Network Assessment Customer Name Here! Prepared by: Your IT Company, Inc. CONFIDENTIALITY NOTE: The information contained in this report document is for the exclusive use of the client specified above and may contain confidential, privileged and non-disclosable information. If the recipient of this report is not the client or addressee, such recipient is strictly prohibited from reading, photocopying, distributing or otherwise using this report or its contents in any way. NETWORK ASSESSMENT Table of Contents 1 - Discovery Tasks 2 - Assessment Summary 3 - Domain: CLIENTDOM.COM 3.1 - Domain Controllers 3.2 FSMO Roles 3.3 - Organizational Units 3.4 - Group Policy Objects 3.5 - Users 3.6 - Security Groups 3.7 - Computers in Domain 3.8 - Domain DNS 4 - Non A/D Devices 5 - Servers 5.1 - MS SQL Servers 5.2 - Web Servers 5.3 - Time Servers 5.4 - Exchange Servers 5.5 - DHCP Servers 5.6 - Hyper-V Servers 6 - Printers 7 - Network Shares 8 - Major Applications 9 - System Password Strength Assessment 10 - Patch Summary 11 - Endpoint Security and Backup 12 - Listening Ports PROPRIETARY & CONFIDENTIAL PAGE 2 of 251 NETWORK ASSESSMENT 13 - Internet Access 14 - External Speed Test 15 - Internet Domain 16 - External Security Vulnerabilities Appendix I: Detailed Computer Analysis PROPRIETARY & CONFIDENTIAL PAGE 3 of 251 NETWORK ASSESSMENT 1 - Discovery Tasks This table contains a listing of all tasks which were performed as part of this assessment. Items which do not contain a check were not performed. Task Description Identifies Domain Controllers and Online status Enumerates FSMO roles at the site Lists the Organizational units and Security Groups with members Detect Domain Controllers FSMO Role Analysis Enumerate Organization Units and Security Groups User Analysis Detect Local Mail Servers Detect Time Servers Discover Network Shares Detect Major Applications Web Server Discovery and Identification System by System Event Log Analysis Detailed Domain Controller Event Log Analysis Network Discovery for Non-A/D Devices SQL Server Analysis Internet Domain Analysis Password Strength Analysis Missing Security Updates Internet Access and Speed Test External Security Vulnerabilities PROPRIETARY & CONFIDENTIAL List of users in AD, status, and last login/use, which helps identify potential security risks Mail server(s) found on the network Time server(s) found on the network Comprehensive list of Network Shares by Server Major apps / versions and count of installations List of web servers and type Last 5 System and App Event Log errors for servers List of event log entries from the past 24 hours for the Directory Service, DNS Server and File Replication Service event logs List of Non-Active Directory devices responding to network requests List of SQL Servers and associated database(s) “WHOIS” check for company domain(s) Uses MBSA to identify computers with weak passwords that may pose a security risk Uses MBSA to identify computers missing security updates Test of internet access and performance List of Security Holes and Warnings from External Vulnerability Scan PAGE 4 of 251 NETWORK ASSESSMENT 2 - Assessment Summary Domain Domain Controllers Number of Organizational Units 2 17 Users # Enabled Last Login within 30 days Last Login older than 30 days # Disabled Last Login within 30 days Last Login older than 30 days 33 17 16 19 0 19 Security Group Groups with Users # Total Groups 31 60 Computers in Domain Total Computers Last Login within 30 days Last Login older than 30 days Other Windows 2000 Server Windows 7 Enterprise Windows 7 Professional Windows 7 Ultimate Windows 8 Consumer Preview Windows Server 2003 Windows Server 2008 Enterprise Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard PROPRIETARY & CONFIDENTIAL 107 46 61 3 6 32 3 4 1 16 1 2 11 2 PAGE 5 of 251 NETWORK ASSESSMENT Windows Server 2008 Standard Windows Server 2012 Datacenter Windows Vista Business Windows Vista Ultimate Windows XP Professional 1 1 1 1 22 Miscellaneous Non-A/D Systems MX Records MS SQL Servers Web Servers Printers Exchange Servers Network Shares Installed Applications Potential or Severe Security Risks Potential Insecure Listening Ports External Network Security (High Risk) External Network Security (Medium Risk) PROPRIETARY & CONFIDENTIAL 39 7 10 28 3 2 202 1124 10 24 2 0 PAGE 6 of 251 NETWORK ASSESSMENT 3 - Domain: CLIENTDOM.COM This section and corresponding sub-sections contain a comprehensive view of the domain. 3.1 - Domain Controllers This section contains a listing of all Domain Controllers and their corresponding status. Domain Controller UTIL01 DC01 Status online online 3.2 - FSMO Roles This section contains a listing of all FSMO (Flexible Single Master Operation) roles, which are needed to operate a Windows domain. Role Schema Master Domain Naming Master PDC Emulator Relative ID (RID) Master Infrastructure Master PROPRIETARY & CONFIDENTIAL Domain Controller UTIL01.CLIENTDOM.COM UTIL01.CLIENTDOM.COM UTIL01.CLIENTDOM.COM UTIL01.CLIENTDOM.COM UTIL01.CLIENTDOM.COM Best Practice ForestWide ForestWide DomainSpecific DomainSpecific DomainSpecific PAGE 7 of 251 NETWORK ASSESSMENT 3.3 - Organizational Units This section contains a hierarchical view of all organizational units from within Active Directory. ● CLIENTDOM.COM o AppV (2 Security Groups, 1 Users) o Builtin (21 Security Groups) o CLIENTDOM_Users (25 Users) o Computers (73 Computers) o Disabled (11 Users) o Disabled Accounts (5 Users) o Domain Controllers (2 Computers) o Firewall (3 Computers) o ForeignSecurityPrincipals o Managed Service Accounts o Microsoft Exchange Security Groups (6 Security Groups) o Printers o PSPs o Servers (29 Computers) o Service Accounts (1 Users) o test hash o Users (5 Contacts, 30 Security Groups, 9 Users) PROPRIETARY & CONFIDENTIAL PAGE 8 of 251 NETWORK ASSESSMENT 3.4 - Group Policy Objects This section contains a hierarchical view of all group policy objects from within Active Directory. Policies highlighted in green represent enabled policies. ● CLIENTDOM.COM o AppV o Builtin o CLIENTDOM_Users o Computers o Disabled o Disabled Accounts o Domain Controllers (4-GPO, 4-Enabled) o Default Domain Policy o RDP Disconnect Timeout o Servers - High Performance o Domain Printers o Firewall (1-GPO, 1-Enabled) o No policies o ForeignSecurityPrincipals o Managed Service Accounts o Microsoft Exchange Security Groups o Printers PROPRIETARY & CONFIDENTIAL PAGE 9 of 251 NETWORK ASSESSMENT 3.5 - Users This section contains a list of accounts from Active Directory with information on each account. Disabled accounts are highlighted gray. User Name Administrator ASPNET bHunt bpierson byoung cWright dBhariva dMartinez dWilliams fThalsim Guest HJobs hr info IUSR_DC02 Display Name Administrator ASPNET Brad Hunt Brian Pierson Brenda Young Chris Wright Dhunjishah Bhariva David Martinez Deonne Williams Fere Thalsim Guest Hira Jobs CLIENTDOM HR CLIENTDOM PR IUSR_DC02 Enabled enabled enabled disabled disabled enabled disabled enabled enabled disabled enabled disabled enabled enabled enabled enabled Password Last Set 3/25/2009 1:34:48 PM 3/25/2009 12:37:27 PM 7/2/2009 4:24:30 PM 7/7/2010 12:18:38 PM 9/5/2012 1:37:33 PM 4/20/2009 3:25:37 PM 7/24/2012 11:18:27 PM 3/2/2012 3:48:35 PM 8/10/2012 1:07:25 PM 11/9/2010 9:42:11 AM <never> 8/6/2012 10:59:23 AM 6/15/2009 10:47:41 AM 6/15/2009 10:30:41 AM 4/30/2009 4:16:36 PM Password Expires <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> IUSR_STEINBRENNER IWAM_DC02 IWAM_STEINBRENNER jCostello JDresden jLanier JPoole IUSR_STEINBRENNER IWAM_DC02 IWAM_STEINBRENNER Joe Costello Jim Dresden Jamie Lanier Jerry Poole enabled enabled enabled enabled enabled enabled disabled 3/25/2009 12:34:10 PM 4/30/2009 4:16:35 PM 3/25/2009 12:34:10 PM 10/4/2012 8:07:26 AM 3/17/2011 8:17:56 AM 10/9/2012 8:20:33 AM 2/21/2011 7:45:59 AM <never> <never> <never> <never> <never> <never> <never> PROPRIETARY & CONFIDENTIAL Last Login 10/25/2012 5:01:21 PM <never> 2/23/2011 5:37:39 PM 8/3/2010 3:09:10 PM 9/11/2012 9:42:21 PM 5/11/2009 6:02:16 PM 10/18/2012 4:34:31 PM 10/25/2012 5:21:20 PM 3/12/2012 7:09:30 AM 10/25/2012 10:25:48 AM <never> 10/25/2012 11:56:55 AM <never> <never> 10/12/2009 10:53:59 AM 4/11/2012 11:58:18 AM 4/30/2009 4:16:41 PM <never> 10/25/2012 12:05:38 AM 10/25/2012 6:53:06 AM 10/25/2012 8:26:05 AM 2/6/2011 10:47:24 AM PAGE 10 of 251 NETWORK ASSESSMENT User Name jPortman jTyrell kjordan mBateman mgraham mMidland Mmorris mPullman mshelley mWhitman netedge NetScanner nrsdev partners pGarza PGK Test1 PKirby prsales QBDataServiceUser19 RLunnsford sBrai support SUPPORT_388945a0 tClemments Display Name Jon Portman Joseph Tyrell Kelly Jordan Marvin Bateman Marie Graham Michael Midland Michael Morris Marcusus Pullman Martin Shelley Mark Whitman NETEDGE Net Scanner - Client Northern Development CLIENTDOM Managed Services Partners Pablo Garza PGK Test1 Paul Kirby CLIENTDOM Sales Quickbooks Service Account Bob Lunnsford Steve Brai CLIENTDOM Support Team SUPPORT_388945a0 Trey Clemments PROPRIETARY & CONFIDENTIAL Enabled disabled disabled disabled disabled disabled enabled enabled enabled disabled enabled enabled enabled enabled enabled Password Last Set 6/22/2010 2:16:14 PM 5/11/2009 8:34:31 AM 2/22/2012 1:18:26 PM 4/24/2012 9:32:45 AM 1/21/2010 7:47:51 AM 9/14/2012 9:28:57 AM 8/15/2012 1:19:02 PM 9/28/2010 9:21:58 AM 6/15/2011 9:22:14 AM 4/1/2010 10:58:21 AM 10/13/2011 1:29:15 PM 7/25/2012 12:23:07 PM 6/14/2009 2:25:09 PM 6/15/2009 10:56:18 AM Password Expires <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> <never> Last Login 11/7/2010 7:35:38 AM 1/8/2011 10:57:44 PM 3/22/2012 2:29:07 AM 5/9/2012 10:12:42 PM 6/8/2010 7:21:41 AM 10/24/2012 11:29:24 PM 10/19/2012 3:53:22 PM 10/24/2012 2:05:33 PM 2/14/2012 9:50:19 AM 10/25/2012 4:52:24 PM <never> 7/21/2012 6:38:30 AM 6/19/2011 6:30:00 PM <never> enabled enabled enabled enabled enabled 9/9/2010 2:21:28 PM 4/29/2012 7:55:43 PM 1/19/2011 9:46:11 AM 6/15/2009 10:43:10 AM 4/16/2009 4:05:28 PM <never> <never> <never> <never> <never> 10/25/2012 12:17:18 PM 10/8/2012 10:21:03 PM 10/25/2012 2:34:02 PM <never> 12/24/2009 12:01:30 PM disabled 4/27/2009 2:18:34 PM enabled 8/10/2012 1:07:56 PM enabled 6/14/2009 8:03:31 PM <never> <never> <never> 10/11/2010 11:25:37 AM 10/14/2011 5:03:40 PM 11/5/2011 7:22:27 PM disabled 9/9/2008 9:49:53 AM disabled 10/14/2009 4:59:02 PM <never> <never> <never> 10/4/2009 4:27:09 PM PAGE 11 of 251 NETWORK ASSESSMENT User Name Test testuser TestV tHartsfield wmartinez wpham Display Name Test Account Test User TestV Tony Hartsfield William Martinez Nguyen Phan PROPRIETARY & CONFIDENTIAL Enabled disabled disabled disabled enabled disabled enabled Password Last Set 11/9/2009 10:21:35 AM 5/28/2010 7:51:19 AM 8/10/2011 1:26:13 PM 3/1/2011 11:37:17 AM 2/21/2011 7:46:42 AM 9/25/2011 9:50:06 PM Password Expires <never> <never> <never> <never> <never> <never> Last Login 11/9/2009 10:12:34 AM <never> <never> 10/25/2012 1:33:22 AM 2/14/2011 4:28:47 PM 10/25/2012 8:55:17 AM PAGE 12 of 251 NETWORK ASSESSMENT 3.6 - Security Groups This section contains a listing of all security groups from Active Directory with detailed information on group membership by user account. Group Name Account Operators Members (CLIENTDOM.COM/Builtin/Account Operators) Administrators (CLIENTDOM.COM/Builtin/Administrators) 18 Total: 12 Enabled, 6 Disabled Enabled: Hira Jobs, NETEDGE, Enterprise Admins, David Martinez, Brenda Young, Michael Midland, Michael Morris, Mark Whitman, Pablo Garza, Domain Admins, Steve Brai, Administrator Disabled: Trey Clemments, Chris Wright, Deonne Williams, Jon Portman, Brian Pierson, Bob Lunnsford Allowed RODC Password Replication Group (CLIENTDOM.COM/Users/Allowed RODC Password Replication Group) AppV Administrators (CLIENTDOM.COM/AppV/AppV Administrators) 3 Total: 2 Enabled, 1 Disabled Appv Users (CLIENTDOM.COM/AppV/Appv Users) 3 Total: 2 Enabled, 1 Disabled Enabled: Joe Costello, Jim Dresden Disabled: TestV Enabled: Joe Costello, Jim Dresden Disabled: TestV Backup Operators (CLIENTDOM.COM/Builtin/Backup Operators) Cert Publishers Enabled: STORAGE01 (CLIENTDOM.COM/Users/Cert Publishers) 1 Total: 1 Enabled, 0 Disabled Certificate Service DCOM Access (CLIENTDOM.COM/Builtin/Certificate Service DCOM Access) Cryptographic Operators (CLIENTDOM.COM/Builtin/Cryptographic Operators) PROPRIETARY & CONFIDENTIAL PAGE 13 of 251 NETWORK ASSESSMENT Group Name Denied RODC Password Replication Group (CLIENTDOM.COM/Users/Denied RODC Password Replication Group) 8 Total: 8 Enabled, 0 Disabled Members Enabled: Domain Controllers, krbtgt, Schema Admins, Read-only Domain Controllers, Enterprise Admins, Cert Publishers, Domain Admins, Group Policy Creator Owners Developement (CLIENTDOM.COM/Users/Developement) DHCP Administrators Enabled: Hira Jobs, Brenda Young (CLIENTDOM.COM/Users/DHCP Administrators) 2 Total: 2 Enabled, 0 Disabled DHCP Users (CLIENTDOM.COM/Users/DHCP Users) Distributed COM Users (CLIENTDOM.COM/Builtin/Distributed COM Users) DnsAdmins Enabled: Domain Admins (CLIENTDOM.COM/Users/DnsAdmins) 1 Total: 1 Enabled, 0 Disabled DnsUpdateProxy (CLIENTDOM.COM/Users/DnsUpdateProxy) Domain Admins (CLIENTDOM.COM/Users/Domain Admins) 18 Total: 15 Enabled, 3 Disabled Enabled: Hira Jobs, Joe Costello, Dhunjishah Bhariva, Jim Dresden, Tony Hartsfield, Brenda Young, Michael Midland, Michael Morris, Mark Whitman, Fere Thalsim, Marcusus Pullman, Nguyen Phan, Pablo Garza, Paul Kirby, Steve Brai Disabled: Chris Wright, Jon Portman, Brian Pierson Domain Computers (CLIENTDOM.COM/Users/Domain Computers) Domain Controllers (CLIENTDOM.COM/Users/Domain Controllers) Domain Guests (CLIENTDOM.COM/Users/Domain Guests) Domain Users PROPRIETARY & CONFIDENTIAL Enabled: NETEDGE, David Martinez, Administrator PAGE 14 of 251 NETWORK ASSESSMENT Group Name Members (CLIENTDOM.COM/Users/Domain Users) 4 Total: 3 Enabled, 1 Disabled Disabled: Bob Lunnsford Enterprise Admins Enabled: Dhunjishah Bhariva, Jim Dresden, Paul Kirby, Steve Brai, Administrator Disabled: Bob Lunnsford (CLIENTDOM.COM/Users/Enterprise Admins) 6 Total: 5 Enabled, 1 Disabled Enterprise Read-only Domain Controllers (CLIENTDOM.COM/Users/Enterprise Read-only Domain Controllers) Event Log Readers (CLIENTDOM.COM/Builtin/Event Log Readers) Exchange Install Domain Servers Enabled: CLIENT-LOC-EXTEST, CLIENT-LOC-EXCHTKT (CLIENTDOM.COM/Microsoft Exchange System Objects/Exchange Install Domain Servers) 2 Total: 2 Enabled, 0 Disabled Exchange Organization Administrators Enabled: Tony Hartsfield, Administrator (CLIENTDOM.COM/Microsoft Exchange Security Groups/Exchange Organization Administrators) 2 Total: 2 Enabled, 0 Disabled Exchange Public Folder Administrators Enabled: Exchange Organization Administrators (CLIENTDOM.COM/Microsoft Exchange Security Groups/Exchange Public Folder Administrators) 1 Total: 1 Enabled, 0 Disabled Exchange Recipient Administrators Enabled: Exchange Organization Administrators (CLIENTDOM.COM/Microsoft Exchange Security Groups/Exchange Recipient Administrators) 1 Total: 1 Enabled, 0 Disabled Exchange Servers Enabled: Exchange Install Domain Servers, CLIENT-LOC-EXTEST, CLIENT-LOC-EXCHTKT (CLIENTDOM.COM/Microsoft Exchange Security Groups/Exchange Servers) PROPRIETARY & CONFIDENTIAL PAGE 15 of 251 NETWORK ASSESSMENT Group Name Members 3 Total: 3 Enabled, 0 Disabled Exchange View-Only Administrators Enabled: Exchange Public Folder Administrators, Exchange Recipient Administrators (CLIENTDOM.COM/Microsoft Exchange Security Groups/Exchange View-Only Administrators) 2 Total: 2 Enabled, 0 Disabled ExchangeLegacyInterop (CLIENTDOM.COM/Microsoft Exchange Security Groups/ExchangeLegacyInterop) Executive (CLIENTDOM.COM/Users/Executive) Group Policy Creator Owners (CLIENTDOM.COM/Users/Group Policy Creator Owners) 3 Total: 2 Enabled, 1 Disabled Guests (CLIENTDOM.COM/Builtin/Guests) 4 Total: 3 Enabled, 1 Disabled HelpServicesGroup Enabled: Steve Brai, Administrator Disabled: Bob Lunnsford Enabled: IUSR_DC02, IUSR_STEINBRENNER, Domain Guests Disabled: Guest Disabled: SUPPORT_388945a0 (CLIENTDOM.COM/Users/HelpServicesGroup) 1 Total: 0 Enabled, 1 Disabled Hyper-V Servers Enabled: HP02, STORAGE01 (CLIENTDOM.COM/Users/Hyper-V Servers) 2 Total: 2 Enabled, 0 Disabled IIS_IUSRS Enabled: S-1-5-17 (CLIENTDOM.COM/Builtin/IIS_IUSRS) 1 Total: 1 Enabled, 0 Disabled IIS_WPG Enabled: IWAM_DC02, S-1-5-6, S-1-5-18, IWAM_STEINBRENNER, S-1-5-20 (CLIENTDOM.COM/Users/IIS_WPG) 5 Total: 5 Enabled, 0 Disabled PROPRIETARY & CONFIDENTIAL PAGE 16 of 251 NETWORK ASSESSMENT Group Name Incoming Forest Trust Builders Members (CLIENTDOM.COM/Builtin/Incoming Forest Trust Builders) Network Configuration Operators (CLIENTDOM.COM/Builtin/Network Configuration Operators) Operations (CLIENTDOM.COM/Users/Operations) Performance Log Users (CLIENTDOM.COM/Builtin/Performance Log Users) Performance Monitor Users (CLIENTDOM.COM/Builtin/Performance Monitor Users) (CLIENTDOM.COM/Users/CURRMSP Support Team) 14 Total: 10 Enabled, 4 Disabled Enabled: Hira Jobs, Joe Costello, Dhunjishah Bhariva, Jim Dresden, NETEDGE, David Martinez, Brenda Young, Pablo Garza, Paul Kirby, Steve Brai Disabled: Jerry Poole, Joseph Tyrell, Trey Clemments, Brad Hunt Pre-Windows 2000 Compatible Access Enabled: STORAGE01, S-1-5-11 CURRMSP Support Team (CLIENTDOM.COM/Builtin/Pre-Windows 2000 Compatible Access) 2 Total: 2 Enabled, 0 Disabled Print Operators (CLIENTDOM.COM/Builtin/Print Operators) RAS and IAS Servers Enabled: UTIL01 (CLIENTDOM.COM/Users/RAS and IAS Servers) 1 Total: 1 Enabled, 0 Disabled Read-only Domain Controllers (CLIENTDOM.COM/Users/Read-only Domain Controllers) Remote Desktop Users PROPRIETARY & CONFIDENTIAL Enabled: Jim Dresden, DWilliams2, S-1-5-11 PAGE 17 of 251 NETWORK ASSESSMENT Group Name Members (CLIENTDOM.COM/Builtin/Remote Desktop Users) 5 Total: 3 Enabled, 2 Disabled Disabled: Jon Portman, Brian Pierson Replicator (CLIENTDOM.COM/Builtin/Replicator) Schema Admins (CLIENTDOM.COM/Users/Schema Admins) 5 Total: 4 Enabled, 1 Disabled Enabled: Dhunjishah Bhariva, Paul Kirby, Steve Brai, Administrator Disabled: Bob Lunnsford Server Operators (CLIENTDOM.COM/Builtin/Server Operators) Session Broker Computers Enabled: UTIL01 (CLIENTDOM.COM/Users/Session Broker Computers) 1 Total: 1 Enabled, 0 Disabled TelnetClients (CLIENTDOM.COM/Users/TelnetClients) Terminal Server License Servers (CLIENTDOM.COM/Builtin/Terminal Server License Servers) TS Web Access Administrators (CLIENTDOM.COM/Users/TS Web Access Administrators) TS Web Access Computers Enabled: UTIL01 (CLIENTDOM.COM/Users/TS Web Access Computers) 1 Total: 1 Enabled, 0 Disabled Users Enabled: Domain Users, S-1-5-4, ASPNET, S-1-5-11 (CLIENTDOM.COM/Builtin/Users) 4 Total: 4 Enabled, 0 Disabled Windows Authorization Access Group Enabled: S-1-5-9, Exchange Servers (CLIENTDOM.COM/Builtin/Windows Authorization Access Group) PROPRIETARY & CONFIDENTIAL PAGE 18 of 251 NETWORK ASSESSMENT Group Name Members 2 Total: 2 Enabled, 0 Disabled WINS Users (CLIENTDOM.COM/Users/WINS Users) PROPRIETARY & CONFIDENTIAL PAGE 19 of 251 NETWORK ASSESSMENT 3.7 - Computers in Domain This section contains a listing of all computers from Active Directory. Computers which have not logged in for over 30 days are highlighted in red. Computer Name 1RB11D1 AGENT003-PC APPV-MGMT-SRV IP Address(es) DNS Entry ATLDC01 BHunt-LTV Brenda 10.0.1.112 CLIENTDOM-HLI4PQ CLIENTDOM-LT1 CLIENTDOM-SCB-LTP Clienthq CLIENT-LOC-CORE CLIENT-LOC-EXCHTKT CLIENT-LOC-EXTEST CLIENT-LOC-HPV01 CLIENT-LOC-RJLLTP CLIENT-LOC-WS01 CLIENTWS-PK CLOVEPOWER PROPRIETARY & CONFIDENTIAL brenda.clientdom.com, demo5.clientdom.com Operating System Windows 7 Enterprise Windows 7 Enterprise Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows 7 Ultimate Windows 7 Enterprise Last Login 3/29/2012 9:02:24 AM 2/14/2012 11:58:15 PM 8/13/2012 10:01:07 PM 2/16/2011 11:02:53 AM 2/18/2011 10:38:06 AM 10/25/2012 11:15:31 AM Windows XP Professional 2/25/2010 5:42:04 PM Windows 7 Enterprise 12/21/2011 3:41:26 PM Windows XP Professional 8/9/2010 10:22:14 AM 5/5/2011 7:17:26 AM Windows Server 2003 6/20/2011 3:46:29 AM Windows Server 2003 2/10/2010 6:07:59 AM Windows Server 2003 2/23/2010 7:42:35 PM Windows Server 2008 5/25/2010 11:52:05 PM Enterprise Windows XP Professional 4/19/2010 12:09:39 PM Windows XP Professional 5/30/2011 6:26:39 PM Windows 7 Enterprise 5/9/2011 10:06:23 AM <never> PAGE 20 of 251 NETWORK ASSESSMENT Computer Name CONFERENCE1 CONFERENCEROOM Costello-SG CURRIT30DEV CURRITDEMO CURRITNMS-BDF CURRITPATCH D620-5P9W0C1 D620-8BCJVD1 DC01 DELL_OFFICE DELL120720 DEMO5 DEONNE DEVWIKI DIALTONE DMartinez-PC Dresden Dresden-XP DWilliams2 ENGINEERS ERPI-CLIENTDOM-01 FTDELLLAPTOP FTDESKTOPWORK IP Address(es) Operating System Windows XP Professional Windows 7 Enterprise 10.0.1.157 costello-sg.clientdom.com Windows 7 Enterprise 10.0.1.92 currit30dev.clientdom.com Windows 2000 Server Windows Server 2008 R2 Enterprise Windows Server 2003 10.0.1.223 curritpatch.clientdom.com Windows 2000 Server Windows 7 Enterprise Windows 7 Enterprise fe80::19fd:e0a9:805:bb9b%10, dc01.clientdom.com Windows Server 2008 R2 10.0.1.3 Datacenter Windows XP Professional Windows 7 Enterprise Windows Server 2003 10.0.1.151 deonne.clientdom.com Windows XP Professional 10.0.1.12 devwiki.clientdom.com Windows Server 2003 Windows XP Professional fe80::d14a:a218:ebda:19ed%10, dmartinezWindows 7 Enterprise 10.0.1.91 pc.clientdom.com Windows XP Professional Windows XP Professional Windows XP Professional 10.0.1.50 engineers.clientdom.com Windows 2000 Server Windows 7 Ultimate Windows 7 Enterprise Windows XP Professional PROPRIETARY & CONFIDENTIAL DNS Entry Last Login 2/29/2012 1:39:25 PM 3/5/2012 6:13:14 PM 10/25/2012 3:27:28 PM 10/25/2012 4:33:19 PM 10/18/2012 7:34:37 AM 5/20/2010 11:54:28 AM 10/25/2012 5:25:22 PM 4/15/2011 3:58:36 PM 7/20/2012 11:25:48 AM 10/25/2012 10:05:20 AM 8/7/2009 6:15:10 PM 9/20/2012 3:46:05 PM 7/31/2012 12:43:29 PM 10/25/2012 5:26:58 PM 10/25/2012 9:14:47 AM 7/11/2012 9:36:30 AM 10/24/2012 12:25:11 AM 8/1/2011 9:23:57 AM 9/26/2012 3:18:39 PM 3/13/2011 4:36:51 AM 10/25/2012 3:24:56 PM 7/19/2010 9:41:38 AM 10/25/2012 5:02:54 PM 6/5/2012 3:09:59 PM PAGE 21 of 251 NETWORK ASSESSMENT Computer Name HJOBS-VM-WIN764 IP Address(es) 10.0.1.215 DNS Entry hjobs-vmwin764.clientdom.com HP01 HP02 HPV00 10.0.1.60 hpv00.clientdom.com HYPERV 10.0.1.67 hyperv.clientdom.com HYPERV01 ISA1 JAGA JAMIE-PC jsanford-WIN7 LEE MEGATRON MIGTEST MMidland MMidland1 Mmorris1 MSHELLEY MSHELLY1 MWhitman 10.0.1.6 isa1.clientdom.com fe80::812:5802:b8e5:fd39%10, jamie-pc.clientdom.com fe80::1194:b88d:d627:97a4%12, 10.0.1.156, 10.0.1.83 10.0.1.93 jsanfordwin7.clientdom.com 10.0.1.4 10.0.1.90 10.0.1.114 PROPRIETARY & CONFIDENTIAL Operating System Windows 7 Enterprise Last Login 10/25/2012 1:47:30 PM Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Enterprise 9/21/2012 7:49:26 PM 8/13/2012 6:35:09 PM 10/23/2012 11:35:40 PM 10/25/2012 12:50:34 PM Windows Server 2003 Windows Server 2003 Windows 7 Enterprise 9/17/2012 10:31:45 AM 10/25/2012 9:52:47 AM 11/10/2010 1:28:51 PM 10/25/2012 4:23:56 PM Windows 7 Enterprise 10/25/2012 1:31:44 PM Windows 7 Enterprise megatron.clientdom.com Windows Server 2003 migtest.clientdom.com Windows 7 Enterprise Windows XP Professional mmidland1.clientdom.com Windows Vista Business Windows XP Professional Windows XP Professional Windows XP Professional Windows XP Professional 7/24/2012 11:30:46 PM 10/25/2012 3:27:12 PM 10/25/2012 1:55:37 PM 6/19/2009 4:12:43 PM 10/25/2012 4:49:26 PM 6/5/2012 9:35:56 PM 8/9/2011 1:29:04 PM 8/10/2011 2:31:52 PM 8/27/2009 2:39:17 PM PAGE 22 of 251 NETWORK ASSESSMENT Computer Name MWhitmanLAPTOP MWhitman-LT NAGATEWAY NETSCAN01 PABUILD PEACH PERSHING-CLIENTDOM PGarza1 PGarza-WIN7 PGarza-WIN764 pKirby1 PKWIN7ENT PS01 REMOTE REX ROBERT-PC RS01 SBLAPTOP IP Address(es) DNS Entry Operating System Last Login Windows XP Professional 9/12/2012 8:40:54 AM Windows 7 Enterprise 10/25/2012 5:20:48 PM fe80::2da9:d856:2cee:ce16%12, mwhitmanfe80::edb9:c6fa:827c:1c67%13, lt.clientdom.com 10.0.1.81, 10.0.1.84 10.0.1.137 nagateway.clientdom.com Windows Server 2008 R2 Enterprise Windows 7 Enterprise 10.0.1.35 pabuild.clientdom.com Windows Server 2003 Windows XP Professional Windows 7 Enterprise 10.0.1.221 pgarza1.clientdom.com Windows 7 Enterprise Windows 7 Enterprise fe80::20dd:cdd2:c1bf:95dc%10, pgarzaWindows 7 Enterprise 10.0.1.99 win764.clientdom.com Windows 7 Professional 204.193.140.79, pkwin7ent.clientdom.com Windows 7 Enterprise 192.168.199.79, 192.168.99.79, 192.168.2.79, 192.168.1.79, 10.10.10.222, 10.0.1.79 10.0.1.9 ps01.clientdom.com Windows Server 2008 R2 Enterprise 10.0.1.13 remote.clientdom.com Windows 2000 Server 10.0.1.220 rex.clientdom.com Windows 7 Enterprise Windows 7 Professional 10.0.1.14 rs01.clientdom.com, Windows Server 2008 R2 jazz.clientdom.com Enterprise Windows XP Professional PROPRIETARY & CONFIDENTIAL 10/25/2012 1:57:01 PM 7/31/2012 12:11:39 PM 10/20/2012 3:19:38 PM 10/12/2012 9:58:57 AM 9/21/2012 3:21:36 PM 10/25/2012 2:58:21 PM 7/31/2012 8:56:13 AM 10/25/2012 1:54:54 PM 2/20/2011 2:52:20 AM 10/25/2012 12:36:03 PM 10/25/2012 1:28:27 PM 10/25/2012 2:48:23 PM 10/25/2012 12:54:30 PM 10/12/2010 9:00:23 AM 10/25/2012 5:16:58 PM 5/11/2009 10:09:45 AM PAGE 23 of 251 NETWORK ASSESSMENT Computer Name SE-Dresden SHAREPOINT1 SHELDON SHREDDER STARSCREAM STARTEAM STORAGE01 TERMINUS TESTSERVER1 TESTXP01 THRASH2 USAL9K49RH1 USER-PC23 UTIL01 VM1-WIN2003 VM2-2003 VM-JDresden-WIN7 VM-WIN2003 VM-WIN7 VM-WIN7-2 VM-WIN7-3 VM-WIN8BETA IP Address(es) DNS Entry Operating System fe80::cd61:f583:64a6:8763%10, se-dresden.clientdom.com Windows 7 Professional fe80::1de9:b256:9e1e:5e4e%25, 10.0.1.76, 192.168.56.1 Windows Server 2003 10.0.1.103 sheldon.clientdom.com Windows 7 Enterprise 10.0.1.11 shredder.clientdom.com Windows Server 2003 Windows Server 2003 Windows 2000 Server 10.0.1.69, 192.168.11.1 storage01.clientdom.com Windows Server 2008 R2 Enterprise 10.0.1.118 terminus.clientdom.com Windows 7 Enterprise Windows Server 2008 R2 Standard Windows XP Professional Windows 2000 Server Windows XP Professional Windows 7 Enterprise 10.0.1.175, 10.0.1.5 util01.clientdom.com Windows Server 2008 R2 Datacenter Windows Server 2003 Windows Server 2003 Windows 7 Enterprise Windows Server 2003 10.0.1.37 vm-win7.clientdom.com Windows 7 Enterprise Windows 7 Enterprise Windows 7 Enterprise Windows 8 Consumer PROPRIETARY & CONFIDENTIAL Last Login 10/25/2012 3:24:21 PM 2/13/2011 10:22:06 PM 10/25/2012 7:49:44 AM 10/25/2012 3:54:25 PM 7/16/2009 3:01:05 PM 5/4/2011 10:31:42 PM 10/25/2012 2:25:39 PM 10/25/2012 12:44:11 PM 10/26/2010 11:27:43 AM 12/13/2010 10:32:40 AM 10/25/2012 3:11:23 AM 9/6/2012 7:12:25 PM 10/25/2012 1:05:07 AM 10/16/2012 9:58:56 AM 11/22/2009 6:30:18 AM 11/21/2009 9:33:36 PM 10/25/2012 5:15:18 PM 10/12/2012 3:42:07 AM 10/25/2012 4:05:50 PM 10/4/2012 1:25:16 PM 4/1/2012 5:55:23 PM 5/2/2012 8:33:50 AM PAGE 24 of 251 NETWORK ASSESSMENT Computer Name IP Address(es) W2012TEST 10.0.1.15 WIN2008 WIN2008R2 WIN7ULT WINDESKTOP wmartinez1 10.0.1.122 PROPRIETARY & CONFIDENTIAL DNS Entry Operating System Preview w2012test.clientdom.com Windows Server 2012 Datacenter Windows Server 2008 Standard Windows Server 2008 R2 Enterprise Windows 7 Ultimate windesktop.clientdom.com Windows Vista Ultimate Windows 7 Ultimate Last Login 10/25/2012 5:23:54 PM 7/5/2010 5:31:06 PM 8/13/2012 11:51:37 PM 6/1/2009 7:51:31 PM 10/25/2012 10:51:26 AM 3/14/2011 3:22:29 PM PAGE 25 of 251 NETWORK ASSESSMENT PROPRIETARY & CONFIDENTIAL PAGE 26 of 251 NETWORK ASSESSMENT 3.9 - Domain DNS This section contains a listing of all IP addresses and hostnames from DNS, with conflicting entries highlighted in red. IP Address Hostname 10.0.1.3 10.0.1.3 CLIENTDOM.COM dc01.CLIENTDOM.COM 10.0.1.4 megatron.CLIENTDOM.COM 10.0.1.5 10.0.1.5 CLIENTDOM.COM util01.CLIENTDOM.COM 10.0.1.6 10.0.1.9 10.0.1.11 10.0.1.12 10.0.1.13 ISA1.CLIENTDOM.COM PS01.CLIENTDOM.COM shredder.CLIENTDOM.COM devwiki.CLIENTDOM.COM remote.CLIENTDOM.COM 10.0.1.14 10.0.1.14 jazz.CLIENTDOM.COM RS01.CLIENTDOM.COM 10.0.1.15 10.0.1.17 10.0.1.20 10.0.1.22 10.0.1.23 10.0.1.24 10.0.1.25 10.0.1.27 10.0.1.29 10.0.1.33 W2012Test.CLIENTDOM.COM CLIENT-LOC-core.CLIENTDOM.COM ESX.CLIENTDOM.COM redhat4es.CLIENTDOM.COM suse80prof.CLIENTDOM.COM sol7i386.CLIENTDOM.COM debiani386.CLIENTDOM.COM redhat72.CLIENTDOM.COM macmini.CLIENTDOM.COM thrash2.CLIENTDOM.COM 10.0.1.34 10.0.1.34 fastfurlong.CLIENTDOM.COM peach.CLIENTDOM.COM PROPRIETARY & CONFIDENTIAL PAGE 27 of 251 NETWORK ASSESSMENT IP Address 10.0.1.35 10.0.1.37 10.0.1.39 10.0.1.45 10.0.1.50 10.0.1.51 10.0.1.52 10.0.1.59 10.0.1.60 10.0.1.67 10.0.1.68 10.0.1.69 10.0.1.76 10.0.1.78 10.0.1.79 10.0.1.81 10.0.1.83 10.0.1.84 10.0.1.85 10.0.1.86 10.0.1.90 10.0.1.91 10.0.1.92 10.0.1.93 10.0.1.94 10.0.1.95 Hostname pabuild.CLIENTDOM.COM vm-win7.CLIENTDOM.COM vm-win2003.CLIENTDOM.COM Win2008R2.CLIENTDOM.COM engineers.CLIENTDOM.COM HP01.CLIENTDOM.COM HP02.CLIENTDOM.COM HyperV01.CLIENTDOM.COM HPV00.CLIENTDOM.COM HYPERV.CLIENTDOM.COM esx3i.CLIENTDOM.COM Storage01.CLIENTDOM.COM SE-Dresden.CLIENTDOM.COM CLIENTDOM-LT1.CLIENTDOM.COM PKWIN7ENT.CLIENTDOM.COM MWhitman-LT.CLIENTDOM.COM Jamie-PC.CLIENTDOM.COM MWhitman-LT.CLIENTDOM.COM mshelly1.CLIENTDOM.COM sun26.CLIENTDOM.COM MIGTEST.CLIENTDOM.COM dMartinez-PC.CLIENTDOM.COM CURRIT30dev.CLIENTDOM.COM jsanford-win7.CLIENTDOM.COM CURRITDemo.CLIENTDOM.COM CURRITDemo.CLIENTDOM.COM 10.0.1.96 NETSCAN01.CLIENTDOM.COM PROPRIETARY & CONFIDENTIAL PAGE 28 of 251 NETWORK ASSESSMENT IP Address Hostname 10.0.1.96 vm-win8beta.CLIENTDOM.COM 10.0.1.99 10.0.1.102 10.0.1.103 pGarza-win764.CLIENTDOM.COM VM-JDresden-WIN7.CLIENTDOM.COM SHELDON.CLIENTDOM.COM 10.0.1.112 10.0.1.112 Brenda.CLIENTDOM.COM demo5.CLIENTDOM.COM 10.0.1.114 10.0.1.118 10.0.1.119 10.0.1.120 10.0.1.122 10.0.1.132 10.0.1.135 10.0.1.137 10.0.1.144 mMidland1.CLIENTDOM.COM TERMINUS.CLIENTDOM.COM FTDellLaptop.CLIENTDOM.COM USAL9K49RH1.CLIENTDOM.COM windesktop.CLIENTDOM.COM mshelley.CLIENTDOM.COM VM-WIN7-3.CLIENTDOM.COM NAGATEWAY.CLIENTDOM.COM 1RB11D1.CLIENTDOM.COM 10.0.1.145 10.0.1.145 DELL120720.CLIENTDOM.COM Mmorris1.CLIENTDOM.COM 10.0.1.149 10.0.1.151 10.0.1.154 10.0.1.156 10.0.1.157 10.0.1.159 10.0.1.173 10.0.1.174 10.0.1.175 10.0.1.178 10.0.1.202 mWhitmanlaptop.CLIENTDOM.COM deonne.CLIENTDOM.COM Dresden-xp.CLIENTDOM.COM Jamie-PC.CLIENTDOM.COM Costello-SG.CLIENTDOM.COM d620-8bcjvd1.CLIENTDOM.COM FTDesktopWork.CLIENTDOM.COM dialtone.CLIENTDOM.COM util01.CLIENTDOM.COM CLIENTDOM.COM agent003-PC.CLIENTDOM.COM PROPRIETARY & CONFIDENTIAL PAGE 29 of 251 NETWORK ASSESSMENT IP Address 10.0.1.215 10.0.1.220 10.0.1.221 10.0.1.223 Hostname hjobs-vm-win764.CLIENTDOM.COM rex.CLIENTDOM.COM pGarza1.CLIENTDOM.COM CURRITpatch.CLIENTDOM.COM 10.0.1.227 10.0.1.227 conference1.CLIENTDOM.COM CONFERENCEROOM.CLIENTDOM.COM 10.0.1.240 10.0.1.242 10.0.1.248 10.0.1.252 redhat80dev.CLIENTDOM.COM honker.CLIENTDOM.COM vm-ubuntu910.CLIENTDOM.COM vm-ubuntu10.CLIENTDOM.COM 10.0.2.15 10.0.2.15 CLIENTDOM.COM Pershing-CLIENTDOM.CLIENTDOM.COM 10.10.10.222 10.255.255.51 10.255.255.52 10.255.255.101 10.255.255.102 192.168.1.79 192.168.2.79 192.168.11.1 192.168.99.79 192.168.199.79 204.193.140.79 PKWIN7ENT.CLIENTDOM.COM HP01.CLIENTDOM.COM HP02.CLIENTDOM.COM HP01.CLIENTDOM.COM HP02.CLIENTDOM.COM PKWIN7ENT.CLIENTDOM.COM PKWIN7ENT.CLIENTDOM.COM Storage01.CLIENTDOM.COM PKWIN7ENT.CLIENTDOM.COM PKWIN7ENT.CLIENTDOM.COM PKWIN7ENT.CLIENTDOM.COM PROPRIETARY & CONFIDENTIAL PAGE 30 of 251 NETWORK ASSESSMENT 4 - Non A/D Devices This section contains a listing of all devices which were not joined to a domain. IP Address 10.0.1.2 Computer Name 10.0.1.1 10.0.1.7 10.0.1.24 sol7i386.CLIENTDOM.COM 10.0.1.27 redhat72.CLIENTDOM.COM 10.0.1.25 debiani386.CLIENTDOM.COM 10.0.1.23 10.0.1.32 suse80prof.CLIENTDOM.COM PROPRIETARY & CONFIDENTIAL Listening Port(s) SSH (22/TCP), Telnet (23/TCP), HTTP (80/TCP) SSH (22/TCP), Telnet (23/TCP) Device Type Enterasys Networks, Inc. C3G12448 Rev 06.42.10.0016 Cisco IOS Software, 1841 Software (C1841-ADVIPSERVICESK9-M), Version 12.4(24)T4, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2010 by Cisco Systems, Inc. Compiled Fri 03-Sep10 04:00 by prod_rel_team HTTP (80/TCP), HTTPS (443/TCP) FTP (21/TCP), SSH (22/TCP), Telnet (23/TCP), SMTP (25/TCP) SSH (22/TCP), SMTP (25/TCP), Linux redhat72 2.4.7-10 #1 Thu Sep HTTP (80/TCP), HTTPS (443/TCP) 6 17:27:27 EDT 2001 i686 FTP (21/TCP), Telnet (23/TCP) HP ETHERNET MULTIENVIRONMENT,ROM G.07.02,JETDIRECT,JD30,EEPROM G.08.49 SSH (22/TCP) Telnet (23/TCP), HTTP (80/TCP) Cisco Internetwork Operating System Software IOS (tm) C3500XL Software (C3500XL-C3H2S-M), PAGE 31 of 251 NETWORK ASSESSMENT IP Address Computer Name Listening Port(s) 10.0.1.22 redhat4es.CLIENTDOM.COM SSH (22/TCP) 10.0.1.29 CLIENTMACMINI FTP (21/TCP), SSH (22/TCP), VNC (5900/TCP) Telnet (23/TCP), HTTP (80/TCP) EHTTP/1.1 Telnet (23/TCP), HTTP (80/TCP) EHTTP/1.1 SSH (22/TCP), DNS (53/TCP), HTTP (80/TCP) FTP (21/TCP), SSH (22/TCP), HTTP (80/TCP), HTTPS (443/TCP) FTP (21/TCP), SSH (22/TCP), Telnet Sun SNMP Agent, Ultra-60 (23/TCP), SMTP (25/TCP) 10.0.1.31 10.0.1.30 10.0.1.36 10.0.1.68 esx3i.CLIENTDOM.COM 10.0.1.86 10.0.1.85 10.0.1.71 10.0.1.96 10.0.1.100 10.0.1.105 10.0.1.106 10.0.1.113 10.0.1.104 10.0.1.115 10.0.1.120 PROPRIETARY & CONFIDENTIAL CLIENTCert1 HTTP (80/TCP), RDP (3389/TCP) Device Type Version 12.0(5.2)XU, MAINTENANCE INTERIM SOFTWARE Copyright (c) 1986-2000 by cisco Systems, Inc. Compiled Mon 17-Jul-00 18:29 by ayounes Linux redhat4es 2.6.9-5.EL #1 Wed Jan 5 19:22:18 EST 2005 i686 Microsoft-IIS/7.5 HTTPS (443/TCP) HTTP (80/TCP), RDP (3389/TCP) PAGE 32 of 251 NETWORK ASSESSMENT IP Address 10.0.1.149 10.0.1.146 10.0.1.147 10.0.1.162 10.0.1.153 10.0.1.167 10.0.1.219 10.0.1.218 10.0.1.206 10.0.1.245 Computer Name 10.0.1.253 10.0.1.224 10.0.1.242 10.0.1.240 PROPRIETARY & CONFIDENTIAL Listening Port(s) RDP (3389/TCP) Device Type HTTP (80/TCP) FTP (21/TCP), HTTP (80/TCP) HTTP (80/TCP) httpd D-Link DP-301P+ Print Server FTP (21/TCP), Telnet (23/TCP), SMTP (25/TCP), HTTP (80/TCP) Brother NC-7500w, Firmware Ver.0.30 (09.06.25),MID 8CE217,FID 2 Cisco IOS Software, 1841 Software (C1841-ADVIPSERVICESK9-M), Version 12.4(24)T4, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2010 by Cisco Systems, Inc. Compiled Fri 03-Sep10 04:00 by prod_rel_team SSH (22/TCP), Telnet (23/TCP) honker.CLIENTDOM.COM FTP (21/TCP), SSH (22/TCP), Telnet (23/TCP), MySQL (3306/TCP) SSH (22/TCP) PAGE 33 of 251 NETWORK ASSESSMENT 5 - Servers This section and corresponding sub-sections contain a comprehensive listing of servers by type, which are then categorized by domain membership. 