
    - command: opengl32.dll
    - location: Startup
    - user: .DEFAULT
  - 4191:
    - name: osk
    - command: osk.exe
    - location: Startup
    - user: .DEFAULT
  - 4192:
    - name: osuninst
    - command: osuninst.dll
    - location: Startup
    - user: .DEFAULT
  - 4193:
    - name: osuninst
    - command: osuninst.exe
    - location: Startup
    - user: .DEFAULT
  - 4194:
    - name: p2p
    - command: p2p.dll
    - location: Startup
    - user: .DEFAULT
  - 4195:
    - name: p2pgasvc
    - command: p2pgasvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4196:
    - name: p2pgraph
    - command: p2pgraph.dll
    - location: Startup
    - user: .DEFAULT
  - 4197:
    - name: p2pnetsh
    - command: p2pnetsh.dll
    - location: Startup
    - user: .DEFAULT
  - 4198:
    - name: p2psvc
    - command: p2psvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4199:
    - name: packager
    - command: packager.exe
    - location: Startup
    - user: .DEFAULT
  - 4200:
    - name: pagefileconfig
    - command: pagefileconfig.vbs
    - location: Startup
    - user: .DEFAULT
  - 4201:
    - name: panmap
    - command: panmap.dll
    - location: Startup
    - user: .DEFAULT
  - 4202:
    - name: paqsp
    - command: paqsp.dll
    - location: Startup
    - user: .DEFAULT
  - 4203:
    - name: pathping
    - command: pathping.exe
    - location: Startup
    - user: .DEFAULT
  - 4204:
    - name: pautoenr
    - command: pautoenr.dll
    - location: Startup
    - user: .DEFAULT
  - 4205:
    - name: pcl
    - command: pcl.sep
    - location: Startup
    - user: .DEFAULT
  - 4206:
    - name: pdh
    - command: pdh.dll
    - location: Startup
    - user: .DEFAULT
  - 4207:
    - name: pentnt
    - command: pentnt.exe
    - location: Startup
    - user: .DEFAULT
  - 4208:
    - name: perfc009
    - command: perfc009.dat
    - location: Startup
    - user: .DEFAULT
  - 4209:
    - name: perfci
    - command: perfci.h
    - location: Startup
    - user: .DEFAULT
  - 4210:
    - name: perfci
    - command: perfci.ini
    - location: Startup
    - user: .DEFAULT
  - 4211:
    - name: perfctrs
    - command: perfctrs.dll
    - location: Startup
    - user: .DEFAULT
  - 4212:
    - name: perfd009
    - command: perfd009.dat
    - location: Startup
    - user: .DEFAULT
  - 4213:
    - name: perfdisk
    - command: perfdisk.dll
    - location: Startup
    - user: .DEFAULT
  - 4214:
    - name: perffilt
    - command: perffilt.h
    - location: Startup
    - user: .DEFAULT
  - 4215:
    - name: perffilt
    - command: perffilt.ini
    - location: Startup
    - user: .DEFAULT
  - 4216:
    - name: perfh009
    - command: perfh009.dat
    - location: Startup
    - user: .DEFAULT
  - 4217:
    - name: perfi009
    - command: perfi009.dat
    - location: Startup
    - user: .DEFAULT
  - 4218:
    - name: perfmon
    - command: perfmon.exe
    - location: Startup
    - user: .DEFAULT
  - 4219:
    - name: perfmon
    - command: perfmon.msc
    - location: Startup
    - user: .DEFAULT
  - 4220:
    - name: perfnet
    - command: perfnet.dll
    - location: Startup
    - user: .DEFAULT
  - 4221:
    - name: perfnw
    - command: perfnw.dll
    - location: Startup
    - user: .DEFAULT
  - 4222:
    - name: perfos
    - command: perfos.dll
    - location: Startup
    - user: .DEFAULT
  - 4223:
    - name: perfproc
    - command: perfproc.dll
    - location: Startup
    - user: .DEFAULT
  - 4224:
    - name: PerfStringBackup
    - command: PerfStringBackup.INI
    - location: Startup
    - user: .DEFAULT
  - 4225:
    - name: perfts
    - command: perfts.dll
    - location: Startup
    - user: .DEFAULT
  - 4226:
    - name: perfwci
    - command: perfwci.h
    - location: Startup
    - user: .DEFAULT
  - 4227:
    - name: perfwci
    - command: perfwci.ini
    - location: Startup
    - user: .DEFAULT
  - 4228:
    - name: photometadatahandler
    - command: photometadatahandler.dll
    - location: Startup
    - user: .DEFAULT
  - 4229:
    - name: photowiz
    - command: photowiz.dll
    - location: Startup
    - user: .DEFAULT
  - 4230:
    - name: Picclp32
    - command: Picclp32.ocx
    - location: Startup
    - user: .DEFAULT
  - 4231:
    - name: PICEntry
    - command: PICEntry.dll
    - location: Startup
    - user: .DEFAULT
  - 4232:
    - name: picn20
    - command: picn20.dll
    - location: Startup
    - user: .DEFAULT
  - 4233:
    - name: PICSDK
    - command: PICSDK.dll
    - location: Startup
    - user: .DEFAULT
  - 4234:
    - name: PICSDK
    - command: PICSDK.ini
    - location: Startup
    - user: .DEFAULT
  - 4235:
    - name: PICSDK2
    - command: PICSDK2.dll
    - location: Startup
    - user: .DEFAULT
  - 4236:
    - name: pid
    - command: pid.dll
    - location: Startup
    - user: .DEFAULT
  - 4237:
    - name: pid
    - command: pid.inf
    - location: Startup
    - user: .DEFAULT
  - 4238:
    - name: pidgen
    - command: pidgen.dll
    - location: Startup
    - user: .DEFAULT
  - 4239:
    - name: pifmgr
    - command: pifmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 4240:
    - name: ping
    - command: ping.exe
    - location: Startup
    - user: .DEFAULT
  - 4241:
    - name: ping6
    - command: ping6.exe
    - location: Startup
    - user: .DEFAULT
  - 4242:
    - name: pintool
    - command: pintool.exe
    - location: Startup
    - user: .DEFAULT
  - 4243:
    - name: pjlmon
    - command: pjlmon.dll
    - location: Startup
    - user: .DEFAULT
  - 4244:
    - name: plustab
    - command: plustab.dll
    - location: Startup
    - user: .DEFAULT
  - 4245:
    - name: pmspl
    - command: pmspl.dll
    - location: Startup
    - user: .DEFAULT
  - 4246:
    - name: pngfilt
    - command: pngfilt.dll
    - location: Startup
    - user: .DEFAULT
  - 4247:
    - name: pnrpnsp
    - command: pnrpnsp.dll
    - location: Startup
    - user: .DEFAULT
  - 4248:
    - name: polstore
    - command: polstore.dll
    - location: Startup
    - user: .DEFAULT
  - 4249:
    - name: PortableDeviceApi
    - command: PortableDeviceApi.dll
    - location: Startup
    - user: .DEFAULT
  - 4250:
    - name: PortableDeviceClassExtension
    - command: PortableDeviceClassExtension.dll
    - location: Startup
    - user: .DEFAULT
  - 4251:
    - name: PortableDeviceTypes
    - command: PortableDeviceTypes.dll
    - location: Startup
    - user: .DEFAULT
  - 4252:
    - name: PortableDeviceWiaCompat
    - command: PortableDeviceWiaCompat.dll
    - location: Startup
    - user: .DEFAULT
  - 4253:
    - name: PortableDeviceWMDRM
    - command: PortableDeviceWMDRM.dll
    - location: Startup
    - user: .DEFAULT
  - 4254:
    - name: powercfg
    - command: powercfg.cpl
    - location: Startup
    - user: .DEFAULT
  - 4255:
    - name: powercfg
    - command: powercfg.exe
    - location: Startup
    - user: .DEFAULT
  - 4256:
    - name: powrprof
    - command: powrprof.dll
    - location: Startup
    - user: .DEFAULT
  - 4257:
    - name: PPPFilt
    - command: PPPFilt.dll
    - location: Startup
    - user: .DEFAULT
  - 4258:
    - name: PresentationCFFRasterizerNative_v0300
    - command: PresentationCFFRasterizerNative_v0300.dll
    - location: Startup
    - user: .DEFAULT
  - 4259:
    - name: PresentationHost
    - command: PresentationHost.exe
    - location: Startup
    - user: .DEFAULT
  - 4260:
    - name: PresentationHostProxy
    - command: PresentationHostProxy.dll
    - location: Startup
    - user: .DEFAULT
  - 4261:
    - name: PresentationNative_v0300
    - command: PresentationNative_v0300.dll
    - location: Startup
    - user: .DEFAULT
  - 4262:
    - name: prflbmsg
    - command: prflbmsg.dll
    - location: Startup
    - user: .DEFAULT
  - 4263:
    - name: print
    - command: print.exe
    - location: Startup
    - user: .DEFAULT
  - 4264:
    - name: printui
    - command: printui.dll
    - location: Startup
    - user: .DEFAULT
  - 4265:
    - name: prncnfg
    - command: prncnfg.vbs
    - location: Startup
    - user: .DEFAULT
  - 4266:
    - name: prndrvr
    - command: prndrvr.vbs
    - location: Startup
    - user: .DEFAULT
  - 4267:
    - name: prnjobs
    - command: prnjobs.vbs
    - location: Startup
    - user: .DEFAULT
  - 4268:
    - name: prnmngr
    - command: prnmngr.vbs
    - location: Startup
    - user: .DEFAULT
  - 4269:
    - name: prnport
    - command: prnport.vbs
    - location: Startup
    - user: .DEFAULT
  - 4270:
    - name: prnqctl
    - command: prnqctl.vbs
    - location: Startup
    - user: .DEFAULT
  - 4271:
    - name: prntvpt
    - command: prntvpt.dll
    - location: Startup
    - user: .DEFAULT
  - 4272:
    - name: proctexe
    - command: proctexe.ocx
    - location: Startup
    - user: .DEFAULT
  - 4273:
    - name: prodspec
    - command: prodspec.ini
    - location: Startup
    - user: .DEFAULT
  - 4274:
    - name: profmap
    - command: profmap.dll
    - location: Startup
    - user: .DEFAULT
  - 4275:
    - name: progman
    - command: progman.exe
    - location: Startup
    - user: .DEFAULT
  - 4276:
    - name: Project2-1
    - command: Project2-1.ocx
    - location: Startup
    - user: .DEFAULT
  - 4277:
    - name: Project2
    - command: Project2.INF
    - location: Startup
    - user: .DEFAULT
  - 4278:
    - name: propdefs
    - command: propdefs.dll
    - location: Startup
    - user: .DEFAULT
  - 4279:
    - name: propsys
    - command: propsys.dll
    - location: Startup
    - user: .DEFAULT
  - 4280:
    - name: propsys.dll
    - command: propsys.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 4281:
    - name: proquota
    - command: proquota.exe
    - location: Startup
    - user: .DEFAULT
  - 4282:
    - name: proxycfg
    - command: proxycfg.exe
    - location: Startup
    - user: .DEFAULT
  - 4283:
    - name: psapi
    - command: psapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4284:
    - name: psbase
    - command: psbase.dll
    - location: Startup
    - user: .DEFAULT
  - 4285:
    - name: pschdcnt
    - command: pschdcnt.h
    - location: Startup
    - user: .DEFAULT
  - 4286:
    - name: pschdprf
    - command: pschdprf.dll
    - location: Startup
    - user: .DEFAULT
  - 4287:
    - name: pschdprf
    - command: pschdprf.ini
    - location: Startup
    - user: .DEFAULT
  - 4288:
    - name: pscript
    - command: pscript.sep
    - location: Startup
    - user: .DEFAULT
  - 4289:
    - name: psnppagn
    - command: psnppagn.dll
    - location: Startup
    - user: .DEFAULT
  - 4290:
    - name: pstorec
    - command: pstorec.dll
    - location: Startup
    - user: .DEFAULT
  - 4291:
    - name: pstorsvc
    - command: pstorsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4292:
    - name: pubprn
    - command: pubprn.vbs
    - location: Startup
    - user: .DEFAULT
  - 4293:
    - name: pwrshplugin
    - command: pwrshplugin.dll
    - location: Startup
    - user: .DEFAULT
  - 4294:
    - name: px
    - command: px.dll
    - location: Startup
    - user: .DEFAULT
  - 4295:
    - name: pxdrv
    - command: pxdrv.dll
    - location: Startup
    - user: .DEFAULT
  - 4296:
    - name: pxmas
    - command: pxmas.dll
    - location: Startup
    - user: .DEFAULT
  - 4297:
    - name: pxwave
    - command: pxwave.dll
    - location: Startup
    - user: .DEFAULT
  - 4298:
    - name: pxwma
    - command: pxwma.dll
    - location: Startup
    - user: .DEFAULT
  - 4299:
    - name: qagent
    - command: qagent.dll
    - location: Startup
    - user: .DEFAULT
  - 4300:
    - name: qagentrt
    - command: qagentrt.dll
    - location: Startup
    - user: .DEFAULT
  - 4301:
    - name: qappsrv
    - command: qappsrv.exe
    - location: Startup
    - user: .DEFAULT
  - 4302:
    - name: qasf
    - command: qasf.dll
    - location: Startup
    - user: .DEFAULT
  - 4303:
    - name: qcap
    - command: qcap.dll
    - location: Startup
    - user: .DEFAULT
  - 4304:
    - name: qcliprov
    - command: qcliprov.dll
    - location: Startup
    - user: .DEFAULT
  - 4305:
    - name: qd3d
    - command: qd3d.dll
    - location: Startup
    - user: .DEFAULT
  - 4306:
    - name: QD3DCustomElements
    - command: QD3DCustomElements.q3x
    - location: Startup
    - user: .DEFAULT
  - 4307:
    - name: QD3D_IR2
    - command: QD3D_IR2.q3x
    - location: Startup
    - user: .DEFAULT
  - 4308:
    - name: qdv
    - command: qdv.dll
    - location: Startup
    - user: .DEFAULT
  - 4309:
    - name: qdvd
    - command: qdvd.dll
    - location: Startup
    - user: .DEFAULT
  - 4310:
    - name: qedit
    - command: qedit.dll
    - location: Startup
    - user: .DEFAULT
  - 4311:
    - name: qedwipes
    - command: qedwipes.dll
    - location: Startup
    - user: .DEFAULT
  - 4312:
    - name: qmgr
    - command: qmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 4313:
    - name: qmgrprxy
    - command: qmgrprxy.dll
    - location: Startup
    - user: .DEFAULT
  - 4314:
    - name: qosname
    - command: qosname.dll
    - location: Startup
    - user: .DEFAULT
  - 4315:
    - name: qprocess
    - command: qprocess.exe
    - location: Startup
    - user: .DEFAULT
  - 4316:
    - name: QTUninst
    - command: QTUninst.dll
    - location: Startup
    - user: .DEFAULT
  - 4317:
    - name: quartz
    - command: quartz.dll
    - location: Startup
    - user: .DEFAULT
  - 4318:
    - name: query
    - command: query.dll
    - location: Startup
    - user: .DEFAULT
  - 4319:
    - name: QuickTime
    - command: QuickTime.cpl
    - location: Startup
    - user: .DEFAULT
  - 4320:
    - name: QuickTime
    - command: QuickTime.qts
    - location: Startup
    - user: .DEFAULT
  - 4321:
    - name: QuickTimeMusicalInstruments
    - command: QuickTimeMusicalInstruments.qtx
    - location: Startup
    - user: .DEFAULT
  - 4322:
    - name: QuickTimeVR
    - command: QuickTimeVR.qtx
    - location: Startup
    - user: .DEFAULT
  - 4323:
    - name: qutil
    - command: qutil.dll
    - location: Startup
    - user: .DEFAULT
  - 4324:
    - name: qwinsta
    - command: qwinsta.exe
    - location: Startup
    - user: .DEFAULT
  - 4325:
    - name: racpldlg
    - command: racpldlg.dll
    - location: Startup
    - user: .DEFAULT
  - 4326:
    - name: raidmgmt
    - command: raidmgmt.ini
    - location: Startup
    - user: .DEFAULT
  - 4327:
    - name: rasadhlp
    - command: rasadhlp.dll
    - location: Startup
    - user: .DEFAULT
  - 4328:
    - name: rasapi32
    - command: rasapi32.dll
    - location: Startup
    - user: .DEFAULT
  - 4329:
    - name: rasauto
    - command: rasauto.dll
    - location: Startup
    - user: .DEFAULT
  - 4330:
    - name: rasautou
    - command: rasautou.exe
    - location: Startup
    - user: .DEFAULT
  - 4331:
    - name: raschap
    - command: raschap.dll
    - location: Startup
    - user: .DEFAULT
  - 4332:
    - name: rasctrnm
    - command: rasctrnm.h
    - location: Startup
    - user: .DEFAULT
  - 4333:
    - name: rasctrs
    - command: rasctrs.dll
    - location: Startup
    - user: .DEFAULT
  - 4334:
    - name: rasctrs
    - command: rasctrs.ini
    - location: Startup
    - user: .DEFAULT
  - 4335:
    - name: rasdial
    - command: rasdial.exe
    - location: Startup
    - user: .DEFAULT
  - 4336:
    - name: rasdlg
    - command: rasdlg.dll
    - location: Startup
    - user: .DEFAULT
  - 4337:
    - name: rasman
    - command: rasman.dll
    - location: Startup
    - user: .DEFAULT
  - 4338:
    - name: rasmans
    - command: rasmans.dll
    - location: Startup
    - user: .DEFAULT
  - 4339:
    - name: rasmontr
    - command: rasmontr.dll
    - location: Startup
    - user: .DEFAULT
  - 4340:
    - name: rasmxs
    - command: rasmxs.dll
    - location: Startup
    - user: .DEFAULT
  - 4341:
    - name: rasphone
    - command: rasphone.exe
    - location: Startup
    - user: .DEFAULT
  - 4342:
    - name: rasppp
    - command: rasppp.dll
    - location: Startup
    - user: .DEFAULT
  - 4343:
    - name: rasqec
    - command: rasqec.dll
    - location: Startup
    - user: .DEFAULT
  - 4344:
    - name: rasrad
    - command: rasrad.dll
    - location: Startup
    - user: .DEFAULT
  - 4345:
    - name: rassapi
    - command: rassapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4346:
    - name: rasser
    - command: rasser.dll
    - location: Startup
    - user: .DEFAULT
  - 4347:
    - name: rastapi
    - command: rastapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4348:
    - name: rastls
    - command: rastls.dll
    - location: Startup
    - user: .DEFAULT
  - 4349:
    - name: rave
    - command: rave.dll
    - location: Startup
    - user: .DEFAULT
  - 4350:
    - name: rcbdyctl
    - command: rcbdyctl.dll
    - location: Startup
    - user: .DEFAULT
  - 4351:
    - name: rcimlby
