Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Persistent Back door? please help


  • Please log in to reply
6 replies to this topic

#1 Paulw1487

Paulw1487

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:57 AM

Posted 05 February 2017 - 01:32 PM

I think someone used a reverse payload to create a persistent backdoor into my PC.  After that they used my driver repositories to create a persistent infection.  I have strange occurrences going on in my Dxdiag when I go through the text.  So I did some digging and I found an odd file that may or may not be part of windows system 32. If someone could take a Quick look I'd appreciate it

 

[MT_AppraiserDataFileParameters]
AppraiserDataVersion=1043
AppraiserTelemetryRoundNumber=9

[MT_AppraiserScheduledFullSyncParameters]
AppraiserTargetDate=10/11/2016
AppraiserUploadDays=17

[MT_RegKey_GWX_GStatus]
FT_ALL_HasGatedBlock=0
FT_ALL_HasGatedWarn=1
FT_ALL_TRUE=2

[FT_ALL_AssetTypesForSetupApplicationScan]
I:AssetType=LT_AssetTypesForSetupApplicationScan

[FT_ALL_AssetTypesForSetupDeviceScan]
I:AssetType=LT_AssetTypesForSetupDeviceScan

[FT_ALL_AssetTypesForSetupSystemScan]
I:AssetType=LT_AssetTypesForSetupSystemScan

[FT_ALL_AssetTypesForBios]
I:AssetType=Bios

[FT_ALL_AssetTypesForCit]
I:AssetType=CitDuration

[FT_ALL_AssetTypesForDeviceAndDriver]
I:AssetType=LT_AssetTypesForDeviceAndDriver

[FT_ALL_AssetTypesForDevice]
I:AssetType=Device

[FT_ALL_AssetTypesForFileAndMib]
I:AssetType=LT_AssetTypesForFileAndMib

[FT_ALL_AssetTypesForFileAndMceAndMib]
I:AssetType=LT_AssetTypesForFileAndMceAndMib

[FT_ALL_AssetTypesForGating]
I:AssetType=LT_AssetTypesForGating

[FT_ALL_AssetTypesForGuestUser]
I:AssetType=GuestUser

[FT_ALL_AssetTypesForGeneralTel]
I:AssetType=GeneralTel

[FT_ALL_AssetTypesForLanguagePack]
I:AssetType=LanguagePack

[FT_ALL_AssetTypesForMediaCenter]
I:AssetType=MediaCenter

[FT_ALL_AssetTypesForWmdrm]
I:AssetType=Wmdrm

[FT_ALL_AssetTypesForMemory]
I:AssetType=Memory

[FT_ALL_AssetTypesForOldAppraiserMarkers]
I:AssetType=OldAppraiserMarkers

[FT_ALL_AssetTypesForProcessorFeature]
I:AssetType=LT_AssetTypesForProcessorFeature

[FT_ALL_AssetTypesForBlockingSystem]
I:AssetType=LT_AssetTypesForBlockingSystem

[FT_ALL_AssetTypesForWindowsActivationStatus]
I:AssetType=WindowsActivationStatus

[FT_ALL_AssetTypesForWim]
I:AssetType=Wim

[FT_ALL_AssetTypesForWlan]
I:AssetType=Wlan

[FT_ALL_TRUE]
I:AssetType=*

[FT_ALL_FALSE]
I:AssetType!=*

[FT_ALL_AppInterestingAssets]
T:FT_ALL_AssetTypesForSetupApplicationScan=TRUE
T:FT_ANY_AppInterestingAssetTypes=TRUE

[FT_ANY_AppInterestingAssetTypes]
T:FT_ALL_AppInterestingFiles=TRUE
T:FT_ALL_AppInterestingApps=TRUE
T:FT_ALL_AppInterestingMediaCenter=TRUE
T:FT_ALL_AppInterestingWmdrm=TRUE

[FT_ALL_AppInterestingApps]
I:AssetType=Application

[FT_ALL_AppInterestingFiles]
I:AssetType=LT_AssetTypesForFileAndMib
T:FT_ANY_AppInterestingFileProperties=TRUE

[FT_ALL_AppInterestingMediaCenter]
E:DT_ALL_MCE_MediaCenterInUse=TRUE

[FT_ALL_AppInterestingWmdrm]
E:DT_ALL_DRM_WmdrmInUse=TRUE

[FT_ANY_AppInterestingFileProperties]
E:DT_ANY_FMC_BlockingApplication=TRUE
E:DT_ORD_FIL_HasMigTypeForMode=TRUE
D:ResolveAttempted=TRUE

[FT_ALL_AppNotInterestingAssets]
T:FT_ALL_AssetTypesForSetupApplicationScan=TRUE
T:FT_ALL_AppInterestingAssets!=TRUE

[FT_ALL_HumanRedableInterestingAssets]
T:FT_ANY_HumanReadableInterestingProperties=TRUE

[FT_ANY_HumanReadableInterestingProperties]
E:DT_ANY_FMC_BlockingApplication=TRUE
E:DT_ANY_SYS_BlockingSystem=TRUE
A:BlockUpgrade=TRUE
T:FT_ALL_HumanReadableInterestingBlockedDriver=TRUE
D:SdbAppGuid=*
T:FT_ALL_DevInterestingAssets=TRUE

[FT_ALL_HumanReadableInterestingBlockedDriver]
I:AssetType=Driver
A:DriverIsBlocked=TRUE

[FT_ALL_DevInterestingAssets]
T:FT_ALL_AssetTypesForSetupDeviceScan=TRUE
T:FT_ANY_DevInterestingProperties=TRUE

[FT_ALL_DevNotInterestingAssets]
T:FT_ALL_AssetTypesForSetupDeviceScan=TRUE
T:FT_ANY_DevInterestingProperties!=TRUE

[FT_ANY_DevInterestingProperties]
A:BlockUpgrade=TRUE
A:DriverIsBlocked=TRUE
A:IsBootServiceDriverBinary=TRUE
A:TroubleshooterReplacedDriverAndOldOneIsInactive=TRUE
I:AssetType=BddMarker

[FT_ANY_NeedsIcon]
T:FT_ALL_Bucket_2=TRUE
T:FT_ANY_Bucket_3=TRUE
T:FT_ALL_Bucket_4=TRUE
T:FT_ANY_Bucket_6=TRUE
T:FT_ALL_Bucket_7=TRUE
T:FT_ALL_Bucket_8=TRUE
T:FT_ALL_Bucket_9=TRUE
T:FT_ALL_Bucket_10=TRUE
T:FT_ANY_Bucket_11=TRUE
T:FT_ALL_Bucket_12=TRUE
A:BlockUpgrade=TRUE
A:NeedsUninstall=TRUE
A:NeedsDismiss=TRUE
E:DT_ANY_FMC_BlockingApplication=TRUE
E:DT_ALL_LGP_HasLanguagePack=TRUE
E:DT_ALL_DEV_BlockUpgradeIfDriverIsBlockedAndHasBootService=TRUE
E:DT_ANY_DEV_SdbDeviceBlockUpgrade=TRUE
E:DT_ALL_DEV_BlockUpgradeIfDriverIsBlockedAndNoOtherNetwork=TRUE
E:DT_ANY_SYS_BlockingSystem=TRUE
I:AssetType=Touch

[FT_ALL_NetworkDeviceIssue]
E:DT_ALL_DEV_BlockUpgradeIfDriverIsBlockedAndNoOtherNetwork=TRUE
A:BlockUpgrade=TRUE

[FT_ALL_AppHelpHardBlockUx]
I:AssetType=LT_AppsAndFiles
A:HasAppHelpHardBlockUx=TRUE
A:HasInboxAppHelpHardBlockUx!=TRUE
A:HasMigRemoval!=TRUE

[FT_ALL_AppHelpSoftBlockUx]
I:AssetType=LT_AppsAndFiles
A:HasAppHelpSoftBlockUx=TRUE
A:HasAppHelpHardBlockUx!=TRUE
A:HasInboxAppHelpSoftBlockUx!=TRUE
A:HasInboxAppHelpHardBlockUx!=TRUE
A:HasMigRemoval!=TRUE

[FT_ALL_BlockingMatchingInfoBlockUx]
I:AssetType=BlockingMatchingInfo
E:DT_ANY_FIL_BlockUpgradeUxTables=TRUE

[FT_ALL_PostUpgradeMatchingInfoBlockUx]
I:AssetType=PostUpgradeMatchingInfo
E:DT_ORD_FIL_ReinstallAfterUpgradeUxStatus=TRUE

[FT_ALL_HideBlockDueToCit]
A:CitIsOldEnough=TRUE
A:HasCitData!=TRUE

[FT_ALL_CompatMarker_RAV]
I:AssetType=File
E:DT_ORD_FIL_MigXmlRemovedStatus=TRUE
D:IsAv=TRUE

[FT_ALL_TouchCapable]
I:AssetType=Touch
I:MaximumTouches>=1
I:IntegratedTouchDigitizerPresent=TRUE

[FT_ALL_HasGatedBlock]
I:AssetType=Summary
A:DT_ORD_GAT_HasGatedSdbEntry>=1

[FT_ALL_HasGatedWarn]
I:AssetType=Summary
A:DT_ORD_GAT_HasGatedWarnSdbEntry>=1

[FT_ANY_IncludeInTelemetry]
E:DT_ANY_ALL_IncludeInTelemetryUnversioned=TRUE
E:DT_ANY_ALL_IncludeInTelemetryVersioned=TRUE

[FT_ALL_IncludeFileInfo]
I:AssetType=LT_AssetTypesForFileInfo
T:FT_ANY_IncludeInTelemetry=TRUE

[FT_ALL_Bucket_2]
T:FT_ALL_HideBlockDueToCit=FALSE
T:FT_ALL_AppHelpSoftBlockUx=TRUE

[FT_ANY_Bucket_3]
T:FT_ALL_SubBucket_201=TRUE
T:FT_ALL_SubBucket_202=TRUE
T:FT_ALL_SubBucket_203=TRUE
T:FT_ALL_SubBucket_209=TRUE

[FT_ALL_Bucket_4]
I:AssetType=Device
I:Class!=system
T:FT_ANY_Bucket_3=FALSE
A:DriverIsBlocked=TRUE
A:DriverBlockOverridden!=TRUE
A:BlockUpgrade=FALSE
E:DT_ANY_DEV_DriverAvailableUplevel=FALSE
E:DT_ANY_DEV_DeviceAlreadyNotInGoodState=FALSE

[FT_ANY_Bucket_6]
T:FT_ALL_SubBucket_113=TRUE
T:FT_ALL_SubBucket_114=TRUE
T:FT_ALL_SubBucket_115=TRUE
T:FT_ALL_SubBucket_116=TRUE
T:FT_ANY_SubBucket_117=TRUE
T:FT_ALL_SubBucket_102=TRUE
T:FT_ALL_SubBucket_200=TRUE
T:FT_ALL_SubBucket_210=TRUE

[FT_ALL_Bucket_7]
A:IsSdbBlockUpgradeUx=TRUE
A:HasMigRemoval!=TRUE

[FT_ALL_Bucket_8]
A:IsSdbBlockUpgradeCanReinstallUx=TRUE
A:HasMigRemoval!=TRUE

[FT_ALL_Bucket_9]
A:IsSdbBlockUpgradeUntilUpdateUx=TRUE
A:HasMigRemoval!=TRUE

[FT_ALL_Bucket_10]
A:NeedsPostUpgradeReinstallUx=TRUE
T:FT_ALL_HideBlockDueToCit=FALSE
A:HasMigRemoval!=TRUE

[FT_ANY_Bucket_11]
T:FT_ANY_SubBucket_109=TRUE
T:FT_ANY_SubBucket_111=TRUE
T:FT_ANY_SubBucket_112=TRUE
T:FT_ANY_SubBucket_118=TRUE
T:FT_ANY_SubBucket_121=TRUE
T:FT_ANY_SubBucket_122=TRUE

[FT_ALL_Bucket_12]
T:FT_ALL_HideBlockDueToCit=FALSE
T:FT_ALL_AppHelpHardBlockUx=TRUE

[FT_ANY_Bucket_13]
T:FT_ALL_SubBucket_119=TRUE
T:FT_ALL_SubBucket_120=TRUE

[FT_ALL_SubBucket_102]
I:Enumerator=ComputerHardwareId
E:DT_ANY_DEV_SdbDeviceBlockUpgrade=TRUE

[FT_ANY_SubBucket_109]
E:DT_ALL_LGP_HasLanguagePack=TRUE

[FT_ANY_SubBucket_111]
A:IsSdbReinstallUpgradeWarnUx=TRUE

[FT_ANY_SubBucket_112]
E:DT_ALL_MCE_MediaCenterInUse=TRUE

[FT_ALL_SubBucket_113]
E:DT_ANY_PRF_ProcessorRequirementIssues=TRUE

[FT_ALL_SubBucket_114]
E:DT_ORD_BIO_HasBiosBlockForMode=TRUE

[FT_ALL_SubBucket_115]
E:DT_ANY_MEM_MemoryRequirementViolatedForArchitecture=TRUE

[FT_ALL_SubBucket_116]
E:DT_ALL_DEV_BlockUpgradeIfDriverIsBlockedAndHasBootService=TRUE
E:DT_ALL_DEV_BlockUpgradeIfDriverIsBlockedAndNoOtherNetwork=FALSE
A:BlockUpgrade=TRUE

[FT_ANY_SubBucket_117]
E:DT_ALL_WLN_HasWlanBlock=TRUE
T:FT_ALL_NetworkDeviceIssue=TRUE

[FT_ANY_SubBucket_118]
E:DT_ALL_WIM_IsWimBoot=TRUE

[FT_ALL_SubBucket_119]
I:AssetType=Touch
T:FT_ALL_TouchCapable=TRUE

[FT_ALL_SubBucket_120]
I:AssetType=Touch
T:FT_ALL_SubBucket_119=FALSE

[FT_ANY_SubBucket_121]
E:DT_ALL_WAS_WindowsNotActivated=TRUE

[FT_ANY_SubBucket_122]
E:DT_ALL_GEU_IsGuestAccountEnabled=TRUE

[FT_ALL_SubBucket_200]
I:AssetType=Device
I:Class=display
A:DriverIsBlocked=TRUE
A:DriverBlockOverridden!=TRUE
E:DT_ANY_DEV_UsesBasicDisplayDriver=FALSE
E:DT_ANY_DEV_DriverAvailableOnline=FALSE