5.1 - MS SQL Servers CLIENTDOM.COM MS SQL Server Name PABUILD CURRIT30DEV THRASH2 THRASH2 REMOTE REX SHELDON STORAGE01 ISA1 TERMINUS Instance SQLEXPRESS SQLEXPRESS SQLEXPRESS SQLEXPRESS SUNBELT Version 9.00.4035.00 9.00.3042.00 8.00.194 9.00.1399.06 8.00.194 9.00.5000.00 9.00.5000.00 9.00.4035.00 # of Databases <unknown> 8 <unknown> <unknown> 9 <unknown> <unknown> <unknown> <unknown> <unknown> Active SQL Agent Jobs? <unknown> 2 <unknown> <unknown> 2 <unknown> <unknown> <unknown> <unknown> <unknown> 5.2 - Web Servers CLIENTDOM.COM IP Address 10.0.1.13 10.0.1.5 PROPRIETARY & CONFIDENTIAL Web Server Name REMOTE UTIL01 Listening Port(s) 443/TCP 80/TCP, 443/TCP Server Type Microsoft-IIS/7.5 PAGE 34 of 251 NETWORK ASSESSMENT IP Address 10.0.1.11 10.0.1.6 10.0.1.12 10.0.1.35 10.0.1.67 10.0.1.69 10.0.1.76 10.0.1.92 10.0.1.103 10.0.1.175 Web Server Name SHREDDER ISA1 DEVWIKI PABUILD HYPERV STORAGE01 SE-Dresden CURRIT30DEV SHELDON UTIL01 Listening Port(s) 80/TCP, 443/TCP 80/TCP, 8080/TCP 80/TCP 80/TCP 80/TCP 80/TCP, 443/TCP 443/TCP 80/TCP, 443/TCP, 8080/TCP 80/TCP 80/TCP, 443/TCP Server Type Microsoft-IIS/6.0 Web Server Name Listening Port(s) 80/TCP 80/TCP, 443/TCP 80/TCP, 443/TCP Server Type Embedded Web Server Apache/2.0.55 (Win32) PHP/5.1.2 Microsoft-IIS/7.5 Microsoft-IIS/7.5 Microsoft-IIS/5.0 Microsoft-IIS/7.5 No Domain IP Address 10.0.1.2 10.0.1.7 10.0.1.27 10.0.1.32 10.0.1.31 10.0.1.30 10.0.1.36 10.0.1.68 10.0.1.71 10.0.1.104 10.0.1.120 PROPRIETARY & CONFIDENTIAL redhat72.CLIENTDOM.COM esx3i.CLIENTDOM.COM CLIENTCert1 80/TCP 80/TCP 80/TCP 80/TCP 80/TCP, 443/TCP 80/TCP 443/TCP 80/TCP Apache/1.3.20 (Unix) (RedHat/Linux) mod_ssl/2.8.4 OpenSSL/0.9.6b DAV/1.0.2 PHP/4.0.6 mod_perl/1.24_01 EHTTP/1.1 EHTTP/1.1 Microsoft-IIS/7.5 PAGE 35 of 251 NETWORK ASSESSMENT IP Address 10.0.1.132 10.0.1.147 10.0.1.162 10.0.1.153 10.0.1.245 Web Server Name isa1.CLIENTDOM.COM Listening Port(s) 80/TCP 80/TCP 80/TCP 80/TCP 80/TCP Server Type httpd Web Server/1.0 debut/1.08 5.3 - Time Servers CLIENTDOM.COM Time Server Name dc01.CLIENTDOM.COM IP Address fe80::19fd:e0a9:805:bb9b%10 5.4 - Exchange Servers CLIENTDOM.COM Exchange Server Name CLIENT-LOC-EXCHTKT CLIENT-LOC-EXTEST Type Exchange 2007 Exchange 2007 5.5 - DHCP Servers CLIENTDOM.COM PROPRIETARY & CONFIDENTIAL PAGE 36 of 251 NETWORK ASSESSMENT IP Address(es) 10.0.1.69, 192.168.11.1 Server Name Errors (last 24 hours) storage01 <none> 5.6 - Hyper-V Servers CLIENTDOM.COM Host Hyper-V Guest Information Name State Operating System HPV00 W2012Test Running Windows Server 2012 Datacenter CURRITDemo Off hjobs-vm Running Windows 7 Enterprise DC01 PS01 CLIENTCert PKWin7Ent MFurlong Running Running Running Running Off Windows Server 2008 R2 Datacenter Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Enterprise Windows 7 Enterprise Jims Win7 Running Windows 7 Enterprise RS01 Running Windows Server 2008 R2 Enterprise MigrationTest Running Windows 7 Enterprise vm-ubuntu1110 Off VM-WIN2003 Off vm-win8beta Off vm-ubuntu910 Off vm-win7-2 Off vm-win7-3 Off VM-Win7 Running HYPERV PROPRIETARY & CONFIDENTIAL Notes Production DC for PIT Production PS for PIT Client Stand Alone "Public" Certificate Server PKirby - Local test Win7 box Remote Support machine (ScreenConnect and the like) for remote support of clients. Windows 7 Enterprise PAGE 37 of 251 NETWORK ASSESSMENT Host STORAGE01 Hyper-V Guest Information Name State Operating System vm-ubuntu9 Off VM-WINXP Off VM-Win7-French Off VM-Win2000 Off vm-ubuntu10 Off ubuntu1204 Off DEVPITDC Running fedora14 Off vm-ubuntu1104 Off centos55 Off UTIL01 Running Windows Server 2008 R2 Datacenter Brenda Running Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL Notes Windows Server 2008 R2 Standard PAGE 38 of 251 NETWORK ASSESSMENT 6 - Printers This section contains a listing of all printers categorized by a combination of domain membership and method of access. Alerts for SNMPenabled printers are also displayed in red. CLIENTDOM.COM (from Active Directory) IP Address 10.0.1.50 Printer Name HP LaserJet 4 HP Laserjet 2100 Brother MFC-9320CW Printer Accessed From ENGINEERS PS01 PS01 Location Comment Accessed From Brenda DEONNE MMidland1 Location Comment CLIENTDOM.COM (from WMI) IP Address 10.0.1.112 10.0.1.151 10.0.1.114 10.0.1.103 10.0.1.118 10.0.1.118 10.0.1.122 10.0.1.122 10.0.1.122 Printer Name Send To OneNote 2007 Send To OneNote 2007 Microsoft Office Live Meeting 2007 Document Writer PDFCreator Zan Image Printer (Color) Zan Image Printer (BW) Zan Image Printer (Color) Zan Image Printer (BW) Microsoft Office Live Meeting 2007 Document Writer PROPRIETARY & CONFIDENTIAL SHELDON TERMINUS TERMINUS WINDESKTOP WINDESKTOP WINDESKTOP eDoc Printer PAGE 39 of 251 NETWORK ASSESSMENT Networked (from SNMP) IP Address 10.0.1.25 Printer Name HP LaserJet 2100 Series 10.0.1.245 PROPRIETARY & CONFIDENTIAL Hostname Description Alerts debiani386.CLIENTDOM.COM HP ETHERNET MULTIENVIRONMENT,ROM G.07.02,JETDIRECT,JD30,EEPROM G.08.49 Brother NC-7500w, Firmware Sleep Ver.0.30 (09.06.25),MID 8CE217,FID 2 PAGE 40 of 251 NETWORK ASSESSMENT 7 - Network Shares This section contains a listing of all network shares categorized first by domain membership, and then by machine. CLIENTDOM.COM Hosted By Brenda Share UNC Costello-SG \\Costello-SG\ADMIN$ \\Costello-SG\C$ \\Costello-SG\D$ \\Costello-SG\IPC$ CURRIT30DEV \\CURRIT30DEV\c drive \\CURRIT30DEV\IPC$ \\CURRIT30DEV\ADMIN$ \\CURRIT30DEV\SourceSafe \\CURRIT30DEV\C$ CURRITPATCH \\CURRITPATCH\clients \\CURRITPATCH\IPC$ \\CURRITPATCH\ADMIN$ \\CURRITPATCH\C$ \\CURRITPATCH\UpdateCreator DC01 \\DC01\ADMIN$ \\DC01\C$ \\DC01\IPC$ PROPRIETARY & CONFIDENTIAL \\Brenda\ADMIN$ \\Brenda\C$ \\Brenda\IPC$ PAGE 41 of 251 NETWORK ASSESSMENT Hosted By Share UNC \\DC01\NETLOGON \\DC01\share \\DC01\SYSVOL DEONNE \\DEONNE\IPC$ \\DEONNE\ADMIN$ \\DEONNE\C$ DEVWIKI \\DEVWIKI\C$ \\DEVWIKI\IPC$ \\DEVWIKI\ADMIN$ \\DEVWIKI\D$ DMartinez-PC \\DMartinez-PC\ADMIN$ \\DMartinez-PC\C$ \\DMartinez-PC\D$ \\DMartinez-PC\IPC$ \\DMartinez-PC\RDP Everywhere ENGINEERS \\ENGINEERS\IPC$ \\ENGINEERS\print$ \\ENGINEERS\HPLaserJ \\ENGINEERS\ADMIN$ \\ENGINEERS\C$ \\ENGINEERS\HP_Laser_Jet_2100-ops HJOBS-VM-WIN764 \\HJOBS-VM-WIN764\ADMIN$ \\HJOBS-VM-WIN764\C$ \\HJOBS-VM-WIN764\IPC$ \\HJOBS-VM-WIN764\ORA PROPRIETARY & CONFIDENTIAL PAGE 42 of 251 NETWORK ASSESSMENT Hosted By Share UNC HPV00 \\HPV00\ADMIN$ \\HPV00\C$ \\HPV00\F$ \\HPV00\G$ \\HPV00\H \\HPV00\H$ \\HPV00\IPC$ HYPERV \\HYPERV\ADMIN$ \\HYPERV\C$ \\HYPERV\D$ \\HYPERV\email2rf \\HYPERV\IPC$ \\HYPERV\localx \\HYPERV\netass \\HYPERV\CURRIT \\HYPERV\share \\HYPERV\Users JAMIE-PC \\JAMIE-PC\ADMIN$ \\JAMIE-PC\C$ \\JAMIE-PC\E$ \\JAMIE-PC\GTW \\JAMIE-PC\IPC$ \\JAMIE-PC\Users jsanford-WIN7 \\jsanford-WIN7\ADMIN$ \\jsanford-WIN7\C$ \\jsanford-WIN7\D$ PROPRIETARY & CONFIDENTIAL PAGE 43 of 251 NETWORK ASSESSMENT Hosted By Share UNC \\jsanford-WIN7\F$ \\jsanford-WIN7\G$ \\jsanford-WIN7\IPC$ \\jsanford-WIN7\Temp MEGATRON \\MEGATRON\Z$ \\MEGATRON\QuickBooks2009 \\MEGATRON\C$ \\MEGATRON\offline_testfolder \\MEGATRON\RDP Everywhere \\MEGATRON\common \\MEGATRON\NEW \\MEGATRON\IPC$ \\MEGATRON\software \\MEGATRON\ADMIN$ \\MEGATRON\ClientApps \\MEGATRON\E$ \\MEGATRON\NS01 MIGTEST \\MIGTEST\ADMIN$ \\MIGTEST\C$ \\MIGTEST\IPC$ MMidland1 \\MMidland1\ADMIN$ \\MMidland1\C$ \\MMidland1\D$ \\MMidland1\IPC$ MWhitman-LT \\MWhitman-LT\ADMIN$ \\MWhitman-LT\C$ PROPRIETARY & CONFIDENTIAL PAGE 44 of 251 NETWORK ASSESSMENT Hosted By Share UNC \\MWhitman-LT\IPC$ NAGATEWAY \\NAGATEWAY\ADMIN$ \\NAGATEWAY\C$ \\NAGATEWAY\IPC$ PABUILD \\PABUILD\CURRIT Builds \\PABUILD\C$ \\PABUILD\share \\PABUILD\Update Services 3.0 API Samples and Tools \\PABUILD\UserAgent \\PABUILD\IPC$ \\PABUILD\CURRITBuild \\PABUILD\ADMIN$ \\PABUILD\local PGarza1 \\PGarza1\ADMIN$ \\PGarza1\C$ \\PGarza1\IPC$ PGarza-WIN764 \\PGarza-WIN764\ADMIN$ \\PGarza-WIN764\C$ \\PGarza-WIN764\IPC$ PKWIN7ENT \\PKWIN7ENT\ADMIN$ \\PKWIN7ENT\C$ \\PKWIN7ENT\IPC$ PS01 \\PS01\ADMIN$ \\PS01\Brother MFC-9320CW Printer PROPRIETARY & CONFIDENTIAL PAGE 45 of 251 NETWORK ASSESSMENT Hosted By Share UNC \\PS01\C$ \\PS01\HP Laserjet 2100 \\PS01\IPC$ \\PS01\print$ REMOTE \\REMOTE\E$ \\REMOTE\IPC$ \\REMOTE\D$ \\REMOTE\snarf_db_backups \\REMOTE\ProXi_Active \\REMOTE\ADMIN$ \\REMOTE\active_db_backups \\REMOTE\C$ REX \\REX\ADMIN$ \\REX\C$ \\REX\csharp bin \\REX\D$ \\REX\download \\REX\IPC$ \\REX\PW16 \\REX\PW16 bin \\REX\redist \\REX\systray \\REX\wix RS01 \\RS01\ADMIN$ \\RS01\C$ \\RS01\IPC$ PROPRIETARY & CONFIDENTIAL PAGE 46 of 251 NETWORK ASSESSMENT Hosted By SE-Dresden Share UNC SHELDON \\SHELDON\ADMIN$ \\SHELDON\C$ \\SHELDON\download \\SHELDON\IPC$ SHREDDER \\SHREDDER\print$ \\SHREDDER\C$ \\SHREDDER\IPC$ \\SHREDDER\ADMIN$ STORAGE01 \\STORAGE01\ADMIN$ \\STORAGE01\C$ \\STORAGE01\CertEnroll \\STORAGE01\ClientApps \\STORAGE01\Common \\STORAGE01\D$ \\STORAGE01\E$ \\STORAGE01\F$ \\STORAGE01\G$ \\STORAGE01\Hyper-V \\STORAGE01\Hyper-V R5 \\STORAGE01\IPC$ \\STORAGE01\ISO PROPRIETARY & CONFIDENTIAL \\SE-Dresden\ADMIN$ \\SE-Dresden\C$ \\SE-Dresden\D$ \\SE-Dresden\IPC$ \\SE-Dresden\Q$ \\SE-Dresden\Users PAGE 47 of 251 NETWORK ASSESSMENT Hosted By Share UNC \\STORAGE01\NS01 \\STORAGE01\OldCommon \\STORAGE01\REMINST \\STORAGE01\Temp \\STORAGE01\Transit TERMINUS \\TERMINUS\ADMIN$ \\TERMINUS\C$ \\TERMINUS\Cisco PCF \\TERMINUS\D$ \\TERMINUS\Explorer \\TERMINUS\Intel \\TERMINUS\IPC$ UTIL01 \\UTIL01\ADMIN$ \\UTIL01\C$ \\UTIL01\IPC$ \\UTIL01\NETLOGON \\UTIL01\SYSVOL VM-WIN7 \\VM-WIN7\ADMIN$ \\VM-WIN7\C$ \\VM-WIN7\IPC$ W2012TEST \\W2012TEST\ADMIN$ \\W2012TEST\C$ \\W2012TEST\IPC$ WINDESKTOP \\WINDESKTOP\ADMIN$ \\WINDESKTOP\C$ PROPRIETARY & CONFIDENTIAL PAGE 48 of 251 NETWORK ASSESSMENT Hosted By Share UNC \\WINDESKTOP\IPC$ \\WINDESKTOP\share \\WINDESKTOP\Users PROPRIETARY & CONFIDENTIAL PAGE 49 of 251 NETWORK ASSESSMENT 8 - Major Applications This section contains a listing of major applications with corresponding version numbers and number of computers the application was detected on. CLIENTDOM.COM Windows Applications Application Name 32 Bit HP CIO Components Installer 3CXPhone 64 Bit HP CIO Components Installer 7-Zip 4.19 beta 7-Zip 9.20 7-Zip 9.20 (x64 edition) AAAMarcus8 Acrobat.com ActivePerl 5.10.0 Build 1003 ActivePerl 5.12.3 Build 1204 (64-bit) ActivePerl 5.8.0 Build 804 ActivePerl 5.8.0 Build 805 Adam Instance ISASTGCTRL Add-ons Adobe Acrobat 5.0 Adobe Acrobat 8 Professional Adobe Acrobat 9 Pro Adobe Acrobat 9 Pro - English, Franais, Deutsch Adobe Acrobat 9 Pro - English, Franais, Deutsch PROPRIETARY & CONFIDENTIAL Version 8.1.4 4.0.26523.0 8.2.4 9.20.00.0 0.0.1 1.6.65 5.10.1003 5.12.1204 5.8.804 5.8.805 1.0.0.0 5.0 8.0.0 9.0.0 9.0.0 9.4.7 # Computers 7 1 19 1 2 3 1 1 1 1 1 1 1 1 1 1 1 1 1 PAGE 50 of 251 NETWORK ASSESSMENT Application Name Adobe Acrobat 9.4.7 - CPSID_83708 Adobe After Effects CS4 Third Party Content Adobe AIR Adobe AIR Adobe AIR Adobe AIR Adobe AIR Adobe Anchor Service CS4 Adobe Anchor Service x64 CS4 Adobe Bridge CS4 Adobe CMaps CS4 Adobe CMaps x64 CS4 Adobe Color - Photoshop Specific CS4 Adobe Color EU Recommended Settings CS4 Adobe Color JA Extra Settings CS4 Adobe Color NA Extra Settings CS4 Adobe Community Help Adobe Community Help Adobe Creative Suite 4 Master Collection Adobe Creative Suite 5 Master Collection Adobe CSI CS4 Adobe CSI CS4 x64 Adobe Default Language CS4 Adobe Device Central CS4 Adobe Dreamweaver CS5.5 Adobe Drive CS4 Adobe Drive CS4 x64 PROPRIETARY & CONFIDENTIAL Version 9 1.5.3.9120 2.0.4.13090 2.5.1.17730 2.6.0.19120 2.7.1.19610 2.0 2.0 3 2.0 2.0 2.0 2.0 2.0 2.0 3.0.0.400 3.4.980 4.0 5.0 1 1 2.0 2 11.5 1 1 # Computers 1 1 3 1 3 1 1 1 1 1 1 1 1 1 1 1 3 2 1 4 1 1 1 1 2 1 1 PAGE 51 of 251 NETWORK ASSESSMENT Application Name Adobe Encore CS4 Codecs Adobe ExtendScript Toolkit CS4 Adobe Extension Manager CS4 Adobe Flash Player 10 ActiveX Adobe Flash Player 10 ActiveX Adobe Flash Player 10 ActiveX Adobe Flash Player 10 ActiveX Adobe Flash Player 10 Plugin Adobe Flash Player 10 Plugin Adobe Flash Player 10 Plugin Adobe Flash Player 10 Plugin Adobe Flash Player 11 ActiveX Adobe Flash Player 11 ActiveX Adobe Flash Player 11 ActiveX Adobe Flash Player 11 ActiveX 64-bit Adobe Flash Player 11 ActiveX 64-bit Adobe Flash Player 11 ActiveX 64-bit Adobe Flash Player 11 Plugin Adobe Flash Player 11 Plugin Adobe Flash Player ActiveX Adobe Fonts All x64 Adobe Linguistics CS4 x64 Adobe Media Encoder CS4 Exporter Adobe Media Encoder CS4 Importer Adobe Media Player Adobe Output Module Adobe PDF Library Files CS4 PROPRIETARY & CONFIDENTIAL Version 4 3.0.0 2.0 10.0.12.36 10.0.22.87 10.0.32.18 10.3.183.5 10.0.12.36 10.0.45.2 10.1.102.64 10.1.52.14 11.1.102.55 11.3.300.257 11.4.402.287 11.1.102.55 11.2.202.228 11.2.202.235 11.4.402.265 11.4.402.287 9.0.45.0 2.0 4.0.0 1.0 1.0 1.8 2.0 9.0 # Computers 1 1 1 1 2 1 1 1 1 1 2 4 1 8 2 1 1 1 3 1 1 1 1 1 4 1 1 PAGE 52 of 251 NETWORK ASSESSMENT Application Name Adobe PDF Library Files x64 CS4 Adobe Photoshop 5.0 Limited Edition Adobe Photoshop CS4 (64 Bit) Adobe Photoshop CS4 Support Adobe Premiere Pro CS4 Third Party Content Adobe Reader 6.0 Adobe Reader 7.0.5 Adobe Reader 7.0.9 Adobe Reader 7.1.2 Adobe Reader 9.1 Adobe Reader 9.4.0 Adobe Reader 9.4.1 Adobe Reader X (10.1.0) Adobe Reader X (10.1.2) Adobe Reader X (10.1.3) Adobe Reader X (10.1.4) Adobe Search for Help Adobe Service Manager Extension Adobe Setup Adobe Soundbooth CS4 Codecs Adobe Type Support CS4 Adobe Type Support x64 CS4 Adobe Update Manager CS4 Adobe Widget Browser Adobe WinSoft Linguistics Plugin x64 Adobe XMP Panels CS4 AdobeColorCommonSetCMYK PROPRIETARY & CONFIDENTIAL Version 9.0 5.0 11.0 11.0 4 6.0 7.0.5 7.0.9 7.1.2 9.1.0 9.4.0 9.4.1 10.1.0 10.1.2 10.1.3 10.1.4 1.0 1.0 2.0 2 9.0 9.0 6.0.0 2.0 Build 230 1.1 2.0 2.0 # Computers 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 4 1 1 1 1 1 1 1 2 1 1 1 PAGE 53 of 251 NETWORK ASSESSMENT Application Name Advanced IP Scanner Agere Systems PCI Soft Modem AIM 7 AIM Pro AIO Vibrant Toolbox AiO_Scan AIO_Scan Amazon MP3 Downloader 1.0.15 Amazon MP3 Downloader 1.0.17 Android SDK Tools Annotations Annotations Help AnyBizSoft PDF Converter (Build 2.5.0) Apache HTTP Server 2.0.55 Apache HTTP Server 2.2.21 Apache Tomcat 4.1 (remove only) Apache Tomcat 5.5 (remove only) Apache Tomcat 7.0.22 Apex API 10.0 C# Samples Apple Application Support Apple Application Support Apple Application Support Apple Mobile Device Support Apple Mobile Device Support Apple Mobile Device Support Apple Software Update Application Verifier PROPRIETARY & CONFIDENTIAL Version 2.1.200 1.5.0.291 2.5.0 43.0.217.000 130.0.365.000 1.0.15 1.0.17 1.16 6.0.1000 6.0.1000 2.0.55 2.2.21 10.0.0 1.5.2 2.1.5 2.1.9 3.4.1.2 4.0.0.96 5.2.0.6 2.1.3.127 3.4.158 # Computers 1 1 1 1 1 1 1 1 1 2 1 1 1 1 1 4 1 1 1 1 1 1 1 1 1 3 1 PAGE 54 of 251 NETWORK ASSESSMENT Application Name Ask Toolbar Ask Toolbar ASPCA Reminder V7F+AU by We-Care.com AstCTIClient 1.0 AstCTIServer 1.0 ATI Catalyst Install Manager ATI Display Driver ATI Display Driver ATI Display Driver ATI Display Driver Auto Macro Recorder V5.5 (Pro V5.2) Trial Version AutoHotkey 1.0.48.05 AutoIt v3.3.6.1 Autotask MS Outlook Extension AVG 2011 AVG 2012 AVG Security Toolbar azzCardfile 4.0c BCM V.92 56K Modem Better File Series 5.7 Bing Bar BlackBerry Device Communication Components BlackBerry Device Simulators 4.2.2.161 (8320-T-MobileUS) BlackBerry Email and MDS Services Simulators 4.1.4 Block Diagrams PROPRIETARY & CONFIDENTIAL Version 1.13.1.0 1.15.4.0 4.0.5.5 1.0 1.0 3.0.765.0 8.08-041111a-020816C-Dell 8.24.50.3-080121a-058688CDell 8.24.50.5-090623a-083721CDell 1.0.48.05 3.1.0 10.0.1427 2012.0.2221 12.2.5.32 7.0.822.0 1.2.0.21 4.2.2.161 4.1.4 6.0.1000 # Computers 1 1 1 1 1 1 3 2 1 1 1 1 1 1 1 1 1 1 1 1 1 3 1 1 1 PAGE 55 of 251 NETWORK ASSESSMENT Application Name Block Diagrams Help Bomgar Representative Client [nsremote.Northern.com] Bonjour Bonjour Borders and Backgrounds Borders and Backgrounds Help BrettspielWelt Broadcom Drivers and Management Applications Broadcom Gigabit NetLink Controller Brother MFL-Pro Suite MFC-9320CW Brother MFL-Pro Suite MFC-9320CW BufferChm Building Architecture Building Architecture Help Building Services Building Services Help Bullzip PDF Printer 7.2.0.1338 CAD Drawing Converter CAD Drawing Converter Help CAD Drawing Display Call Ctrl Callouts and Connectors Callouts and Connectors Help Camtasia Studio 7 Carbonite CBSS Agent CBSS Agent PROPRIETARY & CONFIDENTIAL Version 6.0.1000 2.0.5.0 3.0.0.10 6.0.1000 6.0.1000 14.2.11.5 12.33.02 1.0.2.0 2.0.1.0 130.0.331.000 6.0.1000 6.0.1000 6.0.1000 6.0.1000 7.2.0.1338 6.0.1000 6.0.1000 6.0.1000 2.0.7 6.0.1000 6.0.1000 7.1.1 4.0.4 build 806 (Mar-03-2011) 1.0.0057 2.0.0011 # Computers 1 7 1 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 3 1 3 1 PAGE 56 of 251 NETWORK ASSESSMENT Application Name CBSS Agent CBSS Agent CBSS Agent CDBurnerXP CDBurnerXP CDBurnerXP CDBurnerXP Check Point VPN-1 SecuRemote/SecureClient NGX R60 HFA2 CheckNique - Duplex Image MICR Cisco AnyConnect VPN Client Cisco ASDM-IDM Launcher Cisco Click to Call Cisco Systems VPN Client 5.0.01.0600 Cisco Systems VPN Client 5.0.06.0160 Cisco Systems VPN Client 5.0.07.0290 Cisco WebEx Meetings Citrix Authentication Manager Citrix ICA Client Citrix online plug-in - web Citrix online plug-in - web Citrix online plug-in (DV) Citrix online plug-in (DV) Citrix online plug-in (HDX) Citrix online plug-in (HDX) Citrix online plug-in (USB) Citrix online plug-in (USB) Citrix online plug-in (Web) PROPRIETARY & CONFIDENTIAL Version 2.0.0013 2.0.0015 2.0.0023 4.3.8.2568 4.4.0.2971 4.4.1.3099 4.4.1.3341 1.00.0000 3.0.2 2.5.1025 1.5.41 8.0.2540 5.0.1 5.0.6 5.0.7 2.0.0.41479 12.0.0.6410 12.1.0.30 12.0.0.6410 12.1.0.30 12.0.0.6410 12.1.0.30 12.0.0.6410 12.1.0.30 12.0.0.6410 # Computers 1 1 11 1 1 1 1 1 1 2 1 1 2 1 2 3 1 1 1 1 1 1 1 1 1 1 1 PAGE 57 of 251 NETWORK ASSESSMENT Application Name Citrix online plug-in (Web) Citrix Presentation Server Client - Web Only Citrix Receiver Citrix Receiver (HDX Flash Redirection) Citrix Receiver Inside Citrix Receiver(Aero) Citrix Receiver(DV) Citrix Receiver(USB) Citrix Secure Access Client Clip Art and Symbols Clip Art and Symbols Help Compatibility Pack for the 2007 Office system Compatibility Pack for the 2007 Office system ConferenceManager Application Sharing Driver 5.0.18.0 Connect ConnectWise Internet Client Copy Coupon Printer for Windows Crystal Reports Basic for Visual Studio 2008 Crystal Reports Basic Runtime for Visual Studio 2008 (x64) Crystal Reports for Visual Studio CURRIT CURRIT 4.0 CURRIT 6.0 Custom Patterns Custom Properties Editor CutePDF Professional 3.6 (Evaluation) PROPRIETARY & CONFIDENTIAL Version 12.1.0.30 10.100.55836 13.1.0.89 13.1.0.89 3.1.0.64094 13.1.0.89 13.1.0.89 13.1.0.89 6.0.1000 6.0.1000 12.0.6425.1000 12.0.6612.1000 1.0.0.1 12.2.1 130.0.428.000 5.0.0.0 10.5.0.0 10.5.0.0 12.51.0.240 4.0.0 4.0.0 6.0.0101 6.0.1000 6.0.1000 # Computers 1 2 1 1 1 1 1 1 1 1 1 2 2 1 1 8 1 1 4 3 2 1 2 4 1 1 1 PAGE 58 of 251 NETWORK ASSESSMENT Application Name CutePDF Writer 2.8 D3DX10 DAEMON Tools DAEMON Tools Lite DAEMON Tools Toolbar DameWare Mini Remote Control Database Wizard DataEngine Debugging Tools for Windows Deep Freeze 7 Enterprise Dell Online Diagnostics 2.18.0 Dell OpenManage Dell OpenManage Dell OpenManage Array Manager Dell OpenManage Server Administrator Dell OpenManage Server Administrator Dell Resource CD Dell ResourceCD Dell System E-support Tool Dell Touchpad deskPDF 2.5 Professional Edition Destinations Developing Visio Solutions Help Device Doctor 1.0.0.1 DeviceDiscovery Dialo 1.4 DJ_AIO_ProductContext PROPRIETARY & CONFIDENTIAL Version 15.4.2368.0902 3.47.0 4.40.2.0131 1.1.4.0024 3.50.6.0 6.0.1000 5.2.0 6.6.7.5 2.18.0 3.6.0 4.2.0 4.5.0 6.5.0 1.00.0000 2.2 7.1209.101.204 130.0.0.0 6.0.1000 130.0.465.000 130.0.365.000 # Computers 1 2 2 3 1 1 1 1 2 1 1 1 1 2 1 2 1 1 1 1 1 1 1 1 1 1 1 PAGE 59 of 251 NETWORK ASSESSMENT Application Name DJ_AIO_Software DJ_AIO_Software_min D-Link DWA-131 Wireless N Nano USB Adapter Dotfuscator Software Services - Community Edition Dotfuscator Software Services - Community Edition Download Updater (AOL LLC) DVD Decrypter (Remove Only) DVD Shrink 3.2 DW WLAN Card Utility EditiX-Free XML Editor free-2008-sp2 Electrical Engineering Electrical Engineering Help EMS SQL Manager 2010 Lite for SQL Server Enterprise EPIBUILDER Redistribution Ethereal 0.10.0 Ethereal 0.99.0 ExamDiff 1.9 (Build 1.9.0.1) ExamDiff 1.9 (Build 1.9.0.2) Exportizer 4.5 ExtraPutty 0.22 F4100 F4100_Help Facilities Management Facilities Management Help Fiddler Fiddler Syntax-Highlighting Addons PROPRIETARY & CONFIDENTIAL Version 130.0.365.000 130.0.365.000 5.0.2300.0 5.0.2500.0 5.60.48.35 6.0.1000 6.0.1000 3.6.0.1 43.0.217.000 0.10.0 0.99.0 1.9.0.1 1.9.0.2 4.5 0.22 130.0.365.000 90.0.222.000 6.0.1000 6.0.1000 2.4.1.0 # Computers 1 1 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 PAGE 60 of 251 NETWORK ASSESSMENT Application Name Fiddler2 File Type Assistant FileOpen Client FileZilla (remove only) FileZilla Client 3.2.2.1 FileZilla Client 3.2.4.1 FileZilla Client 3.3.0.1 FileZilla Client 3.3.4.1 FileZilla Client 3.3.5.1 FileZilla Client 3.4.0 FileZilla Client 3.5.0 FileZilla Client 3.5.3 Final Media Player 2011 Firewall Builder 5.1 First Backup Flowcharts Flowcharts Help Fluid Power Fluid Power Help Folder Size for Windows Forms and Charts Forms and Charts Help FortiClient SSL VPN v3.0.387 FortiClient SSL VPN v4.0.2012 Foundation technical Foxit PDF Editor Foxit PDF Editor PROPRIETARY & CONFIDENTIAL Version 3.0.35.879 3.2.2.1 3.2.4.1 3.3.0.1 3.3.4.1 3.3.5.1 3.4.0 3.5.0 3.5.3 5.1.0.3599 6.8.17.0 6.0.1000 6.0.1000 6.0.1000 6.0.1000 2.5 6.0.1000 6.0.1000 3.0.387 4.0.2012 6.0.1000 2.2.0.0205 2.2.1.1119 # Computers 1 2 1 2 1 1 1 1 1 1 2 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 PAGE 61 of 251 NETWORK ASSESSMENT Application Name Foxit Reader Foxit Reader Free File Viewer 2011 FreeRIP v3.03 Futuremark SystemInfo Futuremark SystemInfo Fuze Meeting Galaxy Nexus ToolKit Getif 2.3.1 GFI Business Agent GIMP 2.6.11 GIMP 2.6.8 GIMP 2.8.0 Google Chrome Google Data API SDK Google Desktop Google Earth Google Earth Plug-in Google Gmail Notifier Google SketchUp 8 Google Talk (remove only) Google Talk Plugin Google Toolbar for Internet Explorer Google Toolbar for Internet Explorer Google Update Helper GoToAssist Corporate GPBaseService2 PROPRIETARY & CONFIDENTIAL Version 4.0.0.619 4.3.1.118 3.03 3.21.2.1 3.62.1.1 1.10.38490 7.4.0.0 5.0.4474 2.6.11 2.8.0 22.0.1229.94 1.7 3.2005.1208.1655 6.1.0.5001 6.2.2.6613 3.0.11752 3.9.1.9832 1.0.0 1.3.21.123 9.1.0.615 130.0.371.000 # Computers 1 1 1 1 1 1 1 1 2 2 3 1 1 1 2 1 1 2 1 1 3 1 1 5 8 1 1 PAGE 62 of 251 NETWORK ASSESSMENT Application Name GPL Ghostscript Graphics Filters Greenbone Security Desktop Greenbone-Desktop-Suite 1.2.1 Grindstone 2 GTK+ Runtime 2.12.8 rev a (remove only) GTK2-Runtime Guild Wars H&R Block Deluxe + Efile + State 2011 H&R Block Georgia 2011 Hamachi 1.0.2.3 Hard Disk Low Level Format Tool 2.36 build 1181 HASP Device Driver Help for Visio 2000 (HTML Help) Help_Technical HM NIS Edit 2.0.3 HP Customer Participation Program 13.0 HP Deskjet All-In-One Driver Software 13.0 Rel. 1 HP Download Manager HP Imaging Device Functions 13.0 HP Install Network Printer Wizard HP Photosmart Essential 3.5 HP PSC & Officejet 4.2 Corporate Edition HP Smart Web Printing 4.51 HP Solution Center 13.0 HP Update HP Web Jetadmin PROPRIETARY & CONFIDENTIAL Version 9.05 1.0.0.0 1.2.1 2.22.0-2010-10-21-ash 11.05.7102 1.11.2001 1.0.0.1 6.0.1000 2.0.3 13.0 13.0 13.0 3.5 4.51 13.0 4.000.011.006 # Computers 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 1 1 1 1 1 1 1 1 PAGE 63 of 251 NETWORK ASSESSMENT Application Name HPPhotoGadget HPPhotoSmartDiscLabelContent1 HPPhotosmartEssential HPProductAssistant HPSSupply HTML Help Workshop HxD Hex Editor version 1.7.7.0 IDT Audio IDT Audio ieSpell (remove only) ieSpell 2.1.1 (build 325) IIS 7.5 Express IIS UrlScan Tool 2.0 (Uninstall) iLivid ImageManager InReView eDiscovery InstallMgr InstallShield 11.5 InstallShield 2008 InstallShield 2009 InstrumentationService Intel PROSet Wireless Intel(R) Graphics Media Accelerator Driver Intel(R) LAN Adapters SNMP Agent Intel(R) Management Engine Components Intel(R) Network Connections Drivers Intel(R) PRO Ethernet Adapter and Software PROPRIETARY & CONFIDENTIAL Version 130.0.282.000 2.04.0000 2.04.0000 130.0.371.000 130.0.371.000 1.7.7.0 1.0.6289.0 1.0.6324.0 7.5.1190 1.92.0.118480 3.5.0000 1.0.39.0 11.50.0000 14.00.0000 15.02.0000 5.2.0 1.00.0000 7.0.0.1118 # Computers 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 3 1 1 1 1 1 1 3 2 1 1 1 PAGE 64 of 251 NETWORK ASSESSMENT Application Name Intel(R) PRO Network Adapters and Drivers Intel(R) PRO Network Connections Drivers Intel(R) Processor Graphics Intel(R) PROSet/Wireless WiFi Software Intel(R) Rapid Storage Technology Internet Explorer Developer Toolbar IrfanView (remove only) IrfanView (remove only) iTunes iTunes iTunes J2SE Development Kit 5.0 Update 15 J2SE Development Kit 5.0 Update 6 J2SE Runtime Environment 5.0 Update 15 J2SE Runtime Environment 5.0 Update 6 Java 2 Runtime Environment Standard Edition v1.3.1_02 Java 2 Runtime Environment, SE v1.4.2_06 Java 2 SDK, SE v1.4.2 Java 2 SDK, SE v1.4.2_04 Java 2 SDK, SE v1.4.2_06 Java 7 Update 7 Java 7 Update 9 Java Auto Updater Java Auto Updater Java Auto Updater Java Auto Updater Java Auto Updater PROPRIETARY & CONFIDENTIAL Version 8.15.10.2361 14.00.1000 10.1.0.1008 1.0.2188 4.30 4.32 10.3.1.55 10.5.0.142 10.6.3.25 1.5.0.150 1.5.0.60 1.5.0.150 1.5.0.60 1.4.2_06 1.4.2 1.4.2_04 1.4.2_06 7.0.70 7.0.90 2.0.2.1 2.0.2.4 2.0.7.1 2.1.6.0 2.1.9.0 # Computers 1 2 1 1 1 1 2 1 1 1 1 1 1 1 1 1 6 1 1 6 1 1 1 1 5 2 2 PAGE 65 of 251 NETWORK ASSESSMENT Application Name Java SE Development