    - command: rcimlby.exe
    - location: Startup
    - user: .DEFAULT
  - 4352:
    - name: rcp
    - command: rcp.exe
    - location: Startup
    - user: .DEFAULT
  - 4353:
    - name: rdchost
    - command: rdchost.dll
    - location: Startup
    - user: .DEFAULT
  - 4354:
    - name: rdpcfgex
    - command: rdpcfgex.dll
    - location: Startup
    - user: .DEFAULT
  - 4355:
    - name: rdpclip
    - command: rdpclip.exe
    - location: Startup
    - user: .DEFAULT
  - 4356:
    - name: rdpdd
    - command: rdpdd.dll
    - location: Startup
    - user: .DEFAULT
  - 4357:
    - name: rdpsnd
    - command: rdpsnd.dll
    - location: Startup
    - user: .DEFAULT
  - 4358:
    - name: rdpwsx
    - command: rdpwsx.dll
    - location: Startup
    - user: .DEFAULT
  - 4359:
    - name: rdsaddin
    - command: rdsaddin.exe
    - location: Startup
    - user: .DEFAULT
  - 4360:
    - name: rdshost
    - command: rdshost.exe
    - location: Startup
    - user: .DEFAULT
  - 4361:
    - name: recover
    - command: recover.exe
    - location: Startup
    - user: .DEFAULT
  - 4362:
    - name: redir
    - command: redir.exe
    - location: Startup
    - user: .DEFAULT
  - 4363:
    - name: reg
    - command: reg.exe
    - location: Startup
    - user: .DEFAULT
  - 4364:
    - name: regapi
    - command: regapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4365:
    - name: regedt32
    - command: regedt32.exe
    - location: Startup
    - user: .DEFAULT
  - 4366:
    - name: regini
    - command: regini.exe
    - location: Startup
    - user: .DEFAULT
  - 4367:
    - name: regsvc
    - command: regsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4368:
    - name: regsvr32
    - command: regsvr32.exe
    - location: Startup
    - user: .DEFAULT
  - 4369:
    - name: regwiz
    - command: regwiz.exe
    - location: Startup
    - user: .DEFAULT
  - 4370:
    - name: regwizc
    - command: regwizc.dll
    - location: Startup
    - user: .DEFAULT
  - 4371:
    - name: relog
    - command: relog.exe
    - location: Startup
    - user: .DEFAULT
  - 4372:
    - name: remotepg
    - command: remotepg.dll
    - location: Startup
    - user: .DEFAULT
  - 4373:
    - name: remotesp
    - command: remotesp.tsp
    - location: Startup
    - user: .DEFAULT
  - 4374:
    - name: rend
    - command: rend.dll
    - location: Startup
    - user: .DEFAULT
  - 4375:
    - name: replace
    - command: replace.exe
    - location: Startup
    - user: .DEFAULT
  - 4376:
    - name: reset
    - command: reset.exe
    - location: Startup
    - user: .DEFAULT
  - 4377:
    - name: resutils
    - command: resutils.dll
    - location: Startup
    - user: .DEFAULT
  - 4378:
    - name: rexec
    - command: rexec.exe
    - location: Startup
    - user: .DEFAULT
  - 4379:
    - name: rgb9rast_2
    - command: rgb9rast_2.dll
    - location: Startup
    - user: .DEFAULT
  - 4380:
    - name: rhttpaa
    - command: rhttpaa.dll
    - location: Startup
    - user: .DEFAULT
  - 4381:
    - name: riched20
    - command: riched20.dll
    - location: Startup
    - user: .DEFAULT
  - 4382:
    - name: riched32
    - command: riched32.dll
    - location: Startup
    - user: .DEFAULT
  - 4383:
    - name: rnr20
    - command: rnr20.dll
    - location: Startup
    - user: .DEFAULT
  - 4384:
    - name: route
    - command: route.exe
    - location: Startup
    - user: .DEFAULT
  - 4385:
    - name: routemon
    - command: routemon.exe
    - location: Startup
    - user: .DEFAULT
  - 4386:
    - name: routetab
    - command: routetab.dll
    - location: Startup
    - user: .DEFAULT
  - 4387:
    - name: rpcns4
    - command: rpcns4.dll
    - location: Startup
    - user: .DEFAULT
  - 4388:
    - name: rpcrt4
    - command: rpcrt4.dll
    - location: Startup
    - user: .DEFAULT
  - 4389:
    - name: rpcss
    - command: rpcss.dll
    - location: Startup
    - user: .DEFAULT
  - 4390:
    - name: rsaci
    - command: rsaci.rat
    - location: Startup
    - user: .DEFAULT
  - 4391:
    - name: rsaenh
    - command: rsaenh.dll
    - location: Startup
    - user: .DEFAULT
  - 4392:
    - name: rsfsaps
    - command: rsfsaps.dll
    - location: Startup
    - user: .DEFAULT
  - 4393:
    - name: rsh
    - command: rsh.exe
    - location: Startup
    - user: .DEFAULT
  - 4394:
    - name: rshx32
    - command: rshx32.dll
    - location: Startup
    - user: .DEFAULT
  - 4395:
    - name: rsm
    - command: rsm.exe
    - location: Startup
    - user: .DEFAULT
  - 4396:
    - name: rsmps
    - command: rsmps.dll
    - location: Startup
    - user: .DEFAULT
  - 4397:
    - name: rsmsink
    - command: rsmsink.exe
    - location: Startup
    - user: .DEFAULT
  - 4398:
    - name: rsmui
    - command: rsmui.exe
    - location: Startup
    - user: .DEFAULT
  - 4399:
    - name: rsnotify
    - command: rsnotify.exe
    - location: Startup
    - user: .DEFAULT
  - 4400:
    - name: rsop
    - command: rsop.msc
    - location: Startup
    - user: .DEFAULT
  - 4401:
    - name: rsopprov
    - command: rsopprov.exe
    - location: Startup
    - user: .DEFAULT
  - 4402:
    - name: rsvp
    - command: rsvp.exe
    - location: Startup
    - user: .DEFAULT
  - 4403:
    - name: rsvp
    - command: rsvp.ini
    - location: Startup
    - user: .DEFAULT
  - 4404:
    - name: rsvpcnts
    - command: rsvpcnts.h
    - location: Startup
    - user: .DEFAULT
  - 4405:
    - name: rsvpmsg
    - command: rsvpmsg.dll
    - location: Startup
    - user: .DEFAULT
  - 4406:
    - name: rsvpperf
    - command: rsvpperf.dll
    - location: Startup
    - user: .DEFAULT
  - 4407:
    - name: rsvpsp
    - command: rsvpsp.dll
    - location: Startup
    - user: .DEFAULT
  - 4408:
    - name: rtcshare
    - command: rtcshare.exe
    - location: Startup
    - user: .DEFAULT
  - 4409:
    - name: rtffilt
    - command: rtffilt.dll
    - location: Startup
    - user: .DEFAULT
  - 4410:
    - name: rtipxmib
    - command: rtipxmib.dll
    - location: Startup
    - user: .DEFAULT
  - 4411:
    - name: RtkCoInstXP
    - command: RtkCoInstXP.dll
    - location: Startup
    - user: .DEFAULT
  - 4412:
    - name: rtm
    - command: rtm.dll
    - location: Startup
    - user: .DEFAULT
  - 4413:
    - name: RTSndMgr
    - command: RTSndMgr.CPL
    - location: Startup
    - user: .DEFAULT
  - 4414:
    - name: rtutils
    - command: rtutils.dll
    - location: Startup
    - user: .DEFAULT
  - 4415:
    - name: runas
    - command: runas.exe
    - location: Startup
    - user: .DEFAULT
  - 4416:
    - name: rundll32
    - command: rundll32.exe
    - location: Startup
    - user: .DEFAULT
  - 4417:
    - name: runonce
    - command: runonce.exe
    - location: Startup
    - user: .DEFAULT
  - 4418:
    - name: rwinsta
    - command: rwinsta.exe
    - location: Startup
    - user: .DEFAULT
  - 4419:
    - name: s3gnb
    - command: s3gnb.dll
    - location: Startup
    - user: .DEFAULT
  - 4420:
    - name: safrcdlg
    - command: safrcdlg.dll
    - location: Startup
    - user: .DEFAULT
  - 4421:
    - name: safrdm
    - command: safrdm.dll
    - location: Startup
    - user: .DEFAULT
  - 4422:
    - name: safrslv
    - command: safrslv.dll
    - location: Startup
    - user: .DEFAULT
  - 4423:
    - name: samlib
    - command: samlib.dll
    - location: Startup
    - user: .DEFAULT
  - 4424:
    - name: samsrv
    - command: samsrv.dll
    - location: Startup
    - user: .DEFAULT
  - 4425:
    - name: sapi.cpl
    - command: sapi.cpl.manifest
    - location: Startup
    - user: .DEFAULT
  - 4426:
    - name: savedump
    - command: savedump.exe
    - location: Startup
    - user: .DEFAULT
  - 4427:
    - name: sbe
    - command: sbe.dll
    - location: Startup
    - user: .DEFAULT
  - 4428:
    - name: sbeio
    - command: sbeio.dll
    - location: Startup
    - user: .DEFAULT
  - 4429:
    - name: sc
    - command: sc.exe
    - location: Startup
    - user: .DEFAULT
  - 4430:
    - name: scarddlg
    - command: scarddlg.dll
    - location: Startup
    - user: .DEFAULT
  - 4431:
    - name: scardssp
    - command: scardssp.dll
    - location: Startup
    - user: .DEFAULT
  - 4432:
    - name: scardsvr
    - command: scardsvr.exe
    - location: Startup
    - user: .DEFAULT
  - 4433:
    - name: sccbase
    - command: sccbase.dll
    - location: Startup
    - user: .DEFAULT
  - 4434:
    - name: sccsccp
    - command: sccsccp.dll
    - location: Startup
    - user: .DEFAULT
  - 4435:
    - name: scecli
    - command: scecli.dll
    - location: Startup
    - user: .DEFAULT
  - 4436:
    - name: scesrv
    - command: scesrv.dll
    - location: Startup
    - user: .DEFAULT
  - 4437:
    - name: schannel
    - command: schannel.dll
    - location: Startup
    - user: .DEFAULT
  - 4438:
    - name: schedsvc
    - command: schedsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4439:
    - name: schtasks
    - command: schtasks.exe
    - location: Startup
    - user: .DEFAULT
  - 4440:
    - name: sclaudio
    - command: sclaudio.ax
    - location: Startup
    - user: .DEFAULT
  - 4441:
    - name: sclgntfy
    - command: sclgntfy.dll
    - location: Startup
    - user: .DEFAULT
  - 4442:
    - name: sclvideo
    - command: sclvideo.ax
    - location: Startup
    - user: .DEFAULT
  - 4443:
    - name: SCP32
    - command: SCP32.DLL
    - location: Startup
    - user: .DEFAULT
  - 4444:
    - name: scredir
    - command: scredir.dll
    - location: Startup
    - user: .DEFAULT
  - 4445:
    - name: scripto
    - command: scripto.dll
    - location: Startup
    - user: .DEFAULT
  - 4446:
    - name: scriptpw
    - command: scriptpw.dll
    - location: Startup
    - user: .DEFAULT
  - 4447:
    - name: scrnsave
    - command: scrnsave.scr
    - location: Startup
    - user: .DEFAULT
  - 4448:
    - name: scrobj
    - command: scrobj.dll
    - location: Startup
    - user: .DEFAULT
  - 4449:
    - name: scrrun
    - command: scrrun.dll
    - location: Startup
    - user: .DEFAULT
  - 4450:
    - name: sdbinst
    - command: sdbinst.exe
    - location: Startup
    - user: .DEFAULT
  - 4451:
    - name: sdhcinst
    - command: sdhcinst.dll
    - location: Startup
    - user: .DEFAULT
  - 4452:
    - name: sdpblb
    - command: sdpblb.dll
    - location: Startup
    - user: .DEFAULT
  - 4453:
    - name: searchfilterhost
    - command: searchfilterhost.exe
    - location: Startup
    - user: .DEFAULT
  - 4454:
    - name: searchindexer
    - command: searchindexer.exe
    - location: Startup
    - user: .DEFAULT
  - 4455:
    - name: searchindexer.exe
    - command: searchindexer.exe.mui
    - location: Startup
    - user: .DEFAULT
  - 4456:
    - name: searchprotocolhost
    - command: searchprotocolhost.exe
    - location: Startup
    - user: .DEFAULT
  - 4457:
    - name: secedit
    - command: secedit.exe
    - location: Startup
    - user: .DEFAULT
  - 4458:
    - name: seclogon
    - command: seclogon.dll
    - location: Startup
    - user: .DEFAULT
  - 4459:
    - name: secpol
    - command: secpol.msc
    - location: Startup
    - user: .DEFAULT
  - 4460:
    - name: secupd
    - command: secupd.dat
    - location: Startup
    - user: .DEFAULT
  - 4461:
    - name: secupd
    - command: secupd.sig
    - location: Startup
    - user: .DEFAULT
  - 4462:
    - name: secur32
    - command: secur32.dll
    - location: Startup
    - user: .DEFAULT
  - 4463:
    - name: security
    - command: security.dll
    - location: Startup
    - user: .DEFAULT
  - 4464:
    - name: sendcmsg
    - command: sendcmsg.dll
    - location: Startup
    - user: .DEFAULT
  - 4465:
    - name: sendmail
    - command: sendmail.dll
    - location: Startup
    - user: .DEFAULT
  - 4466:
    - name: sens
    - command: sens.dll
    - location: Startup
    - user: .DEFAULT
  - 4467:
    - name: sensapi
    - command: sensapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4468:
    - name: senscfg
    - command: senscfg.dll
    - location: Startup
    - user: .DEFAULT
  - 4469:
    - name: serialui
    - command: serialui.dll
    - location: Startup
    - user: .DEFAULT
  - 4470:
    - name: Serif AlbumPlus
    - command: Serif AlbumPlus.scr
    - location: Startup
    - user: .DEFAULT
  - 4471:
    - name: servdeps
    - command: servdeps.dll
    - location: Startup
    - user: .DEFAULT
  - 4472:
    - name: services
    - command: services.exe
    - location: Startup
    - user: .DEFAULT
  - 4473:
    - name: services
    - command: services.msc
    - location: Startup
    - user: .DEFAULT
  - 4474:
    - name: serwvdrv
    - command: serwvdrv.dll
    - location: Startup
    - user: .DEFAULT
  - 4475:
    - name: sessmgr
    - command: sessmgr.exe
    - location: Startup
    - user: .DEFAULT
  - 4476:
    - name: SET42
    - command: SET42.tmp
    - location: Startup
    - user: .DEFAULT
  - 4477:
    - name: SET46
    - command: SET46.tmp
    - location: Startup
    - user: .DEFAULT
  - 4478:
    - name: SET4E
    - command: SET4E.tmp
    - location: Startup
    - user: .DEFAULT
  - 4479:
    - name: sethc
    - command: sethc.exe
    - location: Startup
    - user: .DEFAULT
  - 4480:
    - name: setup
    - command: setup.bmp
    - location: Startup
    - user: .DEFAULT
  - 4481:
    - name: setup
    - command: setup.exe
    - location: Startup
    - user: .DEFAULT
  - 4482:
    - name: setupapi
    - command: setupapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4483:
    - name: setupdll
    - command: setupdll.dll
    - location: Startup
    - user: .DEFAULT
  - 4484:
    - name: setupn
    - command: setupn.exe
    - location: Startup
    - user: .DEFAULT
  - 4485:
    - name: setver
    - command: setver.exe
    - location: Startup
    - user: .DEFAULT
  - 4486:
    - name: sfc
    - command: sfc.dll
    - location: Startup
    - user: .DEFAULT
  - 4487:
    - name: sfc
    - command: sfc.exe
    - location: Startup
    - user: .DEFAULT
  - 4488:
    - name: sfcfiles
    - command: sfcfiles.dll
    - location: Startup
    - user: .DEFAULT
  - 4489:
    - name: sfc_os
    - command: sfc_os.dll
    - location: Startup
    - user: .DEFAULT
  - 4490:
    - name: sfmapi
    - command: sfmapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4491:
    - name: shadow
    - command: shadow.exe
    - location: Startup
    - user: .DEFAULT
  - 4492:
    - name: share
    - command: share.exe
    - location: Startup
    - user: .DEFAULT
  - 4493:
    - name: shdoclc
    - command: shdoclc.dll
    - location: Startup
    - user: .DEFAULT
  - 4494:
    - name: shdocvw
    - command: shdocvw.dll
    - location: Startup
    - user: .DEFAULT
  - 4495:
    - name: shell
    - command: shell.dll
    - location: Startup
    - user: .DEFAULT
  - 4496:
    - name: shell32
    - command: shell32.dll
    - location: Startup
    - user: .DEFAULT
  - 4497:
    - name: shellstyle
    - command: shellstyle.dll
    - location: Startup
    - user: .DEFAULT
  - 4498:
    - name: shfolder
    - command: shfolder.dll
    - location: Startup
    - user: .DEFAULT
  - 4499:
    - name: shgina
    - command: shgina.dll
    - location: Startup
    - user: .DEFAULT
  - 4500:
    - name: shiftjis
    - command: shiftjis.uce
    - location: Startup
    - user: .DEFAULT
  - 4501:
    - name: shimeng
    - command: shimeng.dll
    - location: Startup
    - user: .DEFAULT
  - 4502:
    - name: shimgvw
    - command: shimgvw.dll
    - location: Startup
    - user: .DEFAULT
  - 4503:
    - name: shlwapi
    - command: shlwapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4504:
    - name: shmedia
    - command: shmedia.dll
    - location: Startup
    - user: .DEFAULT
  - 4505:
    - name: shmgrate
    - command: shmgrate.exe
    - location: Startup
    - user: .DEFAULT
  - 4506:
    - name: shrpubw
    - command: shrpubw.exe
    - location: Startup
    - user: .DEFAULT
  - 4507:
    - name: shscrap
    - command: shscrap.dll
    - location: Startup
    - user: .DEFAULT
  - 4508:
    - name: shsvcs
    - command: shsvcs.dll
    - location: Startup
    - user: .DEFAULT
  - 4509:
    - name: shutdown
    - command: shutdown.exe
    - location: Startup
    - user: .DEFAULT
  - 4510:
    - name: sigtab
    - command: sigtab.dll
    - location: Startup
    - user: .DEFAULT
  - 4511:
    - name: sigverif
    - command: sigverif.exe
    - location: Startup
    - user: .DEFAULT
  - 4512:
    - name: simpdata
    - command: simpdata.tlb
    - location: Startup
    - user: .DEFAULT
  - 4513:
    - name: sirenacm
    - command: sirenacm.dll
    - location: Startup
    - user: .DEFAULT
  - 4514:
    - name: sisbkup
    - command: sisbkup.dll
    - location: Startup
    - user: .DEFAULT
  - 4515:
    - name: skdll
    - command: skdll.dll
    - location: Startup
    - user: .DEFAULT
  - 4516:
    - name: skeys
    - command: skeys.exe
    - location: Startup
    - user: .DEFAULT
  - 4517:
    - name: slayerxp
    - command: slayerxp.dll
    - location: Startup
    - user: .DEFAULT
  - 4518:
    - name: slbcsp
    - command: slbcsp.dll
    - location: Startup
    - user: .DEFAULT
  - 4519:
    - name: slbiop
    - command: slbiop.dll
    - location: Startup
    - user: .DEFAULT
  - 4520:
    - name: slbrccsp
    - command: slbrccsp.dll
    - location: Startup
    - user: .DEFAULT
  - 4521:
    - name: slcoinst
    - command: slcoinst.dll
    - location: Startup
    - user: .DEFAULT
  - 4522:
    - name: slextspk
    - command: slextspk.dll
    - location: Startup
    - user: .DEFAULT
  - 4523:
    - name: slgen
    - command: slgen.dll
    - location: Startup
    - user: .DEFAULT
  - 4524:
    - name: slrundll
    - command: slrundll.exe
    - location: Startup
    - user: .DEFAULT
  - 4525:
    - name: slserv
    - command: slserv.exe
    - location: Startup
    - user: .DEFAULT
  - 4526:
    - name: sl_anet
    - command: sl_anet.acm
    - location: Startup
    - user: .DEFAULT
  - 4527:
    - name: smbinst
    - command: smbinst.exe
    - location: Startup
    - user: .DEFAULT
  - 4528:
    - name: smlogcfg
    - command: smlogcfg.dll
    - location: Startup
    - user: .DEFAULT
  - 4529:
    - name: smlogsvc
    - command: smlogsvc.exe
    - location: Startup
    - user: .DEFAULT
  - 4530:
    - name: smss
    - command: smss.exe
    - location: Startup
    - user: .DEFAULT
  - 4531:
    - name: sndrec32
    - command: sndrec32.exe
    - location: Startup
    - user: .DEFAULT
  - 4532:
    - name: sndvol32
    - command: sndvol32.exe
    - location: Startup
    - user: .DEFAULT
  - 4533:
    - name: snmpapi
    - command: snmpapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4534:
    - name: snmpsnap
    - command: snmpsnap.dll
    - location: Startup
    - user: .DEFAULT
  - 4535:
    - name: softpub
    - command: softpub.dll
    - location: Startup
    - user: .DEFAULT
  - 4536:
    - name: sol
    - command: sol.exe
    - location: Startup
    - user: .DEFAULT
  - 4537:
    - name: sort
    - command: sort.exe
    - location: Startup
    - user: .DEFAULT
  - 4538:
    - name: sortkey
    - command: sortkey.nls
    - location: Startup
    - user: .DEFAULT
  - 4539:
    - name: sorttbls
    - command: sorttbls.nls
    - location: Startup
    - user: .DEFAULT
  - 4540:
    - name: sound
    - command: sound.drv
    - location: Startup
    - user: .DEFAULT
  - 4541:
    - name: spdwnwxp
    - command: spdwnwxp.exe
    - location: Startup
    - user: .DEFAULT
  - 4542:
    - name: spider
    - command: spider.exe
    - location: Startup
    - user: .DEFAULT
  - 4543:
    - name: spiisupd
    - command: spiisupd.exe
    - location: Startup
    - user: .DEFAULT
  - 4544:
    - name: spmsg
    - command: spmsg.dll
    - location: Startup
    - user: .DEFAULT
  - 4545:
    - name: spmsgXP_2k3
    - command: spmsgXP_2k3.dll
    - location: Startup
    - user: .DEFAULT
  - 4546:
    - name: spnike
    - command: spnike.dll
    - location: Startup
    - user: .DEFAULT
  - 4547:
    - name: spnpinst
    - command: spnpinst.exe
    - location: Startup
    - user: .DEFAULT
  - 4548:
    - name: spoolss
    - command: spoolss.dll
    - location: Startup
    - user: .DEFAULT
  - 4549:
    - name: spoolsv
    - command: spoolsv.exe
    - location: Startup
    - user: .DEFAULT
  - 4550:
    - name: sprestrt
    - command: sprestrt.exe
    - location: Startup
    - user: .DEFAULT
  - 4551:
    - name: sprio600
    - command: sprio600.dll
    - location: Startup
    - user: .DEFAULT
  - 4552:
    - name: sprio800
    - command: sprio800.dll
    - location: Startup
    - user: .DEFAULT
  - 4553:
    - name: spupdsvc
    - command: spupdsvc.exe
    - location: Startup
    - user: .DEFAULT
  - 4554:
    - name: spupdwxp
    - command: spupdwxp.exe
    - location: Startup
    - user: .DEFAULT
  - 4555:
    - name: spupdwxp
    - command: spupdwxp.log
    - location: Startup
    - user: .DEFAULT
  - 4556:
    - name: spxcoins
    - command: spxcoins.dll
    - location: Startup
    - user: .DEFAULT
  - 4557:
    - name: sqlctr90
    - command: sqlctr90.dll
    - location: Startup
    - user: .DEFAULT
  - 4558:
    - name: sqlncli
    - command: sqlncli.chm
    - location: Startup
    - user: .DEFAULT
  - 4559:
    - name: sqlncli
    - command: sqlncli.dll
    - location: Startup
    - user: .DEFAULT
  - 4560:
    - name: sqlnclir
    - command: sqlnclir.rll
    - location: Startup
    - user: .DEFAULT
  - 4561:
    - name: SQLServerManager
    - command: SQLServerManager.msc
    - location: Startup
    - user: .DEFAULT
  - 4562:
    - name: sqlsodbc
    - command: sqlsodbc.chm
    - location: Startup
    - user: .DEFAULT
  - 4563:
    - name: sqlsrv32
    - command: sqlsrv32.dll
    - location: Startup
    - user: .DEFAULT
  - 4564:
    - name: sqlsrv32
    - command: sqlsrv32.rll
    - location: Startup
    - user: .DEFAULT
  - 4565:
    - name: sqlunirl
    - command: sqlunirl.dll
    - location: Startup
    - user: .DEFAULT
  - 4566:
    - name: sqlwid
    - command: sqlwid.dll
    - location: Startup
    - user: .DEFAULT
  - 4567:
    - name: sqlwoa
    - command: sqlwoa.dll
    - location: Startup
    - user: .DEFAULT
  - 4568:
    - name: srchadmin
    - command: srchadmin.dll
    - location: Startup
    - user: .DEFAULT
  - 4569:
    - name: srchadmin.dll
    - command: srchadmin.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 4570:
    - name: srclient
    - command: srclient.dll
    - location: Startup
    - user: .DEFAULT
  - 4571:
    - name: srrstr
    - command: srrstr.dll
    - location: Startup
    - user: .DEFAULT
  - 4572:
    - name: srsvc
    - command: srsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4573:
    - name: srvsvc
    - command: srvsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4574:
    - name: ss3dfo
    - command: ss3dfo.scr
    - location: Startup
    - user: .DEFAULT
  - 4575:
    - name: ssbezier
    - command: ssbezier.scr
    - location: Startup
    - user: .DEFAULT
  - 4576:
    - name: ssdpapi
    - command: ssdpapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4577:
    - name: ssdpsrv
    - command: ssdpsrv.dll
    - location: Startup
    - user: .DEFAULT
  - 4578:
    - name: ssflwbox
    - command: ssflwbox.scr
    - location: Startup
    - user: .DEFAULT
  - 4579:
    - name: ssmarque
    - command: ssmarque.scr
    - location: Startup
    - user: .DEFAULT
  - 4580:
    - name: ssmypics
    - command: ssmypics.scr
    - location: Startup
    - user: .DEFAULT
  - 4581:
    - name: ssmyst
    - command: ssmyst.scr
    - location: Startup
    - user: .DEFAULT
  - 4582:
    - name: sspipes
    - command: sspipes.scr
    - location: Startup
    - user: .DEFAULT
  - 4583:
    - name: ssstars
    - command: ssstars.scr
    - location: Startup
    - user: .DEFAULT
  - 4584:
    - name: sstext3d
    - command: sstext3d.scr
    - location: Startup
    - user: .DEFAULT
  - 4585:
    - name: SSubTmr6
    - command: SSubTmr6.dll
    - location: Startup
    - user: .DEFAULT
  - 4586:
    - name: stclient
    - command: stclient.dll
    - location: Startup
    - user: .DEFAULT
  - 4587:
    - name: stdole2
    - command: stdole2.tlb
    - location: Startup
    - user: .DEFAULT
  - 4588:
    - name: stdole32
    - command: stdole32.tlb
    - location: Startup
    - user: .DEFAULT
  - 4589:
    - name: sti
    - command: sti.dll
    - location: Startup
    - user: .DEFAULT
  - 4590:
    - name: stimon
    - command: stimon.exe
    - location: Startup
    - user: .DEFAULT
  - 4591:
    - name: sti_ci
    - command: sti_ci.dll
    - location: Startup
    - user: .DEFAULT
  - 4592:
    - name: stobject
    - command: stobject.dll
    - location: Startup
    - user: .DEFAULT
  - 4593:
    - name: storage
    - command: storage.dll
    - location: Startup
    - user: .DEFAULT
  - 4594:
    - name: storprop
    - command: storprop.dll
    - location: Startup
    - user: .DEFAULT
  - 4595:
    - name: streamci
    - command: streamci.dll
    - location: Startup
    - user: .DEFAULT
  - 4596:
    - name: STRING32
    - command: STRING32.dll
    - location: Startup
    - user: .DEFAULT
  - 4597:
    - name: strmdll
    - command: strmdll.dll
    - location: Startup
    - user: .DEFAULT
  - 4598:
    - name: strmfilt
    - command: strmfilt.dll
    - location: Startup
    - user: .DEFAULT
  - 4599:
    - name: structuredqueryschema
    - command: structuredqueryschema.bin
    - location: Startup
    - user: .DEFAULT
  - 4600:
    - name: structuredqueryschematrivial
    - command: structuredqueryschematrivial.bin
    - location: Startup
    - user: .DEFAULT
  - 4601:
    - name: subrange
    - command: subrange.uce
    - location: Startup
    - user: .DEFAULT
  - 4602:
    - name: subst
    - command: subst.exe
    - location: Startup
    - user: .DEFAULT
  - 4603:
    - name: svchost
    - command: svchost.exe
    - location: Startup
    - user: .DEFAULT
  - 4604:
    - name: svcpack
    - command: svcpack.dll
    - location: Startup
    - user: .DEFAULT
  - 4605:
    - name: SV_SQL3_Config
    - command: SV_SQL3_Config.db
    - location: Startup
    - user: .DEFAULT
  - 4606:
    - name: SV_SQL3_Events
    - command: SV_SQL3_Events.db
    - location: Startup
    - user: .DEFAULT
  - 4607:
    - name: swprv
    - command: swprv.dll
    - location: Startup
    - user: .DEFAULT
  - 4608:
    - name: sxs
    - command: sxs.dll
    - location: Startup
    - user: .DEFAULT
  - 4609:
    - name: syncapp
    - command: syncapp.exe
    - location: Startup
    - user: .DEFAULT
  - 4610:
    - name: synceng
    - command: synceng.dll
    - location: Startup
    - user: .DEFAULT
  - 4611:
    - name: syncui
    - command: syncui.dll
    - location: Startup
    - user: .DEFAULT
  - 4612:
    - name: sysdm
    - command: sysdm.cpl
    - location: Startup
    - user: .DEFAULT
  - 4613:
    - name: sysedit
    - command: sysedit.exe
    - location: Startup
    - user: .DEFAULT
  - 4614:
    - name: sysinv
    - command: sysinv.dll
    - location: Startup
    - user: .DEFAULT
  - 4615:
    - name: syskey
    - command: syskey.exe
    - location: Startup
    - user: .DEFAULT
  - 4616:
    - name: sysmon
    - command: sysmon.ocx
    - location: Startup
    - user: .DEFAULT
  - 4617:
    - name: sysocmgr
    - command: sysocmgr.exe
    - location: Startup
    - user: .DEFAULT
  - 4618:
    - name: sysprint
    - command: sysprint.sep
    - location: Startup
    - user: .DEFAULT
  - 4619:
    - name: sysprtj
    - command: sysprtj.sep
    - location: Startup
    - user: .DEFAULT
  - 4620:
    - name: syssetup
    - command: syssetup.dll
    - location: Startup
    - user: .DEFAULT
  - 4621:
    - name: system
    - command: system.drv
    - location: Startup
    - user: .DEFAULT
  - 4622:
    - name: systeminfo
    - command: systeminfo.exe
    - location: Startup
    - user: .DEFAULT
  - 4623:
    - name: systray
    - command: systray.exe
    - location: Startup
    - user: .DEFAULT
  - 4624:
    - name: t2embed
    - command: t2embed.dll
    - location: Startup
    - user: .DEFAULT
  - 4625:
    - name: tapi
    - command: tapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4626:
    - name: tapi3
    - command: tapi3.dll
    - location: Startup
    - user: .DEFAULT
  - 4627:
    - name: tapi32
    - command: tapi32.dll
    - location: Startup
    - user: .DEFAULT
  - 4628:
    - name: tapiperf
    - command: tapiperf.dll
    - location: Startup
    - user: .DEFAULT
  - 4629:
    - name: tapisrv
    - command: tapisrv.dll
    - location: Startup
    - user: .DEFAULT
  - 4630:
    - name: tapiui
    - command: tapiui.dll
    - location: Startup
    - user: .DEFAULT
  - 4631:
    - name: taskkill
    - command: taskkill.exe
    - location: Startup
    - user: .DEFAULT
  - 4632:
    - name: tasklist
    - command: tasklist.exe
    - location: Startup
    - user: .DEFAULT
  - 4633:
    - name: taskman
    - command: taskman.exe
    - location: Startup
    - user: .DEFAULT
  - 4634:
    - name: taskmgr
    - command: taskmgr.exe
    - location: Startup
    - user: .DEFAULT
  - 4635:
    - name: tcmsetup
    - command: tcmsetup.exe
    - location: Startup
    - user: .DEFAULT
  - 4636:
    - name: tcpmib
    - command: tcpmib.dll
    - location: Startup
    - user: .DEFAULT
  - 4637:
    - name: tcpmon
    - command: tcpmon.dll
    - location: Startup
    - user: .DEFAULT
  - 4638:
    - name: tcpmon
    - command: tcpmon.ini
    - location: Startup
    - user: .DEFAULT
  - 4639:
    - name: tcpmonui
    - command: tcpmonui.dll
    - location: Startup
    - user: .DEFAULT
  - 4640:
    - name: tcpsvcs
    - command: tcpsvcs.exe
    - location: Startup
    - user: .DEFAULT
  - 4641:
    - name: tdc
    - command: tdc.ocx
    - location: Startup
    - user: .DEFAULT
  - 4642:
    - name: telephon
    - command: telephon.cpl
    - location: Startup
    - user: .DEFAULT
  - 4643:
    - name: telnet
    - command: telnet.exe
    - location: Startup
    - user: .DEFAULT
  - 4644:
    - name: termcap
    - command: termcap
    - location: Startup
    - user: .DEFAULT
  - 4645:
    - name: termmgr
    - command: termmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 4646:
    - name: termsrv
    - command: termsrv.dll
    - location: Startup
    - user: .DEFAULT
  - 4647:
    - name: tftp
    - command: tftp.exe
    - location: Startup
    - user: .DEFAULT
  - 4648:
    - name: themeui
    - command: themeui.dll
    - location: Startup
    - user: .DEFAULT
  - 4649:
    - name: ticrf
    - command: ticrf.rat
    - location: Startup
    - user: .DEFAULT
  - 4650:
    - name: timedate
    - command: timedate.cpl
    - location: Startup
    - user: .DEFAULT
  - 4651:
    - name: timer
    - command: timer.drv
    - location: Startup
    - user: .DEFAULT
  - 4652:
    - name: tlntadmn
    - command: tlntadmn.exe
    - location: Startup
    - user: .DEFAULT
  - 4653:
    - name: tlntsess
    - command: tlntsess.exe
    - location: Startup
    - user: .DEFAULT
  - 4654:
    - name: tlntsvr
    - command: tlntsvr.exe
    - location: Startup
    - user: .DEFAULT
  - 4655:
    - name: tlntsvrp
    - command: tlntsvrp.dll
    - location: Startup
    - user: .DEFAULT
  - 4656:
    - name: toolhelp
    - command: toolhelp.dll
    - location: Startup
    - user: .DEFAULT
  - 4657:
    - name: tourstart
    - command: tourstart.exe
    - location: Startup
    - user: .DEFAULT
  - 4658:
    - name: tquery
    - command: tquery.dll
    - location: Startup
    - user: .DEFAULT
  - 4659:
    - name: tquery.dll
    - command: tquery.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 4660:
    - name: tracerpt
    - command: tracerpt.exe
    - location: Startup
    - user: .DEFAULT
  - 4661:
    - name: tracert
    - command: tracert.exe
    - location: Startup
    - user: .DEFAULT
  - 4662:
    - name: tracert6
    - command: tracert6.exe
    - location: Startup
    - user: .DEFAULT
  - 4663:
    - name: traffic
    - command:
    - location: Startup
    - user: .DEFAULT
  - 4664:
    - name: tree
    - command: tree.com
    - location: Startup
    - user: .DEFAULT
  - 4665:
    - name: trkwks
    - command: trkwks.dll
    - location: Startup
    - user: .DEFAULT
  - 4666:
    - name: tsappcmp
    - command: tsappcmp.dll
    - location: Startup
    - user: .DEFAULT
  - 4667:
    - name: tsbyuv
    - command: tsbyuv.dll
    - location: Startup
    - user: .DEFAULT
  - 4668:
    - name: tscfgwmi
    - command: tscfgwmi.dll
    - location: Startup
    - user: .DEFAULT
  - 4669:
    - name: tscon
    - command: tscon.exe
    - location: Startup
    - user: .DEFAULT
  - 4670:
    - name: tscupgrd
    - command: tscupgrd.exe
    - location: Startup
    - user: .DEFAULT
  - 4671:
    - name: tsd32
    - command: tsd32.dll
    - location: Startup
    - user: .DEFAULT
  - 4672:
    - name: tsddd
    - command: tsddd.dll
    - location: Startup
    - user: .DEFAULT
  - 4673:
    - name: tsdiscon
    - command: tsdiscon.exe
    - location: Startup
    - user: .DEFAULT
  - 4674:
    - name: tsgqec
    - command: tsgqec.dll
    - location: Startup
    - user: .DEFAULT
  - 4675:
    - name: tskill
    - command: tskill.exe
    - location: Startup
    - user: .DEFAULT
  - 4676:
    - name: tslabels
    - command: tslabels.h
    - location: Startup
    - user: .DEFAULT
  - 4677:
    - name: tslabels
    - command: tslabels.ini
    - location: Startup
    - user: .DEFAULT
  - 4678:
    - name: tspkg
    - command: tspkg.dll
    - location: Startup
    - user: .DEFAULT
  - 4679:
    - name: tsshutdn
    - command: tsshutdn.exe