[FT_ALL_SubBucket_201]
I:AssetType=Device
I:Class=media
A:DriverIsBlocked=TRUE
A:DriverBlockOverridden!=TRUE
I:Audio.RenderDriver=*
I:Audio.CaptureDriver!=*
E:DT_ANY_DEV_DriverAvailableUplevel=FALSE
E:DT_ANY_DEV_DeviceAlreadyNotInGoodState=FALSE

[FT_ALL_SubBucket_202]
I:AssetType=Device
I:Class=net
A:DriverIsBlocked=TRUE
A:DriverBlockOverridden!=TRUE
E:DT_ANY_DEV_DriverAvailableUplevel=FALSE
E:DT_ANY_DEV_DeviceAlreadyNotInGoodState=FALSE
T:FT_ALL_NetworkDeviceIssue=FALSE

[FT_ALL_SubBucket_203]
I:AssetType=Device
I:Class=media
A:DriverIsBlocked=TRUE
A:DriverBlockOverridden!=TRUE
I:Audio.RenderDriver=*
I:Audio.CaptureDriver=*
E:DT_ANY_DEV_DriverAvailableUplevel=FALSE
E:DT_ANY_DEV_DeviceAlreadyNotInGoodState=FALSE

[FT_ALL_SubBucket_209]
I:AssetType=Device
I:Class=printer
A:DriverIsBlocked=TRUE
A:DriverBlockOverridden!=TRUE
E:DT_ANY_DEV_DriverAvailableUplevel=FALSE
E:DT_ANY_DEV_DeviceAlreadyNotInGoodState=FALSE

[FT_ALL_SubBucket_210]
I:AssetType=Device
A:BlockUpgrade=TRUE
T:FT_ALL_SubBucket_116=FALSE
T:FT_ANY_SubBucket_117=FALSE
T:FT_ALL_SubBucket_102=FALSE

[FT_ANY_CompatMarker_UexRatingRed]
T:FT_ANY_Bucket_6=TRUE

[FT_ANY_CompatMarker_UexRatingOrange]
T:FT_ANY_CompatMarkerHelper_UexRatingOrange_Common=TRUE
T:FT_ALL_AppHelpHardBlockUx=TRUE

[FT_ANY_CompatMarker_UexUsageRatingOrange]
T:FT_ANY_CompatMarkerHelper_UexRatingOrange_Common=TRUE
T:FT_ALL_Bucket_12=TRUE

[FT_ANY_CompatMarkerHelper_UexRatingOrange_Common]
T:FT_ANY_Bucket_3=TRUE
T:FT_ALL_Bucket_4=TRUE

[FT_ANY_CompatMarker_UexRatingYellow]
T:FT_ALL_AppHelpSoftBlockUx=TRUE
T:FT_ANY_CompatMarkerHelper_UexRatingYellow_Common=TRUE

[FT_ANY_CompatMarker_UexUsageRatingYellow]
T:FT_ALL_Bucket_2=TRUE
T:FT_ANY_CompatMarkerHelper_UexRatingYellow_Common=TRUE

[FT_ANY_CompatMarkerHelper_UexRatingYellow_Common]
T:FT_ALL_Bucket_7=TRUE
T:FT_ALL_Bucket_8=TRUE
T:FT_ALL_Bucket_9=TRUE
T:FT_ALL_Bucket_10=TRUE
T:FT_ALL_BlockingMatchingInfoBlockUx=TRUE
T:FT_ALL_PostUpgradeMatchingInfoBlockUx=TRUE

[FT_ANY_CompatMarker_MediaCenterInUse]
T:FT_ANY_SubBucket_112=TRUE

[FT_ALL_CompatMarker_Dx12SupportedDevice]
I:AssetType=Device
T:FT_ANY_CompatMarkerHelper_Dx12Device_Id=TRUE

[FT_ANY_CompatMarkerHelper_Dx12Device_Id]
I:HWID=LT_Dx12Hwids
I:COMPID=LT_Dx12Hwids

[FT_ANY_CompatMarker_Guest]
T:FT_ANY_SubBucket_122=TRUE

[FT_ANY_CompatMarker_BddDecision]
T:FT_ALL_SubBucket_200=TRUE

[FT_ALL_CompatMarker_BddCosOnline]
I:AssetType=Device
I:Class=display
A:DriverIsBlocked=TRUE
A:DriverBlockOverridden!=TRUE
E:DT_ANY_DEV_UsesBasicDisplayDriver=FALSE
T:FT_ANY_CosOrWuDataPresent=TRUE

[FT_ANY_CosOrWuDataPresent]
T:FT_ALL_CosRatingAndSolutionPresent=TRUE
D:WuDriverCoverage=*

[FT_ALL_CosRatingAndSolutionPresent]
D:CosDeviceRating=*
D:CosDeviceSolution=*

[LT_BucketOrder]
FT_ANY_Bucket_6
FT_ANY_Bucket_3
FT_ALL_Bucket_4
FT_ALL_Bucket_7
FT_ALL_Bucket_8
FT_ALL_Bucket_9
FT_ALL_Bucket_12
FT_ALL_Bucket_2
FT_ALL_Bucket_10
FT_ANY_Bucket_11
FT_ANY_Bucket_13

[LT_AssetTypesForSetupApplicationScan]
Application
BlockingMatchingInfo
CitDuration
File
IeAddOn
MediaCenter
PassiveMatchingInfo
PostUpgradeMatchingInfo
LanguagePack
Wmdrm

[LT_AssetTypesForSetupDeviceScan]
Device
Driver
DriverBinary
DriverUplevel
BddMarker
Container

[LT_AssetTypesForSetupSystemScan]
Bios
CompareExchange128
GuestUser
LahfSahf
Memory
PrefetchW
SSE2
NX
Wlan
Wim
WindowsActivationStatus
Touch
Machine
Processor

[LT_AssetTypesForDeviceAndDriver]
Device
Driver

[LT_AppsAndFiles]
Application
File

[LT_AssetTypesForProcessorFeature]
PrefetchW
LahfSahf
CompareExchange128
SSE2
NX
Processor

[LT_AssetTypesForFileAndMib]
File
BlockingMatchingInfo
PassiveMatchingInfo
PostUpgradeMatchingInfo

[LT_AssetTypesForFileAndMceAndMib]
File
MediaCenter
BlockingMatchingInfo
PassiveMatchingInfo
PostUpgradeMatchingInfo
Wmdrm

[LT_AssetTypesForGating]
File
BlockingMatchingInfo
PassiveMatchingInfo
PostUpgradeMatchingInfo
Device
Driver
Bios

[LT_AssetTypesForBlockingSystem]
Bios
CompareExchange128
LahfSahf
Memory
NX
PrefetchW
Processor
SSE2
Wlan

[LT_AssetTypesToAlwaysIncludeInTelemetry]
Application
Bios
BlockingMatchingInfo
CompareExchange128
Device
Driver
DriverBinary
DriverUplevel
IeAddOn
LahfSahf
LanguagePack
MediaCenter
Memory
NX
PassiveMatchingInfo
PostUpgradeMatchingInfo
PrefetchW
SSE2
Touch
Wim
WindowsActivationStatus
Wlan
Wmdrm
Container
Machine
Processor

[LT_AssetTypesForFileInfo]
Application
File
IeAddOn

[LT_RuntimeBlockTypes]
ApphelpSoftBlock
ApphelpHardBlock

[LT_NonRegressionDeviceCodes]
10
28
43

[LT_NotifyMigTypes]
MIG_XML_TYPE_REMOVED
MIG_XML_TYPE_ASK_WER

[LT_NonFatalComponentTypes]
DatasourceAntiMalware
DatasourceCit
DatasourceCosDevice
DatasourceHwCompat
DatasourceWuDriver
InventoryFile
InventoryInbox
InventoryGeneralTel
OutputAuxJson
OutputBlockedFiles
OutputEverything
OutputIcon
OutputRegistryMarker
OutputTelemetry
OutputRegistryAv
OutputRegistryPnp

[LT_OnlineRunSupportedByCos]
DatasourceCosDevice

[LT_OnlineRunSupportedByWu]
DatasourceWuDriver

[MT_FilterAbbreviations]
BIO=FT_ALL_AssetTypesForBios
CIT=FT_ALL_AssetTypesForCit
DDV=FT_ALL_AssetTypesForDeviceAndDriver
DEV=FT_ALL_AssetTypesForDevice
DRM=FT_ALL_AssetTypesForWmdrm
FIL=FT_ALL_AssetTypesForFileAndMib
FMC=FT_ALL_AssetTypesForFileAndMceAndMib
GAT=FT_ALL_AssetTypesForGating
GEU=FT_ALL_AssetTypesForGuestUser
GTL=FT_ALL_AssetTypesForGeneralTel
LGP=FT_ALL_AssetTypesForLanguagePack
MCE=FT_ALL_AssetTypesForMediaCenter
MEM=FT_ALL_AssetTypesForMemory
OMK=FT_ALL_AssetTypesForOldAppraiserMarkers
PRF=FT_ALL_AssetTypesForProcessorFeature
SYS=FT_ALL_AssetTypesForBlockingSystem
WAS=FT_ALL_AssetTypesForWindowsActivationStatus
WIM=FT_ALL_AssetTypesForWim
WLN=FT_ALL_AssetTypesForWlan
REF=FT_ALL_FALSE
ALL=FT_ALL_TRUE

[MT_UniqueIdententifierTable]
Application=I:ProgramId
File=I:LongPathHash
CitDuration=I:AssetType
IeAddOn=I:CLSID
BlockingMatchingInfo=I:AssetType
PassiveMatchingInfo=I:AssetType
PostUpgradeMatchingInfo=I:AssetType
MediaCenter=I:AssetType
Device=I:DeviceInstanceId
Container=I:ContainerId
Driver=I:DriverPackageStrongName
DriverBinary=I:DriverId
DriverUplevel=I:InfPathHash
Bios=I:AssetType
CompareExchange128=I:AssetType
LahfSahf=I:AssetType
LanguagePack=I:AssetType
Machine=I:AssetType
Memory=I:AssetType
PrefetchW=I:AssetType
Processor=I:AssetType
SSE2=I:AssetType
NX=I:AssetType
Wlan=I:AssetType
Wim=I:AssetType
WindowsActivationStatus=I:AssetType
Wmdrm=I:AssetType
Touch=I:AssetType
Test=I:TestUniqueId
GuestUser=I:AssetType
GeneralTel=I:AssetType
OldAppraiserMarkers=I:AssetType

[MT_TelemetryVariableComponents]
RT_ANY_AuxOutputters=AuxOutputters
RT_ANY_EverythingOutputter=EverythingOutputter
RT_ANY_TargetedComponentsRS1=TargetedComponentsRS1
RT_ANY_TargetedComponentsTH2=TargetedComponentsTH2
RT_ANY_TargetedComponentsTH1=TargetedComponentsTH1

[MT_TelemetryOutputterSendOffline]
RT_ANY_ShouldSendOfflineUtcHelper=TRUE
RT_ALL_True=FALSE

[MT_TelemetryOutputterSendFullSync]
RT_ALL_ShouldSendFullSyncUtc=TRUE
RT_ALL_True=FALSE

[MT_RegistryMarkerOutputterSendFullSync]
RT_ALL_ShouldSendFullSyncUtc=TRUE
RT_ALL_True=FALSE

[MT_GeneralTelInventoryRunGeneralTel]
RT_ANY_RunGeneralTel=TRUE
RT_ALL_True=FALSE

[MT_GeneralTelInventorySendUtc]
RT_ALL_ShouldSendFullSyncUtc=TRUE
RT_ALL_True=FALSE

[MT_GeneralTelInventoryTelemetryAllowed]
RT_ANY_GeneralTelInventoryTelemetryAllowed=TRUE
RT_ALL_True=FALSE

[MT_RegistryMarkerOutputterTelemetryAllowed]
RT_ANY_RegistryMarkerOutputterTelemetryAllowed=TRUE
RT_ALL_True=FALSE

[MT_GeneralTelInventoryPickUpMarkers]
RT_ANY_GeneralTelInventoryPickUpMarkers=TRUE
RT_ALL_True=FALSE

[MT_GeneralTelInventoryOnesettingsNotAllowed]
RT_ANY_GeneralTelInventoryOnesettingsNotAllowed=TRUE
RT_ALL_True=FALSE

[MT_CacheForceInvalidate]
RT_ANY_InvalidateCache=TRUE
RT_ALL_True=FALSE

[MT_ForceWuCache]
RT_ALL_WuOptOut=TRUE
RT_ALL_True=FALSE

[RT_ALL_WuOptOut]
M:WuDiceValue!=0

[MT_DevAppInventorySendFullSync]
RT_ANY_ShouldSendFullDevAppInventorySyncUtc=TRUE
RT_ALL_True=FALSE

[MT_WuDriverReplacementBackup]
RT_ALL_True=BlankRunInfo

[MT_AppraiserOptionalTargetRS1]
RT_ANY_AppraiseForTargetRS1=RS1
RT_ALL_True=PropertyBagKeyword:Ignore

[MT_AppraiserOptionalTargetTH2]
RT_ANY_AppraiseForTargetTH2=TH2
RT_ALL_True=PropertyBagKeyword:Ignore

[MT_AppraiserOptionalTargetTH1]
RT_ANY_AppraiseForTargetTH1=TH1
RT_ALL_True=PropertyBagKeyword:Ignore

[RT_ANY_AppraiseForTargetRS1]
M:AllAppraiserVersionsRequested=TRUE
T:RT_ALL_BuildIsRS1OrGreater!=TRUE

[RT_ANY_AppraiseForTargetTH2]
M:AllAppraiserVersionsRequested=TRUE
T:RT_ALL_BuildIsTH2OrGreater!=TRUE