Kit 7 Update 4 (64-bit) Java(TM) 6 Update 17 Java(TM) 6 Update 20 Java(TM) 6 Update 23 Java(TM) 6 Update 23 (64-bit) Java(TM) 6 Update 3 Java(TM) 6 Update 31 Java(TM) 6 Update 33 Java(TM) 6 Update 33 (64-bit) Java(TM) 6 Update 35 Java(TM) 6 Update 7 Java(TM) 7 Update 4 (64-bit) Java(TM) 7 Update 5 Java(TM) SE Development Kit 6 Update 23 (64-bit) Java(TM) SE Development Kit 6 Update 31 (64-bit) Java(TM) SE Development Kit 7 Update 1 (64-bit) Java(TM) SE Runtime Environment 6 JavaFX 2.1.0 (64-bit) JavaFX 2.1.0 SDK (64-bit) JavaFX 2.1.1 Juniper Networks Network Connect 6.2.0 Juniper Networks Network Connect 6.4.0 Juniper Networks Setup Client Activex Control Juniper Terminal Services Client KB408693 KBOX KeePass Password Safe 2.19 PROPRIETARY & CONFIDENTIAL Version 1.7.0.40 6.0.170 6.0.200 6.0.230 6.0.230 1.6.0.30 6.0.310 6.0.330 6.0.330 6.0.350 1.6.0.70 7.0.40 7.0.50 1.6.0.230 1.6.0.310 1.7.0.10 1.6.0.0 2.1.0 2.1.0 2.1.1 6.2.0.13255 6.4.0.14343 2.0.0.3 4.2.0.8047 4.3.20024 # Computers 2 1 1 1 1 1 3 1 1 2 1 2 2 1 1 1 2 2 2 3 2 4 1 1 1 1 1 PAGE 66 of 251 NETWORK ASSESSMENT Application Name Kernel for OST to PST ver 11.07.01 Kies kuler LiveReg (Symantec Corporation) LiveUpdate 1.80 (Symantec Corporation) LogMeIn LogMeIn LogMeIn LogMeIn LogMeIn LogMeIn Macromedia Dreamweaver MX 2004 Macromedia Extension Manager Magical Jelly Bean KeyFinder Magical Jelly Bean KeyFinder Mail.dll 3.0 Malwarebytes' Anti-Malware Malwarebytes Anti-Malware version 1.62.0.1300 Malwarebytes Anti-Malware version 1.65.0.1400 Maps Maps Help MarketResearch Mechanical Engineering Mechanical Engineering Help Media Player Classic - Home Cinema v1.5.2.3456 MessagingToolkit QRCode MetaFrame Presentation Server Client PROPRIETARY & CONFIDENTIAL Version 1.5.3 2.0 2.0.6.1314 1.80.19.0 4.0.667 4.1.1558 4.1.1578 4.1.1586 4.1.1868 4.1.2504 7.0 1.5 2.0.8.1 2.0.8.2 1.62.0.1300 1.65.0.1400 1.0.0.0 1.0.0.0 130.0.374.000 6.0.1000 6.0.1000 1.5.2.3456 1.3.0.0 8.100.29670 # Computers 2 1 1 1 4 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 PAGE 67 of 251 NETWORK ASSESSMENT Application Name MetaFrame Presentation Server Web Client for Win32 Microsoft .NET Compact Framework 1.0 SP3 Developer Microsoft .NET Compact Framework 2.0 Microsoft .NET Compact Framework 2.0 SP2 Microsoft .NET Compact Framework 3.5 Microsoft .NET Framework (English) Microsoft .NET Framework (English) v1.0.3705 Microsoft .NET Framework 1.1 Microsoft .NET Framework 2.0 Microsoft .NET Framework 2.0 SDK (x64) - ENU Microsoft .NET Framework 2.0 Service Pack 1 Microsoft .NET Framework 2.0 Service Pack 2 Microsoft .NET Framework 3.0 Service Pack 1 Microsoft .NET Framework 3.0 Service Pack 2 Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 4 Client Profile Microsoft .NET Framework 4 Extended Microsoft .NET Framework 4 Multi-Targeting Pack Microsoft Application Compatibility Toolkit 5.0 Microsoft Application Error Reporting Microsoft Application Error Reporting Microsoft Application Virtualization Desktop Client Microsoft ASP.NET MVC 1.0 Microsoft ASP.NET MVC 2 Microsoft ASP.NET MVC 2 - Visual Studio 2008 Tools Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools Microsoft ASP.NET MVC 2 - VWD Express 2010 Tools PROPRIETARY & CONFIDENTIAL Version 1.0.4292 2.0.5238 2.0.7045 3.5.7283 1.0.3705 2.1.21022 2.2.30729 3.1.21022 3.2.30729 4.0.30319 4.0.30319 4.0.30319 5.0.5428.1056 12.0.6012.5000 12.0.6015.5000 4.6.0.20200 1.0.0.0 2.0.50217.0 2.0.50217.0 2.0.50217.0 2.0.50217.0 # Computers 1 3 2 4 4 1 1 4 1 1 2 5 1 3 5 16 9 2 1 4 4 1 1 2 1 2 1 PAGE 68 of 251 NETWORK ASSESSMENT Application Name Microsoft ASP.NET MVC 3 Microsoft ASP.NET MVC 3 - Visual Studio 2010 Tools Update Microsoft ASP.NET MVC 3 - VWD Express 2010 Tools Update Microsoft ASP.NET Web Pages Microsoft ASP.NET Web Pages - Visual Studio 2010 Tools Microsoft ASP.NET Web Pages - VWD Express 2010 Tools Microsoft Assessment and Planning Toolkit Microsoft Base Smart Card Cryptographic Service Provider Package Microsoft Baseline Security Analyzer 2.0.1 Microsoft Baseline Security Analyzer 2.1 Microsoft Baseline Security Analyzer 2.2 Microsoft Choice Guard Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Default Manager Microsoft Device Emulator (64 bit) version 3.0 - ENU Microsoft Device Emulator version 1.0 - ENU Microsoft Device Emulator version 3.0 - ENU Microsoft Document Explorer 2005 Microsoft Document Explorer 2008 Microsoft Easy Assist v2 Microsoft Exchange Web Services Managed API 1.1 Microsoft Exchange Web Services Managed API 1.2.1 Microsoft GPMC Sample Scripts Microsoft Group Policy Management Console with SP1 Microsoft Help Viewer 1.0 Microsoft Help Viewer 1.1 Microsoft IntelliPoint 8.2 PROPRIETARY & CONFIDENTIAL Version 3.0.20105.0 3.0.20406.0 3.0.20406.0 1.0.20105.0 1.0.20105.0 1.0.20105.0 6.5.4229.0 2.0.6706.0 2.1.0000 2.2.2170 2.0.48.0 1 1.1.53.0 9.0.21022 1.0.50727.42 9.0.21022 8.1.6416.0 14.2.51.0 14.3.67.1 1.0 1.0.2.0 1.0.30319 1.1.40219 8.20.468.0 # Computers 1 1 1 1 1 1 1 2 1 1 5 2 1 1 3 2 1 7 4 1 1 1 2 1 1 1 1 PAGE 69 of 251 NETWORK ASSESSMENT Application Name Microsoft ISA Server 2006 Microsoft iSCSI Software Target Microsoft iSCSI Software Target Microsoft Lync 2010 Microsoft Lync 2010 Microsoft Lync 2010 Microsoft Mouse and Keyboard Center Microsoft Office 2000 Resource Kit Tools and Utilities Microsoft Office 2000 SR-1 Premium Microsoft Office 2003 Primary Interop Assemblies Microsoft Office 2003 Web Components Microsoft Office 2007 Primary Interop Assemblies Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 3 (SP3) Microsoft Office 2010 Language Pack Service Pack 1 (SP1) Microsoft Office 2010 Primary Interop Assemblies Microsoft Office 2010 Service Pack 1 (SP1) Microsoft Office Access MUI (English) 2007 Microsoft Office Access MUI (English) 2010 Microsoft Office Access MUI (English) 2010 Microsoft Office Access Setup Metadata MUI (English) 2007 Microsoft Office Access Setup Metadata MUI (English) 2010 Microsoft Office Access Setup Metadata MUI (English) 2010 Microsoft Office Communicator 2005 Microsoft Office Communicator 2007 R2 Microsoft Office Communicator 2007 R2 Microsoft Office Communicator Web Access PROPRIETARY & CONFIDENTIAL Version 5.0.5720 3.3.16544.0 3.3.16561.0 4.0.7577.4061 4.0.7577.4103 4.0.7577.4109 2.0.161.0 9.00.00.2010 9.00.3821 11.0.6553.0 11.0.8173.0 12.0.4518.1014 14.0.4763.1024 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 1.0.559.226 3.5.6907.225 3.5.6907.261 1.0.1355.0 # Computers 1 1 1 1 4 6 1 1 1 1 1 3 2 6 3 2 10 3 4 10 3 4 10 1 1 1 1 PAGE 70 of 251 NETWORK ASSESSMENT Application Name Microsoft Office Communicator Web Access Installer Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (English) 2007 Microsoft Office Excel MUI (English) 2010 Microsoft Office Excel MUI (English) 2010 Microsoft Office Excel Viewer Microsoft Office File Validation Add-In Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove MUI (English) 2010 Microsoft Office Groove MUI (English) 2010 Microsoft Office Groove Setup Metadata MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2007 Microsoft Office InfoPath MUI (English) 2010 Microsoft Office InfoPath MUI (English) 2010 Microsoft Office Integration Microsoft Office Live Communications Server 2005 Microsoft Office Live Meeting 2007 Microsoft Office Live Meeting 2007 Microsoft Office Office 32-bit Components 2010 Microsoft Office Office 32-bit Components 2010 Microsoft Office Office 64-bit Components 2007 Microsoft Office Office 64-bit Components 2010 Microsoft Office Office Subscription (English) 2010 Microsoft Office OneNote MUI (English) 2007 Microsoft Office OneNote MUI (English) 2010 Microsoft Office OneNote MUI (English) 2010 Microsoft Office Outlook 2007 PROPRIETARY & CONFIDENTIAL Version 1.0.0.0 12.0.6612.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 12.0.6612.1000 14.0.5130.5003 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 12.0.6612.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 6.0.1000 2.0.5470.0 8.0.6362.149 8.0.6362.202 14.0.4763.1000 14.0.6029.1000 12.0.6612.1000 14.0.6029.1000 14.0.6114.5000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 12.0.6612.1000 # Computers 1 2 3 4 10 1 3 2 4 10 2 2 4 10 1 1 1 1 3 3 2 4 1 2 4 10 2 PAGE 71 of 251 NETWORK ASSESSMENT Application Name Microsoft Office Outlook MUI (English) 2007 Microsoft Office Outlook MUI (English) 2010 Microsoft Office Outlook MUI (English) 2010 Microsoft Office PowerPoint MUI (English) 2007 Microsoft Office PowerPoint MUI (English) 2010 Microsoft Office PowerPoint MUI (English) 2010 Microsoft Office Professional 2007 Microsoft Office Professional Edition 2003 Microsoft Office Professional Edition 2003 Microsoft Office Professional Plus 2010 Microsoft Office Professional Plus 2010 Microsoft Office Professional Plus Subscription 2010 Microsoft Office Project 2007 Service Pack 2 (SP2) Microsoft Office Project MUI (English) 2007 Microsoft Office Project Professional 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (English) 2010 Microsoft Office Proof (English) 2010 Microsoft Office Proof (French) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proof (French) 2010 Microsoft Office Proof (French) 2010 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proof (Spanish) 2007 Microsoft Office Proof (Spanish) 2010 Microsoft Office Proof (Spanish) 2010 PROPRIETARY & CONFIDENTIAL Version 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 12.0.6612.1000 11.0.5614.0 11.0.8173.0 14.0.4763.1000 14.0.6029.1000 14.0.6029.1000 12.0.6425.1000 12.0.6425.1000 12.0.6425.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 12.0.6425.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 12.0.6425.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 # Computers 5 4 10 3 4 10 1 1 2 4 10 1 1 1 1 1 5 4 10 1 5 4 10 1 5 4 10 PAGE 72 of 251 NETWORK ASSESSMENT Application Name Microsoft Office Proofing (English) 2007 Microsoft Office Proofing (English) 2010 Microsoft Office Proofing (English) 2010 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3) Microsoft Office Publisher MUI (English) 2007 Microsoft Office Publisher MUI (English) 2010 Microsoft Office Publisher MUI (English) 2010 Microsoft Office Shared 32-bit MUI (English) 2010 Microsoft Office Shared 32-bit MUI (English) 2010 Microsoft Office Shared 64-bit MUI (English) 2007 Microsoft Office Shared 64-bit MUI (English) 2010 Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2007 Microsoft Office Shared 64-bit Setup Metadata MUI (English) 2010 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Shared MUI (English) 2010 Microsoft Office Shared MUI (English) 2010 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2007 Microsoft Office Shared Setup Metadata MUI (English) 2010 Microsoft Office Shared Setup Metadata MUI (English) 2010 Microsoft Office SharePoint Designer 2007 Service Pack 2 (SP2) Microsoft Office SharePoint Designer 2007 Service Pack 3 (SP3) Microsoft Office Visio 2010 Microsoft Office Visio 2010 Microsoft Office Visio MUI (English) 2010 PROPRIETARY & CONFIDENTIAL Version 12.0.4518.1014 14.0.4763.1000 14.0.6029.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 14.0.4763.1000 14.0.6029.1000 12.0.6612.1000 14.0.6029.1000 12.0.6612.1000 14.0.6029.1000 12.0.6425.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 12.0.6425.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 14.0.4763.1000 14.0.6029.1000 14.0.4763.1000 # Computers 6 4 10 1 5 3 4 10 3 3 2 4 2 4 2 6 4 10 2 6 4 10 2 2 1 3 1 PAGE 73 of 251 NETWORK ASSESSMENT Application Name Microsoft Office Visio MUI (English) 2010 Microsoft Office Visio Professional 2003 Microsoft Office Visual Web Developer 2007 Microsoft Office Visual Web Developer MUI (English) 2007 Microsoft Office Visual Web Developer MUI (English) 2007 Microsoft Office Word MUI (English) 2007 Microsoft Office Word MUI (English) 2010 Microsoft Office Word MUI (English) 2010 Microsoft Office Word Viewer 2003 Microsoft Online Management Policy Agent Microsoft Online Services Module for Windows PowerShell Microsoft Online Services Sign In Microsoft Online Services Sign In Microsoft Online Services Sign In Microsoft Online Services Sign-in Assistant Microsoft Online Services Sign-in Assistant Microsoft Online Services Sign-in Assistant Microsoft Platform SDK (3790.1830) Microsoft Platform SDK (R2) (3790.2075) Microsoft Policy Platform Microsoft PVK Import (Remove only) Microsoft Report Viewer Redistributable 2005 Microsoft Report Viewer Redistributable 2008 SP1 Microsoft Repository Microsoft Security Client Microsoft Security Client Microsoft Security Essentials PROPRIETARY & CONFIDENTIAL Version 14.0.6029.1000 11.0.8173.0 12.0.4518.1066 12.0.6425.1000 12.0.6612.1000 12.0.6612.1000 14.0.4763.1000 14.0.6029.1000 11.0.8173.0 1.0.953.0 1.0.0 1.0.1423.65 1.0.1427.40 1.0.1442.0 7.250.4122.0 7.250.4287.0 7.250.4303.0 5.2.3790.1830 5.2.3790.2075 1.0.2445.0 6.0.0.1 4.0.1526.0 4.1.0522.0 4.0.1526.0 # Computers 3 2 4 2 2 3 4 10 3 1 4 2 7 2 4 5 2 1 1 1 1 1 2 1 1 2 1 PAGE 74 of 251 NETWORK ASSESSMENT Application Name Microsoft Security Essentials Microsoft Silverlight Microsoft Silverlight Microsoft Silverlight Microsoft Silverlight Microsoft Silverlight 3 SDK Microsoft Silverlight 4 SDK Microsoft Software Update for Web Folders (English) 12 Microsoft SQL Server 2000 Microsoft SQL Server 2000 Microsoft SQL Server 2005 Microsoft SQL Server 2005 Analysis Services Microsoft SQL Server 2005 Backward compatibility Microsoft SQL Server 2005 Books Online (English) Microsoft SQL Server 2005 Express Edition (SQLEXPRESS) Microsoft SQL Server 2005 Express Edition (SQLEXPRESS) Microsoft SQL Server 2005 Express Edition (SUNBELT) Microsoft SQL Server 2005 Integration Services Microsoft SQL Server 2005 Mobile [ENU] Developer Tools Microsoft SQL Server 2005 Notification Services Microsoft SQL Server 2005 Reporting Services Microsoft SQL Server 2005 Tools Microsoft SQL Server 2005 Tools Express Edition Microsoft SQL Server 2005 Tools Express Edition Microsoft SQL Server 2008 (64-bit) Microsoft SQL Server 2008 Common Files Microsoft SQL Server 2008 Management Objects PROPRIETARY & CONFIDENTIAL Version 4.1.522.0 4.0.50826.0 4.0.50917.0 4.0.60531.0 4.1.10329.0 3.0.40818.0 4.0.50826.0 12.0.6612.1000 8.00.534 8.00.761 9.2.3042.00 8.05.2312 9.00.1399.06 9.3.4035.00 9.4.5000.00 9.3.4035.00 9.3.4035.00 3.0.0.0 9.3.4035.00 9.2.3042.00 9.3.4035.00 9.3.4035.00 9.4.5000.00 10.3.5500.0 10.0.1600.22 # Computers 2 1 1 1 11 2 1 1 1 1 7 1 1 1 2 3 1 1 3 1 1 1 2 3 1 1 3 PAGE 75 of 251 NETWORK ASSESSMENT Application Name Microsoft SQL Server 2008 Management Studio Microsoft SQL Server 2008 Native Client Microsoft SQL Server 2008 Policies Microsoft SQL Server 2008 R2 (64-bit) Microsoft SQL Server 2008 R2 Data-Tier Application Framework Microsoft SQL Server 2008 R2 Data-Tier Application Framework Microsoft SQL Server 2008 R2 Data-Tier Application Project Microsoft SQL Server 2008 R2 Data-Tier Application Project Microsoft SQL Server 2008 R2 Management Objects Microsoft SQL Server 2008 R2 Management Objects Microsoft SQL Server 2008 R2 Management Objects (x64) Microsoft SQL Server 2008 R2 Management Objects (x64) Microsoft SQL Server 2008 R2 Native Client Microsoft SQL Server 2008 R2 Native Client Microsoft SQL Server 2008 R2 Policies Microsoft SQL Server 2008 R2 RsFx Driver Microsoft SQL Server 2008 R2 Setup (English) Microsoft SQL Server 2008 R2 Setup (English) Microsoft SQL Server 2008 R2 Transact-SQL Language Service Microsoft SQL Server 2008 R2 Transact-SQL Language Service Microsoft SQL Server 2008 Setup Support Files Microsoft SQL Server 2008 Setup Support Files Microsoft SQL Server Browser Microsoft SQL Server Compact 3.5 Design Tools ENU Microsoft SQL Server Compact 3.5 ENU Microsoft SQL Server Compact 3.5 for Devices ENU Microsoft SQL Server Compact 3.5 SP1 Design Tools English PROPRIETARY & CONFIDENTIAL Version 10.3.5500.0 10.3.5500.0 10.3.5500.0 10.50.1447.4 10.50.1750.9 10.50.1447.4 10.50.1750.9 10.50.1447.4 10.50.1750.9 10.50.1447.4 10.51.2500.0 10.50.1600.1 10.50.1617.0 10.50.1600.1 10.50.1600.1 10.50.1600.1 10.50.1617.0 10.50.1447.4 10.50.1750.9 10.1.2731.0 10.3.5500.0 10.50.1600.1 3.5.5386.0 3.5.5386.0 3.5.5386.0 3.5.5692.0 # Computers 1 1 1 3 1 1 1 1 1 1 1 1 2 1 2 2 2 1 1 1 3 1 2 1 1 4 3 PAGE 76 of 251 NETWORK ASSESSMENT Application Name Microsoft SQL Server Compact 3.5 SP1 English Microsoft SQL Server Compact 3.5 SP1 Query Tools English Microsoft SQL Server Compact 3.5 SP2 ENU Microsoft SQL Server Compact 3.5 SP2 Query Tools ENU Microsoft SQL Server Compact 3.5 SP2 x64 ENU Microsoft SQL Server Compact 4.0 x64 ENU Microsoft SQL Server Database Publishing Wizard 1.2 Microsoft SQL Server Database Publishing Wizard 1.3 Microsoft SQL Server Database Publishing Wizard 1.4 Microsoft SQL Server Desktop Engine (Microsoft ISA Server 2006 instance) Microsoft SQL Server Desktop Engine (MSFW) Microsoft SQL Server Desktop Engine (RTC) Microsoft SQL Server Management Studio Express Microsoft SQL Server Native Client Microsoft SQL Server Native Client Microsoft SQL Server Native Client Microsoft SQL Server Setup Support Files (English) Microsoft SQL Server Setup Support Files (English) Microsoft SQL Server System CLR Types Microsoft SQL Server System CLR Types Microsoft SQL Server System CLR Types (x64) Microsoft SQL Server System CLR Types (x64) Microsoft SQL Server System CLR Types (x64) Microsoft SQL Server VSS Writer Microsoft SQL Server VSS Writer Microsoft SQL Server VSS Writer Microsoft Sync Framework Runtime v1.0 SP1 (x64) PROPRIETARY & CONFIDENTIAL Version 3.5.5692.0 3.5.5692.0 3.5.8080.0 3.5.8080.0 3.5.8080.0 4.0.8482.1 1.2.0.0 10.0.1600.22 10.1.2512.8 8.00.2039 8.00.2039 8.00.761 9.00.2047.00 9.00.3042.00 9.00.4035.00 9.00.5000.00 9.00.4035.00 9.00.5000.00 10.50.1447.4 10.50.1750.9 10.50.1447.4 10.50.1600.1 10.51.2500.0 10.50.1600.1 9.00.4035.00 9.00.5000.00 1.0.3010.0 # Computers 1 1 3 2 2 1 1 3 2 1 1 1 1 1 4 2 4 3 1 1 1 1 1 2 3 3 2 PAGE 77 of 251 NETWORK ASSESSMENT Application Name Microsoft Sync Framework SDK v1.0 SP1 Microsoft Sync Framework Services v1.0 SP1 (x64) Microsoft Sync Services for ADO.NET v2.0 SP1 (x64) Microsoft Team Foundation Server 2010 Object Model - ENU Microsoft Team Foundation Server 2010 Object Model - ENU Microsoft Tool Web Package : DH.EXE Microsoft Tool Web Package : DISKMAP.EXE Microsoft Tool Web Package : GETMAC.EXE Microsoft Tool Web Package : HEAPMON.EXE Microsoft Tool Web Package : OH.EXE Microsoft Tool Web Package : PULIST.EXE Microsoft Tool Web Package :GUID2OBJ.EXE Microsoft Tool Web Package:GETSID.EXE Microsoft Tool Web Package:INUSE.EXE Microsoft Tool Web Package:PSTAT.EXE Microsoft Tool Web Package:Timethis.exe Microsoft Tool Web Package:Whoami.exe Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft VC9 runtime libraries Microsoft Virtual Server 2005 Microsoft Visio 2000 (IE) Microsoft Visio 2010 Service Pack 1 (SP1) Microsoft Visio Premium 2010 Microsoft Visio Professional 2010 Microsoft Visio Professional 2010 Microsoft Visual Basic 6.0 Professional Edition Microsoft Visual C++ Compilers 2010 Standard - enu - x64 PROPRIETARY & CONFIDENTIAL Version 1.0.3010.0 1.0.3010.0 2.0.3010.0 10.0.30319 10.0.40219 1.0.0.1 1.0.0.1 1.00.0.1 1.00.0.1 1.00.0.1 1.00.0.1 1.0.0.1 1.0.0.1 1.0.0.1 1.0.0.1 1.0.0.1 1.0.0.1 1.0.0 1.1.465.0 06.00.1001 14.0.6029.1000 14.0.4763.1000 14.0.6029.1000 10.0.40219 # Computers 2 2 2 1 1 1 1 1 1 3 1 1 1 1 1 1 1 1 1 1 1 3 2 1 1 1 1 PAGE 78 of 251 NETWORK ASSESSMENT Application Name Microsoft Visual C++ Compilers 2010 Standard - enu - x86 Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 Microsoft Visual C++ 2005 Redistributable Microsoft Visual C++ 2008 ATL Update kb973924 - x64 9.0.30729.4148 Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - KB2467174 - x64 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - KB2467174 - x86 9.0.30729.5570 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x64 Designtime - 10.0.30319 Microsoft Visual C++ 2010 x64 Runtime - 10.0.30319 Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 Microsoft Visual C++ 2010 x86 Runtime - 10.0.30319 Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 Microsoft Visual F# 2.0 Runtime Microsoft Visual F# 2.0 Runtime Microsoft Visual J# .NET Redistributable Package 1.1 Microsoft Visual J# 2.0 Redistributable Package Microsoft Visual J# 2.0 Redistributable Package - SE Microsoft Visual J# 2.0 Redistributable Package - SE (x64) PROPRIETARY & CONFIDENTIAL Version 10.0.40219 8.0.50727.4053 8.0.61001 9.0.30729.4148 9.0.30729.4148 9.0.30729.5570 9.0.30729.5570 9.0.30729 9.0.30729.4148 9.0.30729.6161 9.0.21022 9.0.30729 9.0.30729.4148 9.0.30729.4974 9.0.30729.6161 10.0.30319 10.0.30319 10.0.40219 10.0.30319 10.0.30319 10.0.40219 10.0.30319 10.0.40219 1.1.4322 # Computers 1 3 6 1 1 1 2 2 8 7 1 2 12 1 11 2 1 1 6 1 1 1 1 1 3 2 4 PAGE 79 of 251 NETWORK ASSESSMENT Application Name Microsoft Visual SourceSafe 2005 - ENU Microsoft Visual Studio 2005 64bit Prerequisites (x64) - ENU Microsoft Visual Studio 2005 Premier Partner Edition - ENU Microsoft Visual Studio 2005 Professional Edition - ENU Microsoft Visual Studio 2005 Remote Debugger (x64) - ENU Microsoft Visual Studio 2005 Standard Edition - ENU Microsoft Visual Studio 2005 Tools for Office Runtime Microsoft Visual Studio 2005 Tools for Office Runtime Microsoft Visual Studio 2005 Tools for Office Runtime Microsoft Visual Studio 2008 Professional Edition - ENU Microsoft Visual Studio 2008 Remote Debugger - ENU Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools Microsoft Visual Studio 2010 Express Prerequisites x64 - ENU Microsoft Visual Studio 2010 IntelliTrace Collection (x64) Microsoft Visual Studio 2010 Office Developer Tools (x64) Microsoft Visual Studio 2010 Office Developer Tools (x64) Microsoft Visual Studio 2010 Performance Collection Tools SP1 - ENU Microsoft Visual Studio 2010 Premium - ENU Microsoft Visual Studio 2010 Professional - ENU Microsoft Visual Studio 2010 Service Pack 1 Microsoft Visual Studio 2010 SharePoint Developer Tools Microsoft Visual Studio 2010 SharePoint Developer Tools Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Microsoft Visual Studio 2010 Tools for Office Runtime (x86) PROPRIETARY & CONFIDENTIAL Version 8.0.50727.42 8.0.50728 8.0.60816.0 8.0.60940.0 10.0.30319 10.0.40219 10.0.40219 10.0.40219 10.0.30319 10.0.40219 10.0.40219 10.0.30319 10.0.30319 10.0.40219 10.0.30319 10.0.40219 10.0.30319 10.0.31007 10.0.31119 10.0.31119 # Computers 5 1 1 2 1 1 1 1 6 4 3 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 PAGE 80 of 251 NETWORK ASSESSMENT Application Name Microsoft Visual Studio 6.0 Enterprise Edition Microsoft Visual Studio Macro Tools Microsoft Visual Studio Service Pack 3 Microsoft Visual Studio Tools for Applications 2.0 - ENU Microsoft Visual Studio Tools for Applications 2.0 - ENU Microsoft Visual Studio Web Authoring Component Microsoft Visual Web Developer 2005 Express Edition - ENU Microsoft Visual Web Developer 2010 Express - ENU Microsoft Web Deploy 2.0 Microsoft Web Platform Installer 3.0 Microsoft Web Publishing Wizard 1.53 Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools Microsoft Windows SDK for Visual Studio 2008 .NET Framework Tools - enu Microsoft Windows SDK for Visual Studio 2008 Headers and Libraries Microsoft Windows SDK for Visual Studio 2008 SDK Reference Assemblies and IntelliSense Microsoft Windows SDK for Visual Studio 2008 SP1 Tools Microsoft Windows SDK for Visual Studio 2008 SP1 Win32 Tools Microsoft Windows SDK for Visual Studio 2008 Tools Microsoft Windows SDK for Visual Studio 2008 Win32 Tools Microsoft Windows SharePoint Services 3.0 Microsoft Windows SharePoint Services 3.0 1033 Lang Pack Microsoft Word Viewer 97 Microsoft Xml Diff and Patch 1.0 Microsoft XML Parser Microsoft_VC80_ATL_x86 Microsoft_VC80_ATL_x86_x64 Microsoft_VC80_CRT_x86 PROPRIETARY & CONFIDENTIAL Version 9.0.30729 6.0.0.4 9.0.30729 9.0.35191 12.0.4518.1066 10.0.40219 2.0.1070 3.0.5 3.5.21022 3.5.21022 6.1.5288.17011 6.1.5288.17011 6.1.5294.17011 6.1.5294.17011 6.1.5288.17011 6.1.5288.17011 12.0.6425.1000 12.0.6425.1000 1.0.0 8.70.1104.04 8.0.50727.4053 8.0.50727.4053 8.0.50727.4053 # Computers 1 2 1 1 2 4 1 1 1 2 3 1 3 4 4 3 2 1 2 1 1 1 2 1 4 3 5 PAGE 81 of 251 NETWORK ASSESSMENT Application Name Microsoft_VC80_CRT_x86_x64 Microsoft_VC80_MFC_x86 Microsoft_VC80_MFC_x86_x64 Microsoft_VC80_MFCLOC_x86 Microsoft_VC80_MFCLOC_x86_x64 Microsoft_VC90_ATL_x86 Microsoft_VC90_ATL_x86_x64 Microsoft_VC90_CRT_x86 Microsoft_VC90_CRT_x86_x64 Microsoft_VC90_MFC_x86 Microsoft_VC90_MFC_x86_x64 Microsoft_VC90_MFCLOC_x86 MindFusion WinForms MiniTool Partition Wizard Enterprise Edition 6.0 Mozilla Firefox (2.0.0.20) Mozilla Firefox (3.6.24) Mozilla Firefox (3.6.3) Mozilla Firefox 10.0.1 (x86 en-US) Mozilla Firefox 12.0 (x86 en-US) Mozilla Firefox 13.0.1 (x86 en-US) Mozilla Firefox 14.0.1 (x86 en-US) Mozilla Firefox 15.0 (x86 en-US) Mozilla Firefox 16.0.1 (x86 en-US) Mozilla Firefox 5.0.1 (x86 en-US) Mozilla Maintenance Service Mozilla Maintenance Service Mozilla Maintenance Service PROPRIETARY & CONFIDENTIAL Version 8.0.50727.4053 8.0.50727.4053 8.0.50727.4053 8.0.50727.4053 80.50727.4053 1.00.0000 1.00.0000 1.00.0000 1.00.0000 1.00.0000 1.00.0000 1.00.0000 1.0.0 2.0.0.20 (en-US) 3.6.24 (en-US) 3.6.3 (en-US) 10.0.1 12.0 13.0.1 14.0.1 15.0 16.0.1 5.0.1 12.0 13.0.1 14.0.1 # Computers 3 5 3 5 3 5 3 5 3 5 3 2 1 1 2 1 1 1 1 1 2 1 1 1 1 1 2 PAGE 82 of 251 NETWORK ASSESSMENT Application Name Mozilla Maintenance Service Mozilla Maintenance Service Mozilla Thunderbird 14.0 (x86 en-US) Mozilla Thunderbird 16.0.1 (x86 en-US) MSIBuilder MSN Toolbar MSVCRT MSVCRT MSXML 4.0 SP2 Parser and SDK MultiScreen MyFreeCodec MySQL Administrator 1.1 MySQL Connector Net 6.4.3 MySQL Connector/ODBC 5.1 MySQL Installer MySQL Query Browser 1.1 MySQL Server 5.0 MySQL Server 5.5 MySQL Tools for 5.0 MySQL Tools for 5.0 MySQL Workbench 5.2 CE NetAssistant NetBeans IDE 3.5.1 NetBeans IDE 3.6 NetBeans IDE 7.1.1 Network Console Network Console PROPRIETARY & CONFIDENTIAL Version 15.0.1 16.0.1 14.0 16.0.1 2.0.25 1.0.39.0 14.0.1468.721 15.4.2862.0708 4.20.9818.0 1.00.0000 1.1.8 6.4.3 5.1.8 1.0.18.0 1.1.20 5.0.18 5.5.20 5.0.12 5.0.8 5.2.34.1 3.8.3 7.1.1 8.00.172 9.00.175 # Computers 1 2 1 1 1 1 2 2 3 1 1 1 2 1 1 1 1 1 1 1 2 1 1 1 1 3 1 PAGE 83 of 251 NETWORK ASSESSMENT Application Name Network Diagrams Network Diagrams Help NirSoft ProduKey Nmap 5.51 Nmap 5.61TEST5 Notepad++ Notepad++ Notepad++ Nucleus Kernel Outlook Password Recovery ver 10.08.01 NuGet Nullsoft Install System NVIDIA 3D Vision Controller Driver 301.42 NVIDIA 3D Vision Driver 266.58 NVIDIA 3D Vision Driver 301.42 NVIDIA Control Panel 266.58 NVIDIA Control Panel 267.24 NVIDIA Control Panel 301.42 NVIDIA Display Control Panel NVIDIA Drivers NVIDIA Drivers NVIDIA Graphics Driver 266.58 NVIDIA Graphics Driver 267.24 NVIDIA Graphics Driver 301.42 NVIDIA HD Audio Driver 1.1.13.1 NVIDIA HD Audio Driver 1.3.16.0 NVIDIA Install Application NVIDIA Install Application PROPRIETARY & CONFIDENTIAL Version 6.0.1000 6.0.1000 5.8.1 5.9.3 6.1.6 1.2.103.0 2.46 301.42 266.58 301.42 266.58 267.24 301.42 6.14.12.5919 1.10.62.40 266.58 267.24 301.42 1.1.13.1 1.3.16.0 2.1002.75.420 2.265.36.0 # Computers 1 1 1 1 1 1 1 1 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 1 1 2 PAGE 84 of 251 NETWORK ASSESSMENT Application Name NVIDIA PhysX NVIDIA PhysX NVIDIA PhysX System Software 9.10.0514 NVIDIA PhysX System Software 9.12.0213 NVIDIA Stereoscopic 3D Driver NVIDIA Stereoscopic 3D Driver NVIDIA Stereoscopic 3D Driver NVIDIA Update 1.8.15 NVIDIA Update Components Office Layout Office Layout Help OGA Notifier 2.0.0048.0 Online Check Deposit Online Plug-in Open XML SDK 2.0 for Microsoft Office OpenOffice.org 2.2 OpenSSL 1.0.0d Light (32-bit) Openvas-CLI Oracle JInitiator 1.3.1.22 Oracle VM VirtualBox 4.1.14 Orca Organization Charts Organization Charts Help Package: Google Nexus 7 ToolKit Page Layout Wizard PCMark05 PDF Reader (remove only) PROPRIETARY & CONFIDENTIAL Version 9.10.0514 9.12.0213 9.10.0514 9.12.0213 7.17.12.5919 7.17.12.6658 7.17.13.0142 1.8.15 1.8.15 6.0.1000 6.0.1000 2.0.0048.0 6.30.678.0 13.1.0.89 2.0.5022 2.2.9161 4.1.14 3.1.5299.0000 6.0.1000 6.0.1000 1.0.0.0 6.0.1000 1.2.2 # Computers 2 1 2 1 1 1 1 1 1 1 1 2 1 1 4 2 1 1 1 1 1 1 1 1 1 1 1 PAGE 85 of 251 NETWORK ASSESSMENT Application Name PDF Settings CS4 PDF Settings CS5 Pdf995 (installed by H&R Block) PDFCreator PdfEdit995 (installed by H&R Block) PDFTextConverter Pennock's Photo Renamer v1.0 pgAdmin III Photoshop Camera Raw Photoshop Camera Raw_x64 PHP 5.1.2 Pidgin Pidgin-Encryption Plugin (remove only) PowerISO PowerShellScriptOMatic v.1.0 Print ShapeSheet Process Engineering Process Engineering Help Program Files Program Files Help Program Files Technical Project Schedules Project Schedules Help Property Reporting Wizard Provider Add ProXi Database ProXi Repository PROPRIETARY & CONFIDENTIAL Version 9.0 10.0 1.2.1 1.2.2 5.0 5.0 2.4.1 5.1 1.0.0 6.0.1000 6.0.1000 6.0.1000 06.00.1001 6.0.1000 6.0.1000 6.0.1000 6.0.1000 6.0.1000 1.0.0 1.04.0000 1.04.0000 # Computers 1 4 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 PAGE 86 of 251 NETWORK ASSESSMENT Application Name ProXi Scheduler ProXi Server ProXi Update Server PuTTY development snapshot 2011-11-02:r9326 PuTTY version 0.58 PuTTY version 0.62 PxMergeModule QB Network Diagnostic Tool QFolder QT Lite 4.1.0 Quest PowerGUI 1.9.5 Quick Screen Capture 3.0 QuickBooks QuickBooks QuickBooks Connection Diagnostic Tool QuickBooks Online Backup QuickBooks Premier Edition 2012 QuickBooks Premier: Professional Services Edition 2009 Quickset64 QuickTime QuickTime QuickTime RapidSpell Desktop .NET RapidSpell Desktop .NET v5 Reader for PC RealNetworks - Microsoft Visual C++ 2008 Runtime RealPlayer PROPRIETARY & CONFIDENTIAL Version 1.04.0000 1.04.0000 1.05.0000 2011-11-02:r9326 0.58 0.62 1.00.0000 1.0 1.00.0000 4.1.0 1.9.5.966 3.0 19.0.4007.703 22.0.4008.2206 4.0.0 1.0.4 22.0.4008.2206 19.0.4007.703 10.09.20 7.55.90.70 7.69.80.9 7.70.80.34 4.7 5.0 2.0.00.07121 9.0 # Computers 1 1 1 1 1 1 2 1 1 1 2 3 1 2 1 1 2 1 1 2 1 1 1 1 1 1 1 PAGE 87 of 251 NETWORK ASSESSMENT Application Name Realtek AC'97 Audio Realtek