    - location: Startup
    - user: .DEFAULT
  - 4680:
    - name: tssoft32
    - command: tssoft32.acm
    - location: Startup
    - user: .DEFAULT
  - 4681:
    - name: TsWpfWrp
    - command: TsWpfWrp.exe
    - location: Startup
    - user: .DEFAULT
  - 4682:
    - name: TTI32
    - command: TTI32.dll
    - location: Startup
    - user: .DEFAULT
  - 4683:
    - name: TTIC32
    - command: TTIC32.dll
    - location: Startup
    - user: .DEFAULT
  - 4684:
    - name: twaindsm
    - command: twaindsm.dll
    - location: Startup
    - user: .DEFAULT
  - 4685:
    - name: twext
    - command: twext.dll
    - location: Startup
    - user: .DEFAULT
  - 4686:
    - name: TwnLib20
    - command: TwnLib20.dll
    - location: Startup
    - user: .DEFAULT
  - 4687:
    - name: TwnLib4
    - command: TwnLib4.dll
    - location: Startup
    - user: .DEFAULT
  - 4688:
    - name: txflog
    - command: txflog.dll
    - location: Startup
    - user: .DEFAULT
  - 4689:
    - name: typelib
    - command: typelib.dll
    - location: Startup
    - user: .DEFAULT
  - 4690:
    - name: typeperf
    - command: typeperf.exe
    - location: Startup
    - user: .DEFAULT
  - 4691:
    - name: tzchange
    - command: tzchange.exe
    - location: Startup
    - user: .DEFAULT
  - 4692:
    - name: TZLog
    - command: TZLog.log
    - location: Startup
    - user: .DEFAULT
  - 4693:
    - name: udhisapi
    - command: udhisapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4694:
    - name: ufat
    - command: ufat.dll
    - location: Startup
    - user: .DEFAULT
  - 4695:
    - name: uiautomationcore
    - command: uiautomationcore.dll
    - location: Startup
    - user: .DEFAULT
  - 4696:
    - name: ulib
    - command: ulib.dll
    - location: Startup
    - user: .DEFAULT
  - 4697:
    - name: umandlg
    - command: umandlg.dll
    - location: Startup
    - user: .DEFAULT
  - 4698:
    - name: umdmxfrm
    - command: umdmxfrm.dll
    - location: Startup
    - user: .DEFAULT
  - 4699:
    - name: umpnpmgr
    - command: umpnpmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 4700:
    - name: UncCplExt
    - command: UncCplExt.dll
    - location: Startup
    - user: .DEFAULT
  - 4701:
    - name: UncDMS
    - command: UncDMS.dll
    - location: Startup
    - user: .DEFAULT
  - 4702:
    - name: UncNE
    - command: UncNE.dll
    - location: Startup
    - user: .DEFAULT
  - 4703:
    - name: UncPH
    - command: UncPH.dll
    - location: Startup
    - user: .DEFAULT
  - 4704:
    - name: UncRes
    - command: UncRes.dll
    - location: Startup
    - user: .DEFAULT
  - 4705:
    - name: unicode
    - command: unicode.nls
    - location: Startup
    - user: .DEFAULT
  - 4706:
    - name: unimdm
    - command: unimdm.tsp
    - location: Startup
    - user: .DEFAULT
  - 4707:
    - name: unimdmat
    - command: unimdmat.dll
    - location: Startup
    - user: .DEFAULT
  - 4708:
    - name: uniplat
    - command: uniplat.dll
    - location: Startup
    - user: .DEFAULT
  - 4709:
    - name: unlodctr
    - command: unlodctr.exe
    - location: Startup
    - user: .DEFAULT
  - 4710:
    - name: untfs
    - command: untfs.dll
    - location: Startup
    - user: .DEFAULT
  - 4711:
    - name: upnp
    - command: upnp.dll
    - location: Startup
    - user: .DEFAULT
  - 4712:
    - name: upnpcont
    - command: upnpcont.exe
    - location: Startup
    - user: .DEFAULT
  - 4713:
    - name: upnphost
    - command: upnphost.dll
    - location: Startup
    - user: .DEFAULT
  - 4714:
    - name: upnpui
    - command: upnpui.dll
    - location: Startup
    - user: .DEFAULT
  - 4715:
    - name: ups
    - command: ups.exe
    - location: Startup
    - user: .DEFAULT
  - 4716:
    - name: ureg
    - command: ureg.dll
    - location: Startup
    - user: .DEFAULT
  - 4717:
    - name: url
    - command: url.dll
    - location: Startup
    - user: .DEFAULT
  - 4718:
    - name: urlmon
    - command: urlmon.dll
    - location: Startup
    - user: .DEFAULT
  - 4719:
    - name: usbmon
    - command: usbmon.dll
    - location: Startup
    - user: .DEFAULT
  - 4720:
    - name: usbui
    - command: usbui.dll
    - location: Startup
    - user: .DEFAULT
  - 4721:
    - name: user
    - command: user.exe
    - location: Startup
    - user: .DEFAULT
  - 4722:
    - name: user32
    - command: user32.dll
    - location: Startup
    - user: .DEFAULT
  - 4723:
    - name: userenv
    - command: userenv.dll
    - location: Startup
    - user: .DEFAULT
  - 4724:
    - name: userinit
    - command: userinit.exe
    - location: Startup
    - user: .DEFAULT
  - 4725:
    - name: user_gensett
    - command: user_gensett.xml
    - location: Startup
    - user: .DEFAULT
  - 4726:
    - name: usp10
    - command: usp10.dll
    - location: Startup
    - user: .DEFAULT
  - 4727:
    - name: usrcntra
    - command: usrcntra.dll
    - location: Startup
    - user: .DEFAULT
  - 4728:
    - name: usrcoina
    - command: usrcoina.dll
    - location: Startup
    - user: .DEFAULT
  - 4729:
    - name: usrdpa
    - command: usrdpa.dll
    - location: Startup
    - user: .DEFAULT
  - 4730:
    - name: usrdtea
    - command: usrdtea.dll
    - location: Startup
    - user: .DEFAULT
  - 4731:
    - name: usrfaxa
    - command: usrfaxa.dll
    - location: Startup
    - user: .DEFAULT
  - 4732:
    - name: usrlbva
    - command: usrlbva.dll
    - location: Startup
    - user: .DEFAULT
  - 4733:
    - name: usrlogon
    - command: usrlogon.cmd
    - location: Startup
    - user: .DEFAULT
  - 4734:
    - name: usrmlnka
    - command: usrmlnka.exe
    - location: Startup
    - user: .DEFAULT
  - 4735:
    - name: usrprbda
    - command: usrprbda.exe
    - location: Startup
    - user: .DEFAULT
  - 4736:
    - name: usrrtosa
    - command: usrrtosa.dll
    - location: Startup
    - user: .DEFAULT
  - 4737:
    - name: usrsdpia
    - command: usrsdpia.dll
    - location: Startup
    - user: .DEFAULT
  - 4738:
    - name: usrshuta
    - command: usrshuta.exe
    - location: Startup
    - user: .DEFAULT
  - 4739:
    - name: usrsvpia
    - command: usrsvpia.dll
    - location: Startup
    - user: .DEFAULT
  - 4740:
    - name: usrv42a
    - command: usrv42a.dll
    - location: Startup
    - user: .DEFAULT
  - 4741:
    - name: usrv80a
    - command: usrv80a.dll
    - location: Startup
    - user: .DEFAULT
  - 4742:
    - name: usrvoica
    - command: usrvoica.dll
    - location: Startup
    - user: .DEFAULT
  - 4743:
    - name: usrvpa
    - command: usrvpa.dll
    - location: Startup
    - user: .DEFAULT
  - 4744:
    - name: utildll
    - command: utildll.dll
    - location: Startup
    - user: .DEFAULT
  - 4745:
    - name: utilman
    - command: utilman.exe
    - location: Startup
    - user: .DEFAULT
  - 4746:
    - name: uwdf
    - command: uwdf.exe
    - location: Startup
    - user: .DEFAULT
  - 4747:
    - name: uxtheme
    - command: uxtheme.dll
    - location: Startup
    - user: .DEFAULT
  - 4748:
    - name: V0080Ext
    - command: V0080Ext.ax
    - location: Startup
    - user: .DEFAULT
  - 4749:
    - name: V0080Ext
    - command: V0080Ext.crl
    - location: Startup
    - user: .DEFAULT
  - 4750:
    - name: V0080Hwx
    - command: V0080Hwx.dll
    - location: Startup
    - user: .DEFAULT
  - 4751:
    - name: V0080Pin
    - command: V0080Pin.crl
    - location: Startup
    - user: .DEFAULT
  - 4752:
    - name: V0080Pin
    - command: V0080Pin.dll
    - location: Startup
    - user: .DEFAULT
  - 4753:
    - name: V0080Srv
    - command: V0080Srv.exe
    - location: Startup
    - user: .DEFAULT
  - 4754:
    - name: V0080Sti
    - command: V0080Sti.dll
    - location: Startup
    - user: .DEFAULT
  - 4755:
    - name: V0080Vfw
    - command: V0080Vfw.dll
    - location: Startup
    - user: .DEFAULT
  - 4756:
    - name: v7vga
    - command: v7vga.rom
    - location: Startup
    - user: .DEFAULT
  - 4757:
    - name: Vb6stkit
    - command: Vb6stkit.dll
    - location: Startup
    - user: .DEFAULT
  - 4758:
    - name: VBAEN32
    - command: VBAEN32.OLB
    - location: Startup
    - user: .DEFAULT
  - 4759:
    - name: VBAEND32
    - command: VBAEND32.OLB
    - location: Startup
    - user: .DEFAULT
  - 4760:
    - name: vbajet32
    - command: vbajet32.dll
    - location: Startup
    - user: .DEFAULT
  - 4761:
    - name: vbalNCSM6
    - command: vbalNCSM6.dll
    - location: Startup
    - user: .DEFAULT
  - 4762:
    - name: VBAME
    - command: VBAME.DLL
    - location: Startup
    - user: .DEFAULT
  - 4763:
    - name: vbicodec
    - command: vbicodec.ax
    - location: Startup
    - user: .DEFAULT
  - 4764:
    - name: vbisurf
    - command: vbisurf.ax
    - location: Startup
    - user: .DEFAULT
  - 4765:
    - name: vbscript
    - command: vbscript.dll
    - location: Startup
    - user: .DEFAULT
  - 4766:
    - name: vcdex
    - command: vcdex.dll
    - location: Startup
    - user: .DEFAULT
  - 4767:
    - name: vcomp100
    - command: vcomp100.dll
    - location: Startup
    - user: .DEFAULT
  - 4768:
    - name: vcomp110
    - command: vcomp110.dll
    - location: Startup
    - user: .DEFAULT
  - 4769:
    - name: vdmdbg
    - command: vdmdbg.dll
    - location: Startup
    - user: .DEFAULT
  - 4770:
    - name: vdmredir
    - command: vdmredir.dll
    - location: Startup
    - user: .DEFAULT
  - 4771:
    - name: VEN2232
    - command: VEN2232.OLB
    - location: Startup
    - user: .DEFAULT
  - 4772:
    - name: ver
    - command: ver.dll
    - location: Startup
    - user: .DEFAULT
  - 4773:
    - name: verclsid
    - command: verclsid.exe
    - location: Startup
    - user: .DEFAULT
  - 4774:
    - name: verifier
    - command: verifier.dll
    - location: Startup
    - user: .DEFAULT
  - 4775:
    - name: verifier
    - command: verifier.exe
    - location: Startup
    - user: .DEFAULT
  - 4776:
    - name: version
    - command: version.dll
    - location: Startup
    - user: .DEFAULT
  - 4777:
    - name: vfpodbc
    - command: vfpodbc.dll
    - location: Startup
    - user: .DEFAULT
  - 4778:
    - name: vfwwdm32
    - command: vfwwdm32.dll
    - location: Startup
    - user: .DEFAULT
  - 4779:
    - name: vga
    - command: vga.dll
    - location: Startup
    - user: .DEFAULT
  - 4780:
    - name: vga
    - command: vga.drv
    - location: Startup
    - user: .DEFAULT
  - 4781:
    - name: vga256
    - command: vga256.dll
    - location: Startup
    - user: .DEFAULT
  - 4782:
    - name: vga64k
    - command: vga64k.dll
    - location: Startup
    - user: .DEFAULT
  - 4783:
    - name: vidcap
    - command: vidcap.ax
    - location: Startup
    - user: .DEFAULT
  - 4784:
    - name: View Channels
    - command: View Channels.scf
    - location: Startup
    - user: .DEFAULT
  - 4785:
    - name: vjoy
    - command: vjoy.dll
    - location: Startup
    - user: .DEFAULT
  - 4786:
    - name: vssadmin
    - command: vssadmin.exe
    - location: Startup
    - user: .DEFAULT
  - 4787:
    - name: vssapi
    - command: vssapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4788:
    - name: vssvc
    - command: vssvc.exe
    - location: Startup
    - user: .DEFAULT
  - 4789:
    - name: vss_ps
    - command: vss_ps.dll
    - location: Startup
    - user: .DEFAULT
  - 4790:
    - name: vwipxspx
    - command: vwipxspx.dll
    - location: Startup
    - user: .DEFAULT
  - 4791:
    - name: vwipxspx
    - command: vwipxspx.exe
    - location: Startup
    - user: .DEFAULT
  - 4792:
    - name: vxblock
    - command: vxblock.dll
    - location: Startup
    - user: .DEFAULT
  - 4793:
    - name: w32time
    - command: w32time.dll
    - location: Startup
    - user: .DEFAULT
  - 4794:
    - name: w32tm
    - command: w32tm.exe
    - location: Startup
    - user: .DEFAULT
  - 4795:
    - name: w32topl
    - command: w32topl.dll
    - location: Startup
    - user: .DEFAULT
  - 4796:
    - name: w3ssl
    - command: w3ssl.dll
    - location: Startup
    - user: .DEFAULT
  - 4797:
    - name: watchdog
    - command: watchdog.sys
    - location: Startup
    - user: .DEFAULT
  - 4798:
    - name: wavemsp
    - command: wavemsp.dll
    - location: Startup
    - user: .DEFAULT
  - 4799:
    - name: wbcache
    - command: wbcache.deu
    - location: Startup
    - user: .DEFAULT
  - 4800:
    - name: wbcache
    - command: wbcache.enu
    - location: Startup
    - user: .DEFAULT
  - 4801:
    - name: wbcache
    - command: wbcache.esn
    - location: Startup
    - user: .DEFAULT
  - 4802:
    - name: wbcache
    - command: wbcache.fra
    - location: Startup
    - user: .DEFAULT
  - 4803:
    - name: wbcache
    - command: wbcache.ita
    - location: Startup
    - user: .DEFAULT
  - 4804:
    - name: wbcache
    - command: wbcache.nld
    - location: Startup
    - user: .DEFAULT
  - 4805:
    - name: wbcache
    - command: wbcache.sve
    - location: Startup
    - user: .DEFAULT
  - 4806:
    - name: wbdbase
    - command: wbdbase.deu
    - location: Startup
    - user: .DEFAULT
  - 4807:
    - name: wbdbase
    - command: wbdbase.enu
    - location: Startup
    - user: .DEFAULT
  - 4808:
    - name: wbdbase
    - command: wbdbase.esn
    - location: Startup
    - user: .DEFAULT
  - 4809:
    - name: wbdbase
    - command: wbdbase.fra
    - location: Startup
    - user: .DEFAULT
  - 4810:
    - name: wbdbase
    - command: wbdbase.ita
    - location: Startup
    - user: .DEFAULT
  - 4811:
    - name: wbdbase
    - command: wbdbase.nld
    - location: Startup
    - user: .DEFAULT
  - 4812:
    - name: wbdbase
    - command: wbdbase.sve
    - location: Startup
    - user: .DEFAULT
  - 4813:
    - name: wdfapi
    - command: wdfapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4814:
    - name: WdfCoInstaller01007
    - command: WdfCoInstaller01007.dll
    - location: Startup
    - user: .DEFAULT
  - 4815:
    - name: WdfCoInstaller01009
    - command: WdfCoInstaller01009.dll
    - location: Startup
    - user: .DEFAULT
  - 4816:
    - name: wdfmgr
    - command: wdfmgr.exe
    - location: Startup
    - user: .DEFAULT
  - 4817:
    - name: wdigest
    - command: wdigest.dll
    - location: Startup
    - user: .DEFAULT
  - 4818:
    - name: wdl
    - command: wdl.trm
    - location: Startup
    - user: .DEFAULT
  - 4819:
    - name: wdmaud
    - command: wdmaud.drv
    - location: Startup
    - user: .DEFAULT
  - 4820:
    - name: webcheck
    - command: webcheck.dll
    - location: Startup
    - user: .DEFAULT
  - 4821:
    - name: webclnt
    - command: webclnt.dll
    - location: Startup
    - user: .DEFAULT
  - 4822:
    - name: WebEx Document Loader Port
    - command:
    - location: Startup
    - user: .DEFAULT
  - 4823:
    - name: webfldrs
    - command: webfldrs.msi
    - location: Startup
    - user: .DEFAULT
  - 4824:
    - name: webhits
    - command: webhits.dll
    - location: Startup
    - user: .DEFAULT
  - 4825:
    - name: webvw
    - command: webvw.dll
    - location: Startup
    - user: .DEFAULT
  - 4826:
    - name: wevtfwd
    - command: wevtfwd.dll
    - location: Startup
    - user: .DEFAULT
  - 4827:
    - name: wextract
    - command: wextract.exe
    - location: Startup
    - user: .DEFAULT
  - 4828:
    - name: wfwnet
    - command: wfwnet.drv
    - location: Startup
    - user: .DEFAULT
  - 4829:
    - name: WgaLogon
    - command: WgaLogon.dll
    - location: Startup
    - user: .DEFAULT
  - 4830:
    - name: WgaTray
    - command: WgaTray.exe
    - location: Startup
    - user: .DEFAULT
  - 4831:
    - name: wiaacmgr
    - command: wiaacmgr.exe
    - location: Startup
    - user: .DEFAULT
  - 4832:
    - name: wiadefui
    - command: wiadefui.dll
    - location: Startup
    - user: .DEFAULT
  - 4833:
    - name: wiadss
    - command: wiadss.dll
    - location: Startup
    - user: .DEFAULT
  - 4834:
    - name: wiascr
    - command: wiascr.dll
    - location: Startup
    - user: .DEFAULT
  - 4835:
    - name: wiaservc
    - command: wiaservc.dll
    - location: Startup
    - user: .DEFAULT
  - 4836:
    - name: wiasf
    - command: wiasf.ax
    - location: Startup
    - user: .DEFAULT
  - 4837:
    - name: wiashext
    - command: wiashext.dll
    - location: Startup
    - user: .DEFAULT
  - 4838:
    - name: wiavideo
    - command: wiavideo.dll
    - location: Startup
    - user: .DEFAULT
  - 4839:
    - name: wiavusd
    - command: wiavusd.dll
    - location: Startup
    - user: .DEFAULT
  - 4840:
    - name: wifeman
    - command: wifeman.dll
    - location: Startup
    - user: .DEFAULT
  - 4841:
    - name: win
    - command: win.com
    - location: Startup
    - user: .DEFAULT
  - 4842:
    - name: win32k
    - command: win32k.sys
    - location: Startup
    - user: .DEFAULT
  - 4843:
    - name: win32spl
    - command: win32spl.dll
    - location: Startup