[RT_ANY_AppraiseForTargetTH1]
M:AllAppraiserVersionsRequested=TRUE

[RT_ALL_BuildIsRS1OrGreater]
M:HostOsBuildNumber>=14393

[RT_ALL_BuildIsRS1OrLess]
M:HostOsBuildNumber<=14393

[RT_ALL_BuildIsRS1]
M:HostOsBuildNumber=14393

[RT_ALL_BuildIsRS1Prerelease]
T:RT_ALL_BuildIsRS1OrGreater!=TRUE
T:RT_ALL_BuildIsTH2OrLess!=TRUE

[RT_ALL_BuildIsTH2OrGreater]
M:HostOsBuildNumber>=10586

[RT_ALL_BuildIsTH2OrLess]
M:HostOsBuildNumber<=10586

[RT_ALL_BuildIsTH2]
M:HostOsBuildNumber=10586

[RT_ALL_BuildIsTH2Prerelease]
T:RT_ALL_BuildIsTH2OrGreater!=TRUE
T:RT_ALL_BuildIsTH1OrLess!=TRUE

[RT_ALL_BuildIsTH1OrGreater]
M:HostOsBuildNumber>=10240

[RT_ALL_BuildIsTH1OrLess]
M:HostOsBuildNumber<=10240

[RT_ALL_BuildIsTH1]
M:HostOsBuildNumber=10240

[RT_ALL_BuildIsTH1Prerelease]
T:RT_ALL_BuildIsTH1OrGreater!=TRUE
T:RT_ALL_BuildIsDownlevel!=TRUE

[RT_ALL_BuildIsDownlevel]
M:HostOsBuildNumber<=10000

[MT_AppraiserTarget_RS1]
OsMajorVersion=10
OsMinorVersion=0
OsBuildNumber=14393
ClientCategoryIds=LT_AppraiserTarget_Win10_ClientCategoryIds
ServerCategoryIds=LT_AppraiserTarget_Win10_ServerCategoryIds

[MT_AppraiserTarget_TH2]
OsMajorVersion=10
OsMinorVersion=0
OsBuildNumber=10586
ClientCategoryIds=LT_AppraiserTarget_Win10_ClientCategoryIds
ServerCategoryIds=LT_AppraiserTarget_Win10_ServerCategoryIds

[MT_AppraiserTarget_TH1]
OsMajorVersion=10
OsMinorVersion=0
OsBuildNumber=10240
ClientCategoryIds=LT_AppraiserTarget_Win10_ClientCategoryIds
ServerCategoryIds=LT_AppraiserTarget_Win10_ServerCategoryIds

[LT_AppraiserTarget_Win10_ClientCategoryIds]
405706ED-F1D7-47EA-91E1-EB8860039715
34F268B4-7E2D-40E1-8966-8BB6EA3DAD27
05EEBF61-148B-43CF-80DA-1C99AB0B8699

[LT_AppraiserTarget_Win10_ServerCategoryIds]
F3C2263D-B256-4C49-A246-973C0E366449
323CCEAF-B60B-4A0D-8A8A-3069EFDE76BF

[LT_VersionAgnosticDecisionTables]
DT_ALL_LGP_HasLanguagePack
DT_ANY_SYS_BlockingSystemUnversioned
DT_ANY_MEM_MemoryRequirementViolatedForArchitecture
DT_ANY_PRF_ProcessorRequirementIssues
DT_ALL_WLN_HasWlanBlock
DT_ALL_WAS_WindowsNotActivated
DT_ANY_ALL_IncludeInTelemetryUnversioned

[DT_ANY_ALL_IncludeInTelemetryUnversioned]
I:AssetType=LT_AssetTypesToAlwaysIncludeInTelemetry
D:IsAv=TRUE
I:Size>=0x80000000

[DT_ANY_ALL_IncludeInTelemetryVersioned]
D:SdbAppGuid=*
T:DT_ANY_ALL_IncludeInTelemetryUnversioned=TRUE

[DT_ORD_GAT_HasGatedSdbEntry]
D:SdbAppraiserData=GatedBlock
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_GAT_HasGatedWarnSdbEntry]
D:SdbAppraiserData=GatedWarn
D:SdbUpgradeMode=M:UpgradeMode

[RT_ALL_True]
M:NameDoesntExist!=ValueDoesntExist

[RT_ANY_AuxOutputters]
T:RT_ANY_AuxApplicable=TRUE

[RT_ANY_AuxApplicable]
T:RT_ANY_AppraiseForTargetRS1=TRUE
T:RT_ANY_AppraiseForTargetTH2=TRUE
T:RT_ANY_AppraiseForTargetTH1=TRUE

[RT_ANY_EverythingOutputter]
M:VerboseMode=TRUE

[RT_ANY_TargetedComponentsRS1]
T:RT_ANY_AppraiseForTargetRS1=TRUE

[RT_ANY_TargetedComponentsTH2]
T:RT_ANY_AppraiseForTargetTH2=TRUE

[RT_ANY_TargetedComponentsTH1]
T:RT_ANY_AppraiseForTargetTH1=TRUE

[RT_ANY_RegistryMarkerOutputterTelemetryAllowed]
M:MachineOptedInToCoreTelemetry=TRUE

[RT_ANY_GeneralTelInventoryTelemetryAllowed]
M:MachineOptedInToGeneralTelemetry=TRUE

[RT_ANY_GeneralTelInventoryPickUpMarkers]
T:RT_ANY_AuxApplicable=TRUE

[RT_ANY_GeneralTelInventoryOnesettingsNotAllowed]
M:MachineOptedInToCoreTelemetry!=TRUE

[RT_ANY_InvalidateCache]
T:RT_ALL_FirstRunAfterFullUpgrade=TRUE
T:RT_ALL_ShouldSendFullSyncUtc=TRUE

[RT_ALL_FirstRunAfterFullUpgrade]
M:IsCleanMachine!=TRUE
M:ManifestedUtcOnetimeSend=TRUE

[RT_ALL_RunAllowed]
M:SufficientBattery=TRUE
T:RT_ALL_ExceededMaxFailureCount!=TRUE
T:RT_ANY_DeltaUnavailableAndAttemptingDelta!=TRUE

[RT_ANY_DeltaUnavailableAndAttemptingDelta]
T:RT_ALL_InventoryUnavailableForDeltaAndAttemptingDelta=TRUE

[RT_ALL_InventoryUnavailableForDeltaAndAttemptingDelta]
T:RT_ALL_InventoryUnavailableForDelta=TRUE
T:RT_ANY_ShouldSendFullDevAppInventorySyncUtc!=TRUE

[RT_ALL_InventoryUnavailableForDelta]
T:RT_ANY_InventoryFullSyncAlreadySent!=TRUE
T:RT_ALL_InventoryFirstFullSyncWaitsOnAppraiserToTrigger=TRUE

[RT_ALL_RecordTelemetryFullSyncUpload]
T:RT_ALL_ShouldSendFullSyncUtc=TRUE

[RT_ALL_RecordAppraiserOffline]
T:RT_ALL_ShouldSendFullSyncUtc=TRUE

[RT_ANY_ShouldSendFullDevAppInventorySyncUtc]
T:RT_ANY_ShouldSendFullSyncUtcBecauseRequestingState=TRUE
T:RT_ALL_ShouldSendFullSyncUtcAndInventoryNotUpToDate=TRUE

[RT_ALL_ShouldSendFullSyncUtcAndInventoryNotUpToDate]
T:RT_ALL_ShouldSendFullSyncUtc=TRUE
T:RT_ANY_InventoryFullSyncAlreadySent!=TRUE

[RT_ANY_InventoryFullSyncAlreadySent]
T:RT_ALL_InventoryFullSyncAlreadySentForNewlyDiffableState=TRUE
T:RT_ALL_InventoryFullSyncAlreadySentByAppraiserForRound=TRUE

[RT_ALL_InventoryFullSyncAlreadySentForNewlyDiffableState]
T:RT_ALL_InventoryFirstFullSyncWaitsOnAppraiserToTrigger!=TRUE
T:RT_ANY_ShouldSendFullSyncUtcBecauseFirstDiffableRunEverState=TRUE

[RT_ALL_InventoryFirstFullSyncWaitsOnAppraiserToTrigger]
T:RT_ALL_True!=TRUE

[RT_ALL_ShouldSendFullSyncUtc]
T:RT_ANY_ShouldSendFullSyncUtcHelper=TRUE

[RT_ANY_ShouldSendFullSyncUtcHelper]
T:RT_ANY_ShouldSendFullSyncUtcBecauseRequestingState=TRUE
T:RT_ANY_ShouldSendFullSyncUtcBecauseNoAppraiserBaselineState=TRUE
T:RT_ANY_ShouldSendFullSyncUtcBecauseTiming=TRUE

[RT_ANY_ShouldSendFullSyncUtcBecauseRequestingState]
M:TestHookUtcAlwaysSend=TRUE
M:FullSyncRequested=TRUE
M:EnterpriseForceSync=TRUE

[RT_ANY_ShouldSendFullSyncUtcBecauseNoAppraiserBaselineState]
T:RT_ANY_ShouldSendFullSyncUtcBecauseFirstUplevelRunEverState=TRUE
T:RT_ANY_ShouldSendFullSyncUtcBecauseFirstDiffableRunEverState=TRUE

[RT_ANY_ShouldSendFullSyncUtcBecauseFirstUplevelRunEverState]
M:ManifestedUtcOnetimeSend=TRUE

[RT_ANY_ShouldSendFullSyncUtcBecauseFirstDiffableRunEverState]
M:PreviousFullSyncRoundNumber=0

[RT_ANY_ShouldSendFullSyncUtcBecauseTiming]
T:RT_ALL_FullSyncUtcDeadlinePassed=TRUE
T:RT_ALL_FullSyncBecauseIsPreRound=TRUE

[RT_ALL_FullSyncUtcDeadlinePassed]
T:RT_ALL_PastFullSyncUtcUploadTime=TRUE
T:RT_ALL_DataRoundNotNew!=TRUE

[RT_ALL_PastFullSyncUtcUploadTime]
M:NextUploadTime=*
M:NowTime>=M:NextUploadTime

[RT_ALL_FullSyncBecauseIsPreRound]
T:RT_ALL_BeforeCurrentRoundStarted=TRUE
T:RT_ALL_DataRoundNotNew!=TRUE

[RT_ALL_BeforeCurrentRoundStarted]
M:AppraiserTargetDate=*
M:NowTime<=M:AppraiserTargetDate

[RT_ALL_ShouldSendOfflineUtc]
T:RT_ANY_ShouldSendOfflineUtcHelper=TRUE

[RT_ANY_ShouldSendOfflineUtcHelper]
T:RT_ALL_FullSyncPastMaxOfflineCount=TRUE
T:RT_ALL_DiffAgainstOfflineBaseline=TRUE

[RT_ALL_FullSyncPastMaxOfflineCount]
T:RT_ALL_ShouldSendFullSyncUtc=TRUE
T:RT_ALL_ExceededMaxOfflineCount=TRUE

[RT_ALL_DiffAgainstOfflineBaseline]
M:BaselineIsOffline=TRUE
T:RT_ALL_ShouldSendFullSyncUtc!=TRUE

[RT_ALL_UsePerfBackoff]
T:RT_ALL_CloseToMaxFailureCount!=True
M:AllowPerfBackoff=TRUE
T:RT_ALL_BuildIsTH1OrGreater=TRUE
M:EnterpriseForceSync!=TRUE

[RT_ALL_CloseToMaxFailureCount]
M:CurrentFailureCount=2
T:RT_ANY_ClearFailureIssueCounterBeforeRun!=TRUE

[RT_ANY_RunGeneralTel]
T:RT_ALL_ShouldSendFullSyncUtc=TRUE
T:RT_ALL_ShouldUpdateGenTelMarkers=TRUE

[RT_ALL_ShouldUpdateGenTelMarkers]
T:RT_ANY_AuxApplicable=TRUE
T:RT_ANY_GenTelMarkersAreInvalid=TRUE

[RT_ANY_GenTelMarkersAreInvalid]
M:GenTelMarkersAge>=45
M:GenTelMarkersAreTampered=TRUE

[RT_ALL_DataRoundNotNew]
M:CurrentTelemetryRoundNumber=*
M:PreviousFullSyncRoundNumber>=M:CurrentTelemetryRoundNumber

[RT_ALL_ExceededMaxOfflineCount]
M:CurrentOfflineCount>=3
T:RT_ANY_ClearOfflineIssueCounterBeforeRun!=TRUE

[RT_ALL_ExceededMaxFailureCount]
M:EnterpriseForceSync!=TRUE
M:CurrentFailureCount>=3
T:RT_ANY_ClearFailureIssueCounterBeforeRun!=TRUE

[RT_ALL_FirstFullSyncOfNewRound]
T:RT_ALL_RoundBeingAttemptedIsNotNew!=TRUE
T:RT_ALL_ShouldSendFullSyncUtc=TRUE

[RT_ALL_RoundBeingAttemptedIsNotNew]
M:CurrentTelemetryRoundNumber=*
M:PreviousAttemptedFullSyncRoundNumber>=M:CurrentTelemetryRoundNumber

[RT_ALL_FirstRunOfNewDataFile]
T:RT_ALL_DataFileBeingAttemptedIsNotNew!=TRUE

[RT_ALL_DataFileBeingAttemptedIsNotNew]
M:CurrentDataVersion=*
M:PreviousAttemptedRunDataVersion>=M:CurrentDataVersion

[RT_ANY_ClearFailureIssueCounterBeforeRun]
T:RT_ALL_FirstFullSyncOfNewRound=TRUE
T:RT_ALL_FirstRunOfNewDataFile=TRUE

[RT_ANY_ClearOfflineIssueCounterBeforeRun]
T:RT_ALL_FirstFullSyncOfNewRound=TRUE

[RT_ALL_InventoryFullSyncAlreadySentByAppraiserForRound]
T:RT_ALL_RoundBeingAttemptedIsNotNew=TRUE

[DT_ANY_MEM_MemoryRequirementViolatedForArchitecture]
T:DT_ALL_REF_MemoryRequirementViolated64=TRUE
T:DT_ALL_REF_MemoryRequirementViolatedNon64=TRUE

[DT_ALL_REF_MemoryRequirementViolated64]
M:Architecture=9
T:DT_ANY_REF_MemoryRequirmentViolatedEither64=TRUE