Ethernet Controller Driver Realtek Ethernet Controller Driver For Windows 7 Realtek High Definition Audio Driver Realtek High Definition Audio Driver Realtek High Definition Audio Driver Realtek USB 2.0 Card Reader RealUpgrade 1.1 Reflection X 6.20 Release Notes Technical Remote Access Open Manage Components Remote Administration Tools Remote Administrator v2.1 Remote Desktop Connection Remote Desktop Connection RemoteCalendarsVSTO Rename4u Renesas Electronics USB 3.0 Host Controller Driver RevealNet Instant Messages for Oracle RevealNet Oracle Administration Knowledge Base Salesforce for Outlook Salesforce Outlook Edition 3 Salesforce Outlook Edition 3 Salesforce Outlook Edition 3.2 SAMSUNG USB Driver for Mobile Phones Samsung_MonSetup Sandboxie 3.442 PROPRIETARY & CONFIDENTIAL Version 7.31.1025.2010 7.17.304.2010 6.0.1.5789 6.0.1.6251 6.1.7600.30126 1.1.0 6.0.1001 4.00.0000 5.2.3790.0 5.1.2600.0 5.1.2600.2180 1.0.0 1.16 2.0.32.0 1.7.101.1030 3.3.112 3.3.114 3.2.513 1.3.450.0 1.00.0000 # Computers 1 1 3 1 2 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 PAGE 88 of 251 NETWORK ASSESSMENT Application Name Satellite Save as HTML Scan Scan ScreenConnect ScreenConnect Screenshot Captor 3.08.01 Search Toolbar Secunia PSI (3.0.0.2004) Security Update for Microsoft Office system 2007 (972581) Self-service Plug-in ShadowProtect ShadowProtect ImageManager Shape Explorer Shape Explorer Help Shop for HP Supplies Shrew Soft VPN Client Skype 5.10 SmartShape Wizard SmartWebPrinting Snagit 10.0.1 Snagit 10.0.2 Snagit 11 SnagIt 8 SnagIt 8 Snagit 9.1.1 SnipIT PROPRIETARY & CONFIDENTIAL Version 6.0.1000 13.0.0.0 4.1.0.0 2.5.3370.4638 2.5.3409.4645 1.2 3.0.0.2004 3.1.0.21744 4.15.10125 4.1.0 6.0.1001 6.0.1000 13.0 5.10.116 6.0.1000 130.0.457.000 10.0.1 10.0.2 11.0.1 8.0.0 8.2.3 9.1.1.261 1.0.1 # Computers 1 1 1 1 1 1 1 1 1 2 1 1 1 1 1 1 1 2 1 1 1 1 2 1 2 1 1 PAGE 89 of 251 NETWORK ASSESSMENT Application Name Soft Data Fax Modem with SmartCP SolutionCenter Solutions SPA Call Manager Pro SPA Call Manager v1.2.6.148 SpeedFan (remove only) Spotify Sprinx CTI Client Spybot - Search & Destroy SQL Server 2008 R2 Client Tools SQL Server 2008 R2 Common Files SQL Server 2008 R2 Database Engine Services SQL Server 2008 R2 Database Engine Shared SQL Server 2008 R2 Management Studio Sql Server Customer Experience Improvement Program SQL Server System CLR Types SQLXML4 SSH Secure Shell SSL Diagnostics 1.1 (x86) Stamp 2.8 StarTeam 4.0 StarTeam Cross-Platform Client StarTeam SDK Runtime 5.4 Status Stencil Report Wizard Sticky Notes Taskbar Hider 1.9 StreetSmart Pro PROPRIETARY & CONFIDENTIAL Version 7.74.00 130.0.373.000 1.0.0.0 1.0.1 0.5.2 1.6.2 10.50.1600.1 10.50.1600.1 10.50.1600.1 10.50.1600.1 10.50.1600.1 10.50.1600.1 10.0.1600.22 9.00.4035.00 1.6.0201.0 5.3.0.0 130.0.469.000 6.0.1000 4.22 # Computers 1 1 1 1 1 1 1 1 2 1 3 2 2 2 2 3 1 1 1 1 2 3 3 1 1 1 1 PAGE 90 of 251 NETWORK ASSESSMENT Application Name stunnel Suite Shared Configuration CS4 SUPERAntiSpyware Support Agent SupportSoft Assisted Service Symantec AntiVirus Client Symantec Backup Exec Remote Agent for Windows Servers Symantec pcAnywhere System Center Operations Manager 2007 R2 Agent System Requirements Lab CYRI System Requirements Lab for Intel SystemTools DumpSec TeamViewer 5 TeamViewer 5 TeamViewer 7 TeamViewer 7 Technical Information: February 2003 Terminal Services Client TextPad 5 The 2007 Microsoft Office Servers Service Pack 2 (SP2) and Windows SharePoint Services 3.0 SP2, 32-bit Editions Time Zone Data Update Tool for Microsoft Office Outlook Toolbox TrayApp TreeSize Free V2.4 TreeSize Professional 5.2.3 TrueCrypt PROPRIETARY & CONFIDENTIAL Version 1.0 4.40.1002 1.0.0000 15 8.1.0.825 10.1.5629 10.5 6.1.7221.0 4.5.1.0 4.5.3.0 2.8.6 5.0.8625 5.1.9290 7.0.14563 7.0.15723 1.38.3015 5.4.2 12.0.4518.1029 130.0.648.000 130.0.422.000 2.4 7.1a # Computers 1 1 1 1 2 3 2 1 1 1 1 1 2 1 1 1 1 1 1 1 1 1 1 2 1 1 PAGE 91 of 251 NETWORK ASSESSMENT Application Name UBCD4Win 3.50 UltraMon UltraSearch V1.6.1 UnloadSupport Update Rollup 1 for Windows 2000 SP4 Update Services 3.0 API Samples and Tools UserAgent Agent UserAgent Agent UserAgent Agent UserAgent Agent UserAgent Explorer UserAgent Explorer UserAgent Explorer UserAgent Explorer UserAgent Explorer UserAgent Explorer UserAgent Gateway UserAgent Manager UserAgentGateway UserAgentGateway UserAgentGateway Utilu IE Collection 1.7.0.3 Van Dyke Technologies SecureCRT 3.3 VanDyke Software SecureCRT 5.1 VASSAL (3.1.18) VBA VC Runtimes MSI PROPRIETARY & CONFIDENTIAL Version 3.1.0 1.6.1 11.0.0 20050809.32623 1.0.0 2.1.1041 2.1.1046 2.1.1054 2.1.1058 1.6.3313 2.1.1046 2.1.1054 3.0.1072 3.0.1073 3.0.1074 1.6.0030 1.05.0000 2.1.1054 2.1.1058 2.1.1059 3.3 5.1 3.1.18 6.01.00.1234 9.0.21022 # Computers 1 1 1 1 4 1 2 4 1 4 1 2 1 1 1 5 1 1 1 4 1 1 2 1 1 1 4 PAGE 92 of 251 NETWORK ASSESSMENT Application Name VDS 1.1 Update for R2 Viewpoint Media Player ViewSonic Monitor Drivers Vim 6.3 (self-installing) VIPRE Business Premium Virtual Account Numbers VirtualCloneDrive Visio Visio Core Files Visio Technical Core Files Visual C++ 2008 IA64 Runtime - (v9.0.30729) Visual C++ 2008 IA64 Runtime - v9.0.30729.01 Visual C++ 2008 x64 Runtime - (v9.0.30729) Visual C++ 2008 x64 Runtime - (v9.0.30729.4148) Visual C++ 2008 x64 Runtime - (v9.0.30729.6161) Visual C++ 2008 x64 Runtime - KB2465361 - (v9.0.30729.5570) Visual C++ 2008 x64 Runtime - v9.0.30729.01 Visual C++ 2008 x64 Runtime - v9.0.30729.4148 Visual C++ 2008 x64 Runtime - v9.0.30729.5570 Visual C++ 2008 x64 Runtime - v9.0.30729.6161 Visual C++ 2008 x86 Runtime - (v9.0.30729) Visual C++ 2008 x86 Runtime - (v9.0.30729.4148) Visual C++ 2008 x86 Runtime - (v9.0.30729.6161) Visual C++ 2008 x86 Runtime - KB2465361 - (v9.0.30729.5570) Visual C++ 2008 x86 Runtime - v9.0.30729.01 Visual C++ 2008 x86 Runtime - v9.0.30729.4148 Visual C++ 2008 x86 Runtime - v9.0.30729.5570 PROPRIETARY & CONFIDENTIAL Version 5.0.4959 1.0.1.0 1.0.0.1 06.00.1000 06.00.1000 9.0.30729 9.0.30729.01 9.0.30729 9.0.30729.4148 9.0.30729.6161 9.0.30729.5570 9.0.30729.01 9.0.30729.4148 9.0.30729.5570 9.0.30729.6161 9.0.30729 9.0.30729.4148 9.0.30729.6161 9.0.30729.5570 9.0.30729.01 9.0.30729.4148 9.0.30729.5570 # Computers 1 1 2 2 1 1 9 1 1 1 3 3 3 2 2 1 3 2 1 2 3 3 3 1 3 3 1 PAGE 93 of 251 NETWORK ASSESSMENT Application Name Visual C++ 2008 x86 Runtime - v9.0.30729.6161 Visual CertExam Suite Visual CertExam Suite 1.9 Visual Leak Detector 1.9c Visual Studio .NET Prerequisites - English Visual Studio 2005 extensions for Windows SharePoint Services version 1.1 Visual Studio 2005 Tools for Office Second Edition Runtime Visual Studio 2008 x64 Redistributables Visual Studio 2010 Prerequisites - English Visual Studio 2010 Prerequisites - English Visual Studio 2010 SP1 Tools for SQL Server Compact 4.0 ENU Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU Visual Studio Tools for the Office system 3.0 Runtime VMware Converter VMware Infrastructure Client 2.5 VMware Infrastructure Client 2.5 VMware Infrastructure Update VMware Infrastructure Update VMware Remote Console Plug-in VMware VI Toolkit (for Windows) VMware Virtual Infrastructure Client 2.0 VMware VIX VMware vSphere Client 4.0 VMware vSphere Client 4.0 VMware vSphere Client 4.1 VMware vSphere Client 4.1 VMware vSphere Client 5.0 PROPRIETARY & CONFIDENTIAL Version 9.0.30729.6161 1.9c 9.0.30729 12.0.4518.1075 10.0.0.2 10.0.30319 10.0.40219 4.0.8482.1 4.0.8080.0 3.0.3 2.5.0.64217 2.5.0.64247 2.5.0.64207 2.5.0.64217 2.5.0.244046 1.5.0.1299 2.0.1.32042 1.00.0000 4.0.0.10021 4.0.0.15751 4.1.0.12319 4.1.0.17435 5.0.0.32829 # Computers 3 1 3 1 3 1 7 1 1 1 1 2 5 1 2 2 1 1 1 1 2 1 1 3 1 4 2 PAGE 94 of 251 NETWORK ASSESSMENT Application Name VMware vSphere Host Update Utility 4.0 VNC 3.3.7 VNC Free Edition 4.1.1 VNC Mirror Driver 1.8.0 VNC Printer Driver 1.8.0 VNC Server 5.0.2 VNC Viewer 5.0.2 Vocalocity Desktop Tools Vocalocity IE Addin VPN Client VSeWSS 1.1 User Guide VSIP Interop Assembly Redist WCF RIA Services V1.0 SP1 Web Deployment Tool WebEx WebFldrs WebFldrs WebFldrs XP WebReg WildGames Winamp Windows 2000 Administration Tools Windows 2000 Application Compatibility Update Windows 2000 Service Pack 4 Windows Defender Windows Defender Signatures Windows Driver Package - ATI Technologies Inc. (ati2mtag) Display (01/21/2008 PROPRIETARY & CONFIDENTIAL Version 4.0.0.15751 3.3.7 4.1.1 1.8.0 1.8.0 5.0.2 5.0.2 1.0 1.0.0 1.1.0 1.00.0000 4.1.60114.0 1.1.0618 9.00.3501 9.00.3907 9.50.7523 130.0.132.017 1.0.0.43 5.601 5.0.0.0000 1.1.1593.0 1.20.0.0 01/21/2008 8.240.50.3000 # Computers 1 1 1 1 1 1 1 2 2 2 1 1 1 2 4 3 1 1 1 1 1 1 1 2 1 1 1 PAGE 95 of 251 NETWORK ASSESSMENT Application Name 8.240.50.3000) Windows Driver Package - ATI Technologies Inc. (ati2mtag) Display (06/23/2009 8.240.50.5000) Windows Driver Package - ATI Technologies Inc. Display (01/21/2008 8.240.50.3000) Windows Driver Package - ATI Technologies Inc. Display (06/23/2009 8.240.50.5000) Windows Driver Package - Broadcom Corporation (BTHUSB) Bluetooth (03/24/2010 6.3.0.2501) Windows Imaging Component Windows Internal Database Windows Internal Database (MICROSOFT##SSEE) Windows Internet Explorer 8 Windows Live Call Windows Live Communications Platform Windows Live Communications Platform Windows Live Essentials Windows Live Essentials Windows Live ID Sign-in Assistant Windows Live Installer Windows Live Language Selector Windows Live Messenger Windows Live Messenger Windows Live Photo Common Windows Live PIMT Platform Windows Live Sign-in Assistant Windows Live SOXE Windows Live SOXE Definitions Windows Live Upload Tool PROPRIETARY & CONFIDENTIAL Version # Computers 06/23/2009 8.240.50.5000 1 01/21/2008 8.240.50.3000 06/23/2009 8.240.50.5000 03/24/2010 6.3.0.2501 1 1 1 3.0.0.0 9.3.4035.00 9.3.4035.00 20090308.140743 14.0.8117.0416 14.0.8117.416 15.4.3502.0922 14.0.8117.0416 15.4.3555.0308 7.250.4232.0 15.4.3502.0922 15.4.3555.0308 14.0.8117.0416 15.4.3538.0513 15.4.3502.0922 15.4.3508.1109 5.000.818.5 15.4.3502.0922 15.4.3502.0922 14.0.8014.1029 4 1 1 3 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 2 PAGE 96 of 251 NETWORK ASSESSMENT Application Name Windows Live UX Platform Windows Live UX Platform Language Pack Windows Live Writer Windows Live Writer Resources Windows Media Encoder 9 Series Windows Media Format 11 runtime Windows Media Player 11 Windows Messenger 5.1 Windows Mobile 5.0 SDK R2 for Pocket PC Windows Mobile 5.0 SDK R2 for Smartphone Windows Presentation Foundation Windows Resource Kit Tools Windows Server 2003 Service Pack 1 Windows Server 2003 Service Pack 1 Administration Tools Pack Windows Server 2003 Service Pack 2 Windows SharePoint Services 3.0 SP2 (SP2) Windows SharePoint Services Developer Resources 1.4 English Windows SideShow Managed API 1.0 SDK Windows SideShow Managed Runtime 1.0 Windows XP Mode WinINSTALL LE WinISO 5.3 WinMerge 2.12.4 WinPcap 3.0 WinPcap 3.1 WinPcap 4.1.2 WinRAR 4.00 beta 1 (64-bit) PROPRIETARY & CONFIDENTIAL Version 15.4.3502.0922 15.4.3508.1109 15.4.3502.0922 15.4.3502.0922 5.1.0639 5.00.1700.5.14343.06 5.00.1700.5.14343.06 3.0.6920.0 5.2.3790 20050324.163929 5.2.3790.1830 20070217.021455 12.0.4518.1102 1.0.1.0 1.0.1.0 1.3.7600.16423 1.0 2.12.4 3.1.0.27 4.1.0.2001 4.00.1 # Computers 2 2 1 1 2 1 1 2 4 4 1 3 1 1 1 1 1 1 1 2 1 1 1 2 1 3 1 PAGE 97 of 251 NETWORK ASSESSMENT Application Name WinRAR archiver WinSCP WinSCP 2.3 WinSCP 3.8.2 WinSCP 4.2.7 WinSCP 4.2.9 WinSyslog 3.7 WinTFTP Server Pro WinVNC 3.3.3 WinZip WinZip WinZip WinZip 15.0 WinZip Self-Extractor Wireshark 1.6.2 Xceed Components X-Lite Xming 6.9.0.31 XML Paper Specification Shared Components Pack 1.0 Yahoo! Software Update Yahoo! Toolbar Yontoo Layers Client 1.10.01 PROPRIETARY & CONFIDENTIAL Version 2.3 3.8.2 4.2.7 4.2.9 3.70.124 8.1 (4331) 8.1 SR-1 (5266) 15.0.9334 1.6.2 2.2.6475.0 50.6.7284 6.9.0.31 1.10.01 # Computers 6 1 1 1 1 2 1 1 1 3 1 1 1 2 1 4 4 1 3 1 2 1 PAGE 98 of 251 NETWORK ASSESSMENT 9 - System Password Strength Assessment This section contains the password strength analysis using MBSA to determine risk. Systems with security risks are highlighted in red. IP Range for MBSA scan: IP Address Computer Name 10.0.1.3 CLIENTDOM\DC01 10.0.1.4 CLIENTDOM\MEGATRON 10.0.1.5 10.0.1.6 CLIENTDOM\UTIL01 CLIENTDOM\ISA1 10.0.1.9 CLIENTDOM\PS01 10.0.1.11 CLIENTDOM\SHREDDER 10.0.1.12 CLIENTDOM\DEVWIKI 10.0.1.13 CLIENTDOM\REMOTE 10.0.1.14 CLIENTDOM\RS01 10.0.1.15 CLIENTDOM\W2012TEST PROPRIETARY & CONFIDENTIAL Assessment Strong Security Strong Security Guest - Weak, Disabled Strong Security Strong Security Guest - Weak, Disabled SUPPORT_388945a0 - Disabled Strong Security Guest - Weak, Disabled Strong Security Guest - Weak, Disabled HelpAssistant_c6b3ed - Disabled SUPPORT_388945a0 - Disabled Strong Security Guest - Weak, Disabled SUPPORT_388945a0 - Disabled Strong Security Guest - Weak, Disabled Strong Security Guest - Weak, Disabled Strong Security Guest - Weak, Disabled PAGE 99 of 251 NETWORK ASSESSMENT IP Address 10.0.1.33 Computer Name CLIENTDOM\THRASH2 10.0.1.35 CLIENTDOM\PABUILD 10.0.1.37 CLIENTDOM\VM-WIN7 10.0.1.50 CLIENTDOM\ENGINEERS PROPRIETARY & CONFIDENTIAL Assessment Potential Risk Guest - Weak, Disabled pietro - Access Error (1 1722), Disabled ASPNET - Access Error (1 1722) Administrator - Access Error (1 1722) IUSR_THRASH2 - Access Error (1 1722) IWAM_THRASH2 - Access Error (1 1722) SQLDebugger - Access Error (1 1722) TsInternetUser - Initialization error VUSR_THRASH2 - Initialization error fThalsim - Access Error (1 1722) Marcus - Access Error (1 1722) pabuild - Access Error (1 1722) test - Access Error (1 1722) Potential Risk Guest - Weak, Disabled SUPPORT_388945a0 - Error 1727, Disabled ASPNET - Error 1727 Administrator - Error 1727 IUSR_CERTTRAN1 - Error 1727 IWAM_CERTTRAN1 - Error 1727 pabuild4 - Error 1727 pGarza - Error 1727 Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Potential Risk PAGE 100 of 251 NETWORK ASSESSMENT IP Address Computer Name 10.0.1.60 CLIENTDOM\HPV00 10.0.1.67 CLIENTDOM\HYPERV 10.0.1.69 CLIENTDOM\STORAGE01 10.0.1.76 CLIENTDOM\SE-Dresden 10.0.1.79 CLIENTDOM\PKWIN7ENT 10.0.1.81 CLIENTDOM\MWhitman-LT 10.0.1.83 CLIENTDOM\JAMIE-PC 10.0.1.90 CLIENTDOM\MIGTEST PROPRIETARY & CONFIDENTIAL Assessment ASPNET - Disabled GraphicD - Weak, Disabled Guest - Weak, Disabled TsInternetUser - Access denied. Strong Security Guest - Weak, Disabled Strong Security Guest - Weak, Disabled Strong Security Guest - Weak, Disabled Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Potential Risk Administrator - Weak, Disabled Guest - Weak, Disabled mark - Does not meet account policy Potential Risk Administrator - Weak, Disabled Guest - Weak, Disabled Jamie - Does not meet account policy Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled PAGE 101 of 251 NETWORK ASSESSMENT IP Address 10.0.1.91 Computer Name CLIENTDOM\DMartinez-PC 10.0.1.92 CLIENTDOM\CURRIT30DEV 10.0.1.93 CLIENTDOM\jsanford-WIN7 10.0.1.99 CLIENTDOM\PGarza-WIN764 10.0.1.103 CLIENTDOM\SHELDON 10.0.1.112 CLIENTDOM\Brenda 10.0.1.114 CLIENTDOM\MMidland1 10.0.1.118 CLIENTDOM\TERMINUS 10.0.1.122 CLIENTDOM\WINDESKTOP 10.0.1.132 CLIENTDOM\ISA1 PROPRIETARY & CONFIDENTIAL Assessment Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Potential Risk Guest - Weak, Disabled TsInternetUser - Access denied. Potential Risk Administrator - Weak, Disabled Guest - Weak, Disabled CLIENT - Does not meet account policy Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Strong Security Administrator - Disabled Guest - Weak, Disabled Strong Security Guest - Weak, Disabled Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Strong Security Guest - Weak, Disabled Strong Security PAGE 102 of 251 NETWORK ASSESSMENT IP Address Computer Name 10.0.1.137 CLIENTDOM\NAGATEWAY 10.0.1.151 CLIENTDOM\DEONNE 10.0.1.156 CLIENTDOM\JAMIE-PC 10.0.1.157 CLIENTDOM\Costello-SG 10.0.1.175 10.0.1.215 CLIENTDOM\UTIL01 CLIENTDOM\HJOBS-VM-WIN764 10.0.1.220 CLIENTDOM\REX 10.0.1.221 CLIENTDOM\PGarza1 PROPRIETARY & CONFIDENTIAL Assessment Guest - Weak, Disabled SUPPORT_388945a0 - Disabled Strong Security Guest - Weak, Disabled Severe Risk Guest - Weak, Disabled HelpAssistant - Disabled SUPPORT_388945a0 - Disabled Administrator - Weak Potential Risk Administrator - Weak, Disabled Guest - Weak, Disabled Jamie - Does not meet account policy Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Strong Security Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Strong Security Administrator - Weak, Disabled Guest - Weak, Disabled Potential Risk Administrator - Weak, Disabled Guest - Weak, Disabled pablo - Does not meet account policy PAGE 103 of 251 NETWORK ASSESSMENT IP Address 10.0.1.223 Computer Name CLIENTDOM\CURRITPATCH PROPRIETARY & CONFIDENTIAL Assessment Strong Security Guest - Weak, Disabled PAGE 104 of 251 NETWORK ASSESSMENT 10 - Patch Summary This section contains the patching status of computers using MBSA to determine need. Computers with missing patches are highlighted in red. IP Range for Patch scan: IP Address Computer Name 10.0.1.3 CLIENTDOM\DC01 10.0.1.4 10.0.1.5 10.0.1.6 CLIENTDOM\MEGATRON CLIENTDOM\UTIL01 CLIENTDOM\ISA1 PROPRIETARY & CONFIDENTIAL Issue Score SQL Server Security Check passed Updates Windows Security Updates Check failed (critical) Developer Tools, Check failed (critical) Runtimes, and Redistributables Security Updates SDK Components Security Check passed Updates Windows Security Updates Check failed (critical) SQL Server Security Check passed Updates Windows Security Updates Check failed (critical) Internet Security and Check failed (critical) Acceleration Server Security Updates SQL Server Security Check failed (critical) Updates Windows Security Updates Check failed (critical) Assessment No security updates are missing. 21 security updates are missing. 3 service packs or update rollups are missing. 1 security updates are missing. No security updates are missing. 57 security updates are missing. 4 service packs or update rollups are missing. No security updates are missing. 50 security updates are missing. 4 service packs or update rollups are missing. 1 security updates are missing. 1 service packs or update rollups are missing. 1 security updates are missing. 23 security updates are missing. 3 service PAGE 105 of 251 NETWORK ASSESSMENT IP Address Computer Name Issue Score 10.0.1.9 CLIENTDOM\PS01 Security Updates Unable to scan 10.0.1.11 10.0.1.12 CLIENTDOM\SHREDDER CLIENTDOM\DEVWIKI Security Updates Unable to scan Windows Security Updates Check failed (critical) 10.0.1.13 10.0.1.14 CLIENTDOM\REMOTE CLIENTDOM\RS01 Security Updates Security Updates Unable to scan Unable to scan 10.0.1.15 CLIENTDOM\W2012TEST Security Updates Unable to scan 10.0.1.35 CLIENTDOM\PABUILD Developer Tools, Runtimes, and Redistributables Security Updates SDK Components Security Updates SQL Server Security Updates Windows Security Updates SQL Server Security Updates Windows Security Updates Check failed (non-critical) Assessment packs or update rollups are missing. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. Cannot load security CAB file. 62 security updates are missing. 5 service packs or update rollups are missing. Cannot load security CAB file. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. 1 service packs or update rollups are missing. Check passed No security updates are missing. Check failed (critical) 1 security updates are missing. Check failed (non-critical) Check passed 3 service packs or update rollups are missing. No security updates are missing. Check failed (critical) Security Updates Unable to scan 78 security updates are missing. 7 service packs or update rollups are missing. Cannot load security CAB file. 10.0.1.37 10.0.1.50 CLIENTDOM\VM-WIN7 CLIENTDOM\ENGINEERS PROPRIETARY & CONFIDENTIAL PAGE 106 of 251 NETWORK ASSESSMENT IP Address Computer Name 10.0.1.60 CLIENTDOM\HPV00 Issue Security Updates Score Unable to scan 10.0.1.67 Developer Tools, Runtimes, and Redistributables Security Updates Office Security Updates SDK Components Security Updates SQL Server Security Updates Silverlight Security Updates Windows Security Updates Check failed (critical) CLIENTDOM\HYPERV Check failed (non-critical) Check passed 1 service packs or update rollups are missing. No security updates are missing. Check failed (critical) 2 security updates are missing. 2 service packs or update rollups are missing. 1 security updates are missing. Check failed (critical) Check failed (critical) 10.0.1.69 CLIENTDOM\STORAGE01 SQL Server Security Check failed (critical) Updates Windows Security Updates Check failed (critical) 10.0.1.76 CLIENTDOM\SE-Dresden Security Updates Unable to scan 10.0.1.79 CLIENTDOM\PKWIN7ENT Security Updates Unable to scan 10.0.1.81 CLIENTDOM\MWhitman- Security Updates Unable to scan PROPRIETARY & CONFIDENTIAL Assessment Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. 12 security updates are missing. 1 service packs or update rollups are missing. 54 security updates are missing. 4 service packs or update rollups are missing. 1 security updates are missing. 1 service packs or update rollups are missing. 50 security updates are missing. 4 service packs or update rollups are missing. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. Cannot contact Windows Update Agent on PAGE 107 of 251 NETWORK ASSESSMENT IP Address Computer Name LT Issue Score 10.0.1.83 CLIENTDOM\JAMIE-PC Security Updates Unable to scan 10.0.1.90 CLIENTDOM\MIGTEST Security Updates Unable to scan 10.0.1.91 CLIENTDOM\DMartinez-PC Developer Tools, Runtimes, and Redistributables Security Updates Microsoft Lync Server and Microsoft Lync Security Updates Office Security Updates Office Communications Server And Office Communicator Security Updates SQL Server Security Updates Silverlight Security Updates Windows Security Updates CLIENTDOM\CURRIT30DEV Security Updates CLIENTDOM\jsanfordSecurity Updates WIN7 10.0.1.92 10.0.1.93 PROPRIETARY & CONFIDENTIAL Check passed Assessment target computer, possibly due to firewall settings. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. No security updates are missing. Check passed No security updates are missing. Check passed Check passed No security updates are missing. No security updates are missing. Check passed No security updates are missing. Check passed Check passed Unable to scan Unable to scan No security updates are missing. No security updates are missing. Cannot load security CAB file. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. PAGE 108 of 251 NETWORK ASSESSMENT IP Address Computer Name 10.0.1.99 CLIENTDOM\PGarzaWIN764 10.0.1.103 CLIENTDOM\SHELDON PROPRIETARY & CONFIDENTIAL Issue Developer Tools, Runtimes, and Redistributables Security Updates Microsoft Lync Server and Microsoft Lync Security Updates Office Security Updates Office Communications Server And Office Communicator Security Updates SQL Server Security Updates Silverlight Security Updates Windows Security Updates Developer Tools, Runtimes, and Redistributables Security Updates Microsoft Lync Server and Microsoft Lync Security Updates Office Security Updates Office Communications Server And Office Communicator Security Updates Score Check failed (critical) Assessment 1 security updates are missing. Check passed No security updates are missing. Check passed Check passed No security updates are missing. No security updates are missing. Check passed No security updates are missing. Check passed Check passed Check passed No security updates are missing. No security updates are missing. No security updates are missing. Check failed (critical) 1 security updates are missing. Check failed (critical) Check passed 5 security updates are missing. No security updates are missing. PAGE 109 of 251 NETWORK ASSESSMENT IP Address Computer Name Issue SDK Components Security Updates SQL Server Security Updates Silverlight Security Updates Windows Security Updates Score Check passed Assessment No security updates are missing. Check passed No security updates are missing. Check passed Check failed (critical) Check passed Check passed Check passed No security updates are missing. 10.0.1.114 CLIENTDOM\MMidland1 Office Security Updates Office Communications Server And Office Communicator Security Updates SQL Server Security Updates Windows Security Updates Security Updates No security updates are missing. 4 security updates are missing. 2 service packs or update rollups are missing. No security updates are missing. No security updates are missing. Check failed (non-critical) Unable to scan 10.0.1.118 CLIENTDOM\TERMINUS Security Updates Unable to scan 10.0.1.122 CLIENTDOM\WINDESKTOP Security Updates Unable to scan 10.0.1.132 CLIENTDOM\ISA1 Check failed (critical) 1 service packs or update rollups are missing. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. 1 security updates are missing. 1 service packs or update rollups are missing. 10.0.1.112 CLIENTDOM\Brenda PROPRIETARY & CONFIDENTIAL Internet Security and Acceleration Server Security Updates PAGE 110 of 251 NETWORK ASSESSMENT IP Address Computer Name Issue Score SQL Server Security Check failed (critical) Updates Windows Security Updates Check failed (critical) 10.0.1.137 CLIENTDOM\NAGATEWAY Office Security Updates Check failed (critical) SQL Server Security Check passed Updates Windows Security Updates Check failed (critical) Assessment 1 security updates are missing. 23 security updates are missing. 3 service packs or update rollups are missing. 17 security updates are missing. 1 service packs or update rollups are missing. No security updates are missing. Developer Tools, Runtimes, and Redistributables Security Updates Office Security Updates SQL Server Security Updates Windows Security Updates Check passed 23 security updates are missing. 3 service packs or update rollups are missing. No security updates are missing. Check failed (critical) Check passed 9 security updates are missing. No security updates are missing. Check failed (critical) 10.0.1.156 CLIENTDOM\JAMIE-PC Security Updates Unable to scan 10.0.1.157 CLIENTDOM\Costello-SG Security Updates Unable to scan 10.0.1.175 CLIENTDOM\UTIL01 SQL Server Security Check passed Updates Windows Security Updates Check failed (critical) 10 security updates are missing. 3 service packs or update rollups are missing. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. Cannot contact Windows Update Agent on target computer, possibly due to firewall settings. No security updates are missing. 10.0.1.151 CLIENTDOM\DEONNE PROPRIETARY & CONFIDENTIAL 50 security updates are missing. 4 service PAGE 111 of 251 NETWORK ASSESSMENT IP Address Computer Name Issue Score 10.0.1.215 CLIENTDOM\HJOBS-VMWIN764 Office Security Updates Check failed (critical) SQL Server Security Updates Windows Security Updates Developer Tools, Runtimes, and Redistributables Security Updates Microsoft Lync Server and Microsoft Lync Security Updates Office Security Updates Office Communications Server And Office Communicator Security Updates SDK Components Security Updates SQL Server Security Updates Silverlight Security Updates Windows Security Updates Check passed Assessment packs or update rollups are missing. 17 security updates are missing. 1 service packs or update rollups are missing. No security updates are missing. Check failed (non-critical) Check failed (critical) 2 service packs or update rollups are missing. 1 security updates are missing. Check failed (critical) 1 security updates are missing. Check failed (critical) Check passed 4 security updates are missing. No security updates are missing. Check passed No security updates are missing. Check failed (non-critical) 1 service packs or update rollups are missing. Check passed Check failed (critical) Security Updates Unable to scan No security updates are missing. 5 security updates are missing. 