combofix log txt as requsted
ComboFix 13-01-14.01 - admin 16/01/2013 18:42:32.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.44.1033.18.1471.953 [GMT 0:00]
Running from: c:\documents and settings\admin\Desktop\gotcha.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\documents and settings\admin\Local Settings\Application Data\fnreulcg.log
c:\documents and settings\admin\Local Settings\Application Data\hgibhkgj.log
c:\documents and settings\admin\Local Settings\Application Data\iakwrkmv\rrekiwyv.exe
c:\documents and settings\admin\Local Settings\Application Data\lubqmtgh.log
c:\documents and settings\admin\Local Settings\Application Data\sxqdbvts.log
c:\documents and settings\admin\Local Settings\Application Data\toxqwsxp.log
c:\documents and settings\admin\Local Settings\Application Data\ulnguabg.log
c:\documents and settings\admin\Local Settings\Application Data\xelxgokk.log
c:\program files\Common Files\Real\WeatherBug\MiniBugTransporter.dll
c:\program files\INSTALL.LOG
c:\windows\system32\ijl11.dll
c:\windows\system32\roboot.exe
c:\windows\system32\URTTemp
c:\windows\system32\URTTemp\regtlib.exe
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Legacy_MICORSOFT_WINDOWS_SERVICE
-------\Service_Micorsoft Windows Service
.
.
((((((((((((((((((((((((( Files Created from 2012-12-16 to 2013-01-16 )))))))))))))))))))))))))))))))
.
.
2013-01-16 18:26 . 2013-01-16 18:27 -------- d-----w- C:\gotcha
2013-01-15 16:25 . 2013-01-15 16:25 -------- d-----w- C:\_OTL
2013-01-14 16:49 . 2013-01-15 13:09 -------- d-----w- c:\documents and settings\admin\Local Settings\Application Data\Avg2013
2013-01-09 18:50 . 2013-01-09 18:50 -------- d-----w- c:\windows\system32\config\systemprofile\Application Data\IObit
2013-01-09 09:37 . 2012-06-19 19:24 21376 ----a-w- c:\windows\system32\RegistryDefragBootTime.exe
2013-01-09 09:17 . 2013-01-09 09:17 -------- d-----w- c:\documents and settings\LocalService\Application Data\IObit
2013-01-09 09:17 . 2013-01-09 09:17 -------- d-----w- c:\documents and settings\All Users\Application Data\IObit
2013-01-09 09:17 . 2013-01-09 09:17 -------- d-----w- c:\documents and settings\admin\Local Settings\Application Data\Opera
2013-01-09 09:17 . 2013-01-09 09:17 -------- d-----w- c:\documents and settings\admin\AppData
2013-01-09 09:17 . 2013-01-09 09:19 -------- d-----w- c:\documents and settings\admin\Application Data\IObit
2013-01-09 09:16 . 2013-01-09 09:16 -------- d-----w- c:\program files\IObit
2013-01-06 11:33 . 2013-01-06 12:00 -------- d-----w- c:\documents and settings\admin\Application Data\XnView
2013-01-06 11:32 . 2013-01-06 11:32 -------- d-----w- c:\program files\XnView
2013-01-03 21:30 . 2013-01-03 21:30 -------- d-----w- c:\documents and settings\admin\Application Data\TuneUp Software
2013-01-03 21:28 . 2013-01-03 21:28 -------- d-----w- c:\program files\AVG
2013-01-03 21:27 . 2013-01-15 13:08 -------- d-----w- c:\documents and settings\All Users\Application Data\MFAData
2013-01-03 21:27 . 2013-01-03 21:27 -------- d--h--w- c:\documents and settings\All Users\Application Data\Common Files
2013-01-03 21:27 . 2013-01-03 21:27 -------- d-----w- c:\documents and settings\admin\Local Settings\Application Data\MFAData
2013-01-03 20:42 . 2013-01-03 20:43 -------- d-----w- c:\windows\system32\NtmsData
2013-01-03 20:06 . 2013-01-03 20:06 -------- d-----w- c:\documents and settings\admin\Application Data\CyberLink
2013-01-03 19:42 . 2013-01-06 12:00 -------- d-----w- c:\documents and settings\All Users\Application Data\Spybot - Search & Destroy
2013-01-03 19:42 . 2013-01-03 19:50 -------- d-----w- c:\program files\Spybot - Search & Destroy
2013-01-03 19:35 . 2009-04-06 11:37 704384 ----a-w- c:\windows\system32\drivers\SandBox.sys
2013-01-03 19:35 . 2009-02-10 16:15 257432 ----a-w- c:\windows\system32\drivers\afwcore.sys
2013-01-03 19:31 . 2009-02-18 17:30 31128 ----a-w- c:\windows\system32\drivers\afw.sys
2013-01-03 19:31 . 2013-01-03 19:31 -------- d-----w- c:\program files\Agnitum
2013-01-03 19:31 . 2013-01-11 12:05 -------- d-----w- c:\documents and settings\All Users\Application Data\Agnitum
2012-12-30 15:50 . 2013-01-14 12:49 -------- d-----w- c:\documents and settings\admin\Local Settings\Application Data\Spotify
2012-12-30 15:49 . 2013-01-14 16:44 -------- d-----w- c:\documents and settings\admin\Application Data\Spotify
2012-12-30 15:47 . 2012-12-30 15:49 -------- d-----w- c:\documents and settings\admin\Local Settings\Application Data\Deployment
2012-12-30 02:02 . 2012-12-30 02:02 -------- d-----w- c:\documents and settings\admin\Local Settings\Application Data\Skype
2012-12-21 14:51 . 2012-12-21 14:51 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Piriform
2012-12-21 14:20 . 2012-12-21 14:20 -------- d-----w- c:\documents and settings\admin\Application Data\Visan
2012-12-21 14:18 . 2012-12-21 14:20 -------- d-----w- c:\documents and settings\All Users\Application Data\Visan
2012-12-21 13:57 . 2012-12-21 13:58 -------- d-----w- c:\documents and settings\admin\Application Data\PerformerSoft
2012-12-21 13:57 . 2012-12-21 13:57 -------- d-----w- c:\documents and settings\All Users\Application Data\IBUpdaterService
2012-12-21 13:56 . 2012-12-21 13:56 -------- d-----w- c:\documents and settings\admin\Local Settings\Application Data\Wajam
2012-12-21 13:55 . 2012-12-21 13:55 -------- d-----w- c:\documents and settings\All Users\Application Data\Kodak
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-12-16 12:23 . 2004-08-03 23:56 290560 ----a-w- c:\windows\system32\atmfd.dll
2012-11-13 01:25 . 2004-08-03 22:17 1866368 ----a-w- c:\windows\system32\win32k.sys
2012-11-05 00:17 . 2012-11-05 00:17 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-11-05 00:17 . 2012-11-05 00:17 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-11-02 02:02 . 2004-08-03 23:56 375296 ----a-w- c:\windows\system32\dpnet.dll
2012-11-01 12:17 . 2004-08-03 23:56 1469440 ------w- c:\windows\system32\inetcpl.cpl
2012-11-01 12:17 . 2004-08-03 23:56 916992 ----a-w- c:\windows\system32\wininet.dll
2012-11-01 12:17 . 2004-08-03 23:56 43520 ------w- c:\windows\system32\licmgr10.dll
2012-11-01 00:35 . 2004-08-03 21:59 385024 ------w- c:\windows\system32\html.iec
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 6"="c:\program files\IObit\Advanced SystemCare 6\ASCTray.exe" [2012-06-20 305536]
"Spotify Web Helper"="c:\documents and settings\admin\Application Data\Spotify\Data\SpotifyWebHelper.exe" [2012-12-30 1199576]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"VTTrayp"="VTtrayp.exe" [2004-06-21 143360]
"VTTimer"="VTTimer.exe" [2004-10-01 53248]
"Synchronization Manager"="c:\windows\system32\mobsync.exe" [2008-04-14 143360]
"tblfunc"="tblmouse.exe" [2001-08-21 49152]
"OutpostMonitor"="c:\progra~1\Agnitum\OUTPOS~1\op_mon.exe" [2009-04-14 2374464]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2006-03-28 180269]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"TSClientMSIUninstaller"="c:\windows\Installer\TSClientMsiTrans\tscuinst.vbs" [2007-10-30 13801]
"RunNarrator"="Narrator.exe" [2008-04-14 53760]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"disablecad"= 1 (0x1)
"EnableLUA"= 0 (0x0)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"Userinit"="c:\windows\system32\userinit.exe,,c:\documents and settings\admin\Local Settings\Application Data\iakwrkmv\rrekiwyv.exe"
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-1460\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-1463\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-1470\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-1474\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-1478\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2222\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2223\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2230\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2234\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2235\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2236\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2241\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2243\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2249\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2255\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2256\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2259\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2262\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2267\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2277\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2278\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2279\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2280\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2282\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2283\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2290\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2303\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2306\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2311\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2325\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2327\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2331\