    - user: .DEFAULT
  - 4844:
    - name: win87em
    - command: win87em.dll
    - location: Startup
    - user: .DEFAULT
  - 4845:
    - name: winbrand
    - command: winbrand.dll
    - location: Startup
    - user: .DEFAULT
  - 4846:
    - name: winchat
    - command: winchat.exe
    - location: Startup
    - user: .DEFAULT
  - 4847:
    - name: WindowsAccessBridge
    - command: WindowsAccessBridge.dll
    - location: Startup
    - user: .DEFAULT
  - 4848:
    - name: windowscodecs
    - command: windowscodecs.dll
    - location: Startup
    - user: .DEFAULT
  - 4849:
    - name: windowscodecsext
    - command: windowscodecsext.dll
    - location: Startup
    - user: .DEFAULT
  - 4850:
    - name: WindowsLogon
    - command: WindowsLogon.manifest
    - location: Startup
    - user: .DEFAULT
  - 4851:
    - name: winfax
    - command: winfax.dll
    - location: Startup
    - user: .DEFAULT
  - 4852:
    - name: WinFXDocObj
    - command: WinFXDocObj.exe
    - location: Startup
    - user: .DEFAULT
  - 4853:
    - name: winhelp
    - command: winhelp.hlp
    - location: Startup
    - user: .DEFAULT
  - 4854:
    - name: winhlp32
    - command: winhlp32.exe
    - location: Startup
    - user: .DEFAULT
  - 4855:
    - name: winhttp
    - command: winhttp.dll
    - location: Startup
    - user: .DEFAULT
  - 4856:
    - name: wininet
    - command: wininet.dll
    - location: Startup
    - user: .DEFAULT
  - 4857:
    - name: winipsec
    - command: winipsec.dll
    - location: Startup
    - user: .DEFAULT
  - 4858:
    - name: winlogon
    - command: winlogon.exe
    - location: Startup
    - user: .DEFAULT
  - 4859:
    - name: winmine
    - command: winmine.exe
    - location: Startup
    - user: .DEFAULT
  - 4860:
    - name: winmm
    - command: winmm.dll
    - location: Startup
    - user: .DEFAULT
  - 4861:
    - name: winmsd
    - command: winmsd.exe
    - location: Startup
    - user: .DEFAULT
  - 4862:
    - name: winnls
    - command: winnls.dll
    - location: Startup
    - user: .DEFAULT
  - 4863:
    - name: winntbbu
    - command: winntbbu.dll
    - location: Startup
    - user: .DEFAULT
  - 4864:
    - name: winoldap
    - command: winoldap.mod
    - location: Startup
    - user: .DEFAULT
  - 4865:
    - name: winrm
    - command: winrm.cmd
    - location: Startup
    - user: .DEFAULT
  - 4866:
    - name: winrm
    - command: winrm.vbs
    - location: Startup
    - user: .DEFAULT
  - 4867:
    - name: winrmprov
    - command: winrmprov.dll
    - location: Startup
    - user: .DEFAULT
  - 4868:
    - name: winrmprov
    - command: winrmprov.mof
    - location: Startup
    - user: .DEFAULT
  - 4869:
    - name: winrnr
    - command: winrnr.dll
    - location: Startup
    - user: .DEFAULT
  - 4870:
    - name: winrs
    - command: winrs.exe
    - location: Startup
    - user: .DEFAULT
  - 4871:
    - name: winrscmd
    - command: winrscmd.dll
    - location: Startup
    - user: .DEFAULT
  - 4872:
    - name: winrshost
    - command: winrshost.exe
    - location: Startup
    - user: .DEFAULT
  - 4873:
    - name: winrsmgr
    - command: winrsmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 4874:
    - name: winrssrv
    - command: winrssrv.dll
    - location: Startup
    - user: .DEFAULT
  - 4875:
    - name: winscard
    - command: winscard.dll
    - location: Startup
    - user: .DEFAULT
  - 4876:
    - name: winshfhc
    - command: winshfhc.dll
    - location: Startup
    - user: .DEFAULT
  - 4877:
    - name: winsock
    - command: winsock.dll
    - location: Startup
    - user: .DEFAULT
  - 4878:
    - name: winspool
    - command: winspool.drv
    - location: Startup
    - user: .DEFAULT
  - 4879:
    - name: winspool
    - command: winspool.exe
    - location: Startup
    - user: .DEFAULT
  - 4880:
    - name: winsrv
    - command: winsrv.dll
    - location: Startup
    - user: .DEFAULT
  - 4881:
    - name: winsta
    - command: winsta.dll
    - location: Startup
    - user: .DEFAULT
  - 4882:
    - name: winstrm
    - command: winstrm.dll
    - location: Startup
    - user: .DEFAULT
  - 4883:
    - name: wintrust
    - command: wintrust.dll
    - location: Startup
    - user: .DEFAULT
  - 4884:
    - name: winusb
    - command: winusb.dll
    - location: Startup
    - user: .DEFAULT
  - 4885:
    - name: WinUSBCoInstaller
    - command: WinUSBCoInstaller.dll
    - location: Startup
    - user: .DEFAULT
  - 4886:
    - name: WinUSBCoInstaller2
    - command: WinUSBCoInstaller2.dll
    - location: Startup
    - user: .DEFAULT
  - 4887:
    - name: winver
    - command: winver.exe
    - location: Startup
    - user: .DEFAULT
  - 4888:
    - name: WISPTIS
    - command: WISPTIS.EXE
    - location: Startup
    - user: .DEFAULT
  - 4889:
    - name: wkssvc
    - command: wkssvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4890:
    - name: wlanapi
    - command: wlanapi.dll
    - location: Startup
    - user: .DEFAULT
  - 4891:
    - name: wldap32
    - command: wldap32.dll
    - location: Startup
    - user: .DEFAULT
  - 4892:
    - name: wlnotify
    - command: wlnotify.dll
    - location: Startup
    - user: .DEFAULT
  - 4893:
    - name: WMADMOD
    - command: WMADMOD.dll
    - location: Startup
    - user: .DEFAULT
  - 4894:
    - name: WMADMOE
    - command: WMADMOE.dll
    - location: Startup
    - user: .DEFAULT
  - 4895:
    - name: wmasf
    - command: wmasf.dll
    - location: Startup
    - user: .DEFAULT
  - 4896:
    - name: wmaudsdk
    - command: wmaudsdk.dll
    - location: Startup
    - user: .DEFAULT
  - 4897:
    - name: wmdmlog
    - command: wmdmlog.dll
    - location: Startup
    - user: .DEFAULT
  - 4898:
    - name: wmdmps
    - command: wmdmps.dll
    - location: Startup
    - user: .DEFAULT
  - 4899:
    - name: wmdrmdev
    - command: wmdrmdev.dll
    - location: Startup
    - user: .DEFAULT
  - 4900:
    - name: wmdrmnet
    - command: wmdrmnet.dll
    - location: Startup
    - user: .DEFAULT
  - 4901:
    - name: wmdrmsdk
    - command: wmdrmsdk.dll
    - location: Startup
    - user: .DEFAULT
  - 4902:
    - name: wmerrenu
    - command: wmerrenu.dll
    - location: Startup
    - user: .DEFAULT
  - 4903:
    - name: wmerror
    - command: wmerror.dll
    - location: Startup
    - user: .DEFAULT
  - 4904:
    - name: wmi
    - command: wmi.dll
    - location: Startup
    - user: .DEFAULT
  - 4905:
    - name: wmidx
    - command: wmidx.dll
    - location: Startup
    - user: .DEFAULT
  - 4906:
    - name: wmidx
    - command: wmidx.ocx
    - location: Startup
    - user: .DEFAULT
  - 4907:
    - name: wmimgmt
    - command: wmimgmt.msc
    - location: Startup
    - user: .DEFAULT
  - 4908:
    - name: wmiprop
    - command: wmiprop.dll
    - location: Startup
    - user: .DEFAULT
  - 4909:
    - name: wmiscmgr
    - command: wmiscmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 4910:
    - name: WMNetmgr
    - command: WMNetmgr.dll
    - location: Startup
    - user: .DEFAULT
  - 4911:
    - name: wmp
    - command: wmp.dll
    - location: Startup
    - user: .DEFAULT
  - 4912:
    - name: wmp
    - command: wmp.ocx
    - location: Startup
    - user: .DEFAULT
  - 4913:
    - name: wmpasf
    - command: wmpasf.dll
    - location: Startup
    - user: .DEFAULT
  - 4914:
    - name: wmpcd
    - command: wmpcd.dll
    - location: Startup
    - user: .DEFAULT
  - 4915:
    - name: wmpcore
    - command: wmpcore.dll
    - location: Startup
    - user: .DEFAULT
  - 4916:
    - name: wmpdxm
    - command: wmpdxm.dll
    - location: Startup
    - user: .DEFAULT
  - 4917:
    - name: wmpeffects
    - command: wmpeffects.dll
    - location: Startup
    - user: .DEFAULT
  - 4918:
    - name: wmpencen
    - command: wmpencen.dll
    - location: Startup
    - user: .DEFAULT
  - 4919:
    - name: wmphoto
    - command: wmphoto.dll
    - location: Startup
    - user: .DEFAULT
  - 4920:
    - name: wmploc
    - command: wmploc.dll
    - location: Startup
    - user: .DEFAULT
  - 4921:
    - name: wmpmde
    - command: wmpmde.dll
    - location: Startup
    - user: .DEFAULT
  - 4922:
    - name: wmpns
    - command: wmpns.dll
    - location: Startup
    - user: .DEFAULT
  - 4923:
    - name: wmpps
    - command: wmpps.dll
    - location: Startup
    - user: .DEFAULT
  - 4924:
    - name: wmpscheme
    - command: wmpscheme.xml
    - location: Startup
    - user: .DEFAULT
  - 4925:
    - name: wmpshell
    - command: wmpshell.dll
    - location: Startup
    - user: .DEFAULT
  - 4926:
    - name: wmpsrcwp
    - command: wmpsrcwp.dll
    - location: Startup
    - user: .DEFAULT
  - 4927:
    - name: wmpstub
    - command: wmpstub.exe
    - location: Startup
    - user: .DEFAULT
  - 4928:
    - name: wmpui
    - command: wmpui.dll
    - location: Startup
    - user: .DEFAULT
  - 4929:
    - name: wmsdmod
    - command: wmsdmod.dll
    - location: Startup
    - user: .DEFAULT
  - 4930:
    - name: wmsdmoe
    - command: wmsdmoe.dll
    - location: Startup
    - user: .DEFAULT
  - 4931:
    - name: wmsdmoe2
    - command: wmsdmoe2.dll
    - location: Startup
    - user: .DEFAULT
  - 4932:
    - name: wmspdmod
    - command: wmspdmod.dll
    - location: Startup
    - user: .DEFAULT
  - 4933:
    - name: WMSPDMOE
    - command: WMSPDMOE.dll
    - location: Startup
    - user: .DEFAULT
  - 4934:
    - name: wmstream
    - command: wmstream.dll
    - location: Startup
    - user: .DEFAULT
  - 4935:
    - name: wmv8dmod
    - command: wmv8dmod.dll
    - location: Startup
    - user: .DEFAULT
  - 4936:
    - name: wmv8ds32
    - command: wmv8ds32.ax
    - location: Startup
    - user: .DEFAULT
  - 4937:
    - name: WMVADVD
    - command: WMVADVD.dll
    - location: Startup
    - user: .DEFAULT
  - 4938:
    - name: WMVADVE
    - command: WMVADVE.DLL
    - location: Startup
    - user: .DEFAULT
  - 4939:
    - name: WMVCore
    - command: WMVCore.dll
    - location: Startup
    - user: .DEFAULT
  - 4940:
    - name: wmvdecod
    - command: wmvdecod.dll
    - location: Startup
    - user: .DEFAULT
  - 4941:
    - name: wmvdmod
    - command: wmvdmod.dll
    - location: Startup
    - user: .DEFAULT
  - 4942:
    - name: wmvdmoe
    - command: wmvdmoe.dll
    - location: Startup
    - user: .DEFAULT
  - 4943:
    - name: wmvdmoe2
    - command: wmvdmoe2.dll
    - location: Startup
    - user: .DEFAULT
  - 4944:
    - name: wmvds32
    - command: wmvds32.ax
    - location: Startup
    - user: .DEFAULT
  - 4945:
    - name: WMVENCOD
    - command: WMVENCOD.dll
    - location: Startup
    - user: .DEFAULT
  - 4946:
    - name: WMVSDECD
    - command: WMVSDECD.dll
    - location: Startup
    - user: .DEFAULT
  - 4947:
    - name: WMVSENCD
    - command: WMVSENCD.dll
    - location: Startup
    - user: .DEFAULT
  - 4948:
    - name: WMVXENCD
    - command: WMVXENCD.dll
    - location: Startup
    - user: .DEFAULT
  - 4949:
    - name: WNASPI32
    - command: WNASPI32.DLL
    - location: Startup
    - user: .DEFAULT
  - 4950:
    - name: wow32
    - command: wow32.dll
    - location: Startup
    - user: .DEFAULT
  - 4951:
    - name: wowdeb
    - command: wowdeb.exe
    - location: Startup
    - user: .DEFAULT
  - 4952:
    - name: wowexec
    - command: wowexec.exe
    - location: Startup
    - user: .DEFAULT
  - 4953:
    - name: wowfax
    - command: wowfax.dll
    - location: Startup
    - user: .DEFAULT
  - 4954:
    - name: wowfaxui
    - command: wowfaxui.dll
    - location: Startup
    - user: .DEFAULT
  - 4955:
    - name: wpa
    - command: wpa.dbl
    - location: Startup
    - user: .DEFAULT
  - 4956:
    - name: wpabaln
    - command: wpabaln.exe
    - location: Startup
    - user: .DEFAULT
  - 4957:
    - name: wpdconns
    - command: wpdconns.dll
    - location: Startup
    - user: .DEFAULT
  - 4958:
    - name: wpdmtp
    - command: wpdmtp.dll
    - location: Startup
    - user: .DEFAULT
  - 4959:
    - name: wpdmtpus
    - command: wpdmtpus.dll
    - location: Startup
    - user: .DEFAULT
  - 4960:
    - name: WpdShext
    - command: WpdShext.dll
    - location: Startup
    - user: .DEFAULT
  - 4961:
    - name: wpdshextautoplay
    - command: wpdshextautoplay.exe
    - location: Startup
    - user: .DEFAULT
  - 4962:
    - name: wpdshextres
    - command: wpdshextres.dll
    - location: Startup
    - user: .DEFAULT
  - 4963:
    - name: WPDShServiceObj
    - command: WPDShServiceObj.dll
    - location: Startup
    - user: .DEFAULT
  - 4964:
    - name: wpdsp
    - command: wpdsp.dll
    - location: Startup
    - user: .DEFAULT
  - 4965:
    - name: wpd_ci
    - command: wpd_ci.dll
    - location: Startup
    - user: .DEFAULT
  - 4966:
    - name: wpnpinst
    - command: wpnpinst.exe
    - location: Startup
    - user: .DEFAULT
  - 4967:
    - name: write
    - command: write.exe
    - location: Startup
    - user: .DEFAULT
  - 4968:
    - name: ws2help
    - command: ws2help.dll
    - location: Startup
    - user: .DEFAULT
  - 4969:
    - name: ws2_32
    - command: ws2_32.dll
    - location: Startup
    - user: .DEFAULT
  - 4970:
    - name: wscntfy
    - command: wscntfy.exe
    - location: Startup
    - user: .DEFAULT
  - 4971:
    - name: wscript
    - command: wscript.exe
    - location: Startup
    - user: .DEFAULT
  - 4972:
    - name: wscsvc
    - command: wscsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4973:
    - name: wscui
    - command: wscui.cpl
    - location: Startup
    - user: .DEFAULT
  - 4974:
    - name: wsecedit
    - command: wsecedit.dll
    - location: Startup
    - user: .DEFAULT
  - 4975:
    - name: wshatm
    - command: wshatm.dll
    - location: Startup
    - user: .DEFAULT
  - 4976:
    - name: wshbth
    - command: wshbth.dll
    - location: Startup
    - user: .DEFAULT
  - 4977:
    - name: wshcon
    - command: wshcon.dll
    - location: Startup
    - user: .DEFAULT
  - 4978:
    - name: wshext
    - command: wshext.dll
    - location: Startup
    - user: .DEFAULT
  - 4979:
    - name: wship6
    - command: wship6.dll
    - location: Startup
    - user: .DEFAULT
  - 4980:
    - name: wshisn
    - command: wshisn.dll
    - location: Startup
    - user: .DEFAULT
  - 4981:
    - name: wshnetbs
    - command: wshnetbs.dll
    - location: Startup
    - user: .DEFAULT
  - 4982:
    - name: wshom
    - command: wshom.ocx
    - location: Startup
    - user: .DEFAULT
  - 4983:
    - name: wshrm
    - command: wshrm.dll
    - location: Startup
    - user: .DEFAULT
  - 4984:
    - name: wshtcpip
    - command: wshtcpip.dll
    - location: Startup
    - user: .DEFAULT
  - 4985:
    - name: wsmanhttpconfig
    - command: wsmanhttpconfig.exe
    - location: Startup
    - user: .DEFAULT
  - 4986:
    - name: WsmAuto
    - command: WsmAuto.dll
    - location: Startup
    - user: .DEFAULT
  - 4987:
    - name: wsmplpxy
    - command: wsmplpxy.dll
    - location: Startup
    - user: .DEFAULT
  - 4988:
    - name: wsmprovhost
    - command: wsmprovhost.exe
    - location: Startup
    - user: .DEFAULT
  - 4989:
    - name: WsmPty
    - command: WsmPty.xsl
    - location: Startup
    - user: .DEFAULT
  - 4990:
    - name: WsmRes
    - command: WsmRes.dll
    - location: Startup
    - user: .DEFAULT
  - 4991:
    - name: WsmSvc
    - command: WsmSvc.dll
    - location: Startup
    - user: .DEFAULT
  - 4992:
    - name: WsmTxt
    - command: WsmTxt.xsl
    - location: Startup
    - user: .DEFAULT
  - 4993:
    - name: WsmWmiPl
    - command: WsmWmiPl.dll
    - location: Startup
    - user: .DEFAULT
  - 4994:
    - name: wsnmp32
    - command: wsnmp32.dll
    - location: Startup
    - user: .DEFAULT
  - 4995:
    - name: wsock32
    - command: wsock32.dll
    - location: Startup
    - user: .DEFAULT
  - 4996:
    - name: wstdecod
    - command: wstdecod.dll
    - location: Startup
    - user: .DEFAULT
  - 4997:
    - name: wstpager
    - command: wstpager.ax
    - location: Startup
    - user: .DEFAULT
  - 4998:
    - name: wstrenderer
    - command: wstrenderer.ax
    - location: Startup
    - user: .DEFAULT
  - 4999:
    - name: wtsapi32
    - command: wtsapi32.dll
    - location: Startup
    - user: .DEFAULT
  - 5000:
    - name: wuapi
    - command: wuapi.dll
    - location: Startup
    - user: .DEFAULT
  - 5001:
    - name: wuapi.dll
    - command: wuapi.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 5002:
    - name: wuauclt
    - command: wuauclt.exe
    - location: Startup
    - user: .DEFAULT
  - 5003:
    - name: wuauclt1
    - command: wuauclt1.exe
    - location: Startup
    - user: .DEFAULT
  - 5004:
    - name: wuaucpl
    - command: wuaucpl.cpl
    - location: Startup
    - user: .DEFAULT
  - 5005:
    - name: wuaucpl.cpl
    - command: wuaucpl.cpl.manifest
    - location: Startup
    - user: .DEFAULT
  - 5006:
    - name: wuaucpl.cpl