3 service packs or update rollups are missing. Cannot contact Windows Update Agent on target computer, possibly due to firewall 10.0.1.220 CLIENTDOM\REX 10.0.1.221 CLIENTDOM\PGarza1 PROPRIETARY & CONFIDENTIAL PAGE 112 of 251 NETWORK ASSESSMENT IP Address Computer Name Issue 10.0.1.223 CLIENTDOM\CURRITPATCH Security Updates PROPRIETARY & CONFIDENTIAL Score Unable to scan Assessment settings. Cannot load security CAB file. PAGE 113 of 251 NETWORK ASSESSMENT 11 - Endpoint Security and Backup This section contains a listing of detected antivirus, antispyware, firewall, and backup information as detected through Security Center and installed services for major vendors, which is then categorized by domain membership. Values in the “Name” column contain either the name of the product, None indicating the machine returned information but no product was found, or <empty> indicating information was not obtainable. A status with a green check indicates “yes”, a red X indicates “no”, and <empty> indicates that status was not available. CLIENTDOM.COM Computer Name Antivirus Name On Antispyware Current Name On Firewall Current Name On Backup Name 1RB11D1 AGENT003-PC APPV-MGMT-SRV ATLDC01 BHunt-LTV Brenda None Windows Defender Windows Firewall None CLIENTDOM-HLI4PQ CLIENTDOM-LT1 CLIENTDOM-SCB-LTP Clienthq CLIENT-LOC-CORE CLIENT-LOC-EXCHTKT CLIENT-LOC-EXTEST CLIENT-LOC-HPV01 CLIENT-LOC-RJLLTP CLIENT-LOC-WS01 CLIENTWS-PK PROPRIETARY & CONFIDENTIAL PAGE 114 of 251 On NETWORK ASSESSMENT Computer Name Antivirus Name On Antispyware Current Name On Firewall Current Name On Backup Name CLOVEPOWER CONFERENCE1 CONFERENCEROOM Windows Firewall Costello-SG None Windows Defender None CURRIT30DEV None None None None None None None None None None Windows Firewall None DEONNE None None Windows Firewall None DEVWIKI None None Windows Firewall None CURRITDEMO CURRITNMS-BDF CURRITPATCH D620-5P9W0C1 D620-8BCJVD1 DC01 DELL_OFFICE DELL120720 DEMO5 None DIALTONE DMartinez-PC AVG Anti-Virus Free Edition 2012 AVG Anti-Virus Free Edition 2012 Windows Defender Windows Firewall Dresden Dresden-XP DWilliams2 ENGINEERS None None None None ERPI-CLIENTDOM-01 FTDELLLAPTOP PROPRIETARY & CONFIDENTIAL PAGE 115 of 251 On NETWORK ASSESSMENT Computer Name Antivirus Name On Antispyware Current Name On Firewall Current Name On Backup Name FTDESKTOPWORK HJOBS-VM-WIN764 Windows Firewall None None Windows Firewall None None Windows Firewall Windows Firewall None Windows Firewall None Windows Firewall None None Windows Defender HPV00 None HYPERV None HP01 HP02 None HYPERV01 ISA1 JAGA Microsoft Security Essentials Windows Defender JAMIE-PC Microsoft Security Essentials jsanford-WIN7 None Windows Defender MEGATRON None None MIGTEST None Windows Defender Windows Firewall None Windows Defender Windows Firewall None Windows Defender Windows Firewall None LEE None MMidland MMidland1 Mmorris1 MSHELLEY MSHELLY1 MWhitman MWhitmanLAPTOP MWhitman-LT GFI Software VIPRE GFI Software VIPRE PROPRIETARY & CONFIDENTIAL PAGE 116 of 251 On NETWORK ASSESSMENT Computer Name NAGATEWAY Antivirus Name On Antispyware Current Name On Firewall Current Name On Backup Name None None Windows Firewall None None None Windows Firewall None Windows Firewall None NETSCAN01 PABUILD PEACH PERSHING-CLIENTDOM PGarza1 AVG Anti-Virus Free Edition 2011 AVG Anti-Virus Free Edition 2011 Windows Defender Windows Defender Windows Firewall None Windows Firewall None PGarza-WIN7 PGarza-WIN764 GFI Software VIPRE GFI Software VIPRE pKirby1 PKWIN7ENT None Windows Defender PS01 None None Windows Firewall REMOTE None None None REX Microsoft Security Essentials Windows Defender Microsoft Security Essentials None None Windows Firewall None Windows Firewall None ROBERT-PC RS01 None None None Windows Defender Windows Firewall None Microsoft Security Essentials Windows Defender Windows Firewall None SBLAPTOP SE-Dresden SHAREPOINT1 SHELDON Microsoft Security Essentials PROPRIETARY & CONFIDENTIAL PAGE 117 of 251 On NETWORK ASSESSMENT Computer Name Antivirus Name On Antispyware Current Name On Firewall Current Name On Backup Name None None Windows Firewall None STORAGE01 None None Windows Firewall None TERMINUS None Windows Defender None None Windows Firewall None None Windows Defender Windows Firewall None None None Windows Firewall None None Windows Defender Windows Firewall None SHREDDER STARSCREAM STARTEAM Windows Firewall None TESTSERVER1 TESTXP01 THRASH2 USAL9K49RH1 USER-PC23 UTIL01 VM1-WIN2003 VM2-2003 VM-JDresden-WIN7 VM-WIN2003 VM-WIN7 VM-WIN7-2 VM-WIN7-3 VM-WIN8BETA W2012TEST WIN2008 WIN2008R2 WIN7ULT WINDESKTOP wmartinez1 PROPRIETARY & CONFIDENTIAL PAGE 118 of 251 On NETWORK ASSESSMENT PROPRIETARY & CONFIDENTIAL PAGE 119 of 251 NETWORK ASSESSMENT 12 - Listening Ports This section contains a list of common ports/protocols assessed, and is categorized by domain membership. Items with a red check indicate a potential risk. CLIENTDOM.COM IP Address Computer Name 10.0.1.3 DC01 10.0.1.4 MEGATRON 10.0.1.5 UTIL01 10.0.1.6 ISA1 10.0.1.9 PS01 10.0.1.11 SHREDDER 10.0.1.12 DEVWIKI 10.0.1.13 REMOTE 10.0.1.35 PABUILD 10.0.1.37 VM-WIN7 10.0.1.50 ENGINEERS 10.0.1.60 HPV00 10.0.1.67 HYPERV 10.0.1.69 STORAGE01 10.0.1.76 SE-Dresden 10.0.1.81 MWhitman-LT 10.0.1.83 JAMIE-PC 10.0.1.91 DMartinez-PC 10.0.1.92 CURRIT30DEV 10.0.1.93 jsanford-WIN7 PROPRIETARY & CONFIDENTIAL FTP (21/TCP) Telnet (23/TCP) SMTP (25/TCP) DNS (53/TCP) HTTP (80/TCP) HTTPS SQLServer Oracle MySQL RDP VNC HTTP (443/TCP) (1433/TCP) (1521/TCP) (3306/TCP) (3389/TCP) (5900/TCP) (8080/TCP) PAGE 120 of 251 NETWORK ASSESSMENT IP Address Computer Name 10.0.1.99 PGarza-WIN764 10.0.1.103 SHELDON 10.0.1.112 Brenda 10.0.1.114 MMidland1 10.0.1.118 TERMINUS 10.0.1.122 WINDESKTOP 10.0.1.137 NAGATEWAY 10.0.1.151 DEONNE 10.0.1.156 JAMIE-PC 10.0.1.175 UTIL01 10.0.1.215 HJOBS-VM-WIN764 10.0.1.220 REX 10.0.1.221 PGarza1 10.0.1.223 CURRITPATCH FTP (21/TCP) Telnet (23/TCP) SMTP (25/TCP) DNS (53/TCP) HTTP (80/TCP) HTTPS SQLServer Oracle MySQL RDP VNC HTTP (443/TCP) (1433/TCP) (1521/TCP) (3306/TCP) (3389/TCP) (5900/TCP) (8080/TCP) No Domain IP Address Computer Name FTP (21/TCP) 10.0.1.1 10.0.1.2 SSH (22/TCP) Telnet (23/TCP) SMTP (25/TCP) 10.0.1.7 10.0.1.22 10.0.1.23 10.0.1.24 10.0.1.25 10.0.1.27 10.0.1.29 PROPRIETARY & CONFIDENTIAL DNS (53/TCP) HTTP (80/TCP) HTTPS (443/TCP) MySQL (3306/TCP) RDP (3389/TCP) VNC (5900/TCP) PAGE 121 of 251 NETWORK ASSESSMENT IP Address Computer Name FTP (21/TCP) SSH (22/TCP) SMTP (25/TCP) DNS (53/TCP) 10.0.1.30 10.0.1.31 10.0.1.32 10.0.1.36 10.0.1.68 Telnet (23/TCP) 10.0.1.71 HTTP (80/TCP) HTTPS (443/TCP) MySQL (3306/TCP) RDP (3389/TCP) VNC (5900/TCP) 10.0.1.85 10.0.1.86 10.0.1.96 10.0.1.100 10.0.1.104 10.0.1.105 10.0.1.106 10.0.1.113 10.0.1.115 10.0.1.120 10.0.1.132 10.0.1.146 10.0.1.147 10.0.1.149 10.0.1.153 10.0.1.162 10.0.1.167 10.0.1.206 10.0.1.217 10.0.1.218 10.0.1.219 PROPRIETARY & CONFIDENTIAL PAGE 122 of 251 NETWORK ASSESSMENT IP Address Computer Name FTP (21/TCP) SSH (22/TCP) Telnet (23/TCP) SMTP (25/TCP) DNS (53/TCP) HTTP (80/TCP) HTTPS (443/TCP) MySQL (3306/TCP) RDP (3389/TCP) VNC (5900/TCP) 10.0.1.224 10.0.1.240 10.0.1.242 10.0.1.245 10.0.1.253 PROPRIETARY & CONFIDENTIAL PAGE 123 of 251 NETWORK ASSESSMENT 13 - Internet Access This section lists of the latency between the computer and both Google and Yahoo, as well as a trace route to Google for further diagnostics if needed. Internet Access Latency Tests: Retrieval time for Google.com: 298 ms Retrieval time for Yahoo.com: 660 ms Internet trace route to Google.com: Tracing route to www.google.com [74.125.139.147] over a maximum of 30 hops: 1 2 3 4 5 6 7 8 9 58 ms 192.168.199.1 151 ms 66-194-35-205.static.twtelecom.net [66.194.35.205] 124 ms 64.129.238.114 106 ms 72.14.213.45 23 ms 72.14.233.54 23 ms 66.249.94.6 40 ms 209.85.248.31 4540 ms 42 ms yn-in-f147.1e100.net [74.125.139.147] Trace complete. PROPRIETARY & CONFIDENTIAL PAGE 124 of 251 NETWORK ASSESSMENT 14 - External Speed Test This section displays upload and download speed. Download Speed:4.16 Mb/s PROPRIETARY & CONFIDENTIAL Upload Speed:3.35 Mb/s PAGE 125 of 251 NETWORK ASSESSMENT NDT Server ndt.iupui.donar.measurement-lab.org ndt.iupui.ams.donar.measurementlab.org ndt.iupui.ath.donar.measurementlab.org ndt.iupui.atl.donar.measurementlab.org ndt.iupui.ord.donar.measurementlab.org ndt.iupui.dfw.donar.measurementlab.org ndt.iupui.iad.donar.measurementlab.org ndt.iupui.lax.donar.measurementlab.org ndt.iupui.lhr.donar.measurementlab.org ndt.iupui.mia.donar.measurementlab.org ndt.iupui.lga.donar.measurementlab.org ndt.iupui.nuq.donar.measurementlab.org ndt.iupui.par.donar.measurementlab.org ndt.iupui.sea.donar.measurementlab.org PROPRIETARY & CONFIDENTIAL Location Closest Server (DONAR) Amsterdam, The Netherlands Athens, Greece Download Upload 3.30 Mb/s 1.04 Mb/s Slowest Link in End-to-End Path NDT server offline at time of run. 10 Mbps Ethernet or WiFi 11b subnet 3.15 Mb/s 0.72 Mb/s 10 Mbps Ethernet or WiFi 11b subnet Atlanta, Georgia Chicago, Illinois NDT server offline at time of run. 3.50 Mb/s 2.81 Mb/s Dallas, Texas 10 Mbps Ethernet or WiFi 11b subnet NDT server offline at time of run. Dulles, Virginia 3.89 Mb/s 1.52 Mb/s 10 Mbps Ethernet or WiFi 11b subnet Los Angeles, California 1.92 Mb/s 1.35 Mb/s 10 Mbps Ethernet or WiFi 11b subnet London, United Kingdom 2.67 Mb/s 1.14 Mb/s 10 Mbps Ethernet or WiFi 11b subnet Miami, Florida 4.16 Mb/s 3.35 Mb/s 10 Mbps Ethernet or WiFi 11b subnet New York City, New York NDT server offline at time of run. Mountain View, California 4.02 Mb/s 1.51 Mb/s 10 Mbps Ethernet or WiFi 11b subnet Paris, France 3.10 Mb/s 0.84 Mb/s 10 Mbps Ethernet or WiFi 11b subnet Seattle, Washington 3.56 Mb/s 1.04 Mb/s 10 Mbps Ethernet or WiFi 11b subnet PAGE 126 of 251 NETWORK ASSESSMENT NDT Server ndt.iupui.syd.donar.measurementlab.org ndt.iupui.hnd.donar.measurementlab.org ndt.iupui.wlg.donar.measurementlab.org PROPRIETARY & CONFIDENTIAL Location Sydney, Australia Download 2.50 Mb/s Upload 0.46 Mb/s Slowest Link in End-to-End Path 10 Mbps Ethernet or WiFi 11b subnet Tokyo, Japan 2.57 Mb/s 0.61 Mb/s 10 Mbps Ethernet or WiFi 11b subnet Wellington, New Zealand 1.81 Mb/s 0.55 Mb/s 10 Mbps Ethernet or WiFi 11b subnet PAGE 127 of 251 NETWORK ASSESSMENT 15 - Internet Domain This section contains the WHOIS and MX records for domains added to this assessment. WHOIS information helps determine domain ownership and renewal, while MX records indicate the server responsible for handling email requests (this may redirect elsewhere if acting as a spam filtering service). google.com WHOIS Record Whois Server Version 2.0 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. GOOGLE.COM.ZZZZZZZZZZZZZZZZZZZZZZZZZZZ.LOVE.AND.TOLERANCE.THE-WONDERBOLTS.COM GOOGLE.COM.ZZZZZZZZZZZZZZZZZZZZZZZZZZ.HAVENDATA.COM GOOGLE.COM.ZZZZZZZZZZZZZ.GET.ONE.MILLION.DOLLARS.AT.WWW.UNIMUNDI.COM GOOGLE.COM.ZZZZZ.GET.LAID.AT.WWW.SWINGINGCOMMUNITY.COM GOOGLE.COM.ZOMBIED.AND.HACKED.BY.WWW.WEB-HACK.COM GOOGLE.COM.ZNAET.PRODOMEN.COM GOOGLE.COM.Z.LOVE.AND.TOLERANCE.THE-WONDERBOLTS.COM GOOGLE.COM.YUCEKIRBAC.COM GOOGLE.COM.YUCEHOCA.COM GOOGLE.COM.WORDT.DOOR.VEEL.WHTERS.GEBRUIKT.SERVERTJE.NET GOOGLE.COM.VN GOOGLE.COM.VABDAYOFF.COM GOOGLE.COM.UY GOOGLE.COM.UA GOOGLE.COM.TW GOOGLE.COM.TR PROPRIETARY & CONFIDENTIAL PAGE 128 of 251 NETWORK ASSESSMENT GOOGLE.COM.SUCKS.FIND.CRACKZ.WITH.SEARCH.GULLI.COM GOOGLE.COM.SPROSIUYANDEKSA.RU GOOGLE.COM.SPAMMING.IS.UNETHICAL.PLEASE.STOP.THEM.HUAXUEERBAN.COM GOOGLE.COM.SOUTHBEACHNEEDLEARTISTRY.COM GOOGLE.COM.SHQIPERIA.COM GOOGLE.COM.SA GOOGLE.COM.PEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEENIS.COM GOOGLE.COM.PE GOOGLE.COM.MY GOOGLE.COM.MX GOOGLE.COM.LOLOLOLOLOL.SHTHEAD.COM GOOGLE.COM.LASERPIPE.COM GOOGLE.COM.IS.NOT.HOSTED.BY.ACTIVEDOMAINDNS.NET GOOGLE.COM.IS.HOSTED.ON.PROFITHOSTING.NET GOOGLE.COM.IS.APPROVED.BY.NUMEA.COM GOOGLE.COM.HK GOOGLE.COM.HICHINA.COM GOOGLE.COM.HAS.LESS.FREE.PORN.IN.ITS.SEARCH.ENGINE.THAN.SECZY.COM GOOGLE.COM.DO GOOGLE.COM.CO GOOGLE.COM.CN GOOGLE.COM.BR GOOGLE.COM.BITERMANSOLUTIONS.COM GOOGLE.COM.BEYONDWHOIS.COM GOOGLE.COM.AU GOOGLE.COM.AR GOOGLE.COM.ALL.THE.PEOPLE.WHO.SPAM.THE.WHOIS.ARE.SERIOUSLY.ANNOYING.SOMEPONY.COM GOOGLE.COM.AFRICANBATS.ORG GOOGLE.COM.9.THE-WONDERBOLTS.COM GOOGLE.COM.1.THE-WONDERBOLTS.COM GOOGLE.COM PROPRIETARY & CONFIDENTIAL PAGE 129 of 251 NETWORK ASSESSMENT To single out one record, look it up with "xxx", where xxx is one of the of the records displayed above. If the records are the same, look them up with "=xxx" to receive a full display for each record. >>> Last update of whois database: Thu, 25 Oct 2012 21:26:41 UTC <<< NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of the domain name registration in the registry is currently set to expire. This date does not necessarily reflect the expiration date of the domain name registrant's agreement with the sponsoring registrar. Users may consult the sponsoring registrar's Whois database to view the registrar's reported date of expiration for this registration. TERMS OF USE: You are not authorized to access or query our Whois database through the use of electronic processes that are high-volume and automated except as reasonably necessary to register domain names or modify existing registrations; the Data in VeriSign Global Registry Services' ("VeriSign") Whois database is provided by VeriSign for information purposes only, and to assist persons in obtaining information about or related to a domain name registration record. VeriSign does not guarantee its accuracy. By submitting a Whois query, you agree to abide by the following terms of use: You agree that you may use this Data only for lawful purposes and that under no circumstances will you use this Data to: (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail, telephone, or facsimile; or (2) enable high volume, automated, electronic processes that apply to VeriSign (or its computer systems). The compilation, repackaging, dissemination or other use of this Data is expressly prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or PROPRIETARY & CONFIDENTIAL PAGE 130 of 251 NETWORK ASSESSMENT query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. MXMailServer(Preference) alt3.aspmx.l.google.com(40) alt2.aspmx.l.google.com(30) alt4.aspmx.l.google.com(50) aspmx.l.google.com(10) alt1.aspmx.l.google.com(20) TTL 543 543 543 543 543 wikipedia.org WHOIS Record Whois Server Version 2.0 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. WIKIPEDIA.ORG.ZZZZZ.GET.LAID.AT.WWW.SWINGINGCOMMUNITY.COM WIKIPEDIA.ORG.IS.WRONG.GO.4.GULLI.COM WIKIPEDIA.ORG To single out one record, look it up with "xxx", where xxx is one of the PROPRIETARY & CONFIDENTIAL PAGE 131 of 251 NETWORK ASSESSMENT of the records displayed above. If the records are the same, look them up with "=xxx" to receive a full display for each record. >>> Last update of whois database: Thu, 25 Oct 2012 21:26:41 UTC <<< NOTICE: The expiration date displayed in this record is the date the registrar's sponsorship of the domain name registration in the registry is currently set to expire. This date does not necessarily reflect the expiration date of the domain name registrant's agreement with the sponsoring registrar. Users may consult the sponsoring registrar's Whois database to view the registrar's reported date of expiration for this registration. TERMS OF USE: You are not authorized to access or query our Whois database through the use of electronic processes that are high-volume and automated except as reasonably necessary to register domain names or modify existing registrations; the Data in VeriSign Global Registry Services' ("VeriSign") Whois database is provided by VeriSign for information purposes only, and to assist persons in obtaining information about or related to a domain name registration record. VeriSign does not guarantee its accuracy. By submitting a Whois query, you agree to abide by the following terms of use: You agree that you may use this Data only for lawful purposes and that under no circumstances will you use this Data to: (1) allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations via e-mail, telephone, or facsimile; or (2) enable high volume, automated, electronic processes that apply to VeriSign (or its computer systems). The compilation, repackaging, dissemination or other use of this Data is expressly prohibited without the prior written consent of VeriSign. You agree not to use electronic processes that are automated and high-volume to access or query the Whois database except as reasonably necessary to register domain names or modify existing registrations. VeriSign reserves the right PROPRIETARY & CONFIDENTIAL PAGE 132 of 251 NETWORK ASSESSMENT to restrict your access to the Whois database in its sole discretion to ensure operational stability. VeriSign may restrict or terminate your access to the Whois database for failure to abide by these terms of use. VeriSign reserves the right to modify these terms at any time. The Registry database contains ONLY .COM, .NET, .EDU domains and Registrars. MXMailServer(Preference) mchenry.wikimedia.org(10) lists.wikimedia.org(50) PROPRIETARY & CONFIDENTIAL TTL 3600 3600 PAGE 133 of 251 NETWORK ASSESSMENT 16 - External Security Vulnerabilities This section contains an overview of external vulnerabilities detected during the scan, with items in red indicating a risk. External IP Address 173.186.122.112 Risk Low 173.186.122.113 (h113.122.186.173.static.ip.windstream.net) 173.186.122.114 (h114.122.186.173.static.ip.windstream.net) 173.186.122.115 High 2 0 1 ntp (123/udp) Low 0 0 3 https (443/tcp) Low 0 0 0 PROPRIETARY & CONFIDENTIAL High Risk Medium Risk Low Risk Port and Protocol 0 0 0 PAGE 134 of 251 NETWORK ASSESSMENT Appendix I: Detailed Computer Analysis This section provides additional information on the servers, workstations, and devices in this report. Details are obtained via RPC, WMI or local scan. Computer Name Operating System 1RB11D1 Windows 7 Enterprise Windows 7 Enterprise Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Standard Windows 7 Ultimate AGENT003-PC APPV-MGMTSRV ATLDC01 BHunt-LTV Brenda Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL CPU RAM Analysis Intel(R) Xeon(R) CPU 5110 @ 1.60GHz 512 MB Last 5 System Error Msgs: 10-19-2012 5:43:24 AM 20 Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.139.124.0). 10-11-2012 3:14:32 AM 7000 The LMIGuardianSvc service failed to start due to the following error: %%1053 10-11-2012 3:14:32 AM 7009 A timeout was reached (30000 milliseconds) while waiting for the LMIGuardianSvc service to connect. 10-9-2012 11:45:03 AM 4321 The name "PIT :1d" could not be registered on the interface with IP address 10.0.1.112. The computer with the IP address 10.0.1.119 did not allow the name to be claimed by this computer. 10-9-2012 7:37:32 AM 4321 The name "PIT :1d" could not be registered on the interface with IP address 10.0.1.112. The computer with the IP address 10.0.1.50 did not allow the name to be claimed by this computer. PAGE 135 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Last 5 Application Error Msgs: 10-11-2012 3:03:17 AM 3007 Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer. Context: Application, SystemIndex Catalog 7-12-2012 3:02:17 AM 3007 Performance monitoring cannot be initialized for the gatherer object, because the counters are not loaded or the shared memory object cannot be opened. This only affects availability of the perfmon counters. Restart the computer. Context: Application, SystemIndex Catalog 6-13-2012 3:15:55 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 6-13-2012 3:15:24 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 6-13-2012 3:15:19 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . Listening Ports: RDP (3389/TCP) Disk Capacity: C: 288.05 GB, 253.77 GB free, 11.9% used PROPRIETARY & CONFIDENTIAL PAGE 136 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Service Tag: 1426-7391-3633-9203-9769-3549-53 CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Microsoft Corporation/Virtual Machine Memory Banks: Memory Bank0 : Unknown-Unknown-512 Mb-unknown Mhz <slot available> CPUs: Intel(R) Xeon(R) CPU 5110 @ 1.60GHz : CPU0-2 NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) unknown : -k57nd60x-[00000007] Broadcom NetLink (TM) Gigabit Ethernet unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -athr-[00000009] DW1525 (802.11n) WLAN PCIe Card 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000012] Microsoft Teredo Tunneling Adapter unknown : --[00000014] Net6 unknown : --[00000015] Net6 52:81:20:52:41:53 : --[00000016] Net6 52:81:20:52:41:53 : --[00000017] Net6 54:E1:20:52:41:53 : --[00000018] Net6 PROPRIETARY & CONFIDENTIAL PAGE 137 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -tunnel-[00000019] Microsoft ISATAP Adapter 00:15:5D:FF:45:0A : 10.0.1.112;fe80::7c06:1760:474:bebc-netvsc-[00000020] Microsoft Virtual Machine Bus Network Adapter 00:15:5D:FF:45:0A : --[00000021] Net6 DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 1952 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 9/9/2010 12:43:19 PM Active Anti-virus: N/A Active Anti-spyware: Windows Defender Active Firewall: N/A CLIENTDOMHLI4PQ CLIENTDOMLT1 CLIENTDOMSCB-LTP Clienthq Windows XP Professional Windows 7 Enterprise Windows XP Professional CLIENT-LOCCORE CLIENT-LOCEXCHTKT CLIENT-LOCEXTEST Windows Server 2003 Windows Server 2003 Windows Server 2003 PROPRIETARY & CONFIDENTIAL PAGE 138 of 251 NETWORK ASSESSMENT Computer Name Operating System CLIENT-LOCHPV01 CLIENT-LOCRJLLTP CLIENT-LOCWS01 CLIENTWS-PK Windows Server 2008 Enterprise Windows XP Professional Windows XP Professional Windows 7 Enterprise CPU RAM Analysis CLOVEPOWER CONFERENCE1 CONFERENCER OOM Costello-SG Windows XP Professional Windows 7 Enterprise Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL AMD E2-3200 6144 APU with MB Radeon(tm) HD Graphics Last 5 System Error Msgs: 10-25-2012 3:27:54 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 10-25-2012 2:10:18 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 10-25-2012 1:54:26 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 10-25-2012 12:18:51 PM 1058 The processing of Group Policy failed. Windows attempted to read the file \\CLIENTDOM.COM\SysVol\CLIENTDOM.COM\Policies\{9FD1893D-FAC9-42E78A56-E034F9A92DEE}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following: a) Name Resolution/Network Connectivity to the current domain controller. b) File Replication Service Latency (a file created on another PAGE 139 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis domain controller has not replicated to the current domain controller). c) The Distributed File System (DFS) client has been disabled. 10-24-2012 10:26:24 AM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. Last 5 Application Error Msgs: 10-25-2012 12:30:33 AM 16842815 Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid. 10-24-2012 12:30:30 AM 16842815 Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid. 10-23-2012 12:30:31 AM 16842815 Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid. 10-20-2012 12:30:22 AM 16842815 Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value PROPRIETARY & CONFIDENTIAL PAGE 140 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid. 10-19-2012 12:30:25 AM 16842815 Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid. Disk Capacity: C: 914.65 GB, 827.97 GB free, 9.48% used D: 16.76 GB, 2.1 GB free, 87.47% used CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Hewlett-Packard/p6-2108p Memory Banks: Memory Bank0 : DIMM-Synchronous-2048 Mb-1333 Mhz Memory Bank1 : DIMM-Synchronous-4096 Mb-1333 Mhz CPUs: AMD E2-3200 APU with Radeon(tm) HD Graphics : CPU0-2 System Slots: System Slot0 : PCI-E x16-Available-OK System Slot1 : PCI-E x1-Available-OK System Slot2 : PCI-E x1-Available-OK System Slot3 : PCI-E x1-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) PROPRIETARY & CONFIDENTIAL PAGE 141 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) E8:40:F2:96:95:E7 : 10.0.1.157;fe80::e4ff:23c9:2142:8d1c-RTL8167-[00000007] Realtek PCIe GBE Family Controller unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000011] Microsoft ISATAP Adapter 00:FF:20:3D:49:07 : -dsNcAdpt-[00000012] Juniper Network Connect Virtual Adapter unknown : -tunnel-[00000013] Microsoft 6to4 Adapter unknown : -tunnel-[00000014] Microsoft ISATAP Adapter unknown : -vpnva-[00000015] Cisco AnyConnect VPN Virtual Miniport Adapter for Windows x64 DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 11248 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 7/9/2012 4:39:21 PM Active Anti-virus: N/A Active Anti-spyware: Windows Defender Active Firewall: N/A PROPRIETARY & CONFIDENTIAL PAGE 142 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM CURRIT30DEV Windows 2000 Server Intel(R) 2304 Pentium(R) III MB CPU - S 1400MHz Analysis Last 5 System Error Msgs: 10-23-2012 10:11:50 PM 16 The description for Event ID '16' in Source 'Windows Update Agent' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event: 10-23-2012 5:28:06 PM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{62EB60D3-8756-4. The master browser is stopping or an election is being forced. 10-23-2012 4:16:08 PM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{62EB60D3-8756-4. The master browser is stopping or an election is being forced. 10-23-2012 3:04:04 PM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{62EB60D3-8756-4. The master browser is stopping or an election is being forced. 10-23-2012 1:52:02 PM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{62EB60D3-8756-4. The master browser is stopping or an election is being forced. Last 5 Application Error Msgs: 10-8-2012 10:57:49 AM 17806 SSPI handshake failed with error code 0x8009030c while establishing a connection with integrated security; the connection has been closed. [CLIENT: 10.0.1.144] 9-30-2012 5:20:36 AM 107 Report Server Windows Service (MSSQLSERVER) cannot connect to the report server database. PROPRIETARY & CONFIDENTIAL PAGE 143 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Listening Ports: FTP (21/TCP), SMTP (25/TCP), HTTP (80/TCP), HTTPS (443/TCP), SQLServer (1433/TCP), RDP (3389/TCP), HTTP (8080/TCP) Disk Capacity: C: 33.87 GB, 11.82 GB free, 65.1% used Service Tag: 1VKR331 CPU Count: 1 CPU Core Count: 1 Windows Key: QCQD7-4QCKH-JRGD9-WBY4H-C9HQW Make and Model: Dell Computer Corporation/PowerEdge 1650 Memory Banks: Memory Bank0 : DIMM-Synchronous-1024 Mb-133 Mhz Memory Bank1 : DIMM-Synchronous-1024 Mb-133 Mhz Memory Bank2 : DIMM-Synchronous-128 Mb-133 Mhz Memory Bank3 : DIMM-Synchronous-128 Mb-133 Mhz CPUs: Intel(R) Pentium(R) III CPU - S 1400MHz : CPU0-1 System Slots: System Slot0 : PCI1 -Available-OK System Slot1 : PCI2 -In Use-OK NICs: 00:0B:DB:91:24:B4 : 10.0.1.92-E1000-[00000000] Intel(R) 82544EI Based Network Connection 00:0B:DB:91:24:B5 : -E1000-[00000001] Intel(R) 82544EI Based Network Connection unknown : -AsyncMac-[00000002] RAS Async Adapter unknown : -Rasl2tp-[00000003] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000004] WAN Miniport (PPTP) PROPRIETARY & CONFIDENTIAL PAGE 144 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -Raspti-[00000005] Direct Parallel unknown : -NdisWan-[00000006] WAN Miniport (IP) 9A:F2:20:52:41:53 : --[00000007] Deterministic Network Enhancer Miniport 00:0B:DB:91:24:B5 : --[00000008] Deterministic Network Enhancer Miniport 00:0B:DB:91:24:B4 : --[00000009] Deterministic Network Enhancer Miniport unknown : -CVirtA-[00000010] Cisco Systems VPN Adapter unknown : --[00000011] Deterministic Network Enhancer Miniport DEP: Not Available OS Manufacturer: Microsoft Corporation OS Version: 5.0.2195 Service Pack 4 (Build 2195) OS Caption: Microsoft Windows 2000 Advanced Server OS Virtual Memory: 5232 MB OS System Directory: C:\WINNT\system32 OS Windows Directory: C:\WINNT OS Install Date: 8/20/2003 11:15:32 AM CURRITDEMO CURRITNMSBDF CURRITPATCH Windows Server 2008 R2 Enterprise Windows Server 2003 Windows 2000 Server PROPRIETARY & CONFIDENTIAL Intel(R) Celeron(TM) CPU 1200MHz 384 MB Last 5 System Error Msgs: 10-25-2012 5:27:04 PM 10005 DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it." attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A140AA-86AC-DB1CBF673334} 10-25-2012 5:27:03 PM 10005 DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it." attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A140AA-86AC-DB1CBF673334} PAGE 145 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 10-25-2012 5:27:02 PM 10005 DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it." attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A140AA-86AC-DB1CBF673334} 10-25-2012 5:26:03 PM 10005 DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it." attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A140AA-86AC-DB1CBF673334} 10-25-2012 5:26:02 PM 10005 DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it." attempting to start the service wuauserv with arguments "" in order to run the server: {E60687F7-01A140AA-86AC-DB1CBF673334} Last 5 Application Error Msgs: 10-25-2012 5:26:34 PM 1003 Unable to query the W3SVC (HTTP) service performance data. The error code returned by the service is data DWORD 0. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp. 10-25-2012 5:16:35 PM 1003 Unable to query the W3SVC (HTTP) service performance data. The error code returned by the service is data DWORD 0. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp. 10-25-2012 5:06:34 PM 1003 Unable to query the W3SVC (HTTP) service performance data. The error code returned by the service is data DWORD 0. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp. 10-25-2012 4:56:34 PM 1003 Unable to query the W3SVC (HTTP) service performance data. The error code returned by the service is data DWORD 0. For additional information specific to this message please visit the Microsoft Online Support site located at: PROPRIETARY & CONFIDENTIAL PAGE 146 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis http://www.microsoft.com/contentredirect.asp. 10-25-2012 4:46:34 PM 1003 Unable to query the W3SVC (HTTP) service performance data. The error code returned by the service is data DWORD 0. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp. Listening Ports: RDP (3389/TCP) Disk Capacity: C: 37.24 GB, 2.37 GB free, 93.64% used CPU Count: 1 CPU Core Count: 1 Windows Key: KRJQ8-RQ822-YRMXF-6TTXC-HD2VM Make and Model: INTELR/AWRDACPI Memory Banks: Memory Bank0 : DIMM-unknown-128 Mb-unknown Mhz Memory Bank1 : DIMM-unknown-256 Mb-unknown Mhz CPUs: Intel(R) Celeron(TM) CPU 1200MHz : CPU0-1 System Slots: System Slot0 : ISA-Unknown-Unknown System Slot1 : ISA-Unknown-Unknown System Slot2 : ISA-Unknown-Unknown System Slot3 : ISA-Unknown-Unknown System Slot4 : PCI0-In Use-OK System Slot5 : PCI1-In Use-OK System Slot6 : PCI2-Available-OK PROPRIETARY & CONFIDENTIAL PAGE 147 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis System Slot7 : PCI3-In Use-OK System Slot8 : AGP-Available-OK NICs: 00:04:76:E5:87:9B : -EL90XBC-[00000000] 3Com EtherLink XL 10/100 PCI For Complete PC Management NIC (3C905C-TX) 00:01:29:1B:15:0D : 10.0.1.223-RTL8139-[00000001] Realtek RTL8139(A)-based PCI Fast Ethernet Adapter unknown : -AsyncMac-[00000002] RAS Async Adapter unknown : -Rasl2tp-[00000003] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000004] WAN Miniport (PPTP) unknown : -Raspti-[00000005] Direct Parallel unknown : -NdisWan-[00000006] WAN Miniport (IP) 84:A2:20:52:41:53 : --[00000007] Deterministic Network Enhancer Miniport 00:01:29:1B:15:0D : --[00000008] Deterministic Network Enhancer Miniport 00:04:76:E5:87:9B : --[00000009] Deterministic Network Enhancer Miniport DEP: Not Available OS Manufacturer: Microsoft Corporation OS Version: 5.0.2195 Service Pack 4 (Build 2195) OS Caption: Microsoft Windows 2000 Server OS Virtual Memory: 1312 MB OS System Directory: C:\WINNT\system32 OS Windows Directory: C:\WINNT OS Install Date: 2/28/2005 2:55:13 PM D620-5P9W0C1 Windows 7 Enterprise D620-8BCJVD1 Windows 7 Enterprise DC01 Windows Server PROPRIETARY & CONFIDENTIAL Intel(R) 512 MB Last 5 System Error Msgs: PAGE 148 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU 2008 R2 Datacenter Xeon(R) CPU E5320 @ 1.86GHz RAM Analysis 10-25-2012 5:22:13 PM 1111 Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 5:22:12 PM 1111 Driver Snagit 10 Printer required for printer Snagit 10 is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 5:22:10 PM 1111 Driver Brother MFC-9320CW Printer required for printer !!PS01!Brother MFC-9320CW Printer is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 5:21:22 PM 1111 Driver Bullzip PDF Printer required for printer Bullzip PDF Printer is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 1:13:26 PM 1111 Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: 10-23-2012 10:33:44 AM 1000 Faulting application name: pwgateway.exe, version: 0.0.0.0, time stamp: 0x4d931bce Faulting module name: pwgateway.exe, version: 0.0.0.0, time stamp: 0x4d931bce Exception code: 0xc0000409 Fault offset: 0x0002b801 Faulting process id: 0x103c Faulting application start time: 0x01cdb12aac28672a Faulting application path: C:\Program Files (x86)\UserAgent\gateway\pwgateway.exe Faulting module path: C:\Program Files (x86)\UserAgent\gateway\pwgateway.exe Report Id: a587bfe2-1d1e-11e2aefb-00155d013c0a 10-23-2012 10:28:28 AM 1000 Faulting application name: pwgateway.exe, version: 0.0.0.0, time stamp: 0x4d931bce Faulting module name: pwgateway.exe, version: 0.0.0.0, time stamp: 0x4d931bce Exception code: 0xc0000409 Fault offset: 0x0002b801 Faulting process id: 0x144c Faulting application start time: 0x01cdaedbf9f84abf Faulting application path: C:\Program Files (x86)\UserAgent\gateway\pwgateway.exe Faulting module path: C:\Program Files (x86)\UserAgent\gateway\pwgateway.exe Report Id: e9294353-1d1d11e2-aefb-00155d013c0a PROPRIETARY & CONFIDENTIAL PAGE 149 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 10-20-2012 12:00:04 PM 1000 Faulting application name: pwgateway.exe, version: 0.0.0.0, time stamp: 0x4d931bce Faulting module name: pwgateway.exe, version: 0.0.0.0, time stamp: 0x4d931bce Exception code: 0xc0000409 Fault offset: 0x0002b801 Faulting process id: 0x764 Faulting application start time: 0x01cd667e4fcf9db2 Faulting application path: C:\Program Files (x86)\UserAgent\gateway\pwgateway.exe Faulting module path: C:\Program Files (x86)\UserAgent\gateway\pwgateway.exe Report Id: 35689349-1acf-11e2aefb-00155d013c0a 10-10-2012 12:03:46 PM 1000 Faulting application name: PrintIsolationHost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bd3b1 Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e Exception code: 0xc0000374 Fault offset: 0x00000000000c40f2 Faulting process id: 0x36c Faulting application start time: 0x01cda700c20c0962 Faulting application path: C:\Windows\system32\PrintIsolationHost.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: 11f56aa4-12f4-11e2-aefb-00155d013c0a 8-23-2012 2:07:21 PM 2004 Backup of GPO failed. Error [The system cannot find the path specified. ]. Details Source GPO: DisplayName: Firewall - Open sharing ID: {FCF72FD2-8E64-4C01-B0BE-BE99684A871E} Domain: CLIENTDOM.COM Backup: Directory: . Instance : {D618CD1D-2D84-4687-9BD8-5559CB791983} Comment : Disk Capacity: C: 63.9 GB, 37.59 GB free, 41.17% used Service Tag: 5419-1388-2655-1406-2423-4180-54 CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Microsoft Corporation/Virtual Machine Memory Banks: Memory Bank0 : Unknown-Unknown-512 Mb-unknown Mhz PROPRIETARY & CONFIDENTIAL PAGE 150 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis <slot available> CPUs: Intel(R) Xeon(R) CPU E5320 @ 1.86GHz : CPU0-2 NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:15:5D:01:3C:0A : 10.0.1.3;fe80::19fd:e0a9:805:bb9b-netvsc-[00000007] Microsoft Virtual Machine Bus Network Adapter unknown : -tunnel-[00000008] Microsoft ISATAP Adapter unknown : -NdisWan-[00000009] WAN Miniport (IP) unknown : -tunnel-[00000010] Microsoft Teredo Tunneling Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Datacenter OS Virtual Memory: 3072 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 4/16/2012 1:50:04 AM DELL_OFFICE DELL120720 Windows XP Professional Windows 7 PROPRIETARY & CONFIDENTIAL PAGE 151 of 251 NETWORK ASSESSMENT Computer Name DEMO5 DEONNE Operating System Enterprise Windows Server 2003 Windows XP Professional CPU RAM Analysis Intel(R) Pentium(R) 4 CPU 3.00GHz 512 MB Last 5 System Error Msgs: 9-20-2012 1:10:59 PM 10010 The server {4EB61BAC-A3B6-4760-9581-655041EF4D69} did not register with DCOM within the required timeout. 9-20-2012 1:10:43 PM 39452701 The time provider NtpClient is configured to acquire time from one or more time sources, however none of the sources are currently accessible. No attempt to contact a source will be made for 14 minutes. NtpClient has no source of accurate time. 9-20-2012 1:10:26 PM 5719 No Domain Controller is available for domain CLIENTDOM due to the following: %There are currently no logon servers available to service the logon request.. Make sure that the computer is connected to the network and try again. If the problem persists, please contact your domain administrator. 4-9-2012 10:10:14 PM 5 The kerberos client received a KRB_AP_ERR_TKT_NYV error from the server util01$. This indicates that the ticket used against that server is not yet valid (in relationship to that server time). Contact your system administrator to make sure the client and server times are in sync, and that the KDC in realm CLIENTDOM.COM is in sync with the KDC in the client realm. 4-9-2012 8:16:09 PM 5 The kerberos client received a KRB_AP_ERR_TKT_NYV error from the server util01$. This indicates that the ticket used against that server is not yet valid (in relationship to that server time). Contact your system administrator to make sure the client and server times are in sync, and that the KDC in realm CLIENTDOM.COM is in sync with the KDC in the client realm. Last 5 Application Error Msgs: 9-20-2012 1:10:27 PM 15 Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted. Enrollment will not be performed. PROPRIETARY & CONFIDENTIAL PAGE 152 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 9-20-2012 1:10:26 PM 1054 Windows cannot obtain the domain controller name for your computer network. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted. 6-18-2012 3:34:56 PM 1053 Windows cannot determine the user or computer name. (Access is denied. ). Group Policy processing aborted. 6-18-2012 2:04:54 PM 1053 Windows cannot determine the user or computer name. (Access is denied. ). Group Policy processing aborted. 6-18-2012 12:06:51 PM 1053 Windows cannot determine the user or computer name. (Access is denied. ). Group Policy processing aborted. Listening Ports: RDP (3389/TCP) Disk Capacity: C: 186.3 GB, 166.61 GB free, 10.57% used Service Tag: Chassis Serial Number CPU Count: 1 CPU Core Count: 1 Windows Key: FCK4W-W92RT-DMTVD-BR6R3-CYD9G Make and Model: HP Pavilion 061/PS585AA-ABA a1030n Memory Banks: Memory Bank0 : DIMM-Synchronous-256 Mb-unknown Mhz Memory Bank1 : DIMM-Synchronous-256 Mb-unknown Mhz CPUs: Intel(R) Pentium(R) 4 CPU 3.00GHz : CPU0-1 System Slots: System Slot0 : PCIEX16-Available-OK System Slot1 : PCI1-Available-OK PROPRIETARY & CONFIDENTIAL PAGE 153 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis System Slot2 : PCI2-Available-OK System Slot3 : PCI3/PCIEX1-Available-OK NICs: 00:11:D8:C1:1D:B7 : 10.0.1.151-RTL8139-[00000001] Realtek RTL8139 Family PCI Fast Ethernet NIC 02:9D:68:C8:AF:42 : -NIC1394-[00000002] 1394 Net Adapter unknown : -AsyncMac-[00000003] RAS Async Adapter 00:11:D8:C1:1D:B7 : --[00000004] Packet Scheduler Miniport unknown : -Rasl2tp-[00000005] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000006] WAN Miniport (PPTP) 33:50:6F:45:30:30 : -RasPppoe-[00000007] WAN Miniport (PPPOE) unknown : -Raspti-[00000008] Direct Parallel unknown : -NdisWan-[00000009] WAN Miniport (IP) 04:C4:20:52:41:53 : --[00000010] Packet Scheduler Miniport DEP: On for essential Windows programs and services only DEVWIKI Windows Server 2003 PROPRIETARY & CONFIDENTIAL Intel(R) 1536 Pentium(R) III MB processor OS Manufacturer: Microsoft Corporation OS Version: 5.1.2600 Service Pack 3 (Build 2600) OS Caption: Microsoft Windows XP Professional OS Virtual Memory: 2048 MB OS System Directory: C:\WINDOWS\system32 OS Windows Directory: C:\WINDOWS OS Install Date: 3/18/2011 6:40:16 PM Last 5 System Error Msgs: 10-24-2012 3:57:29 PM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{570FFECB-3B60-4. The master browser is stopping or an election is being forced. 10-24-2012 2:45:26 PM 8003 The master browser has received a server announcement from PAGE 154 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{570FFECB-3B60-4. The master browser is stopping or an election is being forced. 10-24-2012 1:33:19 PM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{570FFECB-3B60-4. The master browser is stopping or an election is being forced. 10-24-2012 11:57:15 AM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{570FFECB-3B60-4. The master browser is stopping or an election is being forced. 10-24-2012 10:33:22 AM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{570FFECB-3B60-4. The master browser is stopping or an election is being forced. Last 5 Application Error Msgs: 8-1-2012 5:32:46 PM 1000 Faulting application Apache.exe, version 2.0.55.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x0001caaf. 8-1-2012 5:25:19 PM 1000 Faulting application Apache.exe, version 2.0.55.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x0001caaf. 8-1-2012 5:22:12 PM 1000 Faulting application Apache.exe, version 2.0.55.0, faulting module ntdll.dll, version 5.2.3790.1830, fault address 0x0002f583. 4-15-2012 11:04:41 PM 1053 Windows cannot determine the user or computer name. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted. 4-15-2012 10:14:37 PM 1053 Windows cannot determine the user or computer name. (The specified domain either does not exist or could not be contacted. ). Group Policy processing aborted. PROPRIETARY & CONFIDENTIAL PAGE 155 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Listening Ports: HTTP (80/TCP), MySQL (3306/TCP), RDP (3389/TCP) Disk Capacity: C: 7.82 GB, 1.43 GB free, 81.71% used D: 9.09 GB, 8.83 GB free, 2.86% used Service Tag: 15L0111 CPU Count: 1 CPU Core Count: 1 Windows Key: HTT48-2D2W3-6YMRW-HYDMF-JK8YB Make and Model: Dell Computer Corporation/PowerEdge 2500 Memory Banks: Memory Bank0 : DIMM-Synchronous-128 Mb-133 Mhz Memory Bank1 : DIMM-Synchronous-128 Mb-133 Mhz Memory Bank2 : DIMM-Synchronous-128 Mb-133 Mhz Memory Bank3 : DIMM-Synchronous-128 Mb-133 Mhz Memory Bank4 : DIMM-Synchronous-512 Mb-133 Mhz Memory Bank5 : DIMM-Synchronous-512 Mb-133 Mhz CPUs: Intel(R) Pentium(R) III processor : CPU0-1 System Slots: System Slot0 : PCI1-Available-OK System Slot1 : PCI2-Available-OK System Slot2 : PCI3-Available-OK System Slot3 : PCI4-Available-OK System Slot4 : PCI5-Available-OK System Slot5 : PCI6-Available-OK PROPRIETARY & CONFIDENTIAL PAGE 156 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis System Slot6 : PCI7-Available-OK NICs: 00:06:5B:38:B8:32 : 10.0.1.12-E100B-[00000001] Intel(R) PRO/100 Network Connection unknown : -AsyncMac-[00000002] RAS Async Adapter unknown : -Rasl2tp-[00000003] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000004] WAN Miniport (PPTP) 33:50:6F:45:30:30 : -RasPppoe-[00000005] WAN Miniport (PPPOE) unknown : -Raspti-[00000006] Direct Parallel unknown : -NdisWan-[00000007] WAN Miniport (IP) DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 5.2.3790 Service Pack 1 (Build 3790) OS Caption: Microsoft(R) Windows(R) Server 2003, Standard Edition OS Virtual Memory: 3440 MB OS System Directory: C:\WINDOWS\system32 OS Windows Directory: C:\WINDOWS OS Install Date: 2/14/2006 10:08:47 AM DIALTONE DMartinez-PC Windows XP Professional Windows 7 Enterprise Pentium(R) 4096 Dual-Core MB CPU E5400 @ 2.70GHz Last 5 System Error Msgs: 10-24-2012 4:04:08 PM 1 FW1: D Sending reset dire 10-24-2012 1:45:12 PM 1 FW1: D Sending reset dire 10-23-2012 12:57:26 PM 1 FW1: D Sending reset dire 10-20-2012 12:00:19 AM 1 FW1: D Sending reset dire 10-19-2012 11:59:56 PM 1 FW1: D Sending reset dire Last 5 Application Error Msgs: 10-25-2012 4:10:45 PM 1000 Faulting application name: plugin-container.exe, version: PROPRIETARY & CONFIDENTIAL PAGE 157 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 16.0.1.4666, time stamp: 0x507618d4 Faulting module name: FOXITR~1.OCX, version: 1.0.1.224, time stamp: 0x4b849404 Exception code: 0xc0000005 Fault offset: 0x00002dce Faulting process id: 0x200c Faulting application start time: 0x01cdb2eccbe1da65 Faulting application path: C:\Program Files\Mozilla Firefox\plugin-container.exe Faulting module path: C:\PROGRA~1\FOXITS~1\FOXITR~1\plugins\FOXITR~1.OCX Report Id: 0e9e3ba5-1ee011e2-a7ea-5444aa3bf620 10-25-2012 12:34:11 AM 16842761 Activation context generation failed for "c:\program files\vocalocity\vocalocity ie addin\adxloader.dll.Manifest".Error in manifest or policy file "c:\program files\vocalocity\vocalocity ie addin\adxloader.dll.Manifest" on line 2. The manifest file root element must be assembly. 10-25-2012 12:31:27 AM 16842815 Activation context generation failed for "c:\program files\azzcardfile\DelZip179.dll".Error in manifest or policy file "c:\program files\azzcardfile\DelZip179.dll" on line 8. The value "*" of attribute "language" in element "assemblyIdentity" is invalid. 10-25-2012 12:31:17 AM 16842815 Activation context generation failed for "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid. 10-24-2012 4:52:36 PM 1000 Faulting application name: plugin-container.exe, version: 16.0.1.4666, time stamp: 0x507618d4 Faulting module name: FOXITR~1.OCX, version: 1.0.1.224, time stamp: 0x4b849404 Exception code: 0xc0000005 Fault offset: 0x00002dce Faulting process id: 0x143c Faulting application start time: 0x01cdb22979230ec3 Faulting application path: C:\Program Files\Mozilla Firefox\plugin-container.exe Faulting module path: C:\PROGRA~1\FOXITS~1\FOXITR~1\plugins\FOXITR~1.OCX Report Id: bd3f4e23-1e1c11e2-a7ea-5444aa3bf620 Disk Capacity: PROPRIETARY & CONFIDENTIAL PAGE 158 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis C: 687.75 GB, 596.72 GB free, 13.24% used D: 10.78 GB, 1.56 GB free, 85.53% used CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: HP-Pavilion/BK428AA-ABA s5412p Memory Banks: Memory Bank0 : DIMM-Synchronous-2048 Mb-800 Mhz Memory Bank1 : DIMM-Synchronous-2048 Mb-800 Mhz CPUs: Pentium(R) Dual-Core CPU E5400 @ 2.70GHz : CPU0-2 System Slots: System Slot0 : PCI1-Available-OK System Slot1 : PCI2-In Use-OK System Slot2 : PCI3-Available-OK System Slot3 : PCI4-Available-OK System Slot4 : PCI5-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) D8:D3:85:7F:1E:51 : 10.0.1.91;fe80::d14a:a218:ebda:19ed-RTL8167-[00000007] Realtek RTL8102E/RTL8103E Family PCI-E Fast Ethernet NIC (NDIS 6.20) unknown : -NdisWan-[00000008] WAN Miniport (IP) PROPRIETARY & CONFIDENTIAL PAGE 159 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000011] Microsoft ISATAP Adapter unknown : -RTL8167-[00000012] Realtek RTL8102E/RTL8103E Family PCI-E Fast Ethernet NIC (NDIS 6.20) unknown : --[00000013] Deterministic Network Enhancer Miniport D8:D3:85:7F:1E:51 : --[00000014] Deterministic Network Enhancer Miniport 0A:F3:20:52:41:53 : --[00000015] Deterministic Network Enhancer Miniport 0A:F3:20:52:41:53 : --[00000016] Deterministic Network Enhancer Miniport unknown : -CVirtA-[00000017] Cisco Systems VPN Adapter unknown : --[00000018] Deterministic Network Enhancer Miniport unknown : -tunnel-[00000019] Microsoft ISATAP Adapter unknown : -tunnel-[00000021] Microsoft Teredo Tunneling Adapter unknown : -hamachi-[00000022] Hamachi Network Interface unknown : --[00000023] Deterministic Network Enhancer Miniport unknown : -dsNcAdpt-[00000025] Juniper Network Connect Virtual Adapter unknown : --[00000026] Deterministic Network Enhancer Miniport unknown : -tunnel-[00000028] Microsoft 6to4 Adapter unknown : -vnet-[00000029] Shrew Soft Virtual Adapter unknown : --[00000030] Deterministic Network Enhancer Miniport unknown : -pppop-[00000031] PPPoP WAN Adapter 54:44:AA:3B:F6:20 : -VNASC-[00000032] Check Point Virtual Network Adapter For SecureClient 54:44:AA:3B:F6:20 : --[00000033] Deterministic Network Enhancer Miniport 54:44:AA:3B:F6:20 : --[00000034] SecuRemote Miniport unknown : --[00000035] SecuRemote Miniport unknown : --[00000036] SecuRemote Miniport unknown : --[00000037] SecuRemote Miniport unknown : --[00000038] SecuRemote Miniport PROPRIETARY & CONFIDENTIAL PAGE 160 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis D8:D3:85:7F:1E:51 : --[00000039] SecuRemote Miniport 0A:F3:20:52:41:53 : --[00000040] SecuRemote Miniport 0C:52:20:52:41:53 : --[00000041] SecuRemote Miniport unknown : -tunnel-[00000042] Microsoft ISATAP Adapter unknown : -tunnel-[00000043] Microsoft ISATAP Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 4384 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 6/25/2010 10:44:04 AM Active Anti-virus: AVG Anti-Virus Free Edition 2012 Active Anti-spyware: AVG Anti-Virus Free Edition 2012 Active Firewall: N/A Dresden Dresden-XP DWilliams2 ENGINEERS Windows XP Professional Windows XP Professional Windows XP Professional Windows 2000 Server PROPRIETARY & CONFIDENTIAL Intel(R) Pentium(R) 4 CPU 1.60GHz 512 MB Last 5 System Error Msgs: 10-24-2012 3:21:29 PM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{F6DAF117-B32C-4. The master browser is stopping or an election is being forced. 10-24-2012 2:09:22 PM 8003 The master browser has received a server announcement from PAGE 161 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{F6DAF117-B32C-4. The master browser is stopping or an election is being forced. 10-24-2012 12:21:14 PM 8003 The master browser has received a server announcement from the computer FTDELLLAPTOP that believes that it is the master browser for the domain on transport NetBT_Tcpip_{F6DAF117-B32C-4. The master browser is stopping or an election is being forced. 10-24-2012 11:52:42 AM 4319 A duplicate name has been detected on the TCP network. The IP address of the machine that sent the message is in the data. Use nbtstat -n in a command window to see which name is in the Conflict state. 10-24-2012 11:47:42 AM 16 The description for Event ID '16' in Source 'Windows Update Agent' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event: Listening Ports: RDP (3389/TCP) Disk Capacity: C: 18.64 GB, 4.9 GB free, 73.71% used Service Tag: 7HH9111 CPU Count: 1 CPU Core Count: 1 Windows Key: KRJQ8-RQ822-YRMXF-6TTXC-HD2VM Make and Model: Dell Computer Corporation/Dimension 4300 Memory Banks: Memory Bank0 : DIMM-Synchronous-256 Mb-133 Mhz Memory Bank1 : DIMM-Synchronous-256 Mb-133 Mhz PROPRIETARY & CONFIDENTIAL PAGE 162 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis CPUs: Intel(R) Pentium(R) 4 CPU 1.60GHz : CPU0-1 System Slots: System Slot0 : PCI1-Available-OK System Slot1 : PCI2-Available-OK System Slot2 : PCI3-Available-OK System Slot3 : PCI4-Available-OK System Slot4 : AGP1-In Use-OK NICs: unknown : -AsyncMac-[00000000] RAS Async Adapter unknown : -Rasl2tp-[00000001] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000002] WAN Miniport (PPTP) unknown : -Raspti-[00000003] Direct Parallel unknown : -NdisWan-[00000004] WAN Miniport (IP) unknown : -DM9102-[00000005] CNet PRO200WL PCI Fast Ethernet Adapter 00:80:AD:89:15:A7 : 10.0.1.50-DM9102-[00000006] CNet PRO200WL PCI Fast Ethernet Adapter DEP: Not Available OS Manufacturer: Microsoft Corporation OS Version: 5.0.2195 Service Pack 4 (Build 2195) OS Caption: Microsoft Windows 2000 Advanced Server OS Virtual Memory: 1760 MB OS System Directory: C:\WINNT\system32 OS Windows Directory: C:\WINNT OS Install Date: 11/28/2001 12:36:03 PM ERPIWindows 7 Ultimate CLIENTDOM-01 FTDELLLAPTOP Windows 7 PROPRIETARY & CONFIDENTIAL PAGE 163 of 251 NETWORK ASSESSMENT Computer Name FTDESKTOPWO RK HJOBS-VMWIN764 Operating System Enterprise Windows XP Professional Windows 7 Enterprise CPU RAM Analysis Intel(R) Xeon(R) CPU E5320 @ 1.86GHz 1024 MB Last 5 System Error Msgs: 10-24-2012 2:08:18 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 10-23-2012 3:55:40 PM 1030 The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful. 10-19-2012 4:39:21 AM 20 Installation Failure: Windows failed to install the following update with error 0x80070643: Definition Update for Windows Defender - KB915597 (Definition 1.139.124.0). 10-12-2012 10:42:57 AM 4321 The name "PIT :1d" could not be registered on the interface with IP address 10.0.1.215. The computer with the IP address 10.0.1.37 did not allow the name to be claimed by this computer. 10-12-2012 10:42:01 AM 4199 The system detected an address conflict for IP address 10.0.1.240 with the system having network hardware address 00-D0-B7-E1-56-B5. Network operations on this system may be disrupted as a result. Last 5 Application Error Msgs: 10-24-2012 11:17:12 PM 1008 The description for Event ID '-1073740816' in Source 'Customer Experience Improvement Program' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'90080108' PROPRIETARY & CONFIDENTIAL PAGE 164 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 10-24-2012 4:46:26 AM 1008 The description for Event ID '-1073740816' in Source 'Customer Experience Improvement Program' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'80004005' 10-23-2012 9:52:26 AM 1008 The description for Event ID '-1073740816' in Source 'Customer Experience Improvement Program' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'80004005' 10-22-2012 2:44:18 PM 1008 The description for Event ID '-1073740816' in Source 'Customer Experience Improvement Program' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'80004005' 10-21-2012 7:34:59 PM 1008 The description for Event ID '-1073740816' in Source 'Customer Experience Improvement Program' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'80004005' Listening Ports: RDP (3389/TCP) Disk Capacity: C: 126.9 GB, 102.04 GB free, 19.59% used Service Tag: 2068-6241-1069-7732-6431-6281-20 CPU Count: 1 CPU Core Count: 1 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB PROPRIETARY & CONFIDENTIAL PAGE 165 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Make and Model: Microsoft Corporation/Virtual Machine Memory Banks: Memory Bank0 : Unknown-Unknown-1024 Mb-unknown Mhz <slot available> CPUs: Intel(R) Xeon(R) CPU E5320 @ 1.86GHz : CPU0-1 NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:15:5D:01:3C:1E : 10.0.1.215;fe80::3530:8f92:6de3:905a-dc21x4VM-[00000007] Intel 21140-Based PCI Fast Ethernet Adapter (Emulated) unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7600 unknown (Build 7600) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 2048 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 8/6/2012 2:02:12 PM Active Anti-virus: N/A PROPRIETARY & CONFIDENTIAL PAGE 166 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Active Anti-spyware: Windows Defender Active Firewall: N/A HP01 HP02 HPV00 Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Enterprise Windows Server 2008 R2 Enterprise Intel(R) Xeon(R) CPU E5320 @ 1.86GHz 16384 MB Last 5 System Error Msgs: 10-25-2012 2:12:04 AM 1111 Driver WebEx Document Loader required for printer WebEx Document Loader is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 2:12:03 AM 1111 Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 2:11:40 AM 1111 Driver HP Universal Printing PCL 6 required for printer HP Universal Printing PCL 6 is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 2:11:39 AM 1111 Driver HP LaserJet Professional CM1410 Series PCL 6 required for printer HP LaserJet Professional CM1410 Series PCL 6 is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 2:11:38 AM 1111 Driver hpfax1 required for printer HP LaserJet Professional CM1410 Series Fax is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: 10-10-2012 12:28:02 PM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 10-10-2012 12:28:02 PM 4107 Failed extract of third-party root list from auto update cab at: PROPRIETARY & CONFIDENTIAL PAGE 167 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 3-1-2012 11:49:29 AM 1000 Faulting application name: dsm_sa_datamgr32.exe, version: 5.9.5.696, time stamp: 0x4d39fc39 Faulting module name: dsm_sa_datamgr32.exe, version: 5.9.5.696, time stamp: 0x4d39fc39 Exception code: 0xc0000005 Fault offset: 0x0000fc74 Faulting process id: 0x514 Faulting application start time: 0x01ccf7cb323b930d Faulting application path: C:\Program Files (x86)\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr32.exe Faulting module path: C:\Program Files (x86)\Dell\SysMgt\dataeng\bin\dsm_sa_datamgr32.exe Report Id: 829187b3-63be-11e19090-0019b9cdd322 1-18-2012 1:31:59 PM 11730 Product: Dell System E-support Tool -- Error 1730. You must be an Administrator to remove this application. To remove this application, you can log on as an Administrator, or contact your technical support group for assistance. 1-17-2012 4:50:22 PM 16842785 Activation context generation failed for "C:\PROGRA~2\GFI\GFIBAC~2\LIBEAY32.dll". Dependent Assembly Microsoft.VC90.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",typ e="win32",version="9.0.21022.8" could not be found. Please use sxstrace.exe for detailed diagnosis. Listening Ports: RDP (3389/TCP) Disk Capacity: C: 557.65 GB, 520.32 GB free, 6.69% used H: 2792.87 GB, 2310.28 GB free, 17.28% used Service Tag: CMHX5D1 CPU Count: 1 PROPRIETARY & CONFIDENTIAL PAGE 168 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis CPU Core Count: 4 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Dell Inc./PowerEdge 1900 Memory Banks: Memory Bank0 : unknown-Synchronous-4096 Mb-667 Mhz Memory Bank1 : unknown-Synchronous-4096 Mb-667 Mhz Memory Bank2 : unknown-Synchronous-4096 Mb-667 Mhz Memory Bank3 : unknown-Synchronous-4096 Mb-667 Mhz CPUs: Intel(R) Xeon(R) CPU E5320 @ 1.86GHz : CPU0-4 System Slots: System Slot0 : PCI1-Available-OK System Slot1 : PCI2-Available-OK System Slot2 : PCI3-In Use-OK System Slot3 : PCI4-Available-OK System Slot4 : PCI5-Available-OK System Slot5 : PCI6-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 90:E2:BA:01:37:EE : 10.255.255.60;fe80::28bb:c616:1492:2e46-e1qexpress-[00000007] Intel(R) Gigabit ET Dual Port Server Adapter unknown : -tunnel-[00000008] Microsoft ISATAP Adapter PROPRIETARY & CONFIDENTIAL PAGE 169 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -NdisWan-[00000009] WAN Miniport (IP) 90:E2:BA:01:37:EF : 10.255.255.160;fe80::88f4:e2e0:7d03:7a5f-e1qexpress-[00000010] Intel(R) Gigabit ET Dual Port Server Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter unknown : -tunnel-[00000012] Microsoft ISATAP Adapter 00:19:B9:CD:D3:22 : -l2nd-[00000013] Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) unknown : -tunnel-[00000014] Microsoft ISATAP Adapter unknown : -tunnel-[00000015] Microsoft ISATAP Adapter unknown : -tunnel-[00000016] Microsoft Teredo Tunneling Adapter unknown : -VMSMP-[00000017] Microsoft Virtual Network Switch Adapter 00:19:B9:CD:D3:22 : 10.0.1.60;fe80::35d2:dcef:cc39:3d1d-VMSMP-[00000018] Microsoft Virtual Network Switch Adapter DEP: On for All programs and services except those I select HYPERV Windows Server 2008 R2 Enterprise PROPRIETARY & CONFIDENTIAL AMD Phenom(tm) 9150e QuadCore Processor 4096 MB OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Enterprise OS Virtual Memory: 40944 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 1/10/2012 5:19:05 PM Last 5 System Error Msgs: 10-25-2012 9:34:01 AM 1111 Driver WebEx Document Loader required for printer WebEx Document Loader is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 9:34:00 AM 1111 Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again. PAGE 170 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 10-25-2012 9:33:43 AM 1111 Driver HP Universal Printing PCL 6 required for printer HP Universal Printing PCL 6 is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 9:33:42 AM 1111 Driver HP LaserJet Professional CM1410 Series PCL 6 required for printer HP LaserJet Professional CM1410 Series PCL 6 is unknown. Contact the administrator to install the driver before you log in again. 10-25-2012 9:33:41 AM 1111 Driver hpfax1 required for printer HP LaserJet Professional CM1410 Series Fax is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: 10-23-2012 11:51:59 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 6-19-2012 10:33:20 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 6-19-2012 7:04:22 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 6-18-2012 7:52:32 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 6-13-2012 8:36:47 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au PROPRIETARY & CONFIDENTIAL PAGE 171 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . Listening Ports: HTTP (80/TCP), RDP (3389/TCP) Disk Capacity: C: 74.88 GB, 36.77 GB free, 50.89% used D: 390.78 GB, 144.18 GB free, 63.1% used CPU Count: 1 CPU Core Count: 4 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: HP-Pavilion/FQ565AA-ABA a6700f Memory Banks: Memory Bank0 : DIMM-unknown-1024 Mb-800 Mhz Memory Bank1 : DIMM-unknown-1024 Mb-800 Mhz Memory Bank2 : DIMM-unknown-1024 Mb-800 Mhz Memory Bank3 : DIMM-unknown-1024 Mb-800 Mhz CPUs: AMD Phenom(tm) 9150e Quad-Core Processor : CPU0-4 System Slots: System Slot0 : PCI0-Available-OK System Slot1 : PCI1-Available-OK System Slot2 : PCI2-In Use-OK System Slot3 : PCI3-In Use-OK System Slot4 : PCI4-In Use-OK System Slot5 : PCI5-In Use-OK System Slot6 : PCI6-In Use-OK PROPRIETARY & CONFIDENTIAL PAGE 172 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:21:97:C4:B4:9F : 10.0.1.67-NVENETFD-[00000007] NVIDIA nForce Networking Controller unknown : -tunnel-[00000008] Microsoft ISATAP Adapter unknown : -NdisWan-[00000009] WAN Miniport (IP) unknown : -tunnel-[00000010] Microsoft Teredo Tunneling Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter 00:22:5F:6F:3A:8C : -netr7364-[00000012] USB Wireless 802.11 b/g Adaptor unknown : -VMSMP-[00000013] Microsoft Virtual Network Switch Adapter unknown : -VMSMP-[00000014] Microsoft Virtual Network Switch Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Enterprise OS Virtual Memory: 7936 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 5/27/2010 8:04:22 PM HYPERV01 ISA1 Windows Server 2003 PROPRIETARY & CONFIDENTIAL Intel(R) Xeon(TM) CPU 2.40GHz Last 5 System Error Msgs: 10-25-2012 5:16:12 PM 10016 The description for Event ID '-1073731808' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or PAGE 173 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'application-specific', 'Local', 'Activation', '{BA126AD1-2166-11D1-B1D0-00805FC1270E}', 'NT AUTHORITY', 'NETWORK SERVICE', 'S-15-20' 10-25-2012 5:16:12 PM 10016 The description for Event ID '-1073731808' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'application-specific', 'Local', 'Activation', '{BA126AD1-2166-11D1-B1D0-00805FC1270E}', 'NT AUTHORITY', 'NETWORK SERVICE', 'S-15-20' 10-25-2012 5:16:12 PM 10016 The description for Event ID '-1073731808' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'application-specific', 'Local', 'Activation', '{BA126AD1-2166-11D1-B1D0-00805FC1270E}', 'NT AUTHORITY', 'NETWORK SERVICE', 'S-15-20' 10-25-2012 5:11:56 PM 10016 The description for Event ID '-1073731808' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'application-specific', 'Local', 'Activation', '{BA126AD1-2166-11D1-B1D0-00805FC1270E}', 'NT AUTHORITY', 'NETWORK SERVICE', 'S-15-20' 10-25-2012 5:11:56 PM 10016 The description for Event ID '-1073731808' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'application-specific', 'Local', 'Activation', '{BA126AD1-2166-11D1-B1D0-00805FC1270E}', 'NT AUTHORITY', 'NETWORK SERVICE', 'S-15-20' PROPRIETARY & CONFIDENTIAL PAGE 174 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Last 5 Application Error Msgs: 10-25-2012 9:25:28 AM 14147 ISA Server detected routes through the network adapter Local Area Connection that do not correlate with the network to which this network adapter belongs. When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed. The following ranges are included in the network's IP address ranges but are not routable through any of the network's adapters: 192.168.100.255192.168.100.255,192.168.222.255-192.168.222.255;. Note that this event may be generated once after you add a route, create a remote site network, or configure Network Load Balancing and may be safely ignored if it does not re-occur. 