[DT_ANY_REF_MemoryRequirmentViolatedEither64]
T:DT_ALL_REF_MemoryRequirementViolatedClient64=TRUE
T:DT_ALL_REF_MemoryRequirementViolatedServer64=TRUE

[DT_ALL_REF_MemoryRequirementViolatedClient64]
M:ProductType!=Server
I:ramKB<=1887436

[DT_ALL_REF_MemoryRequirementViolatedServer64]
M:ProductType=Server
I:ramKB<=471859

[DT_ALL_REF_MemoryRequirementViolatedNon64]
M:Architecture!=9
I:ramKB<=943718

[DT_ANY_PRF_ProcessorRequirementIssues]
I:SSE2ProcessorSupport=FALSE
I:NXProcessorSupport=FALSE
I:CompareExchange128Support=FALSE
I:LahfSahfSupport=FALSE
I:PrefetchWSupport=FALSE

[DT_ORD_BIO_HasBiosBlockForMode]
D:SdbUpgradeMode=M:UpgradeMode
D:SdbBlockType=BlockUpgrade

[DT_ANY_SYS_BlockingSystemUnversioned]
T:DT_ANY_MEM_MemoryRequirementViolatedForArchitecture=TRUE
T:DT_ANY_PRF_ProcessorRequirementIssues=TRUE
T:DT_ALL_WLN_HasWlanBlock=TRUE

[DT_ANY_SYS_BlockingSystem]
T:DT_ANY_SYS_BlockingSystemUnversioned=TRUE
T:DT_ORD_BIO_HasBiosBlockForMode=TRUE

[DT_ALL_WLN_HasWlanBlock]
I:WlanModulePresent=TRUE
I:WlanExists=TRUE
I:WlanEmulatedDriver=TRUE

[DT_ALL_WIM_IsWimBoot]
I:RegistryWimBootValue!=0

[DT_ALL_WAS_WindowsNotActivated]
I:WindowsIsLicensed=FALSE

[DT_ALL_LGP_HasLanguagePack]
I:LanguagePackCount>=2

[DT_ALL_GEU_IsGuestAccountEnabled]
I:IsGuestAccountEnabled=TRUE

[DT_ANY_FIL_BlockUpgradeUxTables]
T:DT_ORD_FIL_ReinstallAfterUpgradeWarnUxStatus=TRUE
T:DT_ORD_FIL_BlockUpgradeUxStatus=TRUE
T:DT_ORD_FIL_BlockUpgradeCanReinstallUxStatus=TRUE
T:DT_ORD_FIL_BlockUpgradeUntilUpdateUxStatus=TRUE

[DT_ORD_FIL_BlockUpgradeStatus]
D:SdbBlockType=BlockUpgrade
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_BlockUpgradeCanReinstallStatus]
D:SdbBlockType=BlockUpgradeCanReinstall
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_BlockUpgradeCanReinstallUxStatus]
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_UPGRADE_CAN_REINSTALL_BLOCK
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_BlockUpgradeUntilUpdateStatus]
D:SdbBlockType=BlockUpgradeUntilUpdate
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_BlockUpgradeUntilUpdateUxStatus]
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_UPGRADE_UNTIL_UPDATE_BLOCK
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_HasMigTypeForMode]
D:SdbUpgradeMode=M:UpgradeMode
D:MigXmlType=*

[DT_ORD_REF_HasNotifyMig]
D:MigXmlType=LT_NotifyMigTypes
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_MigXmlRemovedStatus]
D:MigXmlType=MIG_XML_TYPE_REMOVED
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_ReinstallAfterUpgradeStatus]
D:SdbBlockType=ReinstallAfterUpgrade
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_ReinstallAfterUpgradeUxStatus]
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_REINSTALL_BLOCK
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_ReinstallAfterUpgradeWarnStatus]
D:SdbBlockType=ReinstallAfterUpgradeWarn
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_FIL_ReinstallAfterUpgradeWarnUxStatus]
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_REINSTALL_WARN_BLOCK
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_REF_ReinstallAfterUpgradeMigStatus]
D:MigXmlType=MIG_XML_TYPE_NEEDS_REINSTALL
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_REF_ReinstallAfterUpgradeMigUxStatus]
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_MIG_REINSTALL
D:SdbUpgradeMode=M:UpgradeMode

[DT_ALL_FIL_NeedsReinstallPostUpgradeData]
T:DT_ANY_REF_ReinstallPostUpgradeDataTypes=TRUE
T:DT_ORD_FIL_BlockUpgradeStatus=FALSE
T:DT_ORD_FIL_BlockUpgradeCanReinstallStatus=FALSE
T:DT_ORD_FIL_BlockUpgradeUntilUpdateStatus=FALSE

[DT_ANY_REF_ReinstallPostUpgradeDataTypes]
T:DT_ORD_FIL_ReinstallAfterUpgradeStatus=TRUE
T:DT_ORD_REF_ReinstallAfterUpgradeMigStatus=TRUE

[DT_ALL_FIL_NeedsReinstallPostUpgradeUxData]
T:DT_ANY_REF_ReinstallPostUpgradeUxDataTypes=TRUE
T:DT_ORD_FIL_BlockUpgradeUxStatus=FALSE
T:DT_ORD_FIL_BlockUpgradeCanReinstallUxStatus=FALSE
T:DT_ORD_FIL_BlockUpgradeUntilUpdateUxStatus=FALSE

[DT_ANY_REF_ReinstallPostUpgradeUxDataTypes]
T:DT_ORD_FIL_ReinstallAfterUpgradeUxStatus=TRUE
T:DT_ORD_REF_ReinstallAfterUpgradeMigUxStatus=TRUE

[DT_ALL_FIL_NeedsInstallPostUpgradeData]
T:DT_ANY_REF_NeedsInstallPostUpgradeDataTypes=TRUE
T:DT_ORD_FIL_BlockUpgradeStatus=FALSE

[DT_ANY_REF_NeedsInstallPostUpgradeDataTypes]
T:DT_ORD_FIL_BlockUpgradeCanReinstallStatus=TRUE
T:DT_ORD_FIL_BlockUpgradeUntilUpdateStatus=TRUE

[DT_ALL_FIL_NeedsNotifyPostUpgradeData]
T:DT_ORD_REF_HasNotifyMig=TRUE
T:DT_ORD_FIL_ReinstallAfterUpgradeStatus=FALSE
T:DT_ORD_FIL_BlockUpgradeCanReinstallStatus=FALSE
T:DT_ORD_FIL_BlockUpgradeStatus=FALSE
T:DT_ORD_FIL_BlockUpgradeUntilUpdateStatus=FALSE

[DT_ALL_MCE_MediaCenterInUse]
T:DT_ANY_MCE_MediaCenterPaidOrActivelyUsed=TRUE
D:ResolveAttempted!=TRUE

[DT_ANY_MCE_MediaCenterPaidOrActivelyUsed]
I:IsPaid=TRUE
T:DT_ALL_MCE_MediaCenterActivelyUsed=TRUE

[DT_ALL_MCE_MediaCenterActivelyUsed]
I:IsSupported=TRUE
I:EverLaunched=TRUE
T:DT_ANY_MCE_MediaCenterIndicators=TRUE

[DT_ANY_MCE_MediaCenterIndicators]
I:IsDefaultLauncher=TRUE
I:HasWatchedFolders=TRUE
I:HasExtendedUserAccounts=TRUE
I:HasConfiguredTv=TRUE

[DT_ALL_DRM_WmdrmInUse]
T:DT_ANY_DRM_WmdrmIndicators=TRUE
D:ResolveAttempted!=TRUE

[DT_ANY_DRM_WmdrmIndicators]
I:WmdrmCdRipped=TRUE
I:WmdrmPurchased=TRUE

[DT_ANY_FMC_BlockingApplication]
T:DT_ALL_FIL_NeedsUninstallAction=TRUE
T:DT_ANY_FMC_NeedsDismissAction=TRUE
T:DT_ORD_FIL_DisplayAsGenericHardware=TRUE

[DT_ALL_FIL_NeedsUninstallAction]
T:DT_ANY_FIL_FixedByUninstall=TRUE
T:DT_ORD_FIL_DisplayAsGenericHardware!=TRUE

[DT_ANY_FIL_FixedByUninstall]
T:DT_ORD_FIL_BlockUpgradeStatus=TRUE
T:DT_ORD_FIL_BlockUpgradeCanReinstallStatus=TRUE
T:DT_ORD_FIL_BlockUpgradeUntilUpdateStatus=TRUE

[DT_ANY_FMC_NeedsDismissAction]
T:DT_ALL_FIL_UnresolvedReinstallWarn=TRUE
T:DT_ALL_MCE_MediaCenterInUse=TRUE
T:DT_ALL_DRM_WmdrmInUse=TRUE

[DT_ALL_FIL_UnresolvedReinstallWarn]
T:DT_ORD_FIL_ReinstallAfterUpgradeWarnStatus=TRUE
D:ResolveAttempted!=TRUE

[DT_ORD_FIL_DisplayAsGenericHardware]
D:SdbBlockType=BlockUpgrade
D:SdbGenericMessageSummary=*
D:SdbGenericMessageTitle=*
D:SdbUpgradeMode=M:UpgradeMode

[DT_ANY_FIL_BlockAlreadyInbox]
T:DT_ALL_REF_BothInboxAndUplevelSoftBlock=TRUE
T:DT_ALL_REF_BothInboxAndUplevelHardBlock=TRUE
T:DT_ALL_REF_InboxHardAndUplevelSoftBlock=TRUE

[DT_ALL_REF_BothInboxAndUplevelSoftBlock]
T:DT_ALL_FIL_HardBlock=FALSE
T:DT_ALL_FIL_SoftBlock=TRUE
T:DT_ALL_REF_InboxHardBlock=FALSE
T:DT_ALL_REF_InboxSoftBlock=TRUE

[DT_ALL_REF_BothInboxAndUplevelHardBlock]
T:DT_ALL_FIL_HardBlock=TRUE
T:DT_ALL_REF_InboxHardBlock=TRUE

[DT_ALL_REF_InboxHardAndUplevelSoftBlock]
T:DT_ALL_FIL_HardBlock=FALSE
T:DT_ALL_FIL_SoftBlock=TRUE
T:DT_ALL_REF_InboxHardBlock=TRUE

[DT_ALL_FIL_HardBlock]
D:SdbBlockType=ApphelpHardBlock

[DT_ALL_FIL_HardBlockUx]
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_HARD_BLOCK

[DT_ALL_FIL_SoftBlock]
D:SdbBlockType=ApphelpSoftBlock

[DT_ALL_FIL_SoftBlockUx]
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_SOFT_BLOCK

[DT_ALL_REF_InboxHardBlock]
D:SdbBlockTypeInbox=ApphelpHardBlock

[DT_ALL_FIL_InboxHardBlockUx]
D:SdbBlockOverrideTypeInbox=SDB_UX_BLOCKTYPE_OVERRIDE_HARD_BLOCK

[DT_ALL_REF_InboxSoftBlock]
D:SdbBlockTypeInbox=ApphelpSoftBlock

[DT_ALL_FIL_InboxSoftBlockUx]
D:SdbBlockOverrideTypeInbox=SDB_UX_BLOCKTYPE_OVERRIDE_SOFT_BLOCK

[DT_ORD_FIL_BlockUpgradeUxStatus]
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_UPGRADE_BLOCK
D:SdbUpgradeMode=M:UpgradeMode

[DT_ALL_FIL_HasBlockOverride]
T:DT_ANY_REF_HasBlockOverridenToNoBlock=TRUE
T:DT_ANY_REF_HasSignificantBlockOverrideType=FALSE

[DT_ANY_REF_HasBlockOverridenToNoBlock]
T:DT_ORD_REF_BlockHasBlockOverridenToNoBlock=TRUE
T:DT_ORD_REF_RuntimeBlockHasBlockOverridenToNoBlock=TRUE

[DT_ORD_REF_BlockHasBlockOverridenToNoBlock]
D:SdbBlockType=*
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_NO_BLOCK
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_REF_RuntimeBlockHasBlockOverridenToNoBlock]
D:SdbBlockType=LT_RuntimeBlockTypes
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_NO_BLOCK

[DT_ANY_REF_HasSignificantBlockOverrideType]
T:DT_ORD_REF_BlockHasSignificantBlockOverrideType=TRUE
T:DT_ORD_REF_RuntimeBlockHasSignificantBlockOverrideType=TRUE

[DT_ORD_REF_BlockHasSignificantBlockOverrideType]
D:SdbBlockOverrideType=*
D:SdbBlockOverrideType!=SDB_UX_BLOCKTYPE_OVERRIDE_NO_BLOCK
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_REF_RuntimeBlockHasSignificantBlockOverrideType]
D:SdbBlockType=LT_RuntimeBlockTypes
D:SdbBlockOverrideType=*
D:SdbBlockOverrideType!=SDB_UX_BLOCKTYPE_OVERRIDE_NO_BLOCK

[DT_ALL_CIT_CitDataDurationOverride]
D:CalculatedCitCollectionTime>=66528000000000

[DT_ALL_DEV_UsingHdAudio]
I:fileName=hdaudio.sys
D:HasHdAudioPrefix=TRUE

[DT_ALL_DEV_BlockUpgradeIfDriverIsBlockedAndHasBootService]
D:IsBootCriticalIfDriverIsBootService=TRUE
T:DT_ALL_DEV_DriverAvailableInbox!=TRUE

[DT_ALL_DEV_BlockUpgradeIfDriverIsBlockedAndNoOtherNetwork]
D:ActiveNetworkConnection=TRUE
T:DT_ALL_DEV_DriverAvailableInbox!=TRUE

[DT_ANY_DEV_SdbDeviceBlockUpgrade]
T:DT_ORD_DEV_SdbDeviceBlockUpgradeNonDismissible=TRUE
T:DT_ALL_DEV_DeviceNeedsSdbDismissAction=TRUE

[DT_ORD_DEV_SdbDeviceBlockUpgradeNonDismissible]
D:SdbUpgradeMode=M:UpgradeMode
D:SdbBlockType=BlockUpgrade