    - command: wuaucpl.cpl.mui
    - location: Startup
    - user: .DEFAULT
  - 5007:
    - name: wuaueng
    - command: wuaueng.dll
    - location: Startup
    - user: .DEFAULT
  - 5008:
    - name: wuaueng.dll
    - command: wuaueng.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 5009:
    - name: wuaueng1
    - command: wuaueng1.dll
    - location: Startup
    - user: .DEFAULT
  - 5010:
    - name: wuauserv
    - command: wuauserv.dll
    - location: Startup
    - user: .DEFAULT
  - 5011:
    - name: wucltui
    - command: wucltui.dll
    - location: Startup
    - user: .DEFAULT
  - 5012:
    - name: wucltui.dll
    - command: wucltui.dll.mui
    - location: Startup
    - user: .DEFAULT
  - 5013:
    - name: WUDFCoinstaller
    - command: WUDFCoinstaller.dll
    - location: Startup
    - user: .DEFAULT
  - 5014:
    - name: WudfHost
    - command: WudfHost.exe
    - location: Startup
    - user: .DEFAULT
  - 5015:
    - name: WudfPlatform
    - command: WudfPlatform.dll
    - location: Startup
    - user: .DEFAULT
  - 5016:
    - name: WudfSvc
    - command: WudfSvc.dll
    - location: Startup
    - user: .DEFAULT
  - 5017:
    - name: WUDFUpdate_01009
    - command: WUDFUpdate_01009.dll
    - location: Startup
    - user: .DEFAULT
  - 5018:
    - name: WUDFx
    - command: WUDFx.dll
    - location: Startup
    - user: .DEFAULT
  - 5019:
    - name: wupdmgr
    - command: wupdmgr.exe
    - location: Startup
    - user: .DEFAULT
  - 5020:
    - name: wups
    - command: wups.dll
    - location: Startup
    - user: .DEFAULT
  - 5021:
    - name: wups2
    - command: wups2.dll
    - location: Startup
    - user: .DEFAULT
  - 5022:
    - name: wuweb
    - command: wuweb.dll
    - location: Startup
    - user: .DEFAULT
  - 5023:
    - name: wzcdlg
    - command: wzcdlg.dll
    - location: Startup
    - user: .DEFAULT
  - 5024:
    - name: wzcsapi
    - command: wzcsapi.dll
    - location: Startup
    - user: .DEFAULT
  - 5025:
    - name: wzcsvc
    - command: wzcsvc.dll
    - location: Startup
    - user: .DEFAULT
  - 5026:
    - name: xactsrv
    - command: xactsrv.dll
    - location: Startup
    - user: .DEFAULT
  - 5027:
    - name: xcopy
    - command: xcopy.exe
    - location: Startup
    - user: .DEFAULT
  - 5028:
    - name: xenroll
    - command: xenroll.dll
    - location: Startup
    - user: .DEFAULT
  - 5029:
    - name: xmlfilter
    - command: xmlfilter.dll
    - location: Startup
    - user: .DEFAULT
  - 5030:
    - name: xmllite
    - command: xmllite.dll
    - location: Startup
    - user: .DEFAULT
  - 5031:
    - name: xmlprov
    - command: xmlprov.dll
    - location: Startup
    - user: .DEFAULT
  - 5032:
    - name: xmlprovi
    - command: xmlprovi.dll
    - location: Startup
    - user: .DEFAULT
  - 5033:
    - name: xolehlp
    - command: xolehlp.dll
    - location: Startup
    - user: .DEFAULT
  - 5034:
    - name: xpob2res
    - command: xpob2res.dll
    - location: Startup
    - user: .DEFAULT
  - 5035:
    - name: xpsp1res
    - command: xpsp1res.dll
    - location: Startup
    - user: .DEFAULT
  - 5036:
    - name: xpsp2res
    - command: xpsp2res.dll
    - location: Startup
    - user: .DEFAULT
  - 5037:
    - name: xpsp3res
    - command: xpsp3res.dll
    - location: Startup
    - user: .DEFAULT
  - 5038:
    - name: xpsp4res
    - command: xpsp4res.dll
    - location: Startup
    - user: .DEFAULT
  - 5039:
    - name: xpsshhdr
    - command: xpsshhdr.dll
    - location: Startup
    - user: .DEFAULT
  - 5040:
    - name: xpssvcs
    - command: xpssvcs.dll
    - location: Startup
    - user: .DEFAULT
  - 5041:
    - name: xp_eos
    - command: xp_eos.exe
    - location: Startup
    - user: .DEFAULT
  - 5042:
    - name: zipfldr
    - command: zipfldr.dll
    - location: Startup
    - user: .DEFAULT
  - 5043:
    - name: _upd
    - command: _upd.log
    - location: Startup
    - user: .DEFAULT
  - 5044:
    - name: CTFMON.EXE
    - command: C:\WINDOWS\System32\CTFMON.EXE
    - location: HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: .DEFAULT
  - 5045:
    - name: DWQueuedReporting
    - command: "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
    - location: HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: .DEFAULT
  - 5046:
    - name: desktop
    - command: desktop.ini
    - location: Common Startup
    - user: All Users
  - 5047:
    - name: StartCCC
    - command: "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
    - location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: All Users
  - 5048:
    - name: Windows Defender
    - command: "C:\Program Files\Windows Defender\MSASCui.exe" -hide
    - location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: All Users
  - 5049:
    - name: Adobe ARM
    - command: "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
    - location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: All Users
  - 5050:
    - name: QuickTime Task
    - command: "C:\Program Files\QuickTime\qttask.exe" -atboottime
    - location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: All Users
  - 5051:
    - name: AvgUi
    - command: "C:\Program Files\AVG\Framework\Common\avguirnx.exe" /lps=fmw
    - location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: All Users
  - 5052:
    - name: SunJavaUpdateSched
    - command: "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
    - location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: All Users
  - 5053:
    - name: RTHDCPL
    - command: RTHDCPL.EXE
    - location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: All Users
  - 5054:
    - name: EEventManager
    - command: "C:\Program Files\Epson Software\Event Manager\EEventManager.exe"
    - location: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    - user: All Users
cpus:
- list:
  - 0:
    - codeName: Kentsfield
    - descr: x86 Family 6 Model 15 Stepping 11
    - frequency: 2400
    - coresCount: 1
startMenu:
- list:
  - 0:
    - name: Default User:Start Menu
    - groupName: Start Menu
    - user: Default User
  - 1:
    - name: Default User:Start Menu\Programs
    - groupName: Start Menu\Programs
    - user: Default User
  - 2:
    - name: Default User:Start Menu\Programs\Accessories
    - groupName: Start Menu\Programs\Accessories
    - user: Default User
  - 3:
    - name: Default User:Start Menu\Programs\Accessories\Accessibility
    - groupName: Start Menu\Programs\Accessories\Accessibility
    - user: Default User
  - 4:
    - name: Default User:Start Menu\Programs\Accessories\Entertainment
    - groupName: Start Menu\Programs\Accessories\Entertainment
    - user: Default User
  - 5:
    - name: Default User:Start Menu\Programs\Startup
    - groupName: Start Menu\Programs\Startup
    - user: Default User
  - 6:
    - name: All Users:Start Menu
    - groupName: Start Menu
    - user: All Users
  - 7:
    - name: All Users:Start Menu\Nvidia Demos
    - groupName: Start Menu\Nvidia Demos
    - user: All Users
  - 8:
    - name: All Users:Start Menu\Programs
    - groupName: Start Menu\Programs
    - user: All Users
  - 9:
    - name: All Users:Start Menu\Programs\ABBYY FineReader 9.0 Sprint
    - groupName: Start Menu\Programs\ABBYY FineReader 9.0 Sprint
    - user: All Users
  - 10:
    - name: All Users:Start Menu\Programs\ABBYY FineReader Tools
    - groupName: Start Menu\Programs\ABBYY FineReader Tools
    - user: All Users
  - 11:
    - name: All Users:Start Menu\Programs\Accessories
    - groupName: Start Menu\Programs\Accessories
    - user: All Users
  - 12:
    - name: All Users:Start Menu\Programs\Accessories\Accessibility
    - groupName: Start Menu\Programs\Accessories\Accessibility
    - user: All Users
  - 13:
    - name: All Users:Start Menu\Programs\Accessories\Communications
    - groupName: Start Menu\Programs\Accessories\Communications
    - user: All Users
  - 14:
    - name: All Users:Start Menu\Programs\Accessories\Entertainment
    - groupName: Start Menu\Programs\Accessories\Entertainment
    - user: All Users
  - 15:
    - name: All Users:Start Menu\Programs\Accessories\System Tools
    - groupName: Start Menu\Programs\Accessories\System Tools
    - user: All Users
  - 16:
    - name: All Users:Start Menu\Programs\Accessories\Windows PowerShell
    - groupName: Start Menu\Programs\Accessories\Windows PowerShell
    - user: All Users
  - 17:
    - name: All Users:Start Menu\Programs\Administrative Tools
    - groupName: Start Menu\Programs\Administrative Tools
    - user: All Users
  - 18:
    - name: All Users:Start Menu\Programs\Auslogics
    - groupName: Start Menu\Programs\Auslogics
    - user: All Users
  - 19:
    - name: All Users:Start Menu\Programs\Auslogics\BoostSpeed
    - groupName: Start Menu\Programs\Auslogics\BoostSpeed
    - user: All Users
  - 20:
    - name: All Users:Start Menu\Programs\Auslogics\Driver Updater
    - groupName: Start Menu\Programs\Auslogics\Driver Updater
    - user: All Users
  - 21:
    - name: All Users:Start Menu\Programs\AVG
    - groupName: Start Menu\Programs\AVG
    - user: All Users
  - 22:
    - name: All Users:Start Menu\Programs\AVG Zen
    - groupName: Start Menu\Programs\AVG Zen
    - user: All Users
  - 23:
    - name: All Users:Start Menu\Programs\Avid
    - groupName: Start Menu\Programs\Avid
    - user: All Users
  - 24:
    - name: All Users:Start Menu\Programs\BroadWave
    - groupName: Start Menu\Programs\BroadWave
    - user: All Users
  - 25:
    - name: All Users:Start Menu\Programs\Catalyst Control Center
    - groupName: Start Menu\Programs\Catalyst Control Center
    - user: All Users
  - 26:
    - name: All Users:Start Menu\Programs\Creative
    - groupName: Start Menu\Programs\Creative
    - user: All Users
  - 27:
    - name: All Users:Start Menu\Programs\Creative\Creative WebCam
    - groupName: Start Menu\Programs\Creative\Creative WebCam
    - user: All Users
  - 28:
    - name: All Users:Start Menu\Programs\EPSON
    - groupName: Start Menu\Programs\EPSON
    - user: All Users
  - 29:
    - name: All Users:Start Menu\Programs\EPSON\Epson Connect Printer Setup
    - groupName: Start Menu\Programs\EPSON\Epson Connect Printer Setup
    - user: All Users
  - 30:
    - name: All Users:Start Menu\Programs\EPSON\Epson Scan 2
    - groupName: Start Menu\Programs\EPSON\Epson Scan 2
    - user: All Users
  - 31:
    - name: All Users:Start Menu\Programs\EPSON\EPSON XP-8500 Series
    - groupName: Start Menu\Programs\EPSON\EPSON XP-8500 Series
    - user: All Users
  - 32:
    - name: All Users:Start Menu\Programs\EPSON PRINT Image Framer
    - groupName: Start Menu\Programs\EPSON PRINT Image Framer
    - user: All Users
  - 33:
    - name: All Users:Start Menu\Programs\EPSON PRINT Image Framer\EPSON PRINT Image Framer Tool
    - groupName: Start Menu\Programs\EPSON PRINT Image Framer\EPSON PRINT Image Framer Tool
    - user: All Users
  - 34:
    - name: All Users:Start Menu\Programs\Epson Software
    - groupName: Start Menu\Programs\Epson Software
    - user: All Users
  - 35:
    - name: All Users:Start Menu\Programs\FinePixViewer
    - groupName: Start Menu\Programs\FinePixViewer
    - user: All Users
  - 36:
    - name: All Users:Start Menu\Programs\FUJIFILM
    - groupName: Start Menu\Programs\FUJIFILM
    - user: All Users
  - 37:
    - name: All Users:Start Menu\Programs\FUJIFILM\RAW FILE CONVERTER
    - groupName: Start Menu\Programs\FUJIFILM\RAW FILE CONVERTER
    - user: All Users
  - 38:
    - name: All Users:Start Menu\Programs\Games
    - groupName: Start Menu\Programs\Games
    - user: All Users
  - 39:
    - name: All Users:Start Menu\Programs\Java
    - groupName: Start Menu\Programs\Java
    - user: All Users
  - 40:
    - name: All Users:Start Menu\Programs\JMicron Technology Corp
    - groupName: Start Menu\Programs\JMicron Technology Corp
    - user: All Users
  - 41:
    - name: All Users:Start Menu\Programs\KeyFinder
    - groupName: Start Menu\Programs\KeyFinder
    - user: All Users
  - 42:
    - name: All Users:Start Menu\Programs\Microsoft Office
    - groupName: Start Menu\Programs\Microsoft Office
    - user: All Users
  - 43:
    - name: All Users:Start Menu\Programs\Microsoft Office\Microsoft Office Accounting 2008 Tools
    - groupName: Start Menu\Programs\Microsoft Office\Microsoft Office Accounting 2008 Tools
    - user: All Users
  - 44:
    - name: All Users:Start Menu\Programs\Microsoft Office\Microsoft Office Tools
    - groupName: Start Menu\Programs\Microsoft Office\Microsoft Office Tools
    - user: All Users
  - 45:
    - name: All Users:Start Menu\Programs\Microsoft Office Live Add-in
    - groupName: Start Menu\Programs\Microsoft Office Live Add-in
    - user: All Users
  - 46:
    - name: All Users:Start Menu\Programs\Microsoft Silverlight
    - groupName: Start Menu\Programs\Microsoft Silverlight
    - user: All Users
  - 47:
    - name: All Users:Start Menu\Programs\Microsoft SQL Server 2005
    - groupName: Start Menu\Programs\Microsoft SQL Server 2005
    - user: All Users
  - 48:
    - name: All Users:Start Menu\Programs\Microsoft SQL Server 2005\Configuration Tools
    - groupName: Start Menu\Programs\Microsoft SQL Server 2005\Configuration Tools
    - user: All Users
  - 49:
    - name: All Users:Start Menu\Programs\MicroStaff WINASPI
    - groupName: Start Menu\Programs\MicroStaff WINASPI
    - user: All Users
  - 50:
    - name: All Users:Start Menu\Programs\Minecraft
    - groupName: Start Menu\Programs\Minecraft
    - user: All Users
  - 51:
    - name: All Users:Start Menu\Programs\nLite
    - groupName: Start Menu\Programs\nLite
    - user: All Users
  - 52:
    - name: All Users:Start Menu\Programs\NVIDIA Corporation
    - groupName: Start Menu\Programs\NVIDIA Corporation
    - user: All Users
  - 53:
    - name: All Users:Start Menu\Programs\NVIDIA Corporation\Network Access Manager
    - groupName: Start Menu\Programs\NVIDIA Corporation\Network Access Manager
    - user: All Users
  - 54:
    - name: All Users:Start Menu\Programs\PIXELA
    - groupName: Start Menu\Programs\PIXELA
    - user: All Users
  - 55:
    - name: All Users:Start Menu\Programs\PIXELA\ImageMixer VCD2
    - groupName: Start Menu\Programs\PIXELA\ImageMixer VCD2
    - user: All Users
  - 56:
    - name: All Users:Start Menu\Programs\Puzz-3D
    - groupName: Start Menu\Programs\Puzz-3D
    - user: All Users
  - 57:
    - name: All Users:Start Menu\Programs\QuickTime
    - groupName: Start Menu\Programs\QuickTime
    - user: All Users
  - 58:
    - name: All Users:Start Menu\Programs\Serif Applications
    - groupName: Start Menu\Programs\Serif Applications
    - user: All Users
  - 59:
    - name: All Users:Start Menu\Programs\Serif Applications\100k Deluxe Graphics Pack
    - groupName: Start Menu\Programs\Serif Applications\100k Deluxe Graphics Pack
    - user: All Users
  - 60:
    - name: All Users:Start Menu\Programs\Serif Applications\AlbumPlus SE PRO
    - groupName: Start Menu\Programs\Serif Applications\AlbumPlus SE PRO
    - user: All Users
  - 61:
    - name: All Users:Start Menu\Programs\Serif Applications\DrawPlus X2
    - groupName: Start Menu\Programs\Serif Applications\DrawPlus X2
    - user: All Users
  - 62:
    - name: All Users:Start Menu\Programs\Serif Applications\PagePlus X2
    - groupName: Start Menu\Programs\Serif Applications\PagePlus X2
    - user: All Users
  - 63:
    - name: All Users:Start Menu\Programs\Serif Applications\PagePlus X5
    - groupName: Start Menu\Programs\Serif Applications\PagePlus X5
    - user: All Users
  - 64:
    - name: All Users:Start Menu\Programs\Serif Applications\PanoramaPlus X4
    - groupName: Start Menu\Programs\Serif Applications\PanoramaPlus X4
    - user: All Users
  - 65:
    - name: All Users:Start Menu\Programs\Serif Applications\PhotoPlus X6
    - groupName: Start Menu\Programs\Serif Applications\PhotoPlus X6
    - user: All Users
  - 66:
    - name: All Users:Start Menu\Programs\Silicon Image
    - groupName: Start Menu\Programs\Silicon Image
    - user: All Users
  - 67:
    - name: All Users:Start Menu\Programs\Silicon Image\57xx SteelVine
    - groupName: Start Menu\Programs\Silicon Image\57xx SteelVine
    - user: All Users
  - 68:
    - name: All Users:Start Menu\Programs\Silicon Image\57xx SteelVine\Control
    - groupName: Start Menu\Programs\Silicon Image\57xx SteelVine\Control
    - user: All Users
  - 69:
    - name: All Users:Start Menu\Programs\Skype
    - groupName: Start Menu\Programs\Skype
    - user: All Users
  - 70:
    - name: All Users:Start Menu\Programs\Sony
    - groupName: Start Menu\Programs\Sony
    - user: All Users
  - 71:
    - name: All Users:Start Menu\Programs\Sony\Media Go
    - groupName: Start Menu\Programs\Sony\Media Go
    - user: All Users
  - 72:
    - name: All Users:Start Menu\Programs\SSC Service Utility
    - groupName: Start Menu\Programs\SSC Service Utility
    - user: All Users
  - 73:
    - name: All Users:Start Menu\Programs\Startup
    - groupName: Start Menu\Programs\Startup
    - user: All Users
  - 74:
    - name: All Users:Start Menu\Programs\Steam
    - groupName: Start Menu\Programs\Steam
    - user: All Users
  - 75:
    - name: All Users:Start Menu\Programs\Telephony Related Programs
    - groupName: Start Menu\Programs\Telephony Related Programs
    - user: All Users
  - 76:
    - name: All Users:Start Menu\Programs\Windows Live
    - groupName: Start Menu\Programs\Windows Live
    - user: All Users
  - 77:
    - name: All Users:Start Menu\Programs\Xplosiv
    - groupName: Start Menu\Programs\Xplosiv
    - user: All Users
  - 78:
    - name: All Users:Start Menu\Programs\Xplosiv\Taito Legends
    - groupName: Start Menu\Programs\Xplosiv\Taito Legends
    - user: All Users
  - 79:
    - name: NT AUTHORITY\SYSTEM:Start Menu
    - groupName: Start Menu
    - user: NT AUTHORITY\SYSTEM
  - 80:
    - name: NT AUTHORITY\SYSTEM:Start Menu\Programs
    - groupName: Start Menu\Programs
    - user: NT AUTHORITY\SYSTEM
  - 81:
    - name: NT AUTHORITY\SYSTEM:Start Menu\Programs\Accessories
    - groupName: Start Menu\Programs\Accessories
    - user: NT AUTHORITY\SYSTEM
  - 82:
    - name: NT AUTHORITY\SYSTEM:Start Menu\Programs\Accessories\Accessibility
    - groupName: Start Menu\Programs\Accessories\Accessibility
    - user: NT AUTHORITY\SYSTEM
  - 83:
    - name: NT AUTHORITY\SYSTEM:Start Menu\Programs\Accessories\Entertainment
    - groupName: Start Menu\Programs\Accessories\Entertainment
    - user: NT AUTHORITY\SYSTEM
  - 84:
    - name: NT AUTHORITY\SYSTEM:Start Menu\Programs\Startup
    - groupName: Start Menu\Programs\Startup
    - user: NT AUTHORITY\SYSTEM
  - 85:
    - name: NT AUTHORITY\LOCAL SERVICE:Start Menu
    - groupName: Start Menu
    - user: NT AUTHORITY\LOCAL SERVICE
  - 86:
    - name: NT AUTHORITY\LOCAL SERVICE:Start Menu\Programs
    - groupName: Start Menu\Programs
    - user: NT AUTHORITY\LOCAL SERVICE
  - 87:
    - name: BUSINESS\Susan:Start Menu
    - groupName: Start Menu
    - user: BUSINESS\Susan
  - 88:
    - name: BUSINESS\Susan:Start Menu\Programs
    - groupName: Start Menu\Programs
    - user: BUSINESS\Susan
  - 89:
    - name: BUSINESS\Susan:Start Menu\Programs\Accessories
    - groupName: Start Menu\Programs\Accessories
    - user: BUSINESS\Susan
  - 90:
    - name: BUSINESS\Susan:Start Menu\Programs\Accessories\Accessibility
    - groupName: Start Menu\Programs\Accessories\Accessibility
    - user: BUSINESS\Susan
  - 91:
    - name: BUSINESS\Susan:Start Menu\Programs\Accessories\Entertainment
    - groupName: Start Menu\Programs\Accessories\Entertainment
    - user: BUSINESS\Susan
  - 92:
    - name: BUSINESS\Susan:Start Menu\Programs\Accessories\System Tools
    - groupName: Start Menu\Programs\Accessories\System Tools
    - user: BUSINESS\Susan
  - 93:
    - name: BUSINESS\Susan:Start Menu\Programs\Administrative Tools
    - groupName: Start Menu\Programs\Administrative Tools
    - user: BUSINESS\Susan
  - 94:
    - name: BUSINESS\Susan:Start Menu\Programs\Amazon
    - groupName: Start Menu\Programs\Amazon
    - user: BUSINESS\Susan
  - 95:
    - name: BUSINESS\Susan:Start Menu\Programs\Roblox
    - groupName: Start Menu\Programs\Roblox
    - user: BUSINESS\Susan
  - 96:
    - name: BUSINESS\Susan:Start Menu\Programs\Startup
    - groupName: Start Menu\Programs\Startup
    - user: BUSINESS\Susan
  - 97:
    - name: BUSINESS\Susan:Start Menu\Programs\Steam
    - groupName: Start Menu\Programs\Steam
    - user: BUSINESS\Susan
  - 98:
    - name: BUSINESS\Susan:Start Menu\Programs\TalkTalk
    - groupName: Start Menu\Programs\TalkTalk
    - user: BUSINESS\Susan
devices:
- list:
  - 0:
    - classID: System
    - name: ATK0110 ACPI UTILITY
    - manufacturer: ATK
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: ATK
    - driverDate: 16/07/2009
    - driverVersion: 1043.5.0.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0051
  - 1:
    - classID: System
    - name: ACPI Fixed Feature Button
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0005
  - 2:
    - classID: Processor
    - name: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
    - manufacturer: Intel
    - classGUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65}
    - driverProvider: Microsoft
    - driverDate: 01/04/2004
    - driverVersion: 5.1.2600.0
    - driverGUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65}\0000
  - 3:
    - classID: Processor
    - name: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
    - manufacturer: Intel
    - classGUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65}
    - driverProvider: Microsoft
    - driverDate: 01/04/2004
    - driverVersion: 5.1.2600.0
    - driverGUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65}\0003
  - 4:
    - classID: Processor
    - name: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
    - manufacturer: Intel
    - classGUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65}
    - driverProvider: Microsoft
    - driverDate: 01/04/2004
    - driverVersion: 5.1.2600.0
    - driverGUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65}\0001
  - 5:
    - classID: Processor
    - name: Intel(R) Core(TM)2 Quad CPU Q6600 @ 2.40GHz
    - manufacturer: Intel
    - classGUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65}
    - driverProvider: Microsoft
    - driverDate: 01/04/2004
    - driverVersion: 5.1.2600.0
    - driverGUID: {50127DC3-0F36-415E-A6CC-4CB3BE910B65}\0002
  - 6:
    - classID: System
    - name: Programmable interrupt controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0037
  - 7:
    - classID: System
    - name: System timer
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0038
  - 8:
    - classID: System
    - name: High precision event timer
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.5512
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0050
  - 9:
    - classID: System
    - name: Direct memory access controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0040
  - 10:
    - classID: Ports
    - name: Printer Port (LPT1)
    - manufacturer: (Standard port types)
    - classGUID: {4D36E978-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E978-E325-11CE-BFC1-08002BE10318}\0000
  - 11:
    - classID: Ports
    - name: Communications Port (COM1)
    - manufacturer: (Standard port types)
    - classGUID: {4D36E978-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E978-E325-11CE-BFC1-08002BE10318}\0001
  - 12:
    - classID: fdc
    - name: Standard floppy disk controller
    - manufacturer: (Standard floppy disk controllers)
    - classGUID: {4D36E969-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E969-E325-11CE-BFC1-08002BE10318}\0000
  - 13:
    - classID: System
    - name: System speaker
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0044
  - 14:
    - classID: System
    - name: PCI bus
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0006
  - 15:
    - classID: System
    - name: System CMOS/real time clock
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0043
  - 16:
    - classID: System
    - name: System board
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0007
  - 17:
    - classID: System
    - name: Motherboard resources
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0042
  - 18:
    - classID: System
    - name: Motherboard resources
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0035
  - 19:
    - classID: System
    - name: Motherboard resources
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0036
  - 20:
    - classID: System
    - name: Numeric data processor
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0039
  - 21:
    - classID: System
    - name: ACPI Fan
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0008
  - 22:
    - classID: System
    - name: ACPI Power Button
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0009
  - 23:
    - classID: System
    - name: ACPI Thermal Zone
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0010
  - 24:
    - classID: System
    - name: Microsoft ACPI-Compliant System
    - manufacturer: Microsoft
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0004
  - 25:
    - classID: Monitor
    - name: LG W2242(Analog)
    - manufacturer: LG
    - classGUID: {4D36E96E-E325-11CE-BFC1-08002BE10318}
    - driverProvider: LG
    - driverDate: 15/10/2009
    - driverVersion: 1.1.0.0
    - driverGUID: {4D36E96E-E325-11CE-BFC1-08002BE10318}\0002
  - 26:
    - classID: FloppyDisk
    - name: Floppy disk drive
    - manufacturer: (Standard floppy disk drives)
    - classGUID: {4D36E980-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E980-E325-11CE-BFC1-08002BE10318}\0000
  - 27:
    - classID: MEDIA
    - name: AMD High Definition Audio Device
    - manufacturer: Advanced Micro Devices
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: AMD
    - driverDate: 11/05/2012
    - driverVersion: 5.18.0.5514
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0030
  - 28:
    - classID: MEDIA
    - name: Realtek High Definition Audio
    - manufacturer: Realtek
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Realtek Semiconductor Corp.
    - driverDate: 16/06/2009
    - driverVersion: 5.10.0.5874
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0005
  - 29:
    - classID: Keyboard
    - name: HID Keyboard Device
    - manufacturer: (Standard keyboards)
    - classGUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.5512
    - driverGUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}\0001
  - 30:
    - classID: Mouse
    - name: HID-compliant mouse
    - manufacturer: Microsoft
    - classGUID: {4D36E96F-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E96F-E325-11CE-BFC1-08002BE10318}\0001
  - 31:
    - classID: HIDClass
    - name: HID-compliant device
    - manufacturer: (Standard system devices)
    - classGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.5512
    - driverGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}\0019
  - 32:
    - classID: HIDClass
    - name: HID-compliant consumer control device
    - manufacturer: Microsoft
    - classGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.5512
    - driverGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}\0020
  - 33:
    - classID: HIDClass
    - name: HID-compliant device
    - manufacturer: (Standard system devices)
    - classGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.5512
    - driverGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}\0021
  - 34:
    - classID: System
    - name: ISAPNP Read Data Port
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0041
  - 35:
    - classID: System
    - name: Printer Port Logical Interface
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0045
  - 36:
    - classID: Display
    - name: ATI Radeon HD 2600 XT
    - manufacturer: Advanced Micro Devices, Inc.
    - classGUID: {4D36E968-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Advanced Micro Devices, Inc.
    - driverDate: 16/11/2012
    - driverVersion: 8.970.100.7000
    - driverGUID: {4D36E968-E325-11CE-BFC1-08002BE10318}\0001
  - 37:
    - classID: System
    - name: Microsoft UAA Bus Driver for High Definition Audio
    - manufacturer: Microsoft
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 05/03/2004
    - driverVersion: 5.10.0.5010
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0054
  - 38:
    - classID: System
    - name: PCI standard ISA bridge
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0034
  - 39:
    - classID: System
    - name: NVIDIA nForce PCI System Management
    - manufacturer: NVIDIA
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: NVIDIA
    - driverDate: 22/03/2010
    - driverVersion: 4.7.9.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0052
  - 40:
    - classID: hdc
    - name: Standard Dual Channel PCI IDE Controller
    - manufacturer: (Standard IDE ATA/ATAPI controllers)
    - classGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}\0002
  - 41:
    - classID: hdc
    - name: NVIDIA nForce Serial ATA Controller
    - manufacturer: NVIDIA Corporation
    - classGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}
    - driverProvider: NVIDIA Corporation
    - driverDate: 09/04/2010
    - driverVersion: 11.1.0.43
    - driverGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}\0001
  - 42:
    - classID: hdc
    - name: NVIDIA nForce Serial ATA Controller
    - manufacturer: NVIDIA Corporation
    - classGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}
    - driverProvider: NVIDIA Corporation
    - driverDate: 09/04/2010
    - driverVersion: 11.1.0.43
    - driverGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}\0000
  - 43:
    - classID: Unknown
    - name: NVIDIA Network Bus Enumerator
    - manufacturer: NVIDIA
    - classGUID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}
    - driverProvider: NVIDIA
    - driverDate: 04/03/2010
    - driverVersion: 73.3.0.0
    - driverGUID: {1A3E09BE-1E45-494B-9174-D7385B45BBF5}\0000
  - 44:
    - classID: System
    - name: Microsoft UAA Bus Driver for High Definition Audio
    - manufacturer: Microsoft
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 05/03/2004
    - driverVersion: 5.10.0.5010
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0053
  - 45:
    - classID: USB
    - name: Standard OpenHCD USB Host Controller
    - manufacturer: (Standard USB Host Controller)
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0000
  - 46:
    - classID: USB
    - name: Standard Enhanced PCI to USB Host Controller
    - manufacturer: (Standard USB Host Controller)
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: Microsoft
    - driverDate: 01/06/2002
    - driverVersion: 5.1.2600.0
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0012
  - 47:
    - classID: System
    - name: PCI standard PCI-to-PCI bridge
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0033
  - 48:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0032
  - 49:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0031
  - 50:
    - classID: System
    - name: PCI standard host CPU bridge
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0029
  - 51:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0028
  - 52:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0027
  - 53:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0026
  - 54:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0025
  - 55:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0024
  - 56:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0023
  - 57:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0022
  - 58:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0021
  - 59:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0020
  - 60:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0019
  - 61:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0018
  - 62:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0017
  - 63:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0016
  - 64:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0015
  - 65:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0014
  - 66:
    - classID: System
    - name: PCI standard PCI-to-PCI bridge
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0013
  - 67:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0012
  - 68:
    - classID: System
    - name: PCI standard PCI-to-PCI bridge
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0011
  - 69:
    - classID: System
    - name: PCI standard RAM Controller
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0030
  - 70:
    - classID: 1394
    - name: HS 3d Sensor1394 VIA
    - manufacturer: Creaform Inc
    - classGUID: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID:
  - 71:
    - classID: SCSIAdapter
    - name: JMicron JMB36X Controller
    - manufacturer: JMicron Technology Corp.
    - classGUID: {4D36E97B-E325-11CE-BFC1-08002BE10318}
    - driverProvider: JMicron Technology Corp.
    - driverDate: 17/09/2012
    - driverVersion: 1.17.65.11
    - driverGUID: {4D36E97B-E325-11CE-BFC1-08002BE10318}\0000
  - 72:
    - classID: hdc
    - name: Primary IDE Channel
    - manufacturer: (Standard IDE ATA/ATAPI controllers)
    - classGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}\0005
  - 73:
    - classID: hdc
    - name: Secondary IDE Channel
    - manufacturer: (Standard IDE ATA/ATAPI controllers)
    - classGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E96A-E325-11CE-BFC1-08002BE10318}\0004