10-25-2012 9:25:22 AM 14147 ISA Server detected routes through the network adapter GenesisGOPD that do not correlate with the network to which this network adapter belongs. When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed. The following ranges are included in the network's IP address ranges but are not routable through any of the network's adapters: 10.0.1.125-10.0.1.125;. Note that this event may be generated once after you add a route, create a remote site network, or configure Network Load Balancing and may be safely ignored if it does not re-occur. 10-25-2012 9:25:22 AM 21265 The routing table for the network adapter GenesisGOPD includes IP address ranges that are not defined in the array-level network GenesisGOPD, to which it is bound. As a result, packets arriving at this network adapter from the IP address ranges listed below or sent to these IP address ranges via this network adapter will be dropped as spoofed. To resolve this issue, add the missing IP address ranges to the array network. The following IP address ranges will be dropped as spoofed: Internal:10.0.1.12910.0.1.129; 10-25-2012 9:25:22 AM 14147 ISA Server detected routes through the network adapter Local Area Connection that do not correlate with the network to which this network adapter PROPRIETARY & CONFIDENTIAL PAGE 175 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis belongs. When networks are configured correctly, the IP address ranges included in each array-level network must include all IP addresses that are routable through its network adapters according to their routing tables. Otherwise valid packets may be dropped as spoofed. The following ranges are included in the network's IP address ranges but are not routable through any of the network's adapters: 10.0.1.129-10.0.1.129,192.168.100.255192.168.100.255,192.168.222.255-192.168.222.255;. Note that this event may be generated once after you add a route, create a remote site network, or configure Network Load Balancing and may be safely ignored if it does not re-occur. 10-25-2012 9:25:20 AM 21265 The routing table for the network adapter GenesisGOPD includes IP address ranges that are not defined in the array-level network GenesisGOPD, to which it is bound. As a result, packets arriving at this network adapter from the IP address ranges listed below or sent to these IP address ranges via this network adapter will be dropped as spoofed. To resolve this issue, add the missing IP address ranges to the array network. The following IP address ranges will be dropped as spoofed: Internal:10.0.1.12910.0.1.129; Listening Ports: Telnet (23/TCP), HTTP (80/TCP), RDP (3389/TCP), HTTP (8080/TCP) Windows Key: M8266-7XP62-VVHTD-DQ8R7-QK6RY JAGA JAMIE-PC Windows Server 2003 Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL Intel(R) 6144 Core(TM) i5 MB CPU M 460 @ 2.53GHz Last 5 System Error Msgs: 10-25-2012 5:31:02 PM 43029 Display is not active 10-25-2012 5:31:02 PM 52236 CPLIB :: General - Invalid Parameter 10-25-2012 5:31:01 PM 43029 Display is not active 10-25-2012 5:31:01 PM 52236 CPLIB :: General - Invalid Parameter 10-25-2012 3:53:04 PM 36887 The description for Event ID '36887' in Source 'Schannel' cannot be found. The local computer may not have the necessary registry information or PAGE 176 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'10' Last 5 Application Error Msgs: 10-8-2012 4:28:41 PM 1002 The program iexplore.exe version 9.0.8112.16450 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1200 Start Time: 01cda5899c3f3c80 Termination Time: 0 Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe Report Id: 10-1-2012 3:22:35 PM 1000 Faulting application name: Illustrator.exe, version: 15.0.0.399, time stamp: 0x4bad3bbf Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc0000005 Fault offset: 0x59d0601c Faulting process id: 0xfc8 Faulting application start time: 0x01cda00a0ea317a9 Faulting application path: C:\Program Files (x86)\Adobe\Adobe Illustrator CS5\Support Files\Contents\Windows\Illustrator.exe Faulting module path: unknown Report Id: 5a30733a-0bfd-11e2-9f46-f04da2b33266 9-12-2012 1:01:12 PM 1002 The program Explorer.EXE version 6.1.7601.17567 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 934 Start Time: 01cd910072e63a18 Termination Time: 35 Application Path: C:\Windows\Explorer.EXE Report Id: 66e37fa2-fcfb-11e1-bd93-f04da2b33266 9-5-2012 2:58:13 PM 1000 Faulting application name: WINWORD.EXE, version: 14.0.6024.1000, time stamp: 0x4d83e310 Faulting module name: MSGR3EN.DLL, version: 3.1.0.17519, time stamp: 0x4e25d04d Exception code: 0x40000015 Fault offset: 0x0029c85d Faulting process id: 0x1640 Faulting application start time: 0x01cd8b96fed21bd6 Faulting application path: C:\Program Files (x86)\Microsoft Office\Office14\WINWORD.EXE Faulting module path: C:\Program Files (x86)\Microsoft Office\OFFICE14\PROOF\1033\MSGR3EN.DLL Report Id: a457bd76-f78b-11e1-afccf04da2b33266 PROPRIETARY & CONFIDENTIAL PAGE 177 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 8-16-2012 2:55:57 PM 1000 Faulting application name: g2mpolling.exe, version: 5.2.0.952, time stamp: 0x4f9877e3 Faulting module name: g2m.dll, version: 5.2.0.952, time stamp: 0x4f9877b6 Exception code: 0xc0000005 Fault offset: 0x0037e3f8 Faulting process id: 0x131c Faulting application start time: 0x01cd7bd94f264947 Faulting application path: C:\Program Files (x86)\Citrix\GoToMeeting\952\g2mpolling.exe Faulting module path: C:\Program Files (x86)\Citrix\GoToMeeting\952\g2m.dll Report Id: 03082c24-e7d4-11e19d4b-f04da2b33266 Disk Capacity: C: 581.42 GB, 411.66 GB free, 29.2% used E: 14.65 GB, 7.75 GB free, 47.1% used Service Tag: H0CRYM1 CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Dell Inc./Inspiron N5010 Memory Banks: Memory Bank0 : DIMM-Synchronous-2048 Mb-1333 Mhz Memory Bank1 : DIMM-Synchronous-4096 Mb-1333 Mhz CPUs: Intel(R) Core(TM) i5 CPU M 460 @ 2.53GHz : CPU0-2 System Slots: System Slot0 : J6B2-In Use-OK System Slot1 : J6B1-In Use-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) PROPRIETARY & CONFIDENTIAL PAGE 178 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) F0:4D:A2:B3:32:66 : 10.0.1.156;fe80::812:5802:b8e5:fd39-RTL8167-[00000007] Realtek RTL8102E/RTL8103E Family PCI-E Fast Ethernet NIC (NDIS 6.20) unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000011] Microsoft Teredo Tunneling Adapter 1C:65:9D:B7:DD:C8 : 10.0.1.83;fe80::1194:b88d:d627:97a4-BCM43XX-[00000012] DW1501 Wireless-N WLAN Half-Mini Card unknown : -tunnel-[00000013] Microsoft ISATAP Adapter 1C:65:9D:B7:DD:C8 : -BcmVWL-[00000014] Broadcom Virtual Wireless Adapter unknown : -tunnel-[00000015] Microsoft ISATAP Adapter DEP: On for essential Windows programs and services only jsanford-WIN7 Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL Pentium(R) Dual-Core 3072 MB OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 12016 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 2/10/2012 4:14:28 PM Active Anti-virus: Microsoft Security Essentials Active Anti-spyware: Microsoft Security Essentials Active Firewall: N/A Last 5 System Error Msgs: 10-19-2012 12:30:18 PM 262159 The device, \Device\Harddisk1\DR1, is not ready for access PAGE 179 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU CPU E5400 @ 2.70GHz RAM Analysis yet. 10-19-2012 12:30:18 PM 262155 The driver detected a controller error on \Device\Ide\IdePort0. 10-19-2012 12:30:18 PM 262159 The device, \Device\Harddisk1\DR1, is not ready for access yet. 10-19-2012 12:30:18 PM 262159 The device, \Device\Harddisk1\DR1, is not ready for access yet. 10-19-2012 12:30:18 PM 262159 The device, \Device\Harddisk1\DR1, is not ready for access yet. Last 5 Application Error Msgs: 10-18-2012 3:33:07 PM 8194 Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e1050253ae220} Writer Name: System Writer Writer Instance ID: {94313ddf-e7b2-40b987d9-4a5ef9e0dab6} 10-18-2012 3:11:54 PM 1002 The program iexplore.exe version 9.0.8112.16450 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: d88 Start Time: 01cdad644f5e3632 Termination Time: 16 Application Path: C:\Program Files\Internet Explorer\iexplore.exe Report Id: 10-18-2012 3:10:10 PM 8194 Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e1050253ae220} Writer Name: System Writer Writer Instance ID: {94313ddf-e7b2-40b987d9-4a5ef9e0dab6} 10-18-2012 3:07:09 PM 8194 Volume Shadow Copy Service error: Unexpected error querying PROPRIETARY & CONFIDENTIAL PAGE 180 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e1050253ae220} Writer Name: System Writer Writer Instance ID: {94313ddf-e7b2-40b987d9-4a5ef9e0dab6} 10-18-2012 3:05:36 PM 8194 Volume Shadow Copy Service error: Unexpected error querying for the IVssWriterCallback interface. hr = 0x80070005, Access is denied. . This is often caused by incorrect security settings in either the writer or requestor process. Operation: Gathering Writer Data Context: Writer Class Id: {e8132975-6f93-4464-a53e1050253ae220} Writer Name: System Writer Writer Instance ID: {94313ddf-e7b2-40b987d9-4a5ef9e0dab6} Listening Ports: RDP (3389/TCP) Disk Capacity: C: 288.05 GB, 126.12 GB free, 56.22% used D: 10 GB, 5.31 GB free, 46.9% used Service Tag: 830TRL1 CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Dell Inc./Vostro 230 Memory Banks: Memory Bank0 : DIMM-Synchronous-2048 Mb-1333 Mhz Memory Bank1 : DIMM-Synchronous-1024 Mb-1333 Mhz CPUs: Pentium(R) Dual-Core CPU PROPRIETARY & CONFIDENTIAL E5400 @ 2.70GHz : CPU0-2 PAGE 181 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis System Slots: System Slot0 : PCIEX16-Available-OK System Slot1 : PCI1-Available-OK System Slot2 : PCI2-Available-OK System Slot3 : PCIEX1-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:26:2D:28:C5:47 : 10.0.1.93;fe80::8176:9cb6:2173:b513-k57nd60x-[00000007] Broadcom NetLink (TM) Gigabit Ethernet unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter 0C:EE:E6:C3:AA:2D : -athr-[00000011] DW1525 (802.11n) WLAN PCIe Card unknown : -tunnel-[00000012] Microsoft ISATAP Adapter unknown : -tunnel-[00000013] Microsoft ISATAP Adapter unknown : -tunnel-[00000014] Microsoft ISATAP Adapter 00:FF:08:10:9B:86 : -dsNcAdpt-[00000015] Juniper Network Connect Virtual Adapter unknown : -tunnel-[00000016] Microsoft 6to4 Adapter 0A:EE:E6:C3:AA:2D : -vwifimp-[00000017] Microsoft Virtual WiFi Miniport Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7600 unknown (Build 7600) OS Caption: Microsoft Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL PAGE 182 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis OS Virtual Memory: 6144 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 6/6/2012 12:14:51 PM Active Anti-virus: N/A Active Anti-spyware: Windows Defender Active Firewall: N/A LEE MEGATRON Windows 7 Enterprise Windows Server 2003 Intel(R) Xeon(TM) CPU 3.00GHz 1024 MB Last 5 System Error Msgs: 10-1-2012 11:14:28 AM 10005 DCOM got error "The service cannot be started, either because it is disabled or because it has no enabled devices associated with it." attempting to start the service WSearch with arguments "" in order to run the server: {7D096C5F-AC084F1F-BEB7-5C22C517CE39} 10-1-2012 11:14:17 AM 1111 Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again. 10-1-2012 11:14:16 AM 1111 Driver Microsoft XPS Document Writer required for printer Microsoft XPS Document Writer is unknown. Contact the administrator to install the driver before you log in again. 10-1-2012 11:14:16 AM 1111 Driver Adobe PDF Converter required for printer Adobe PDF is unknown. Contact the administrator to install the driver before you log in again. 10-1-2012 11:14:15 AM 1111 Driver Microsoft Shared Fax Driver required for printer Fax is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: 10-1-2012 11:37:07 AM 4 An unexpected error has occured in "QuickBooks Premier Edition 2012": InitSystem returned non success HRESULT 0x8004050e PROPRIETARY & CONFIDENTIAL PAGE 183 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 10-1-2012 11:35:05 AM 4 An unexpected error has occured in "QuickBooks": Returning NULL QBWinInstance Handle 10-1-2012 11:35:05 AM 4 An unexpected error has occured in "QuickBooks": Returning NULL QBWinInstance Handle 10-1-2012 11:35:05 AM 4 An unexpected error has occured in "QuickBooks": Returning NULL QBWinInstance Handle 10-1-2012 11:21:39 AM 1002 Hanging application QBW32.EXE, version 22.0.4008.2206, hang module hungapp, version 0.0.0.0, hang address 0x00000000. Listening Ports: RDP (3389/TCP) Disk Capacity: C: 12 GB, 2.21 GB free, 81.58% used E: 56.33 GB, 43.06 GB free, 23.56% used Z: 204.72 GB, 17.62 GB free, 91.39% used Service Tag: DLHMS71 CPU Count: 4 CPU Core Count: 4 Windows Key: JFTB2-PF6M8-KJYKW-6T6R6-C33JM Make and Model: Dell Computer Corporation/PowerEdge 1850 Memory Banks: Memory Bank0 : DIMM-Synchronous-512 Mb-400 Mhz Memory Bank1 : DIMM-Synchronous-512 Mb-400 Mhz CPUs: Intel(R) Xeon(TM) CPU 3.00GHz : CPU0-1 Intel(R) Xeon(TM) CPU 3.00GHz : CPU1-1 Intel(R) Xeon(TM) CPU 3.00GHz : CPU2-1 PROPRIETARY & CONFIDENTIAL PAGE 184 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Intel(R) Xeon(TM) CPU 3.00GHz : CPU3-1 System Slots: System Slot0 : PCI1-Available-OK System Slot1 : PCI2-In Use-OK System Slot2 : RAC_CONN-Available-OK NICs: 00:11:43:E7:94:35 : 10.0.1.4-E1000-[00000001] Intel(R) PRO/1000 MT Network Connection 00:11:43:E7:94:36 : 169.254.196.24-E1000-[00000002] Intel(R) PRO/1000 MT Network Connection unknown : -AsyncMac-[00000003] RAS Async Adapter unknown : -Rasl2tp-[00000004] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000005] WAN Miniport (PPTP) 33:50:6F:45:30:30 : -RasPppoe-[00000006] WAN Miniport (PPPOE) unknown : -Raspti-[00000007] Direct Parallel unknown : -NdisWan-[00000008] WAN Miniport (IP) DEP: On for All programs and services except those I select MIGTEST Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL Intel(R) Xeon(R) CPU E5320 @ 1.86GHz OS Manufacturer: Microsoft Corporation OS Version: 5.2.3790 Service Pack 2 (Build 3790) OS Caption: Microsoft(R) Windows(R) Server 2003, Standard Edition OS Virtual Memory: 2992 MB OS System Directory: C:\WINDOWS\system32 OS Windows Directory: C:\WINDOWS OS Install Date: 7/28/2005 4:11:50 PM 512 MB Last 5 System Error Msgs: 6-14-2012 11:38:20 AM 655416 The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. Client IP: 10.0.1.85. 6-14-2012 1:39:37 PM 7023 The Windows Update service terminated with the following error: %%-2147467243 PAGE 185 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Last 5 Application Error Msgs: 6-14-2012 12:46:29 PM 215 WinMail (3544) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed. 6-14-2012 12:46:21 PM 215 WinMail (3216) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed. 6-14-2012 11:44:57 AM 10 The description for Event ID '-1073741814' in Source 'WinMgmt' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'//./root/CIMV2', 'SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99', '0x80041003' 6-14-2012 11:31:36 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 6-14-2012 11:31:36 AM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . Disk Capacity: C: 126.9 GB, 106.96 GB free, 15.71% used Service Tag: 4412-1653-2669-5918-6200-8700-92 CPU Count: 1 CPU Core Count: 4 Windows Key: H7X92-3VPBB-Q799D-Y6JJ3-86WC6 Make and Model: Microsoft Corporation/Virtual Machine PROPRIETARY & CONFIDENTIAL PAGE 186 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Memory Banks: Memory Bank0 : Unknown-Unknown-512 Mb-unknown Mhz <slot available> CPUs: Intel(R) Xeon(R) CPU E5320 @ 1.86GHz : CPU0-4 NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter unknown : -AsyncMac-[00000010] RAS Async Adapter 00:15:5D:01:3C:1D : 10.0.1.90;fe80::5549:1b78:5dbb:56e8-netvsc-[00000011] Microsoft Virtual Machine Bus Network Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 2240 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 6/14/2012 10:41:51 AM Active Anti-virus: N/A Active Anti-spyware: Windows Defender PROPRIETARY & CONFIDENTIAL PAGE 187 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Active Firewall: N/A MMidland MMidland1 Windows XP Professional Windows Vista Business AMD 3072 Athlon(tm) 64 MB X2 Dual Core Processor 5000+ Last 5 System Error Msgs: 10-23-2012 4:20:11 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly. 10-23-2012 4:07:39 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly. 10-23-2012 2:41:46 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly. 10-23-2012 2:37:21 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly. 10-23-2012 1:11:21 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name Sysytem (DNS) is configured and working correctly. Last 5 Application Error Msgs: 10-25-2012 3:33:34 PM 4 An unexpected error has occured in "QuickBooks": Returning NULL QBWinInstance Handle 10-25-2012 3:33:34 PM 4 An unexpected error has occured in "QuickBooks": Returning NULL QBWinInstance Handle 10-25-2012 3:33:34 PM 4 An unexpected error has occured in "QuickBooks": Returning NULL QBWinInstance Handle 10-9-2012 5:28:42 PM 3013 The entry <C:\USERS\MMidland\DOCUMENTS\Northern\PROPOSALS AND SOW\WELLS PROPRIETARY & CONFIDENTIAL PAGE 188 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis MSA_FINAL1.DOCX> in the hash map cannot be updated. Context: Application, SystemIndex Catalog Details: A device attached to the system is not functioning. (0x8007001f) 10-9-2012 3:16:32 PM 4 An unexpected error has occured in "QuickBooks Premier Edition 2012": ExcelHelper::SetCustomPropertyString - Cannot add variable to excel : QBSUBSTORAGE Disk Capacity: C: 286.43 GB, 144.35 GB free, 49.6% used D: 11.66 GB, 1.59 GB free, 86.36% used CPU Count: 1 CPU Core Count: 2 Windows Key: 2KHQH-FXVKW-XHQH2-F7WMY-YXPRH Make and Model: HP-Pavilion/FQ568AA-ABA s3700f Memory Banks: Memory Bank0 : DIMM-unknown-1024 Mb-800 Mhz Memory Bank1 : DIMM-unknown-2048 Mb-800 Mhz CPUs: AMD Athlon(tm) 64 X2 Dual Core Processor 5000+ : CPU0-2 System Slots: System Slot0 : PCI1-In Use-OK System Slot1 : PCIEX16-Available-OK NICs: unknown : -Rasl2tp-[00000000] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000001] WAN Miniport (PPTP) 33:50:6F:45:30:30 : -RasPppoe-[00000002] WAN Miniport (PPPOE) unknown : -NdisWan-[00000003] WAN Miniport (IPv6) 00:24:8C:4A:53:83 : 10.0.1.114;fe80::983b:94ca:da95:a5a2-NVENETFD-[00000004] NVIDIA PROPRIETARY & CONFIDENTIAL PAGE 189 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis nForce 10/100 Mbps Ethernet unknown : -RasSstp-[00000005] WAN Miniport (SSTP) unknown : -NdisWan-[00000006] WAN Miniport (IP) unknown : -tunnel-[00000007] Microsoft ISATAP Adapter unknown : -NdisWan-[00000008] WAN Miniport (Network Monitor) 20:41:53:59:4E:FF : -AsyncMac-[00000009] RAS Async Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.0.6002 Service Pack 2 (Build 6002) OS Caption: Microsoft Windows Vista Business OS Virtual Memory: 6112 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 4/12/2009 7:14:15 PM Active Anti-virus: N/A Active Anti-spyware: Windows Defender Active Firewall: N/A Mmorris1 MSHELLEY MSHELLY1 MWhitman MWhitmanLAP TOP MWhitman-LT Windows XP Professional Windows XP Professional Windows XP Professional Windows XP Professional Windows XP Professional Windows 7 PROPRIETARY & CONFIDENTIAL Intel(R) 8192 Last 5 System Error Msgs: PAGE 190 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Enterprise Core(TM) i52430M CPU @ 2.40GHz MB 10-25-2012 5:37:00 AM 10009 The description for Event ID '-1073731815' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'192.168.1.254' 10-25-2012 5:34:08 AM 10009 The description for Event ID '-1073731815' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'192.168.1.13' 10-25-2012 5:34:05 AM 10009 The description for Event ID '-1073731815' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'192.168.1.9' 10-25-2012 5:34:02 AM 10009 The description for Event ID '-1073731815' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'192.168.1.11' 10-25-2012 5:34:02 AM 10009 The description for Event ID '-1073731815' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'192.168.1.10' Last 5 Application Error Msgs: 10-25-2012 3:58:00 PM 1000 Faulting application name: OUTLOOK.EXE, version: 12.0.6661.5003, time stamp: 0x4fa2a9e1 Faulting module name: unknown, version: 0.0.0.0, time stamp: 0x00000000 Exception code: 0xc000041d Fault offset: 0x73514f0d Faulting process id: 0x113c Faulting application start time: 0x01cdb21b4f59ee5f Faulting application path: C:\Program Files (x86)\Microsoft Office\Office12\OUTLOOK.EXE Faulting module path: unknown Report Id: 4710dcdf-1ede-11e2-a120-ac7289905767 10-25-2012 5:50:45 AM 100 Task Scheduling Error: m->NextScheduledSPRetry 9049 PROPRIETARY & CONFIDENTIAL PAGE 191 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 10-25-2012 5:50:45 AM 100 Task Scheduling Error: m->NextScheduledEvent 9049 10-25-2012 5:50:45 AM 100 Task Scheduling Error: Continuously busy for more than a second 10-25-2012 5:50:44 AM 100 Task Scheduling Error: m->NextScheduledSPRetry 8050 Disk Capacity: C: 581.42 GB, 470.48 GB free, 19.08% used Service Tag: BGDQNP1 CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Dell Inc./Inspiron N5110 Memory Banks: Memory Bank0 : SODIMM-Synchronous-4096 Mb-1333 Mhz Memory Bank1 : SODIMM-Synchronous-4096 Mb-1333 Mhz CPUs: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz : CPU0-2 System Slots: System Slot0 : J6B2-In Use-OK System Slot1 : J6B1-In Use-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) PROPRIETARY & CONFIDENTIAL PAGE 192 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis AC:72:89:90:57:67 : -BthPan-[00000007] Bluetooth Device (Personal Area Network) unknown : -NdisWan-[00000008] WAN Miniport (IP) 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000011] Microsoft ISATAP Adapter 18:03:73:88:B8:C2 : 10.0.1.81;fe80::2da9:d856:2cee:ce16-RTL8167-[00000012] Realtek PCIe FE Family Controller unknown : -tunnel-[00000013] Microsoft ISATAP Adapter AC:72:89:90:57:63 : 10.0.1.84;fe80::edb9:c6fa:827c:1c67-NETwNs64-[00000014] Intel(R) Centrino(R) Wireless-N 1030 unknown : -tunnel-[00000015] Microsoft ISATAP Adapter AC:72:89:90:57:64 : -vwifimp-[00000016] Microsoft Virtual WiFi Miniport Adapter AC:72:89:90:57:64 : -vwifimp-[00000017] Microsoft Virtual WiFi Miniport Adapter unknown : -tunnel-[00000018] Microsoft ISATAP Adapter AC:72:89:90:57:64 : -SBFWIMCLMP-[00000019] Sunbelt Software Firewall NDIS IM Filter Miniport AC:72:89:90:57:64 : -SBFWIMCLMP-[00000020] Sunbelt Software Firewall NDIS IM Filter Miniport AC:72:89:90:57:63 : -SBFWIMCLMP-[00000021] Sunbelt Software Firewall NDIS IM Filter Miniport 18:03:73:88:B8:C2 : -SBFWIMCLMP-[00000022] Sunbelt Software Firewall NDIS IM Filter Miniport 64:A6:20:52:41:53 : -SBFWIMCLMP-[00000023] Sunbelt Software Firewall NDIS IM Filter Miniport 64:A6:20:52:41:53 : -SBFWIMCLMP-[00000024] Sunbelt Software Firewall NDIS IM Filter Miniport 64:A6:20:52:41:53 : -SBFWIMCLMP-[00000025] Sunbelt Software Firewall NDIS IM Filter Miniport unknown : -tunnel-[00000026] Microsoft ISATAP Adapter unknown : -tunnel-[00000027] Microsoft Teredo Tunneling Adapter PROPRIETARY & CONFIDENTIAL PAGE 193 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -tunnel-[00000028] Microsoft ISATAP Adapter DEP: On for essential Windows programs and services only NAGATEWAY Windows Server 2008 R2 Enterprise PROPRIETARY & CONFIDENTIAL Intel(R) Xeon(TM) CPU 3.00GHz 5120 MB OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 16208 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 3/23/2012 8:45:47 AM Active Anti-virus: GFI Software VIPRE Active Anti-spyware: GFI Software VIPRE Active Firewall: N/A Last 5 System Error Msgs: 10-23-2012 2:13:10 PM 10016 The description for Event ID '-1073731808' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'application-specific', 'Local', 'Activation', '{48DA6741-1BF0-4A44-8325-293086C79077}', '{48DA6741-1BF0-4A44-8325293086C79077}', 'CLIENT', 'PKirby', 'S-1-5-21-356494474-603968661-3470298851-1230', 'LocalHost (Using LRPC)' 10-23-2012 2:13:10 PM 10016 The description for Event ID '-1073731808' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'application-specific', 'Local', 'Activation', '{48DA6741-1BF0-4A44-8325-293086C79077}', '{48DA6741-1BF0-4A44-8325293086C79077}', 'CLIENT', 'PKirby', 'S-1-5-21-356494474-603968661-3470298851-1230', 'LocalHost (Using LRPC)' 10-23-2012 2:13:10 PM 10016 The description for Event ID '-1073731808' in Source 'DCOM' PAGE 194 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'application-specific', 'Local', 'Activation', '{48DA6741-1BF0-4A44-8325-293086C79077}', '{48DA6741-1BF0-4A44-8325293086C79077}', 'CLIENT', 'PKirby', 'S-1-5-21-356494474-603968661-3470298851-1230', 'LocalHost (Using LRPC)' 10-23-2012 1:16:53 PM 1111 Driver Microsoft XPS Document Writer v4 required for printer Microsoft XPS Document Writer is unknown. Contact the administrator to install the driver before you log in again. 10-23-2012 1:15:22 PM 1111 Driver Microsoft XPS Document Writer v4 required for printer Microsoft XPS Document Writer is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: 10-23-2012 4:38:24 PM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 10-23-2012 4:38:23 PM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 10-23-2012 4:38:23 PM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . 10-23-2012 4:38:23 PM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when PROPRIETARY & CONFIDENTIAL PAGE 195 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis verifying against the current system clock or the timestamp in the signed file. . 10-23-2012 4:38:23 PM 4107 Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/au throotstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. . Listening Ports: RDP (3389/TCP) Disk Capacity: C: 68.02 GB, 48.92 GB free, 28.08% used Service Tag: JLHMS71 CPU Count: 2 CPU Core Count: 2 Windows Key: 7P8GH-FV2FF-8FDCR-YK49D-D7P97 Make and Model: Dell Computer Corporation/PowerEdge 1850 Memory Banks: Memory Bank0 : DIMM-Synchronous-512 Mb-400 Mhz Memory Bank1 : DIMM-Synchronous-512 Mb-400 Mhz Memory Bank2 : DIMM-Synchronous-1024 Mb-400 Mhz Memory Bank3 : DIMM-Synchronous-1024 Mb-400 Mhz Memory Bank4 : DIMM-Synchronous-1024 Mb-400 Mhz Memory Bank5 : DIMM-Synchronous-1024 Mb-400 Mhz CPUs: Intel(R) Xeon(TM) CPU 3.00GHz : CPU0-1 Intel(R) Xeon(TM) CPU 3.00GHz : CPU1-1 System Slots: System Slot0 : PCI1-Available-OK PROPRIETARY & CONFIDENTIAL PAGE 196 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis System Slot1 : PCI2-Available-OK System Slot2 : RAC_CONN-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:11:43:E7:94:AE : 10.0.1.137;fe80::4cf0:a167:c523:dffa-E1G60-[00000007] Intel(R) PRO/1000 MT Network Connection unknown : -tunnel-[00000008] Microsoft ISATAP Adapter unknown : -NdisWan-[00000009] WAN Miniport (IP) 00:11:43:E7:94:AF : -E1G60-[00000010] Intel(R) PRO/1000 MT Network Connection unknown : -AsyncMac-[00000011] RAS Async Adapter unknown : -tunnel-[00000012] Microsoft ISATAP Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Enterprise OS Virtual Memory: 11152 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 10/17/2012 8:58:03 PM NETSCAN01 PABUILD Windows 7 Enterprise Windows Server PROPRIETARY & CONFIDENTIAL Intel(R) 1024 Last 5 System Error Msgs: PAGE 197 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 2003 Xeon(TM) CPU 2.80GHz MB 10-25-2012 5:30:21 PM 333 An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry. 10-25-2012 5:29:55 PM 333 An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry. 10-25-2012 5:29:55 PM 333 An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry. 10-25-2012 5:29:51 PM 333 An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry. 10-25-2012 5:29:34 PM 333 An I/O operation initiated by the Registry failed unrecoverably. The Registry could not read in, or write out, or flush, one of the files that contain the system's image of the Registry. Last 5 Application Error Msgs: 4-28-2012 1:30:41 AM 6398 The Execute method of job definition Microsoft.SharePoint.Search.Administration.SPSearchJobDefinition (ID c9a5b92a-9336-444995ed-bdd85cd63777) threw an exception. More information is included below. Couldn't get process information from performance counter. 