[DT_ANY_DEV_DeviceAlreadyNotInGoodState]
I:ProblemCode=LT_NonRegressionDeviceCodes
T:DT_ANY_DEV_UsesBasicDisplayDriver=TRUE

[DT_ANY_DEV_DriverAvailableUplevel]
T:DT_ALL_DEV_DriverAvailableInbox=TRUE
T:DT_ANY_DEV_DriverAvailableOnline=TRUE

[DT_ALL_DEV_DriverAvailableInbox]
D:UplevelInboxDriver=TRUE

[DT_ALL_DEV_ResolveAttempted]
D:ResolveAttempted=TRUE

[DT_ANY_DEV_DriverAvailabilityOnlineCheckSuccessful]
D:CosDeviceRating=*
D:CosDeviceSolution=*
D:WuDriverCoverage=*
D:UplevelWuOverrideDriver=*

[DT_ANY_DEV_DriverAvailableOnline]
T:DT_ORD_DEV_DriverAvailableOnlineRatings=TRUE
T:DT_ANY_DEV_DriverAvailableOnlineWu=TRUE

[DT_ORD_DEV_DriverAvailableOnlineRatings]
D:CosDeviceRating=80
D:CosDeviceSolution=20

[DT_ANY_DEV_DriverAvailableOnlineWu]
D:WuDriverCoverage=TRUE
D:UplevelWuOverrideDriver=TRUE

[DT_ANY_DEV_UsesBasicDisplayDriver]
I:fileName=basicdisplay.sys
I:fileName=vgapnp.sys

[DT_ORD_DDV_SdbDriverBlockForMode]
D:SdbBlockType=BlockDriver
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_DDV_DriverBlockOverriddenToNoBlock]
D:SdbBlockType=BlockDriver
D:SdbBlockOverrideType=SDB_UX_BLOCKTYPE_OVERRIDE_NO_BLOCK
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_DDV_DriverBlockNotOverridden]
D:SdbBlockType=BlockDriver
D:SdbBlockOverrideType!=SDB_UX_BLOCKTYPE_OVERRIDE_NO_BLOCK
D:SdbUpgradeMode=M:UpgradeMode

[DT_ALL_DEV_DeviceNeedsSdbDismissAction]
T:DT_ORD_DEV_SdbDeviceBlockUpgradeNonDismissible!=TRUE
T:DT_ORD_DEV_ReinstallAfterUpgradeWarnStatus=TRUE
D:ResolveAttempted!=TRUE

[DT_ORD_DEV_ReinstallAfterUpgradeWarnStatus]
D:SdbBlockType=ReinstallAfterUpgradeWarn
D:SdbUpgradeMode=M:UpgradeMode

[DT_ORD_DEV_DisplayAsGenericHardware]
D:SdbBlockType=BlockUpgrade
D:SdbGenericMessageSummary=*
D:SdbGenericMessageTitle=*
D:SdbUpgradeMode=M:UpgradeMode

[DT_ALL_DEV_WuTrueAndCosOnline]
D:WuDriverCoverage=TRUE
T:DT_ORD_DEV_DriverAvailableOnlineRatings=TRUE

[DT_ALL_DEV_WuFalseAndCosOnline]
D:WuDriverCoverage!=TRUE
T:DT_ORD_DEV_DriverAvailableOnlineRatings=TRUE

[DT_ALL_DEV_WuTrueAndCosInbox]
D:WuDriverCoverage=TRUE
T:DT_ORD_DEV_CosInbox=TRUE

[DT_ALL_DEV_WuFalseAndCosInbox]
D:WuDriverCoverage!=TRUE
T:DT_ORD_DEV_CosInbox=TRUE

[DT_ALL_DEV_WuTrueAndNoCos]
D:WuDriverCoverage=TRUE
D:CosPopulatedFromId!=*

[DT_ALL_DEV_WuFalseAndNoCos]
D:WuDriverCoverage!=TRUE
D:CosPopulatedFromId!=*

[DT_ORD_DEV_CosInbox]
D:CosDeviceRating=80
D:CosDeviceSolution=12

[MT_MarkerIndicatorVersions]
NewAppraiserMarkerVersion=1

[IT_ALL_CompatIndicator_NA_Reduced_Version]
5=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_NotReduced_BootSect]
I:Marker_BootSect=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_NotReduced_Fam]
I:Marker_Fam=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_NotReduced_Fing]
I:Marker_Fing=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_NotReduced_Gamer]
I:Marker_Gamer=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_NotReduced_Genuine]
I:Marker_Genuine=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_NotReduced_Office]
I:Marker_Office=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_Bat]
I:Marker_Bat=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_Bios]
I:Marker_Bios=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_ComfUp]
I:Marker_ComfUp=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_Comm]
I:Marker_Comm=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_Free]
I:Marker_Free=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_ISVM]
I:Marker_ISVM=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_Mic]
I:Marker_Mic=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_OEM]
I:Marker_OEM=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_Paper]
I:Marker_Paper=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_Perf]
I:Marker_Perf=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_Proc]
I:Marker_Proc=*
Unknown=FT_ALL_TRUE

[IT_GTL_CompatIndicator_NA_Reduced_Touch]
I:Marker_Touch=*
Unknown=FT_ALL_TRUE

[FT_ALL_CompatIndicatorHelper_UpgExAndUpgExUNAOrangeSystemDrive]
I:AssetType=GeneralTel
I:Marker_SystemDriveTooFull=1

[IT_OMK_CompatIndicator_OldMarkers_NotReduced_Guest]
1=FT_ALL_CompatIndicatorHelper_GuestOld
0=FT_ALL_TRUE

[FT_ALL_CompatIndicatorHelper_GuestOld]
I:Marker_Guest>=1

[IT_OMK_CompatIndicator_OldMarkers_NotReduced_DX12]
1=FT_ALL_CompatIndicatorHelper_DirectX12Old
0=FT_ALL_TRUE

[FT_ALL_CompatIndicatorHelper_DirectX12Old]
I:Marker_Dx12SupportedDevice>=1

[IT_OMK_CompatIndicator_OldMarkers_Reduced_MCE]
1=FT_ALL_CompatIndicatorHelper_MceOld1
0=FT_ALL_TRUE

[FT_ALL_CompatIndicatorHelper_MceOld1]
I:Marker_MediaCenterInUse>=1

[IT_ALL_CompatIndicator_OldMarkers_Reduced_UpgEx]
Red=FT_ALL_CompatIndicatorHelper_UpgExOldRed
Orange=FT_ANY_CompatIndicatorHelper_UpgExOldOrange
Yellow=FT_ALL_CompatIndicatorHelper_UpgExOldYellow
Green=FT_ALL_TRUE

[FT_ALL_CompatIndicatorHelper_UpgExOldRed]
I:AssetType=OldAppraiserMarkers
I:Marker_UexRatingRed>=1

[FT_ANY_CompatIndicatorHelper_UpgExOldOrange]
T:FT_ALL_CompatIndicatorHelper_UpgExAndUpgExUNAOrangeSystemDrive=TRUE
T:FT_ALL_CompatIndicatorHelper_UpgExOldOrangeMarker=TRUE

[FT_ALL_CompatIndicatorHelper_UpgExOldOrangeMarker]
I:AssetType=OldAppraiserMarkers
I:Marker_UexRatingOrange>=1

[FT_ALL_CompatIndicatorHelper_UpgExOldYellow]
I:AssetType=OldAppraiserMarkers
I:Marker_UexRatingYellow>=1

[IT_ALL_CompatIndicator_OldMarkers_Reduced_UpgExU]
Red=FT_ALL_CompatIndicatorHelper_UpgExOldRed
Orange=FT_ANY_CompatIndicatorHelper_UpgExUOldOrange
Yellow=FT_ALL_CompatIndicatorHelper_UpgExUOldYellow
Green=FT_ALL_TRUE

[FT_ANY_CompatIndicatorHelper_UpgExUOldOrange]
T:FT_ALL_CompatIndicatorHelper_UpgExAndUpgExUNAOrangeSystemDrive=TRUE
T:FT_ALL_CompatIndicatorHelper_UpgExUOldOrangeMarker=TRUE

[FT_ALL_CompatIndicatorHelper_UpgExUOldOrangeMarker]
I:AssetType=OldAppraiserMarkers
I:Marker_UexUsageRatingOrange>=1

[FT_ALL_CompatIndicatorHelper_UpgExUOldYellow]
I:AssetType=OldAppraiserMarkers
I:Marker_UexUsageRatingYellow>=1

[IT_ALL_CompatIndicator_FreshMarkers_NotReduced_Guest]
1=FT_ANY_CompatMarker_Guest
0=FT_ALL_TRUE

[IT_ALL_CompatIndicator_FreshMarkers_NotReduced_DX12]
1=FT_ALL_CompatMarker_Dx12SupportedDevice
0=FT_ALL_TRUE

[IT_ALL_CompatIndicator_FreshMarkers_Reduced_MCE]
1=FT_ANY_CompatMarker_MediaCenterInUse
0=FT_ALL_TRUE

[IT_ALL_CompatIndicator_FreshMarkers_Reduced_UpgEx]
Red=FT_ANY_CompatMarker_UexRatingRed
Orange=FT_ANY_CompatIndicatorHelper_UpgExFreshOrange
Yellow=FT_ANY_CompatMarker_UexRatingYellow
Green=FT_ALL_TRUE

[FT_ANY_CompatIndicatorHelper_UpgExFreshOrange]
T:FT_ALL_CompatIndicatorHelper_UpgExAndUpgExUNAOrangeSystemDrive=TRUE
T:FT_ANY_CompatMarker_UexRatingOrange=TRUE

[IT_ALL_CompatIndicator_FreshMarkers_Reduced_UpgExU]
Red=FT_ANY_CompatMarker_UexRatingRed
Orange=FT_ANY_CompatIndicatorHelper_UpgExUFreshOrange
Yellow=FT_ANY_CompatMarker_UexUsageRatingYellow
Green=FT_ALL_TRUE

[FT_ANY_CompatIndicatorHelper_UpgExUFreshOrange]
T:FT_ALL_CompatIndicatorHelper_UpgExAndUpgExUNAOrangeSystemDrive=TRUE
T:FT_ANY_CompatMarker_UexUsageRatingOrange=TRUE