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2342\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2343\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2351\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2354\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2362\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2366\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2379\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2381\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2382\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2383\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2389\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2390\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2396\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2403\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2410\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2411\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2419\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2423\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2425\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2426\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2428\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2433\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2434\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2437\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2440\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2447\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2452\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2453\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2468\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2477\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2479\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2481\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2484\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2490\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2497\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2498\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2501\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2505\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2507\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2509\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2520\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2521\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2523\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2524\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2525\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2530\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2531\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2532\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2537\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2538\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2539\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2543\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2550\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2552\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2553\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2558\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2584\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2592\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2626\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2660\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2666\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2667\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2668\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2671\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2674\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2676\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2677\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2678\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2679\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2681\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2683\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2684\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2685\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2686\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2687\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2688\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2689\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2690\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2691\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2692\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2693\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2695\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2696\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2697\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2698\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2701\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2703\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2706\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2708\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2711\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2712\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2714\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2716\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2717\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2718\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2720\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2722\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2723\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2726\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2729\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2730\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2732\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2738\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2740\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2742\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2746\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2747\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2749\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2755\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2757\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2759\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2760\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2764\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2766\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2768\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2773\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2775\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2776\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2777\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2778\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2780\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2781\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2785\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2786\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2788\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2789\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2790\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2791\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2792\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2793\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2794\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2795\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2796\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2797\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2799\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2800\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2801\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2802\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2803\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2804\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2808\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2809\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2811\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2813\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2814\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2815\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2816\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2818\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2819\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2821\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2822\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2823\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2824\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2826\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2827\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2828\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2829\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2831\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2832\