  - 74:
    - classID: Computer
    - name: ACPI Multiprocessor PC
    - manufacturer: (Standard computers)
    - classGUID: {4D36E966-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E966-E325-11CE-BFC1-08002BE10318}\0000
  - 75:
    - classID: System
    - name: Logical Disk Manager
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0002
  - 76:
    - classID: System
    - name: Volume Manager
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0003
  - 77:
    - classID: Image
    - name: FUJIFILM MX-700 Digital Camera
    - manufacturer: FUJIFILM
    - classGUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}\0001
  - 78:
    - classID: LegacyDriver
    - name: acedrv11
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0034
  - 79:
    - classID: LegacyDriver
    - name: AFD Networking Support Environment
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0001
  - 80:
    - classID: LegacyDriver
    - name: 1394 ARP Client Protocol
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0002
  - 81:
    - classID: LegacyDriver
    - name: Aspi32
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID:
  - 82:
    - classID: LegacyDriver
    - name: Beep
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0006
  - 83:
    - classID: LegacyDriver
    - name: dmboot
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0007
  - 84:
    - classID: LegacyDriver
    - name: dmload
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0008
  - 85:
    - classID: LegacyDriver
    - name: F-Secure Gatekeeper
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID:
  - 86:
    - classID: LegacyDriver
    - name: F-Secure HIPS Driver
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID:
  - 87:
    - classID: LegacyDriver
    - name: Fips
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0009
  - 88:
    - classID: LegacyDriver
    - name: fsbts
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID:
  - 89:
    - classID: LegacyDriver
    - name: fsni
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID:
  - 90:
    - classID: LegacyDriver
    - name: fsnitdi
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID:
  - 91:
    - classID: LegacyDriver
    - name: giveio
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID:
  - 92:
    - classID: LegacyDriver
    - name: Generic Packet Classifier
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0010
  - 93:
    - classID: LegacyDriver
    - name: HTTP
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0011
  - 94:
    - classID: LegacyDriver
    - name: IP Network Address Translator
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0012
  - 95:
    - classID: LegacyDriver
    - name: IPSEC driver
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0013
  - 96:
    - classID: LegacyDriver
    - name: ksecdd
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0014
  - 97:
    - classID: LegacyDriver
    - name: MASPINT
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0015
  - 98:
    - classID: LegacyDriver
    - name: mnmdd
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0016
  - 99:
    - classID: LegacyDriver
    - name: mountmgr
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0017
  - 100:
    - classID: LegacyDriver
    - name: NDIS System Driver
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0018
  - 101:
    - classID: LegacyDriver
    - name: Remote Access NDIS TAPI Driver
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0019
  - 102:
    - classID: LegacyDriver
    - name: NDIS Usermode I/O Protocol
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0020
  - 103:
    - classID: LegacyDriver
    - name: NDProxy
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0021
  - 104:
    - classID: LegacyDriver
    - name: NetBios over Tcpip
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0022
  - 105:
    - classID: LegacyDriver
    - name: Null
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0023
  - 106:
    - classID: LegacyDriver
    - name: nvata
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID:
  - 107:
    - classID: LegacyDriver
    - name: PartMgr
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0024
  - 108:
    - classID: LegacyDriver
    - name: ParVdm
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0025
  - 109:
    - classID: LegacyDriver
    - name: Remote Access Auto Connection Driver
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0026
  - 110:
    - classID: LegacyDriver
    - name: RDPCDD
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0027
  - 111:
    - classID: LegacyDriver
    - name: Secdrv
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0035
  - 112:
    - classID: LegacyDriver
    - name: TCP/IP Protocol Driver
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0028
  - 113:
    - classID: LegacyDriver
    - name: VgaSave
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0029
  - 114:
    - classID: LegacyDriver
    - name: VolSnap
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0030
  - 115:
    - classID: LegacyDriver
    - name: Remote Access IP ARP Driver
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0031
  - 116:
    - classID: LegacyDriver
    - name: Kernel Mode Driver Frameworks service
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0036
  - 117:
    - classID: LegacyDriver
    - name: Windows Socket 2.0 Non-IFS Service Provider Support Environment
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0033
  - 118:
    - classID: LegacyDriver
    - name: Windows Driver Foundation - User-mode Driver Framework Platform Driver
    - manufacturer:
    - classGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}
    - driverProvider:
    - driverDate:
    - driverVersion:
    - driverGUID: {8ECC055D-047F-11D1-A537-0000F8753ED1}\0037
  - 119:
    - classID: MEDIA
    - name: Audio Codecs
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0002
  - 120:
    - classID: MEDIA
    - name: Legacy Audio Drivers
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0004
  - 121:
    - classID: MEDIA
    - name: Media Control Devices
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0000
  - 122:
    - classID: MEDIA
    - name: Legacy Video Capture Devices
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0003
  - 123:
    - classID: MEDIA
    - name: Video Codecs
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0001
  - 124:
    - classID: Net
    - name: WAN Miniport (L2TP)
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0003
  - 125:
    - classID: Net
    - name: WAN Miniport (IP)
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0007
  - 126:
    - classID: Net
    - name: WAN Miniport (PPPOE)
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0005
  - 127:
    - classID: Net
    - name: WAN Miniport (PPTP)
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0004
  - 128:
    - classID: Net
    - name: WAN Miniport (IP) - Packet Scheduler Miniport
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0008
  - 129:
    - classID: Net
    - name: NVIDIA nForce Networking Controller - Packet Scheduler Miniport
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0010
  - 130:
    - classID: Net
    - name: NVIDIA nForce Networking Controller #2 - Packet Scheduler Miniport
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0013
  - 131:
    - classID: Net
    - name: Sony Ericsson Device 1039 USB Ethernet Emulation (NDIS 5) - Packet Scheduler Miniport
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0015
  - 132:
    - classID: Net
    - name: NVIDIA nForce Networking Controller #3 - Packet Scheduler Miniport
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0017
  - 133:
    - classID: Net
    - name: Direct Parallel
    - manufacturer: Microsoft
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0006
  - 134:
    - classID: System
    - name: Terminal Server Device Redirector
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0046
  - 135:
    - classID: System
    - name: Terminal Server Keyboard Driver
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0048
  - 136:
    - classID: System
    - name: Terminal Server Mouse Driver
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0047
  - 137:
    - classID: System
    - name: Plug and Play Software Device Enumerator
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0000
  - 138:
    - classID: System
    - name: Microcode Update Device
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0001
  - 139:
    - classID: System
    - name: Microsoft System Management BIOS Driver
    - manufacturer: (Standard system devices)
    - classGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.2180
    - driverGUID: {4D36E97D-E325-11CE-BFC1-08002BE10318}\0049
  - 140:
    - classID: CDROM
    - name: TSSTcorp DVD+-RW TS-H653B SCSI CdRom Device
    - manufacturer: (Standard CD-ROM drives)
    - classGUID: {4D36E965-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E965-E325-11CE-BFC1-08002BE10318}\0004
  - 141:
    - classID: DiskDrive
    - name: MAXTOR S TM3500320AS SCSI Disk Device
    - manufacturer: (Standard disk drives)
    - classGUID: {4D36E967-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E967-E325-11CE-BFC1-08002BE10318}\0023
  - 142:
    - classID: DiskDrive
    - name: MAXTOR S TM3500320AS SCSI Disk Device
    - manufacturer: (Standard disk drives)
    - classGUID: {4D36E967-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E967-E325-11CE-BFC1-08002BE10318}\0024
  - 143:
    - classID: Volume
    - name: Generic volume
    - manufacturer: Microsoft
    - classGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}\0021
  - 144:
    - classID: Volume
    - name: Generic volume
    - manufacturer: Microsoft
    - classGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}\0020
  - 145:
    - classID: Volume
    - name: Generic volume
    - manufacturer: Microsoft
    - classGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}\0001
  - 146:
    - classID: Volume
    - name: Generic volume
    - manufacturer: Microsoft
    - classGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}\0000
  - 147:
    - classID: Volume
    - name: Generic volume
    - manufacturer: Microsoft
    - classGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {71A27CDD-812A-11D0-BEC7-08002BE2092F}\0002
  - 148:
    - classID: MEDIA
    - name: Microsoft Kernel Audio Splitter
    - manufacturer: Microsoft
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0016
  - 149:
    - classID: MEDIA
    - name: Microsoft Kernel System Audio Device
    - manufacturer: Microsoft
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0009
  - 150:
    - classID: MEDIA
    - name: Microsoft WINMM WDM Audio Compatibility Driver
    - manufacturer: Microsoft
    - classGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}\0015
  - 151:
    - classID: USB
    - name: USB Root Hub
    - manufacturer: (Standard USB Host Controller)
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0001
  - 152:
    - classID: USB
    - name: USB Root Hub
    - manufacturer: (Standard USB Host Controller)
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.5512
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0013
  - 153:
    - classID: Image
    - name: Creative WebCam Live! Pro
    - manufacturer: Creative Labs
    - classGUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}
    - driverProvider: Creative Labs
    - driverDate: 06/05/2005
    - driverVersion: 1.2.5.506
    - driverGUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}\0002
  - 154:
    - classID: USB
    - name: USB Composite Device
    - manufacturer: (Standard USB Host Controller)
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0044
  - 155:
    - classID: Image
    - name: EPSON XP-8500 Series
    - manufacturer: EPSON
    - classGUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}
    - driverProvider: EPSON
    - driverDate: 20/02/2017
    - driverVersion: 1.0.0.0
    - driverGUID: {6BDD1FC6-810F-11D0-BEC7-08002BE2092F}\0003
  - 156:
    - classID: USB
    - name: USB Printing Support
    - manufacturer: Microsoft
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0045
  - 157:
    - classID: USB
    - name: USB Mass Storage Device
    - manufacturer: Compatible USB storage device
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0046
  - 158:
    - classID: USB
    - name: EPSON Printer Utility 1131
    - manufacturer: EPSON
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: EPSON
    - driverDate: 18/06/2018
    - driverVersion: 1.2.0.14
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0047
  - 159:
    - classID: USB
    - name: EPSON Printer Utility 1131
    - manufacturer: EPSON
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: EPSON
    - driverDate: 26/12/2018
    - driverVersion: 1.2.0.20
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0048
  - 160:
    - classID: USB
    - name: EPSON Printer Utility 1131
    - manufacturer: EPSON
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: EPSON
    - driverDate: 26/12/2018
    - driverVersion: 1.2.0.20
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0049
  - 161:
    - classID: USB
    - name: EPSON Printer Utility 1131
    - manufacturer: EPSON
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: EPSON
    - driverDate: 26/12/2018
    - driverVersion: 1.2.0.20
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0050
  - 162:
    - classID: USB
    - name: USB Composite Device
    - manufacturer: (Standard USB Host Controller)
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0036
  - 163:
    - classID: HIDClass
    - name: USB Human Interface Device
    - manufacturer: (Standard system devices)
    - classGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.5512
    - driverGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}\0017
  - 164:
    - classID: HIDClass
    - name: USB Human Interface Device
    - manufacturer: MLK
    - classGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}
    - driverProvider: MLK
    - driverDate: 28/07/2010
    - driverVersion: 6.6.6000.0
    - driverGUID: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA}\0018
  - 165:
    - classID: USB
    - name: Generic USB Hub
    - manufacturer: (Generic USB Hub)
    - classGUID: {36FC9E60-C465-11CF-8056-444553540000}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2600.0
    - driverGUID: {36FC9E60-C465-11CF-8056-444553540000}\0014
  - 166:
    - classID: Printer
    - name: EPSON XP-8500 Series
    - manufacturer: EPSON
    - classGUID: {4D36E979-E325-11CE-BFC1-08002BE10318}
    - driverProvider: EPSON
    - driverDate: 20/11/2017
    - driverVersion: 2.62.0.0
    - driverGUID: {4D36E979-E325-11CE-BFC1-08002BE10318}\0000
  - 167:
    - classID: DiskDrive
    - name: EPSON Storage USB Device
    - manufacturer: (Standard disk drives)
    - classGUID: {4D36E967-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E967-E325-11CE-BFC1-08002BE10318}\0025
  - 168:
    - classID: DiskDrive
    - name: EPSON Storage USB Device
    - manufacturer: (Standard disk drives)
    - classGUID: {4D36E967-E325-11CE-BFC1-08002BE10318}
    - driverProvider: Microsoft
    - driverDate: 01/07/2001
    - driverVersion: 5.1.2535.0
    - driverGUID: {4D36E967-E325-11CE-BFC1-08002BE10318}\0026
  - 169:
    - classID: Net
    - name: NVIDIA nForce 10/100/1000 Mbps Ethernet #3
    - manufacturer: NVIDIA
    - classGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}
    - driverProvider: NVIDIA
    - driverDate: 04/03/2010
    - driverVersion: 73.3.0.0
    - driverGUID: {4D36E972-E325-11CE-BFC1-08002BE10318}\0016

1 answer

2765 views

Add answer

To add an answer,
you must log in account

Log in

Don’t have account? Sign Up!

Auslogics Support Pro answer · Answer 1 · 2019-10-23T08:00:35Z

Thank you for your question.

There is an article in the Auslogics blog that may help you fix the issue you are describing: Full Fix: Shift Key won’t work on Windows computers?If you try every solution in this article and none of them help, please let us know.
Thank you!

Keyboard shift keys and upper case symbols non-functioning

Usefull tools

BoostSpeed 14

Driver Updater

Haven't found the solution you were looking for?
Ask your first question for FREE
and get it answered by a real person!

Keyboard shift keys and upper case symbols non-functioning

Usefull tools

BoostSpeed 14

Driver Updater

Haven't found the solution you were looking for? Ask your first question for FREE and get it answered by a real person!

Haven't found the solution you were looking for?
Ask your first question for FREE
and get it answered by a real person!