[LT_Dx12Hwids]
pci\ven_1002&dev_1304
pci\ven_1002&dev_1305
pci\ven_1002&dev_1306
pci\ven_1002&dev_1307
pci\ven_1002&dev_1309
pci\ven_1002&dev_130a
pci\ven_1002&dev_130b
pci\ven_1002&dev_130c
pci\ven_1002&dev_130d
pci\ven_1002&dev_130e
pci\ven_1002&dev_130f
pci\ven_1002&dev_1310
pci\ven_1002&dev_1311
pci\ven_1002&dev_1312
pci\ven_1002&dev_1313
pci\ven_1002&dev_1315
pci\ven_1002&dev_1316
pci\ven_1002&dev_1317
pci\ven_1002&dev_1318
pci\ven_1002&dev_131b
pci\ven_1002&dev_131c
pci\ven_1002&dev_131d
pci\ven_1002&dev_6600
pci\ven_1002&dev_6601
pci\ven_1002&dev_6602
pci\ven_1002&dev_6603
pci\ven_1002&dev_6604
pci\ven_1002&dev_6605
pci\ven_1002&dev_6606
pci\ven_1002&dev_6607
pci\ven_1002&dev_6608
pci\ven_1002&dev_6610
pci\ven_1002&dev_6611
pci\ven_1002&dev_6613
pci\ven_1002&dev_6620
pci\ven_1002&dev_6621
pci\ven_1002&dev_6623
pci\ven_1002&dev_6631
pci\ven_1002&dev_6640
pci\ven_1002&dev_6641
pci\ven_1002&dev_6642
pci\ven_1002&dev_6643
pci\ven_1002&dev_6644
pci\ven_1002&dev_6645
pci\ven_1002&dev_6646
pci\ven_1002&dev_6647
pci\ven_1002&dev_6648
pci\ven_1002&dev_6649
pci\ven_1002&dev_664a
pci\ven_1002&dev_664b
pci\ven_1002&dev_664c
pci\ven_1002&dev_664d
pci\ven_1002&dev_664e
pci\ven_1002&dev_664f
pci\ven_1002&dev_6650
pci\ven_1002&dev_6651
pci\ven_1002&dev_6652
pci\ven_1002&dev_6653
pci\ven_1002&dev_6654
pci\ven_1002&dev_6655
pci\ven_1002&dev_6656
pci\ven_1002&dev_6657
pci\ven_1002&dev_6658
pci\ven_1002&dev_6659
pci\ven_1002&dev_665a
pci\ven_1002&dev_665b
pci\ven_1002&dev_665c
pci\ven_1002&dev_665d
pci\ven_1002&dev_665e
pci\ven_1002&dev_665f
pci\ven_1002&dev_6660
pci\ven_1002&dev_6661
pci\ven_1002&dev_6662
pci\ven_1002&dev_6663
pci\ven_1002&dev_6664
pci\ven_1002&dev_6665
pci\ven_1002&dev_6666
pci\ven_1002&dev_6667
pci\ven_1002&dev_6668
pci\ven_1002&dev_6669
pci\ven_1002&dev_666a
pci\ven_1002&dev_666b
pci\ven_1002&dev_666c
pci\ven_1002&dev_666d
pci\ven_1002&dev_666e
pci\ven_1002&dev_666f
pci\ven_1002&dev_6670
pci\ven_1002&dev_6671
pci\ven_1002&dev_6672
pci\ven_1002&dev_6673
pci\ven_1002&dev_6674
pci\ven_1002&dev_6675
pci\ven_1002&dev_6676
pci\ven_1002&dev_6677
pci\ven_1002&dev_6678
pci\ven_1002&dev_6679
pci\ven_1002&dev_667a
pci\ven_1002&dev_667b
pci\ven_1002&dev_667c
pci\ven_1002&dev_667d
pci\ven_1002&dev_667e
pci\ven_1002&dev_667f
pci\ven_1002&dev_6680
pci\ven_1002&dev_66c0
pci\ven_1002&dev_66c1
pci\ven_1002&dev_66c2
pci\ven_1002&dev_66c3
pci\ven_1002&dev_66c4
pci\ven_1002&dev_66c5
pci\ven_1002&dev_66c6
pci\ven_1002&dev_66c7
pci\ven_1002&dev_66c8
pci\ven_1002&dev_66c9
pci\ven_1002&dev_66ca
pci\ven_1002&dev_66cb
pci\ven_1002&dev_66cc
pci\ven_1002&dev_66cd
pci\ven_1002&dev_66ce
pci\ven_1002&dev_66cf
pci\ven_1002&dev_66d0
pci\ven_1002&dev_66d1
pci\ven_1002&dev_66d2
pci\ven_1002&dev_66d3
pci\ven_1002&dev_66d4
pci\ven_1002&dev_66d5
pci\ven_1002&dev_66d6
pci\ven_1002&dev_66d7
pci\ven_1002&dev_66d8
pci\ven_1002&dev_66d9
pci\ven_1002&dev_66da
pci\ven_1002&dev_66db
pci\ven_1002&dev_66dc
pci\ven_1002&dev_66dd
pci\ven_1002&dev_66de
pci\ven_1002&dev_66df
pci\ven_1002&dev_66e0
pci\ven_1002&dev_66e1
pci\ven_1002&dev_66e2
pci\ven_1002&dev_66e3
pci\ven_1002&dev_66e4
pci\ven_1002&dev_66e5
pci\ven_1002&dev_66e6
pci\ven_1002&dev_66e7
pci\ven_1002&dev_66e8
pci\ven_1002&dev_66e9
pci\ven_1002&dev_66ea
pci\ven_1002&dev_66eb
pci\ven_1002&dev_66ec
pci\ven_1002&dev_66ed
pci\ven_1002&dev_66ee
pci\ven_1002&dev_66ef
pci\ven_1002&dev_66f0
pci\ven_1002&dev_66f1
pci\ven_1002&dev_66f2
pci\ven_1002&dev_66f3
pci\ven_1002&dev_66f4
pci\ven_1002&dev_66f5
pci\ven_1002&dev_66f6
pci\ven_1002&dev_66f7
pci\ven_1002&dev_66f8
pci\ven_1002&dev_66f9
pci\ven_1002&dev_66fa
pci\ven_1002&dev_66fb
pci\ven_1002&dev_66fc
pci\ven_1002&dev_66fd
pci\ven_1002&dev_66fe
pci\ven_1002&dev_66ff
pci\ven_1002&dev_6780
pci\ven_1002&dev_6784
pci\ven_1002&dev_6788
pci\ven_1002&dev_678a
pci\ven_1002&dev_6790
pci\ven_1002&dev_6791
pci\ven_1002&dev_6792
pci\ven_1002&dev_6798
pci\ven_1002&dev_6799
pci\ven_1002&dev_679a
pci\ven_1002&dev_679b
pci\ven_1002&dev_679e
pci\ven_1002&dev_679f
pci\ven_1002&dev_67a0
pci\ven_1002&dev_67a1
pci\ven_1002&dev_67a2
pci\ven_1002&dev_67a3
pci\ven_1002&dev_67a4
pci\ven_1002&dev_67a5
pci\ven_1002&dev_67a6
pci\ven_1002&dev_67a7
pci\ven_1002&dev_67a8
pci\ven_1002&dev_67a9
pci\ven_1002&dev_67aa
pci\ven_1002&dev_67ab
pci\ven_1002&dev_67ac
pci\ven_1002&dev_67ad
pci\ven_1002&dev_67ae
pci\ven_1002&dev_67af
pci\ven_1002&dev_67b0
pci\ven_1002&dev_67b1
pci\ven_1002&dev_67b2
pci\ven_1002&dev_67b3
pci\ven_1002&dev_67b4
pci\ven_1002&dev_67b5
pci\ven_1002&dev_67b6
pci\ven_1002&dev_67b7
pci\ven_1002&dev_67b8
pci\ven_1002&dev_67b9
pci\ven_1002&dev_67ba
pci\ven_1002&dev_67bb
pci\ven_1002&dev_67bc
pci\ven_1002&dev_67bd
pci\ven_1002&dev_67be
pci\ven_1002&dev_67bf
pci\ven_1002&dev_67c0
pci\ven_1002&dev_67c1
pci\ven_1002&dev_67c2
pci\ven_1002&dev_67c3
pci\ven_1002&dev_67c4
pci\ven_1002&dev_67c5
pci\ven_1002&dev_67c6
pci\ven_1002&dev_67c7
pci\ven_1002&dev_67c8
pci\ven_1002&dev_67c9
pci\ven_1002&dev_67ca
pci\ven_1002&dev_67cb
pci\ven_1002&dev_67cc
pci\ven_1002&dev_67cd
pci\ven_1002&dev_67ce
pci\ven_1002&dev_67cf
pci\ven_1002&dev_67d0
pci\ven_1002&dev_67d1
pci\ven_1002&dev_67d2
pci\ven_1002&dev_67d3
pci\ven_1002&dev_67d4
pci\ven_1002&dev_67d5
pci\ven_1002&dev_67d6
pci\ven_1002&dev_67d7
pci\ven_1002&dev_67d8
pci\ven_1002&dev_67d9
pci\ven_1002&dev_67da
pci\ven_1002&dev_67db
pci\ven_1002&dev_67dc
pci\ven_1002&dev_67dd
pci\ven_1002&dev_67de
pci\ven_1002&dev_67df
pci\ven_1002&dev_6800
pci\ven_1002&dev_6801
pci\ven_1002&dev_6802
pci\ven_1002&dev_6806
pci\ven_1002&dev_6808
pci\ven_1002&dev_6809
pci\ven_1002&dev_6810
pci\ven_1002&dev_6811
pci\ven_1002&dev_6816
pci\ven_1002&dev_6817
pci\ven_1002&dev_6818
pci\ven_1002&dev_6819
pci\ven_1002&dev_6820
pci\ven_1002&dev_6821
pci\ven_1002&dev_6822
pci\ven_1002&dev_6823
pci\ven_1002&dev_6824
pci\ven_1002&dev_6825
pci\ven_1002&dev_6826
pci\ven_1002&dev_6827
pci\ven_1002&dev_6828
pci\ven_1002&dev_6829
pci\ven_1002&dev_682a
pci\ven_1002&dev_682b
pci\ven_1002&dev_682c
pci\ven_1002&dev_682d
pci\ven_1002&dev_682f
pci\ven_1002&dev_6830
pci\ven_1002&dev_6831
pci\ven_1002&dev_6835
pci\ven_1002&dev_6837
pci\ven_1002&dev_6838
pci\ven_1002&dev_6839
pci\ven_1002&dev_683b
pci\ven_1002&dev_683d
pci\ven_1002&dev_683f
pci\ven_1002&dev_684c
pci\ven_1002&dev_6900
pci\ven_1002&dev_6901
pci\ven_1002&dev_6902
pci\ven_1002&dev_6903
pci\ven_1002&dev_6904
pci\ven_1002&dev_6905
pci\ven_1002&dev_6906
pci\ven_1002&dev_6907
pci\ven_1002&dev_6908
pci\ven_1002&dev_6909
pci\ven_1002&dev_690a
pci\ven_1002&dev_690b
pci\ven_1002&dev_690c
pci\ven_1002&dev_690d
pci\ven_1002&dev_690e
pci\ven_1002&dev_690f
pci\ven_1002&dev_6910
pci\ven_1002&dev_6911
pci\ven_1002&dev_6912
pci\ven_1002&dev_6913
pci\ven_1002&dev_6914
pci\ven_1002&dev_6915
pci\ven_1002&dev_6916
pci\ven_1002&dev_6917
pci\ven_1002&dev_6918
pci\ven_1002&dev_6919
pci\ven_1002&dev_691a
pci\ven_1002&dev_691b
pci\ven_1002&dev_691c
pci\ven_1002&dev_691d
pci\ven_1002&dev_691e
pci\ven_1002&dev_691f
pci\ven_1002&dev_6920
pci\ven_1002&dev_6921
pci\ven_1002&dev_6922
pci\ven_1002&dev_6923
pci\ven_1002&dev_6924
pci\ven_1002&dev_6925
pci\ven_1002&dev_6926
pci\ven_1002&dev_6927
pci\ven_1002&dev_6928
pci\ven_1002&dev_6929
pci\ven_1002&dev_692a
pci\ven_1002&dev_692b
pci\ven_1002&dev_692c
pci\ven_1002&dev_692d
pci\ven_1002&dev_692e
pci\ven_1002&dev_692f
pci\ven_1002&dev_6930
pci\ven_1002&dev_6931
pci\ven_1002&dev_6932
pci\ven_1002&dev_6933
pci\ven_1002&dev_6934
pci\ven_1002&dev_6935
pci\ven_1002&dev_6936
pci\ven_1002&dev_6937
pci\ven_1002&dev_6938
pci\ven_1002&dev_6939
pci\ven_1002&dev_693a
pci\ven_1002&dev_693b
pci\ven_1002&dev_693c
pci\ven_1002&dev_693d
pci\ven_1002&dev_693e
pci\ven_1002&dev_693f
pci\ven_1002&dev_6940
pci\ven_1002&dev_6941
pci\ven_1002&dev_6942
pci\ven_1002&dev_6943
pci\ven_1002&dev_6944
pci\ven_1002&dev_6945
pci\ven_1002&dev_6946
pci\ven_1002&dev_6947
pci\ven_1002&dev_6948
pci\ven_1002&dev_6949
pci\ven_1002&dev_694a
pci\ven_1002&dev_694b
pci\ven_1002&dev_694c
pci\ven_1002&dev_694d
pci\ven_1002&dev_694e
pci\ven_1002&dev_694f
pci\ven_1002&dev_6950
pci\ven_1002&dev_6951
pci\ven_1002&dev_6952
pci\ven_1002&dev_6953
pci\ven_1002&dev_6954
pci\ven_1002&dev_6955
pci\ven_1002&dev_6956
pci\ven_1002&dev_6957
pci\ven_1002&dev_6958
pci\ven_1002&dev_6959
pci\ven_1002&dev_695a
pci\ven_1002&dev_695b
pci\ven_1002&dev_695c
pci\ven_1002&dev_695d
pci\ven_1002&dev_695e
pci\ven_1002&dev_695f
pci\ven_1002&dev_9830
pci\ven_1002&dev_9831
pci\ven_1002&dev_9832
pci\ven_1002&dev_9833
pci\ven_1002&dev_9834
pci\ven_1002&dev_9835
pci\ven_1002&dev_9836
pci\ven_1002&dev_9837
pci\ven_1002&dev_9838
pci\ven_1002&dev_9839
pci\ven_1002&dev_983a
pci\ven_1002&dev_983b
pci\ven_1002&dev_983c
pci\ven_1002&dev_983d
pci\ven_1002&dev_983e
pci\ven_1002&dev_983f
pci\ven_1002&dev_9840
pci\ven_1002&dev_9841
pci\ven_1002&dev_9842
pci\ven_1002&dev_9843
pci\ven_1002&dev_9844
pci\ven_1002&dev_9845
pci\ven_1002&dev_9846
pci\ven_1002&dev_9847
pci\ven_1002&dev_9848
pci\ven_1002&dev_9849
pci\ven_1002&dev_984a
pci\ven_1002&dev_984b
pci\ven_1002&dev_984c
pci\ven_1002&dev_984d
pci\ven_1002&dev_984e
pci\ven_1002&dev_984f
pci\ven_1002&dev_9850
pci\ven_1002&dev_9851
pci\ven_1002&dev_9852
pci\ven_1002&dev_9853
pci\ven_1002&dev_9854
pci\ven_1002&dev_9855
pci\ven_1002&dev_9856
pci\ven_1002&dev_9857
pci\ven_1002&dev_9858
pci\ven_1002&dev_9859
pci\ven_1002&dev_985a
pci\ven_1002&dev_985b
pci\ven_1002&dev_985c
pci\ven_1002&dev_985d
pci\ven_1002&dev_985e
pci\ven_1002&dev_985f
pci\ven_1002&dev_9860
pci\ven_1002&dev_9861
pci\ven_1002&dev_9862
pci\ven_1002&dev_9863
pci\ven_1002&dev_9864
pci\ven_1002&dev_9865
pci\ven_1002&dev_9866
pci\ven_1002&dev_9867
pci\ven_1002&dev_9868
pci\ven_1002&dev_9869
pci\ven_1002&dev_986a
pci\ven_1002&dev_986b
pci\ven_1002&dev_986c
pci\ven_1002&dev_986d
pci\ven_1002&dev_986e
pci\ven_1002&dev_986f
pci\ven_1002&dev_9870
pci\ven_1002&dev_9871
pci\ven_1002&dev_9872
pci\ven_1002&dev_9873
pci\ven_1002&dev_9874
pci\ven_1002&dev_9875
pci\ven_1002&dev_9876
pci\ven_1002&dev_9877
pci\ven_1002&dev_9878
pci\ven_1002&dev_9879
pci\ven_1002&dev_987a
pci\ven_1002&dev_987b
pci\ven_1002&dev_987c
pci\ven_1002&dev_987d
pci\ven_1002&dev_987e
pci\ven_1002&dev_987f
pci\ven_1002&dev_9880
pci\ven_1002&dev_9881
pci\ven_1002&dev_9882
pci\ven_1002&dev_9883
pci\ven_1002&dev_9884
pci\ven_1002&dev_9885
pci\ven_1002&dev_9886
pci\ven_1002&dev_9887
pci\ven_1002&dev_9888
pci\ven_1002&dev_9889
pci\ven_1002&dev_988a
pci\ven_1002&dev_988b
pci\ven_1002&dev_988c
pci\ven_1002&dev_988d
pci\ven_1002&dev_988e
pci\ven_1002&dev_988f
pci\ven_1002&dev_98b0
pci\ven_1002&dev_98b1
pci\ven_1002&dev_98c0
pci\ven_1002&dev_98c1
pci\ven_1002&dev_98c2
pci\ven_1002&dev_98c3
pci\ven_1002&dev_98d0
pci\ven_1002&dev_98d1
pci\ven_1002&dev_98d2
pci\ven_1002&dev_98d3
pci\ven_1002&dev_aaa0
pci\ven_1002&dev_aaa8
pci\ven_1002&dev_aab0
pci\ven_1002&dev_aab8
pci\ven_1002&dev_aac0
pci\ven_1002&dev_aac8
pci\ven_1002&dev_aad0
pci\ven_1002&dev_ad08
pci\ven_1002&dev_ad10
pci\ven_1002&dev_ad18
pci\ven_1002&dev_ad20
pci\ven_1002&dev_ad28
pci\ven_1002&dev_ad30
pci\ven_1002&dev_ad38
pci\ven_10de&dev_06c0
pci\ven_10de&dev_06c1
pci\ven_10de&dev_06c2
pci\ven_10de&dev_06c3
pci\ven_10de&dev_06c4
pci\ven_10de&dev_06c5
pci\ven_10de&dev_06c6
pci\ven_10de&dev_06c7
pci\ven_10de&dev_06c8
pci\ven_10de&dev_06c9