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2834\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2835\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2836\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2837\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2838\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2840\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2843\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2844\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2845\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2848\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2849\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2850\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2854\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2855\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2856\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2857\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2858\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2859\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2860\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2863\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2870\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2871\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2872\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2875\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2876\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2881\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2883\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2885\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2886\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2887\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2888\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2890\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2893\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2898\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2900\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2901\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2902\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2903\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2904\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2905\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2906\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2908\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2910\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2911\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2912\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2914\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2915\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2916\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2918\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2920\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2922\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2923\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2924\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2928\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2929\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2930\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2931\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2932\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2934\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2935\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2937\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2944\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2945\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2946\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2948\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2949\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2951\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2952\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2953\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2956\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2957\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2958\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2960\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2961\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2963\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2966\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2968\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2969\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2971\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2972\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2973\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2975\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2976\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2977\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2978\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2979\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2980\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2982\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2990\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2995\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-2997\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3000\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3001\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3003\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3007\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3008\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3009\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3011\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3012\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3014\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3015\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3018\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3020\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3021\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3023\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3026\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3028\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3029\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3030\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3031\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3033\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3034\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3037\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3039\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3040\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3041\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3043\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3045\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3047\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3049\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3050\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3058\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3064\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-3071\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\S-1-5-21-2078540614-805346387-1883520330-500\Scripts\Logon\0\0]
"Script"=\\Overdale1\NETLOGON\SchoolPrinters.vbs
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup
.
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk
backup=c:\windows\pss\Adobe Reader Speed Launch.lnkCommon Startup
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OutpostFeedBack]
2009-04-14 18:02 428032 ----a-w- c:\program files\Agnitum\Outpost Firewall\feedback.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
2003-12-08 16:35 32768 ----a-w- c:\program files\CyberLink\PowerDVD\PDVDServ.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
2012-10-19 16:18 17875120 ----a-r- c:\program files\Skype\Phone\Skype.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify]
2012-12-30 15:50 7880664 ----a-w- c:\documents and settings\admin\Application Data\Spotify\spotify.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spotify Web Helper]
2012-12-30 15:50 1199576 ----a-w- c:\documents and settings\admin\Application Data\Spotify\Data\SpotifyWebHelper.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\swg]
2009-09-02 13:27 39408 ----a-w- c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"UacDisableNotify"=dword:00000001
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableNotifications"= 1 (0x1)
.
R0 hotcore3;hc3ServiceName;c:\windows\system32\drivers\hotcore3.sys [28/06/2012 12:37 56208]
R1 SandBox;SandBox;c:\windows\system32\drivers\SandBox.sys [03/01/2013 19:35 704384]
R2 AdvancedSystemCareService6;Advanced SystemCare Service 6;c:\program files\IObit\Advanced SystemCare 6\ASCService.exe [09/01/2013 09:16 1010560]
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe [13/12/2012 14:26 3290896]
R3 afw;Agnitum firewall driver;c:\windows\system32\drivers\afw.sys [03/01/2013 19:31 31128]
R3 afwcore;afwcore;c:\windows\system32\drivers\afwcore.sys [03/01/2013 19:35 257432]
S2 ddnt;ddnt;\??\c:\windows\system32\drivers\ddnt.sys --> c:\windows\system32\drivers\ddnt.sys [?]