pci\ven_10de&dev_06ca
pci\ven_10de&dev_06cb
pci\ven_10de&dev_06cd
pci\ven_10de&dev_06d1
pci\ven_10de&dev_06d2
pci\ven_10de&dev_06d8
pci\ven_10de&dev_06d9
pci\ven_10de&dev_06da
pci\ven_10de&dev_06db
pci\ven_10de&dev_06dc
pci\ven_10de&dev_06dd
pci\ven_10de&dev_06de
pci\ven_10de&dev_06df
pci\ven_10de&dev_0ce0
pci\ven_10de&dev_0dc0
pci\ven_10de&dev_0dc1
pci\ven_10de&dev_0dc2
pci\ven_10de&dev_0dc4
pci\ven_10de&dev_0dc5
pci\ven_10de&dev_0dc6
pci\ven_10de&dev_0dca
pci\ven_10de&dev_0dcd
pci\ven_10de&dev_0dce
pci\ven_10de&dev_0dd1
pci\ven_10de&dev_0dd2
pci\ven_10de&dev_0dd3
pci\ven_10de&dev_0dd6
pci\ven_10de&dev_0dd8
pci\ven_10de&dev_0dda
pci\ven_10de&dev_0dde
pci\ven_10de&dev_0ddf
pci\ven_10de&dev_0de0
pci\ven_10de&dev_0de1
pci\ven_10de&dev_0de2
pci\ven_10de&dev_0de3
pci\ven_10de&dev_0de4
pci\ven_10de&dev_0de5
pci\ven_10de&dev_0de7
pci\ven_10de&dev_0de8
pci\ven_10de&dev_0de9
pci\ven_10de&dev_0dea
pci\ven_10de&dev_0deb
pci\ven_10de&dev_0dec
pci\ven_10de&dev_0ded
pci\ven_10de&dev_0dee
pci\ven_10de&dev_0def
pci\ven_10de&dev_0df0
pci\ven_10de&dev_0df1
pci\ven_10de&dev_0df2
pci\ven_10de&dev_0df3
pci\ven_10de&dev_0df4
pci\ven_10de&dev_0df5
pci\ven_10de&dev_0df6
pci\ven_10de&dev_0df7
pci\ven_10de&dev_0df8
pci\ven_10de&dev_0df9
pci\ven_10de&dev_0dfa
pci\ven_10de&dev_0dfc
pci\ven_10de&dev_0dfe
pci\ven_10de&dev_0dff
pci\ven_10de&dev_0e0d
pci\ven_10de&dev_0e20
pci\ven_10de&dev_0e21
pci\ven_10de&dev_0e22
pci\ven_10de&dev_0e23
pci\ven_10de&dev_0e24
pci\ven_10de&dev_0e25
pci\ven_10de&dev_0e28
pci\ven_10de&dev_0e30
pci\ven_10de&dev_0e31
pci\ven_10de&dev_0e38
pci\ven_10de&dev_0e3a
pci\ven_10de&dev_0e3b
pci\ven_10de&dev_0e3c
pci\ven_10de&dev_0e3e
pci\ven_10de&dev_0e3f
pci\ven_10de&dev_0eb8
pci\ven_10de&dev_0f00
pci\ven_10de&dev_0f01
pci\ven_10de&dev_0f02
pci\ven_10de&dev_0fa0
pci\ven_10de&dev_0fc0
pci\ven_10de&dev_0fc1
pci\ven_10de&dev_0fc2
pci\ven_10de&dev_0fc4
pci\ven_10de&dev_0fc5
pci\ven_10de&dev_0fc6
pci\ven_10de&dev_0fc8
pci\ven_10de&dev_0fcd
pci\ven_10de&dev_0fce
pci\ven_10de&dev_0fd1
pci\ven_10de&dev_0fd2
pci\ven_10de&dev_0fd3
pci\ven_10de&dev_0fd4
pci\ven_10de&dev_0fd5
pci\ven_10de&dev_0fd7
pci\ven_10de&dev_0fd8
pci\ven_10de&dev_0fd9
pci\ven_10de&dev_0fda
pci\ven_10de&dev_0fdb
pci\ven_10de&dev_0fdc
pci\ven_10de&dev_0fdd
pci\ven_10de&dev_0fde
pci\ven_10de&dev_0fdf
pci\ven_10de&dev_0fe0
pci\ven_10de&dev_0fe1
pci\ven_10de&dev_0fe2
pci\ven_10de&dev_0fe3
pci\ven_10de&dev_0fe4
pci\ven_10de&dev_0fe5
pci\ven_10de&dev_0fe6
pci\ven_10de&dev_0fe7
pci\ven_10de&dev_0fe9
pci\ven_10de&dev_0fea
pci\ven_10de&dev_0fec
pci\ven_10de&dev_0fed
pci\ven_10de&dev_0fef
pci\ven_10de&dev_0ff1
pci\ven_10de&dev_0ff2
pci\ven_10de&dev_0ff3
pci\ven_10de&dev_0ff5
pci\ven_10de&dev_0ff6
pci\ven_10de&dev_0ff7
pci\ven_10de&dev_0ff8
pci\ven_10de&dev_0ff9
pci\ven_10de&dev_0ffa
pci\ven_10de&dev_0ffb
pci\ven_10de&dev_0ffc
pci\ven_10de&dev_0ffd
pci\ven_10de&dev_0ffe
pci\ven_10de&dev_0fff
pci\ven_10de&dev_1001
pci\ven_10de&dev_1003
pci\ven_10de&dev_1004
pci\ven_10de&dev_1005
pci\ven_10de&dev_1007
pci\ven_10de&dev_1008
pci\ven_10de&dev_100a
pci\ven_10de&dev_100c
pci\ven_10de&dev_101e
pci\ven_10de&dev_101f
pci\ven_10de&dev_1020
pci\ven_10de&dev_1021
pci\ven_10de&dev_1022
pci\ven_10de&dev_1023
pci\ven_10de&dev_1024
pci\ven_10de&dev_1026
pci\ven_10de&dev_1027
pci\ven_10de&dev_1028
pci\ven_10de&dev_1029
pci\ven_10de&dev_102a
pci\ven_10de&dev_102d
pci\ven_10de&dev_102e
pci\ven_10de&dev_102f
pci\ven_10de&dev_103a
pci\ven_10de&dev_103b
pci\ven_10de&dev_103c
pci\ven_10de&dev_103f
pci\ven_10de&dev_1040
pci\ven_10de&dev_1041
pci\ven_10de&dev_1042
pci\ven_10de&dev_1048
pci\ven_10de&dev_1049
pci\ven_10de&dev_104a
pci\ven_10de&dev_104b
pci\ven_10de&dev_104c
pci\ven_10de&dev_104d
pci\ven_10de&dev_1050
pci\ven_10de&dev_1051
pci\ven_10de&dev_1052
pci\ven_10de&dev_1054
pci\ven_10de&dev_1055
pci\ven_10de&dev_1056
pci\ven_10de&dev_1057
pci\ven_10de&dev_1058
pci\ven_10de&dev_1059
pci\ven_10de&dev_105a
pci\ven_10de&dev_105b
pci\ven_10de&dev_1070
pci\ven_10de&dev_1078
pci\ven_10de&dev_107c
pci\ven_10de&dev_107d
pci\ven_10de&dev_107e
pci\ven_10de&dev_107f
pci\ven_10de&dev_1080
pci\ven_10de&dev_1081
pci\ven_10de&dev_1082
pci\ven_10de&dev_1083
pci\ven_10de&dev_1084
pci\ven_10de&dev_1086
pci\ven_10de&dev_1087
pci\ven_10de&dev_1088
pci\ven_10de&dev_1089
pci\ven_10de&dev_108b
pci\ven_10de&dev_108c
pci\ven_10de&dev_108e
pci\ven_10de&dev_1091
pci\ven_10de&dev_1094
pci\ven_10de&dev_1096
pci\ven_10de&dev_1098
pci\ven_10de&dev_109a
pci\ven_10de&dev_109b
pci\ven_10de&dev_1100
pci\ven_10de&dev_1140
pci\ven_10de&dev_114a
pci\ven_10de&dev_1180
pci\ven_10de&dev_1182
pci\ven_10de&dev_1183
pci\ven_10de&dev_1184
pci\ven_10de&dev_1185
pci\ven_10de&dev_1187
pci\ven_10de&dev_1188
pci\ven_10de&dev_1189
pci\ven_10de&dev_118a
pci\ven_10de&dev_118b
pci\ven_10de&dev_118c
pci\ven_10de&dev_118d
pci\ven_10de&dev_118e
pci\ven_10de&dev_118f
pci\ven_10de&dev_1191
pci\ven_10de&dev_1192
pci\ven_10de&dev_1193
pci\ven_10de&dev_1194
pci\ven_10de&dev_1195
pci\ven_10de&dev_1198
pci\ven_10de&dev_1199
pci\ven_10de&dev_119a
pci\ven_10de&dev_119d
pci\ven_10de&dev_119e
pci\ven_10de&dev_119f
pci\ven_10de&dev_11a0
pci\ven_10de&dev_11a1
pci\ven_10de&dev_11a2
pci\ven_10de&dev_11a3
pci\ven_10de&dev_11a7
pci\ven_10de&dev_11aa
pci\ven_10de&dev_11ac
pci\ven_10de&dev_11af
pci\ven_10de&dev_11b0
pci\ven_10de&dev_11b1
pci\ven_10de&dev_11b4
pci\ven_10de&dev_11b6
pci\ven_10de&dev_11b7
pci\ven_10de&dev_11b8
pci\ven_10de&dev_11ba
pci\ven_10de&dev_11bb
pci\ven_10de&dev_11bc
pci\ven_10de&dev_11bd
pci\ven_10de&dev_11be
pci\ven_10de&dev_11bf
pci\ven_10de&dev_11c0
pci\ven_10de&dev_11c1
pci\ven_10de&dev_11c2
pci\ven_10de&dev_11c3
pci\ven_10de&dev_11c4
pci\ven_10de&dev_11c5
pci\ven_10de&dev_11c6
pci\ven_10de&dev_11c7
pci\ven_10de&dev_11c8
pci\ven_10de&dev_11d0
pci\ven_10de&dev_11d1
pci\ven_10de&dev_11d2
pci\ven_10de&dev_11d3
pci\ven_10de&dev_11e0
pci\ven_10de&dev_11e1
pci\ven_10de&dev_11e2
pci\ven_10de&dev_11e3
pci\ven_10de&dev_11f0
pci\ven_10de&dev_11f8
pci\ven_10de&dev_11fa
pci\ven_10de&dev_11fc
pci\ven_10de&dev_11ff
pci\ven_10de&dev_1200
pci\ven_10de&dev_1201
pci\ven_10de&dev_1202
pci\ven_10de&dev_1203
pci\ven_10de&dev_1205
pci\ven_10de&dev_1206
pci\ven_10de&dev_1207
pci\ven_10de&dev_1208
pci\ven_10de&dev_120d
pci\ven_10de&dev_1210
pci\ven_10de&dev_1211
pci\ven_10de&dev_1212
pci\ven_10de&dev_1213
pci\ven_10de&dev_1218
pci\ven_10de&dev_121f
pci\ven_10de&dev_1240
pci\ven_10de&dev_1241
pci\ven_10de&dev_1243
pci\ven_10de&dev_1244
pci\ven_10de&dev_1245
pci\ven_10de&dev_1246
pci\ven_10de&dev_1247
pci\ven_10de&dev_1248
pci\ven_10de&dev_1249
pci\ven_10de&dev_124b
pci\ven_10de&dev_124d
pci\ven_10de&dev_1250
pci\ven_10de&dev_1251
pci\ven_10de&dev_1258
pci\ven_10de&dev_1280
pci\ven_10de&dev_1281
pci\ven_10de&dev_1282
pci\ven_10de&dev_1283
pci\ven_10de&dev_1284
pci\ven_10de&dev_1285
pci\ven_10de&dev_1286
pci\ven_10de&dev_1287
pci\ven_10de&dev_1288
pci\ven_10de&dev_1289
pci\ven_10de&dev_1290
pci\ven_10de&dev_1291
pci\ven_10de&dev_1292
pci\ven_10de&dev_1293
pci\ven_10de&dev_1294
pci\ven_10de&dev_1295
pci\ven_10de&dev_1296
pci\ven_10de&dev_1298
pci\ven_10de&dev_1299
pci\ven_10de&dev_12a0
pci\ven_10de&dev_12ad
pci\ven_10de&dev_12ae
pci\ven_10de&dev_12af
pci\ven_10de&dev_12b0
pci\ven_10de&dev_12b1
pci\ven_10de&dev_12b9
pci\ven_10de&dev_12ba
pci\ven_10de&dev_1329
pci\ven_10de&dev_1340
pci\ven_10de&dev_1341
pci\ven_10de&dev_1344
pci\ven_10de&dev_1346
pci\ven_10de&dev_1347
pci\ven_10de&dev_136e
pci\ven_10de&dev_136f
pci\ven_10de&dev_137a
pci\ven_10de&dev_137e
pci\ven_10de&dev_137f
pci\ven_10de&dev_1380
pci\ven_10de&dev_1381
pci\ven_10de&dev_1382
pci\ven_10de&dev_1389
pci\ven_10de&dev_1390
pci\ven_10de&dev_1391
pci\ven_10de&dev_1392
pci\ven_10de&dev_1393
pci\ven_10de&dev_1398
pci\ven_10de&dev_139b
pci\ven_10de&dev_13ad
pci\ven_10de&dev_13ae
pci\ven_10de&dev_13af
pci\ven_10de&dev_13b0
pci\ven_10de&dev_13b1
pci\ven_10de&dev_13b2
pci\ven_10de&dev_13b3
pci\ven_10de&dev_13b5
pci\ven_10de&dev_13ba
pci\ven_10de&dev_13bb
pci\ven_10de&dev_13bc
pci\ven_10de&dev_13bd
pci\ven_10de&dev_13be
pci\ven_10de&dev_13bf
pci\ven_10de&dev_13c0
pci\ven_10de&dev_13c1
pci\ven_10de&dev_13c2
pci\ven_10de&dev_13c3
pci\ven_10de&dev_13c4
pci\ven_10de&dev_13d7
pci\ven_10de&dev_13d8
pci\ven_10de&dev_13d9
pci\ven_10de&dev_13e5
pci\ven_10de&dev_13e7
pci\ven_10de&dev_13f8
pci\ven_10de&dev_13f9
pci\ven_10de&dev_13fa
pci\ven_10de&dev_1401
pci\ven_10de&dev_1404
pci\ven_10de&dev_142e
pci\ven_10de&dev_142f
pci\ven_10de&dev_1617
pci\ven_10de&dev_1618
pci\ven_10de&dev_1619
pci\ven_10de&dev_1638
pci\ven_10de&dev_1639
pci\ven_10de&dev_163a
pci\ven_10de&dev_1789
pci\ven_10de&dev_17be
pci\ven_10de&dev_17c2
pci\ven_10de&dev_17ef
pci\ven_10de&dev_17f0
pci\ven_8086&dev_0090
pci\ven_8086&dev_0402
pci\ven_8086&dev_0406
pci\ven_8086&dev_040a
pci\ven_8086&dev_040b
pci\ven_8086&dev_040e
pci\ven_8086&dev_0412
pci\ven_8086&dev_0416
pci\ven_8086&dev_041a
pci\ven_8086&dev_041b
pci\ven_8086&dev_041e
pci\ven_8086&dev_0422
pci\ven_8086&dev_0426
pci\ven_8086&dev_042a
pci\ven_8086&dev_042b
pci\ven_8086&dev_042e
pci\ven_8086&dev_0900
pci\ven_8086&dev_0901
pci\ven_8086&dev_0902
pci\ven_8086&dev_0903
pci\ven_8086&dev_0904
pci\ven_8086&dev_0a02
pci\ven_8086&dev_0a06
pci\ven_8086&dev_0a0a
pci\ven_8086&dev_0a0b
pci\ven_8086&dev_0a0e
pci\ven_8086&dev_0a12
pci\ven_8086&dev_0a16
pci\ven_8086&dev_0a1a
pci\ven_8086&dev_0a1b
pci\ven_8086&dev_0a1e
pci\ven_8086&dev_0a22
pci\ven_8086&dev_0a26
pci\ven_8086&dev_0a2a
pci\ven_8086&dev_0a2b
pci\ven_8086&dev_0a2e
pci\ven_8086&dev_0a84
pci\ven_8086&dev_0bd0
pci\ven_8086&dev_0bd1
pci\ven_8086&dev_0bd2
pci\ven_8086&dev_0bd3
pci\ven_8086&dev_0bd4
pci\ven_8086&dev_0c02
pci\ven_8086&dev_0c06
pci\ven_8086&dev_0c0a
pci\ven_8086&dev_0c0b
pci\ven_8086&dev_0c0e
pci\ven_8086&dev_0c12
pci\ven_8086&dev_0c16
pci\ven_8086&dev_0c1a
pci\ven_8086&dev_0c1b
pci\ven_8086&dev_0c1e
pci\ven_8086&dev_0c22
pci\ven_8086&dev_0c26
pci\ven_8086&dev_0c2a
pci\ven_8086&dev_0c2b
pci\ven_8086&dev_0c2e
pci\ven_8086&dev_0d02
pci\ven_8086&dev_0d06
pci\ven_8086&dev_0d0a
pci\ven_8086&dev_0d0b
pci\ven_8086&dev_0d0e
pci\ven_8086&dev_0d12
pci\ven_8086&dev_0d16
pci\ven_8086&dev_0d1a
pci\ven_8086&dev_0d1b
pci\ven_8086&dev_0d1e
pci\ven_8086&dev_0d22
pci\ven_8086&dev_0d26
pci\ven_8086&dev_0d2a
pci\ven_8086&dev_0d2b
pci\ven_8086&dev_0d2e
pci\ven_8086&dev_1602
pci\ven_8086&dev_1606
pci\ven_8086&dev_160a
pci\ven_8086&dev_160b
pci\ven_8086&dev_160d
pci\ven_8086&dev_160e
pci\ven_8086&dev_1612
pci\ven_8086&dev_1616
pci\ven_8086&dev_161a
pci\ven_8086&dev_161b
pci\ven_8086&dev_161d
pci\ven_8086&dev_161e
pci\ven_8086&dev_1622
pci\ven_8086&dev_1626
pci\ven_8086&dev_162a
pci\ven_8086&dev_162b
pci\ven_8086&dev_162d
pci\ven_8086&dev_162e
pci\ven_8086&dev_1632
pci\ven_8086&dev_1636
pci\ven_8086&dev_163a
pci\ven_8086&dev_163b
pci\ven_8086&dev_163d
pci\ven_8086&dev_163e
pci\ven_8086&dev_1906
pci\ven_8086&dev_190b
pci\ven_8086&dev_190e
pci\ven_8086&dev_1912
pci\ven_8086&dev_1913
pci\ven_8086&dev_1915
pci\ven_8086&dev_1916
pci\ven_8086&dev_191b
pci\ven_8086&dev_191e
pci\ven_8086&dev_1921
pci\ven_8086&dev_1926
pci\ven_8086&dev_192b
pci\ven_8086&dev_1932
pci\ven_8086&dev_193b
pci\ven_8086&dev_22b0
pci\ven_8086&dev_22b1
pci\ven_8086&dev_22b2
pci\ven_8086&dev_22b3
pci\ven_8086&dev_9906
pci\ven_8086&dev_9907



BC AdBot (Login to Remove)

 


#2 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 73,040 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:08:57 AM

Posted 05 February 2017 - 04:02 PM


Backdoor Trojans, Botnets, and IRCBots are very dangerous because they compromise system integrity by making changes that allow it to be used by the attacker for malicious purposes. They can disable your anti-virus and security tools to prevent detection and removal. Remote attackers use backdoors as a means of accessing and taking control of a computer that bypasses security mechanisms. This type of exploit allows them to steal sensitive information like passwords, personal and financial data which is then sent back to the hacker. Read Danger: Remote Access Trojans.

If your computer was used for online banking, paying bills, has credit card information or other sensitive data on it, all passwords should be changed immediately to include those used for taxes, email, eBay, paypal and any other online activities. You should consider them to be compromised and change passwords from a clean computer, not the infected one. If not, an attacker may get the new passwords and transaction information. Banking and credit card institutions should be notified immediately of the possible security breach. Failure to notify your financial institution and local law enforcement can result in refusal to reimburse funds lost due to fraud or similar criminal activity. If using a router, you need to reset it with a strong logon/password before connecting again.

Although the infection was identified and removed, your machine has likely been compromised and there is no way to be sure the computer can ever be trusted again. It is dangerous and incorrect to assume the computer is secure even if the malware appears to have been removed. In some instances an infection may have caused so much damage to your system that it cannot be successfully cleaned or repaired. The malware may leave so many remnants behind that security tools cannot find them. Many experts in the security community believe that once infected with this type of malware, the best course of action is to wipe the drive clean, reformat and reinstall the OS. Please read:

Whenever a system has been compromised by a backdoor payload, it is impossible to know if or how much the backdoor has been used to affect your system...There are only a few ways to return a compromised system to a confident security configuration. These include:
Reimaging the system
Restoring the entire system using a full system backup from before the backdoor infection
Reformatting and reinstalling the system

Backdoors and What They Mean to You

This is what Jesper M. Johansson, Security Program Manager at Microsoft TechNet has to say: Help: I Got Hacked. Now What Do I Do?.

The only way to clean a compromised system is to flatten and rebuild. Thats right. If you have a system that has been completely compromised, the only thing you can do is to flatten the system (reformat the system disk) and rebuild it from scratch (reinstall Windows and your applications).


I cannot make this decision for you as to what to do. I am just providing information so you are aware and can make an informed decision but as a minimum, you should change all passwords.

If you still want to clean it....
. Please follow this Preparation Guide and post in a new topic.
Let me know if all went well.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

#3 Paulw1487

Paulw1487
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:57 AM

Posted 06 February 2017 - 05:38 PM

Sorry, i was at would l all day. I think of figured this out but could use a hand proving whats going on. My cell phone is infected with gooligan, im preparing to flash/root/have it flashed by a pro, soon. I have to decied what i want to do
Ill lay out what im seeing, gooligan is using its ability to create exploited tokens, to root theb cause reinfection on my cell, its also exploiting the phone's Bluetooth, nfc, infared and wifi hotspot capabilities. Ive found various rcp tokens created on my windows 10 machine, ive also found various malicious, png, ps, json files, invalid security certificates, changes to the registry and various other things.
Its not just ff though, its edge, and internet explorer 11. Ive also found bad unpatched nvidia drivers that are rolled back but are labeled as current patched drivers but is really the driver that was recently discover to be exploitable to gain elevated privileges.
I think that driver is being used to get the elevated privleges needed to exploit the recent flash security issue windows had. It would make sense with the scripts ive found to make windows update shown = true but really = false
I have a hunch on how its being done but i dont have the forensics skill to connect all of the dots. I've nuked my hdd many times only for the same, remote connecta, registy changes, streaming ports open that i didnt do and actually made sure to close the ports of the fw after reinstall to keep happening to think that im missing a persistent infection i just need some help connecting the dots
Or i maybe just going insane, i doubt that though with all of thw recent exploits. Its either that or someone hates me and is using metaslpoit to reverse payload me and after every reinstall just to, what steal my new passwords and cc number? That makes no sense and thw security, registry, and bad certificates are being caused by me, i dont torrent, i dont go on porn sites and i dont just click random links
Sorry for the tangent I'm just lookong for help to find the root cause of this before just using my copy of Ubuntu and bleachbit to wipe all my drives
Thanks
I called bitdefender about the gooligian and even created a topic about using google apps to create a backdoor, to malicious rooting, persistent infection on malwarebytes forums but because i couldnt pin point all the bad files they didnt take me serious.
I doubt anyone will here either... Whatever

Edited by Paulw1487, 06 February 2017 - 05:51 PM.


#4 Paulw1487

Paulw1487
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:57 AM

Posted 06 February 2017 - 07:12 PM

posting files soon


Edited by Paulw1487, 06 February 2017 - 07:14 PM.


#5 Paulw1487

Paulw1487
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Local time:07:57 AM

Posted 06 February 2017 - 10:20 PM

http://www.theinquirer.net/inquirer/news/3004026/windows-smb-zero-day-exploit-goes-live-on-github-after-microsoft-fails-to-fix
Thats pretty much what ive been describing and its been live longer than 3 days

#6 Robert212

Robert212

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:57 AM

Posted 04 March 2017 - 07:35 PM

 Paulw1487 ,

That was some kind of file you posted. It certainly looks suspicious to me. I am no expert with computers but I've had my problems with them. For Instance, I just bought a bran new computer and this story may help you a lot. I was trying to set it up to work properly for me When I noticed Microsoft jamming my computer with updates, I couldn't do any thing else with it. And it got me thinking I need to control this somehow. So I down loaded a tool wumt (Windows Update Management Tool) It helped a lot then I noticed That Microsoft had just put a small partition 16mb on my drive that wasn't there when I got this computer  I also made a  BACKUP of the system so I could reinstall if things went south, Things still kept going wrong with my setup so I decided to start over. Wipe the drive. That is when I noticed Microsoft took 20 GB more than it was using of my drive to report what the previous setup was.             This really TICKED me off.

 

 So I decided to wipe my drive completely and I got out the trusty ol G Parted and Wiped the whole C: Drive  BUT Be Very Careful Here DO NOT TOUCH Your RESTORE PARTITIONS and before you start this process make Sure you have a Repair disc that you can make inside of Windows 10 AND a BackUp of your Drive. I also Downloaded a Windows 10 .iso Image from Microsoft website Just to make sure I was Covered If any thing was to go wrong. I burned the Windows 10 .iso Image to a DVD on my Linux machine just in case.

 

  I did need the REPAIR DISC to initiate the restore process but not the Win 10 disc And I used my Backup (But I did Not have a Virus or Malware) So after all that my computer started to run as it is supposed to. I still have to finish setting it up completely. So when I saw your post, I just had to make comment on it. You Might be able to Initiate Your restore partition with a Repair Disc and start over that way. I don't think a backup of your Drive will turn out without any malware from what you have stated. OR you could go to your Manufacture Website Download all the drivers and programs for your computer and reinstall everything from scratch. BUT make sure you have the Product Activation Code, for the Windows 10.iso disc There are several ways to get that code off your Computer before you start. Google how to recover your activation code. Mine has TWO Activation Codes. One is Hewlett Packard Code the Other is Microsoft Code . I guess after HP installs all their software they have their own code to use.

 I think that if a hacker is good enough- he could hide PERSISTENT Malicious Code into That reserved space that Microsoft uses to report previous installations IE 20 GB ...

 After I wiped my C: Drive I got all that space back, But you cannot do it with the tools that Microsoft gives you in Windows 10...  Download  G parted it's a linux tool but works well with Windows Too.   PLEASE Just Be Carefull . I Cannot Take Responsibility for what you decide to do. Good Luck, I hope All the Best !        Robert212



#7 Robert212

Robert212

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:57 AM

Posted 04 March 2017 - 08:24 PM

  I do hope you see this reply, It is just my ideas on how I deal with problems like this.

 Sorry my reply was so late, I realize this post is a month old. Probably fixed it by now. But my Reply might help

someone reading this Bleeping Computer article someday.     Robert212






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users