S2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [19/10/2012 16:14 160944]
S3 idmc1aud;Intel® Play USB Audio Filter (WDM);c:\windows\system32\drivers\idmc1aud.sys [06/04/2006 13:08 15188]
S3 IDMC1Blk;Intel Play DMC Download Driver;c:\windows\system32\drivers\IDMC1Blk.sys [06/04/2006 13:08 14628]
S3 IDMC1Vxp;Intel® Play DMC Camera;c:\windows\system32\drivers\idmc1vme.sys [06/04/2006 13:08 416564]
S3 SlowDownCPU;SlowDownCPU;c:\windows\inf\MSI\SlowDownCPU\NTGLM7X.SYS [28/03/2006 15:23 25088]
S3 STVqx5;Digital Blue QX5 Microscope;c:\windows\system32\drivers\STVqx5.sys [06/04/2006 13:24 64512]
S3 STVqx5m;Digital Blue QX5 Microscopem;c:\windows\system32\drivers\STVqx5m.sys [06/04/2006 13:24 6144]
S3 tablet;Serial Tablet Driver;c:\windows\system32\drivers\tablet.sys [06/04/2006 17:19 23125]
S3 tbfilter;Tablet Filter Driver;c:\windows\system32\drivers\tbfilter.sys [06/04/2006 17:19 7383]
.
Contents of the 'Scheduled Tasks' folder
.
2013-01-16 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2012-11-05 00:17]
.
2013-01-10 c:\windows\Tasks\Google Software Updater.job
- c:\program files\Google\Common\Google Updater\GoogleUpdaterService.exe [2009-09-02 00:18]
.
2013-01-16 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-05 00:17]
.
2013-01-16 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-11-05 00:17]
.
2013-01-14 c:\windows\Tasks\ReclaimerUpdateFiles_admin.job
- c:\documents and settings\admin\Application Data\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe [2013-01-03 20:43]
.
2013-01-15 c:\windows\Tasks\ReclaimerUpdateXML_admin.job
- c:\documents and settings\admin\Application Data\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe [2013-01-03 20:43]
.
2013-01-16 c:\windows\Tasks\RNUpgradeHelperLogonPrompt_admin.job
- c:\documents and settings\admin\Application Data\Real\Update\UpgradeHelper\RealPlayer\10.30\agent\rnupgagent.exe [2013-01-03 20:43]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.co.uk/
uInternet Settings,ProxyOverride = <local>
TCP: DhcpNameServer = 192.168.0.1
.
- - - - ORPHANS REMOVED - - - -
.
HKCU-Run-RreKiwyv - c:\documents and settings\admin\Local Settings\Application Data\iakwrkmv\rrekiwyv.exe
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
http://www.gmer.net
Rootkit scan 2013-01-16 19:01
Windows 5.1.2600 Service Pack 3 NTFS
.
detected NTDLL code modification:
ZwQueryDirectoryFile
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
.
c:\documents and settings\admin\Start Menu\Programs\Startup\rrekiwyv.exe 99684 bytes executable
.
scan completed successfully
hidden files: 1
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}]
@DACL=(02 0011)
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe,-101"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\Elevation]
@DACL=(02 0011)
"Enabled"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\LocalServer32]
@DACL=(02 0011)
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil32_11_4_402_287_ActiveX.exe"
.
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{73C9DFA0-750D-11E1-B0C4-0800200C9A66}\TypeLib]
@DACL=(02 0011)
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}]
@DACL=(02 0011)
@Denied: (A 2) (Everyone)
@="IFlashBroker5"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\ProxyStubClsid32]
@DACL=(02 0011)
@="{00020424-0000-0000-C000-000000000046}"
.
[HKEY_LOCAL_MACHINE\software\Classes\Interface\{6AE38AE0-750C-11E1-B0C4-0800200C9A66}\TypeLib]
@DACL=(02 0011)
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"
.
--------------------- DLLs Loaded Under Running Processes ---------------------
.
- - - - - - - > 'explorer.exe'(704)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\wdfmgr.exe
c:\windows\system32\VTtrayp.exe
c:\windows\system32\VTTimer.exe
c:\windows\system32\tblmouse.exe
.
**************************************************************************
.
Completion time: 2013-01-16 19:09:05 - machine was rebooted
ComboFix-quarantined-files.txt 2013-01-16 19:09
.
Pre-Run: 67,413,438,464 bytes free
Post-Run: 67,266,908,160 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - A956F036DAA0D336752E3BFF34BAE283