4-26-2012 9:05:22 AM 1030 Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this. 4-26-2012 9:05:22 AM 1006 Windows cannot bind to CLIENTDOM.COM domain. (Local Error). Group Policy processing aborted. 4-12-2012 7:54:17 PM 1030 Windows cannot query for the list of Group Policy objects. Check the event log for possible messages previously logged by the policy engine that describes the reason for this. PROPRIETARY & CONFIDENTIAL PAGE 198 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 4-12-2012 7:54:17 PM 1058 Windows cannot access the file gpt.ini for GPO cn={9FD1893DFAC9-42E7-8A56-E034F9A92DEE},cn=policies,cn=system,DC=CLIENTDOM,DC=com. The file must be present at the location <\\CLIENTDOM.COM\SysVol\CLIENTDOM.COM\Policies\{9FD1893D-FAC9-42E7-8A56E034F9A92DEE}\gpt.ini>. (Insufficient quota to complete the requested service. ). Group Policy processing aborted. Listening Ports: HTTP (80/TCP), RDP (3389/TCP) Disk Capacity: C: 33.87 GB, 9.78 GB free, 71.12% used Service Tag: 4602B41 CPU Count: 2 CPU Core Count: 2 Windows Key: HTT48-2D2W3-6YMRW-HYDMF-JK8YB Make and Model: Dell Computer Corporation/PowerEdge 1750 Memory Banks: Memory Bank0 : DIMM-Synchronous-512 Mb-266 Mhz Memory Bank1 : DIMM-Synchronous-512 Mb-266 Mhz CPUs: Intel(R) Xeon(TM) CPU 2.80GHz : CPU0-1 Intel(R) Xeon(TM) CPU 2.80GHz : CPU1-1 System Slots: System Slot0 : PCI_1-Available-OK System Slot1 : PCI_2-In Use-OK System Slot2 : EMBEDDED_REMOTE_ASSISTANT-Available-OK System Slot3 : RAID-Available-OK PROPRIETARY & CONFIDENTIAL PAGE 199 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis NICs: 00:0D:56:FD:CB:79 : 10.0.1.35-b57w2k-[00000001] Broadcom NetXtreme Gigabit Ethernet 00:0D:56:FD:CB:7A : 0.0.0.0-b57w2k-[00000002] Broadcom NetXtreme Gigabit Ethernet unknown : -AsyncMac-[00000003] RAS Async Adapter unknown : -Rasl2tp-[00000004] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000005] WAN Miniport (PPTP) 33:50:6F:45:30:30 : -RasPppoe-[00000006] WAN Miniport (PPPOE) unknown : -Raspti-[00000007] Direct Parallel unknown : -NdisWan-[00000008] WAN Miniport (IP) DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 5.2.3790 Service Pack 1 (Build 3790) OS Caption: Microsoft(R) Windows(R) Server 2003, Standard Edition OS Virtual Memory: unknown OS System Directory: C:\WINDOWS\system32 OS Windows Directory: C:\WINDOWS OS Install Date: 2/21/2006 6:08:34 PM PEACH PERSHINGCLIENTDOM PGarza1 Windows XP Professional Windows 7 Enterprise Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL Intel(R) Celeron(R) CPU 2.80GHz 2048 MB Last 5 System Error Msgs: 10-8-2012 9:04:04 AM 6008 The previous system shutdown at 8:58:30 AM on 10/5/2012 was unexpected. 10-4-2012 7:25:48 AM 6008 The previous system shutdown at 4:03:33 PM on 10/3/2012 was unexpected. 9-25-2012 8:24:20 AM 6008 The previous system shutdown at 11:06:40 AM on 9/21/2012 was unexpected. PAGE 200 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 9-12-2012 1:19:05 PM 655416 The Terminal Server security layer detected an error in the protocol stream and has disconnected the client. Client IP: 10.0.1.99. 9-12-2012 8:02:16 AM 6008 The previous system shutdown at 8:00:27 AM on 9/12/2012 was unexpected. Last 5 Application Error Msgs: 9-20-2012 8:33:35 AM 1002 The program QBAgent.exe version 2.15.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1624 Start Time: 01cd9676bb273bd6 Termination Time: 156 Application Path: C:\Users\pGarza\AppData\Local\Apps\2.0\2C5L1AEX.8B4\DTCLB55J.2YG\rapi..tion_2b71acb 264b6ed64_0003.0000_08ce10bb993c209b\QBAgent.exe Report Id: 6368d8d4-031f-11e29a9c-0011d8e6213a 9-11-2012 1:40:42 PM 1000 Faulting application name: iexplore.exe, version: 9.0.8112.16448, time stamp: 0x4fecf1b7 Faulting module name: InquisitorCoreDll.dll_unloaded, version: 0.0.0.0, time stamp: 0x4ba87298 Exception code: 0xc0000005 Fault offset: 0x045e43e7 Faulting process id: 0x1500 Faulting application start time: 0x01cd9044430e7888 Faulting application path: C:\Program Files\Internet Explorer\iexplore.exe Faulting module path: InquisitorCoreDll.dll Report Id: ce6125bb-fc3711e1-a4e7-0011d8e6213a 9-11-2012 1:40:39 PM 1002 The program iexplore.exe version 9.0.8112.16448 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 16c4 Start Time: 01cd90444083957d Termination Time: 484 Application Path: C:\Program Files\Internet Explorer\iexplore.exe Report Id: 9-11-2012 1:36:20 PM 1000 Faulting application name: rundll32.exe_shell32.dll, version: 6.1.7600.16385, time stamp: 0x4a5bc637 Faulting module name: ntdll.dll, version: 6.1.7600.16915, time stamp: 0x4ec49caf Exception code: 0xc015000f Fault offset: 0x000814c5 Faulting process id: 0x1480 Faulting application start time: PROPRIETARY & CONFIDENTIAL PAGE 201 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 0x01cd9043a79700b1 Faulting application path: C:\Windows\system32\rundll32.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: 328ba63a-fc37-11e1a4e7-0011d8e6213a 9-11-2012 1:34:19 PM 1000 Faulting application name: rundll32.exe_shell32.dll, version: 6.1.7600.16385, time stamp: 0x4a5bc637 Faulting module name: alsndmgr.cpl, version: 2.3.1.1, time stamp: 0x49b48db1 Exception code: 0xc0000005 Fault offset: 0x00064ac0 Faulting process id: 0x1480 Faulting application start time: 0x01cd9043a79700b1 Faulting application path: C:\Windows\system32\rundll32.exe Faulting module path: C:\Windows\system32\alsndmgr.cpl Report Id: ea62dc0e-fc36-11e1-a4e7-0011d8e6213a Listening Ports: RDP (3389/TCP) Disk Capacity: C: 74.55 GB, 5.67 GB free, 92.39% used CPU Count: 1 CPU Core Count: 1 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Compaq Presario 061/PX789AA-ABA SR1510NX NA530 Memory Banks: Memory Bank0 : DIMM-Synchronous-1024 Mb-unknown Mhz Memory Bank1 : DIMM-Synchronous-1024 Mb-unknown Mhz CPUs: Intel(R) Celeron(R) CPU 2.80GHz : CPU0-1 System Slots: System Slot0 : PCI1-Available-OK System Slot1 : PCI2-Available-OK System Slot2 : PCI3-In Use-OK PROPRIETARY & CONFIDENTIAL PAGE 202 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:11:D8:E6:21:3A : 10.0.1.221;fe80::2c82:d2ec:55f3:d0b9-RTL8023xp-[00000007] Realtek RTL8139/810x Family Fast Ethernet NIC unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -CVirtA-[00000011] Cisco Systems VPN Adapter 00:11:D8:E6:21:3A : --[00000012] Deterministic Network Enhancer Miniport unknown : --[00000013] Deterministic Network Enhancer Miniport unknown : -pppop-[00000014] PPPoP WAN Adapter C6:C7:20:52:41:53 : --[00000015] Deterministic Network Enhancer Miniport C6:C7:20:52:41:53 : --[00000016] Deterministic Network Enhancer Miniport C6:C7:20:52:41:53 : --[00000017] Deterministic Network Enhancer Miniport unknown : -tunnel-[00000018] Microsoft ISATAP Adapter unknown : -tunnel-[00000019] Microsoft Teredo Tunneling Adapter 00:FF:80:EC:F4:85 : -dsNcAdpt-[00000021] Juniper Network Connect Virtual Adapter unknown : -tunnel-[00000022] Microsoft ISATAP Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7600 unknown (Build 7600) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 4080 MB PROPRIETARY & CONFIDENTIAL PAGE 203 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 10/8/2010 1:39:45 PM Active Anti-virus: AVG Anti-Virus Free Edition 2011 Active Anti-spyware: AVG Anti-Virus Free Edition 2011 Active Firewall: N/A PGarza-WIN7 Windows 7 Enterprise PGarza-WIN764 Windows 7 Enterprise AMD 6144 Phenom(tm) II MB X4 945 Processor Last 5 System Error Msgs: 10-25-2012 5:33:41 PM 1053 The processing of Group Policy failed. Windows could not resolve the user name. This could be caused by one of more of the following: a) Name Resolution failure on the current domain controller. b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller). 10-25-2012 5:15:52 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 10-25-2012 4:21:40 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 10-25-2012 3:17:40 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 10-25-2012 2:47:26 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. Last 5 Application Error Msgs: PROPRIETARY & CONFIDENTIAL PAGE 204 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 10-25-2012 5:34:17 PM 16842785 Activation context generation failed for "C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c 178a139ee2a7ed\MFC80.DLL". Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b ",type="win32",version="8.0.50608.0" could not be found. Please use sxstrace.exe for detailed diagnosis. 10-25-2012 8:46:44 AM 16842785 Activation context generation failed for "C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c 178a139ee2a7ed\MFC80.DLL". Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b ",type="win32",version="8.0.50608.0" could not be found. Please use sxstrace.exe for detailed diagnosis. 10-25-2012 8:45:36 AM 16842785 Activation context generation failed for "C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c 178a139ee2a7ed\MFC80.DLL". Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b ",type="win32",version="8.0.50608.0" could not be found. Please use sxstrace.exe for detailed diagnosis. 10-23-2012 2:04:47 PM 16842785 Activation context generation failed for "C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c 178a139ee2a7ed\MFC80.DLL". Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b ",type="win32",version="8.0.50608.0" could not be found. Please use sxstrace.exe for detailed diagnosis. 10-19-2012 1:52:22 PM 16842785 Activation context generation failed for "C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c 178a139ee2a7ed\MFC80.DLL". Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b ",type="win32",version="8.0.50608.0" could not be found. Please use sxstrace.exe for PROPRIETARY & CONFIDENTIAL PAGE 205 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis detailed diagnosis. Disk Capacity: C: 913.35 GB, 782.14 GB free, 14.37% used CPU Count: 1 CPU Core Count: 4 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Gateway/DX4320 Memory Banks: Memory Bank0 : DIMM-Synchronous-1024 Mb-533 Mhz Memory Bank1 : DIMM-Synchronous-1024 Mb-533 Mhz Memory Bank2 : DIMM-Synchronous-2048 Mb-533 Mhz Memory Bank3 : DIMM-Synchronous-2048 Mb-533 Mhz CPUs: AMD Phenom(tm) II X4 945 Processor : CPU0-4 System Slots: System Slot0 : PCIE1-In Use-OK System Slot1 : PCIE2-Available-OK System Slot2 : PCIE3-Available-OK System Slot3 : PCI1-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) PROPRIETARY & CONFIDENTIAL PAGE 206 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 90:FB:A6:8A:9C:2B : 10.0.1.99;fe80::20dd:cdd2:c1bf:95dc-RTL8167-[00000007] Realtek PCIe GBE Family Controller unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000011] Microsoft ISATAP Adapter 00:FF:70:D9:01:07 : -dsNcAdpt-[00000012] Juniper Network Connect Virtual Adapter unknown : -tunnel-[00000013] Microsoft 6to4 Adapter unknown : -tunnel-[00000014] Microsoft ISATAP Adapter 90:FB:A6:8A:9C:2B : -SBFWIMCLMP-[00000015] Sunbelt Software Firewall NDIS IM Filter Miniport 02:B2:20:52:41:53 : -SBFWIMCLMP-[00000016] Sunbelt Software Firewall NDIS IM Filter Miniport 02:B2:20:52:41:53 : -SBFWIMCLMP-[00000017] Sunbelt Software Firewall NDIS IM Filter Miniport 02:B2:20:52:41:53 : -SBFWIMCLMP-[00000018] Sunbelt Software Firewall NDIS IM Filter Miniport DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 12256 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 7/31/2012 10:22:59 AM Active Anti-virus: GFI Software VIPRE Active Anti-spyware: GFI Software VIPRE Active Firewall: N/A PROPRIETARY & CONFIDENTIAL PAGE 207 of 251 NETWORK ASSESSMENT Computer Name Operating System pKirby1 Windows 7 Professional Windows 7 Enterprise PKWIN7ENT PROPRIETARY & CONFIDENTIAL CPU RAM Analysis Intel(R) Xeon(R) CPU E5320 @ 1.86GHz 512 MB Last 5 System Error Msgs: 7-19-2012 10:39:12 AM 1030 The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful. 7-4-2012 7:18:02 PM 1030 The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful. 6-27-2012 7:11:38 PM 1030 The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful. 6-23-2012 1:38:12 PM 1030 The processing of Group Policy failed. Windows attempted to retrieve new Group Policy settings for this user or computer. Look in the details tab for error code and description. Windows will automatically retry this operation at the next refresh cycle. Computers joined to the domain must have proper name resolution and network connectivity to a domain controller for discovery of new Group Policy objects and settings. An event will be logged when Group Policy is successful. 6-5-2012 1:18:34 PM 36887 The description for Event ID '36887' in Source 'Schannel' cannot be found. The local computer may not have the necessary registry information or message PAGE 208 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'40' Last 5 Application Error Msgs: 10-19-2012 12:00:05 AM 8193 Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-4183720850-1053082313-2551965806-1000.bak). hr = 0x80070539, The security ID structure is invalid. . Operation: OnIdentify event Gathering Writer Data Context: Execution Context: Shadow Copy Optimization Writer Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer Writer Instance ID: {5398a042-e36f-4b69-a138-20c86e24fa8c} 10-12-2012 1:34:50 AM 10 The description for Event ID '-1073741814' in Source 'WinMgmt' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'//./root/CIMV2', 'SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99', '0x80041003' 10-11-2012 10:39:48 PM 8193 Volume Shadow Copy Service error: Unexpected error calling routine ConvertStringSidToSid(S-1-5-21-4183720850-1053082313-2551965806-1000.bak). hr = 0x80070539, The security ID structure is invalid. . Operation: OnIdentify event Gathering Writer Data Context: Execution Context: Shadow Copy Optimization Writer Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer Writer Instance ID: {124eae71-ac8e-48fe-a455-2bc3f1a992ba} 10-10-2012 3:06:21 AM 10 The description for Event ID '-1073741814' in Source 'WinMgmt' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'//./root/CIMV2', 'SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99', '0x80041003' 10-10-2012 3:00:26 AM 8193 Volume Shadow Copy Service error: Unexpected error calling PROPRIETARY & CONFIDENTIAL PAGE 209 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis routine ConvertStringSidToSid(S-1-5-21-4183720850-1053082313-2551965806-1000.bak). hr = 0x80070539, The security ID structure is invalid. . Operation: OnIdentify event Gathering Writer Data Context: Execution Context: Shadow Copy Optimization Writer Writer Class Id: {4dc3bdd4-ab48-4d07-adb0-3bee2926fd7f} Writer Name: Shadow Copy Optimization Writer Writer Instance ID: {48e70c33-9961-4a8f-b1dd-c1386120597a} Disk Capacity: C: 126.9 GB, 103.55 GB free, 18.4% used Service Tag: 7536-1740-4864-0595-3375-2512-08 CPU Count: 1 CPU Core Count: 4 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Microsoft Corporation/Virtual Machine Memory Banks: Memory Bank0 : Unknown-Unknown-512 Mb-unknown Mhz <slot available> CPUs: Intel(R) Xeon(R) CPU E5320 @ 1.86GHz : CPU0-4 NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:15:5D:01:3C:07 : 204.193.140.79;192.168.199.79;192.168.99.79;192.168.2.79;192.168.1.79;10.10.10.222;10.0 PROPRIETARY & CONFIDENTIAL PAGE 210 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis .1.79;fe80::c5f7:1f21:6ee2:bd26-netvsc-[00000007] Microsoft Virtual Machine Bus Network Adapter unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000011] Microsoft ISATAP Adapter unknown : -tunnel-[00000012] Microsoft Teredo Tunneling Adapter unknown : -tunnel-[00000013] Microsoft 6to4 Adapter DEP: On for essential Windows programs and services only PS01 Windows Server 2008 R2 Enterprise PROPRIETARY & CONFIDENTIAL Intel(R) Xeon(R) CPU E5320 @ 1.86GHz OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 2400 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 3/1/2012 11:44:17 PM Active Anti-virus: N/A Active Anti-spyware: Windows Defender Active Firewall: N/A 512 MB Last 5 System Error Msgs: 10-10-2012 11:36:26 AM 1111 Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again. 10-10-2012 11:36:23 AM 1111 Driver Adobe PDF Converter required for printer Adobe PDF is unknown. Contact the administrator to install the driver before you log in again. 6-29-2012 5:13:28 PM 1006 The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. PAGE 211 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 6-29-2012 3:40:24 PM 1006 The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. 6-29-2012 1:52:21 PM 1006 The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description. Last 5 Application Error Msgs: 4-11-2012 1:14:55 PM 1511 Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off. 4-11-2012 1:14:55 PM 1515 Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on. 4-11-2012 1:11:38 PM 1511 Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off. 4-11-2012 1:11:38 PM 1515 Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on. 4-11-2012 1:00:30 PM 1511 Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off. Listening Ports: RDP (3389/TCP) Disk Capacity: C: 126.9 GB, 110.33 GB free, 13.06% used Service Tag: 8934-6605-5792-6163-7220-5769-42 CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB PROPRIETARY & CONFIDENTIAL PAGE 212 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Make and Model: Microsoft Corporation/Virtual Machine Memory Banks: Memory Bank0 : Unknown-Unknown-512 Mb-unknown Mhz <slot available> CPUs: Intel(R) Xeon(R) CPU E5320 @ 1.86GHz : CPU0-2 NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) unknown : -tunnel-[00000008] Microsoft ISATAP Adapter unknown : -NdisWan-[00000009] WAN Miniport (IP) 00:15:5D:01:3C:13 : 10.0.1.9;fe80::bd15:2f62:d204:fa53-netvsc-[00000010] Microsoft Virtual Machine Bus Network Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter unknown : -tunnel-[00000012] Microsoft ISATAP Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Enterprise OS Virtual Memory: 6752 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 4/11/2012 12:56:55 PM PROPRIETARY & CONFIDENTIAL PAGE 213 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis REMOTE Windows 2000 Server Intel(R) Xeon(TM) CPU 2.40GHz 2048 MB Last 5 System Error Msgs: 10-25-2012 5:20:55 PM 655410 The RDP protocol component X.224 detected an error in the protocol stream and has disconnected the client. 10-25-2012 5:15:52 PM 69842 The length of the message sent by another WINS indicates a very big message. There may have been corruption of the data. WINS will ignore this message, terminate the connection with the remote WINS, and continue. 10-25-2012 5:15:22 PM 69842 The length of the message sent by another WINS indicates a very big message. There may have been corruption of the data. WINS will ignore this message, terminate the connection with the remote WINS, and continue. 10-25-2012 5:15:22 PM 69842 The length of the message sent by another WINS indicates a very big message. There may have been corruption of the data. WINS will ignore this message, terminate the connection with the remote WINS, and continue. 10-25-2012 5:15:22 PM 69842 The length of the message sent by another WINS indicates a very big message. There may have been corruption of the data. WINS will ignore this message, terminate the connection with the remote WINS, and continue. Listening Ports: SMTP (25/TCP), DNS (53/TCP), HTTPS (443/TCP), SQLServer (1433/TCP), RDP (3389/TCP) Disk Capacity: C: 60 GB, 46.42 GB free, 22.63% used D: 9.83 GB, 6.98 GB free, 28.99% used E: 24.05 GB, 23.99 GB free, 0.25% used Service Tag: HFFC441 CPU Count: 2 CPU Core Count: 2 Windows Key: KRJQ8-RQ822-YRMXF-6TTXC-HD2VM Make and Model: Dell Computer Corporation/PowerEdge 1750 PROPRIETARY & CONFIDENTIAL PAGE 214 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Memory Banks: Memory Bank0 : DIMM-Synchronous-512 Mb-266 Mhz Memory Bank1 : DIMM-Synchronous-512 Mb-266 Mhz Memory Bank2 : DIMM-Synchronous-512 Mb-266 Mhz Memory Bank3 : DIMM-Synchronous-512 Mb-266 Mhz CPUs: Intel(R) Xeon(TM) CPU 2.40GHz : CPU0-1 Intel(R) Xeon(TM) CPU 2.40GHz : CPU1-1 System Slots: System Slot0 : PCI_1-Available-OK System Slot1 : PCI_2-Available-OK System Slot2 : EMBEDDED_REMOTE_ASSISTANT-Available-OK System Slot3 : RAID-Available-OK NICs: 00:0F:1F:03:DB:05 : 10.0.1.13-b57w2k-[00000000] Broadcom NetXtreme Gigabit Ethernet 00:0F:1F:03:DB:06 : -b57w2k-[00000001] Broadcom NetXtreme Gigabit Ethernet unknown : -AsyncMac-[00000002] RAS Async Adapter unknown : -Rasl2tp-[00000003] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000004] WAN Miniport (PPTP) unknown : -Raspti-[00000005] Direct Parallel unknown : -NdisWan-[00000006] WAN Miniport (IP) DEP: Not Available OS Manufacturer: Microsoft Corporation OS Version: 5.0.2195 Service Pack 4 (Build 2195) OS Caption: Microsoft Windows 2000 Server OS Virtual Memory: 6000 MB OS System Directory: C:\WINNT\system32 OS Windows Directory: C:\WINNT PROPRIETARY & CONFIDENTIAL PAGE 215 of 251 NETWORK ASSESSMENT Computer Name REX Operating System Windows 7 Enterprise CPU RAM AMD 6144 Phenom(tm) II MB X4 945 Processor Analysis OS Install Date: 7/20/2006 6:45:20 AM Last 5 System Error Msgs: 10-23-2012 2:08:48 PM 4319 A duplicate name has been detected on the TCP network. The IP address of the computer that sent the message is in the data. Use nbtstat -n in a command window to see which name is in the Conflict state. 10-23-2012 8:18:19 AM 10009 The description for Event ID '-1073731815' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'JAGA' 10-23-2012 8:18:19 AM 10009 The description for Event ID '-1073731815' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'WIN2008' 10-23-2012 8:18:19 AM 10009 The description for Event ID '-1073731815' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'CLIENT-LOC-HPV01' 10-23-2012 8:18:14 AM 10009 The description for Event ID '-1073731815' in Source 'DCOM' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'CURRITNMS-BDF' Last 5 Application Error Msgs: 10-25-2012 1:49:16 PM 1002 The remote debugger is unable to communicate with Visual Studio, and must abort the remote debugging session. Please restart debugging. 10-25-2012 9:16:28 AM 1002 The program QBAgent.vshost.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 2bb8 Start Time: 01cdb2b2a4191886 Termination Time: 31 Application Path: PROPRIETARY & CONFIDENTIAL PAGE 216 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis X:\AutoTask\QBAgent\bin\Debug\QBAgent.vshost.exe Report Id: 2cd7e667-1ea6-11e2806d-90fba68a96b6 10-18-2012 10:12:39 AM 1002 The program iexplore.exe version 9.0.8112.16448 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 2418 Start Time: 01cdad390f3f4891 Termination Time: 47 Application Path: C:\Program Files (x86)\Internet Explorer\iexplore.exe Report Id: 10-18-2012 9:29:26 AM 1023 .NET Runtime version 2.0.50727.5456 - Fatal Execution Engine Error (000007FEF87D7916) (80131506) 10-11-2012 2:12:01 PM 1002 The program NetworkDetective.vshost.exe version 0.0.0.0 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel. Process ID: 1f00 Start Time: 01cda7dbc48f7158 Termination Time: 16 Application Path: X:\AutoTask\NetworkDetective\bin\Debug\NetworkDetective.vshost.exe Report Id: 24951379-13cf-11e2-806d-90fba68a96b6 Listening Ports: RDP (3389/TCP) Disk Capacity: C: 488.18 GB, 411.81 GB free, 15.64% used D: 443.23 GB, 434.51 GB free, 1.97% used CPU Count: 1 CPU Core Count: 4 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Gateway/DX4320 Memory Banks: Memory Bank0 : DIMM-Synchronous-1024 Mb-533 Mhz PROPRIETARY & CONFIDENTIAL PAGE 217 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Memory Bank1 : DIMM-Synchronous-1024 Mb-533 Mhz Memory Bank2 : DIMM-Synchronous-2048 Mb-533 Mhz Memory Bank3 : DIMM-Synchronous-2048 Mb-533 Mhz CPUs: AMD Phenom(tm) II X4 945 Processor : CPU0-4 System Slots: System Slot0 : PCIE1-In Use-OK System Slot1 : PCIE2-Available-OK System Slot2 : PCIE3-Available-OK System Slot3 : PCI1-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 90:FB:A6:8A:96:B6 : 10.0.1.220;fe80::3ce3:995c:852b:1c08-RTL8167-[00000007] Realtek PCIe GBE Family Controller unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000011] Microsoft Teredo Tunneling Adapter unknown : -RTL8192su-[00000012] D-Link DWA-131 Wireless N Nano USB Adapter unknown : -tunnel-[00000013] Microsoft ISATAP Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) PROPRIETARY & CONFIDENTIAL PAGE 218 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 12288 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 2/2/2011 8:35:26 AM Active Anti-virus: Microsoft Security Essentials Active Anti-spyware: Microsoft Security Essentials Active Firewall: N/A ROBERT-PC RS01 Windows 7 Professional Windows Server 2008 R2 Enterprise Intel(R) Xeon(R) CPU E5320 @ 1.86GHz 512 MB Last 5 System Error Msgs: 10-12-2012 3:42:23 PM 1111 Driver HP LaserJet Professional CM1410 Series PCL 6 required for printer HP LaserJet Professional CM1410 Series PCL 6 is unknown. Contact the administrator to install the driver before you log in again. 10-12-2012 3:42:22 PM 1111 Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again. 10-12-2012 3:42:19 PM 1111 Driver hpfax1 required for printer HP LaserJet Professional CM1410 Series Fax is unknown. Contact the administrator to install the driver before you log in again. 10-12-2012 3:42:15 PM 1111 Driver Brother MFC-9320CW Printer required for printer Brother MFC-9320CW Printer is unknown. Contact the administrator to install the driver before you log in again. 10-12-2012 3:18:37 PM 1111 Driver Send To Microsoft OneNote 2010 Driver required for printer Send To OneNote 2010 is unknown. Contact the administrator to install the driver before you log in again. Last 5 Application Error Msgs: PROPRIETARY & CONFIDENTIAL PAGE 219 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 10-12-2012 3:42:09 PM 1511 Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off. 10-12-2012 3:42:09 PM 1515 Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on. 10-12-2012 3:18:14 PM 1511 Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off. 10-12-2012 3:18:14 PM 1515 Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on. 10-11-2012 11:47:17 PM 10005 Product: ScreenConnect -- This application requires .NET Framework 3.5. Please install the .NET Framework then run this installer again. If you are running Windows Server 2008, you need to add the feature ".NET Framework 3.5.1 Features" in the Server Manager. Disk Capacity: C: 126.9 GB, 109.14 GB free, 14% used Service Tag: 6001-2211-5335-9446-0202-3823-55 CPU Count: 1 CPU Core Count: 4 Windows Key: 7P8GH-FV2FF-8FDCR-YK49D-D7P97 Make and Model: Microsoft Corporation/Virtual Machine Memory Banks: Memory Bank0 : Unknown-Unknown-512 Mb-unknown Mhz <slot available> CPUs: Intel(R) Xeon(R) CPU E5320 @ 1.86GHz : CPU0-4 NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) PROPRIETARY & CONFIDENTIAL PAGE 220 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) unknown : -dc21x4VM-[00000007] Intel 21140-Based PCI Fast Ethernet Adapter (Emulated) unknown : -tunnel-[00000008] Microsoft ISATAP Adapter unknown : -NdisWan-[00000009] WAN Miniport (IP) 00:15:5D:01:3C:22 : 10.0.1.14;fe80::88f0:6dbc:77ff:d957-netvsc-[00000010] Microsoft Virtual Machine Bus Network Adapter unknown : -AsyncMac-[00000011] RAS Async Adapter unknown : -tunnel-[00000012] Microsoft Teredo Tunneling Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Enterprise OS Virtual Memory: 6848 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 10/11/2012 7:42:07 PM SBLAPTOP SE-Dresden Windows XP Professional Windows 7 Professional PROPRIETARY & CONFIDENTIAL AMD Athlon(tm) II X2 260 Processor 3072 MB Last 5 System Error Msgs: 10-25-2012 5:31:11 PM 43029 Display is not active 10-25-2012 5:31:11 PM 43029 Display is not active 10-25-2012 6:53:09 AM 43029 Display is not active 10-25-2012 6:53:08 AM 43029 Display is not active 10-25-2012 6:53:08 AM 43029 Display is not active PAGE 221 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Last 5 Application Error Msgs: 10-25-2012 5:31:57 PM 3131 {tid=1C50:usr=dMartinez} Failure on Desktop Configuration Server request to URL {rtsp://appv-mgmt-srv.CLIENTDOM.COM:554/} with header {Host: appv-mgmt-srv.CLIENTDOM.COM Content-Type: text/xml AppV-Op: Refresh } (rc 19D01D2A-00002AF9). 10-25-2012 8:17:19 AM 1000 Faulting application name: QBAgent.exe, version: 2.15.0.0, time stamp: 0x507478a3 Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e21213c Exception code: 0xe0434f4d Fault offset: 0x000000000000cacd Faulting process id: 0x1390 Faulting application start time: 0x01cdb21dffc0b142 Faulting application path: C:\Users\jDresden\AppData\Local\Apps\2.0\DCDZBY9L.ZD9\7HLC3DVT.0WK\rapi..tion_2b71 acb264b6ed64_0003.0000_787bcb79b21f96b0\QBAgent.exe Faulting module path: C:\Windows\system32\KERNELBASE.dll Report Id: ebc1383f-1e9d-11e2-9583-78acc0a9bbf9 10-25-2012 12:31:51 AM 16842785 Activation context generation failed for "c:\program files (x86)\Adobe\adobe premiere pro cs4\MPEGHDVExport.exe". Dependent Assembly Plugins&#x5c;Common&#x5c;TSStrider,type="win32",version="1.0.0.0" could not be found. Please use sxstrace.exe for detailed diagnosis. 10-25-2012 12:31:19 AM 16842832 Activation context generation failed for "c:\program files (x86)\Adobe\acrobat 9.0\designer 8.2\FormDesigner.exe".Error in manifest or policy file "" on line . A component version required by the application conflicts with another component version already active. Conflicting components are:. Component 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.commoncontrols_6595b64144ccf1df_6.0.7601.17514_none_fa396087175ac9ac.manifest. Component 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.commoncontrols_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2.manifest. 10-25-2012 12:30:40 AM 16842815 Activation context generation failed for "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll".Error in manifest or policy file "C:\Program Files (x86)\Common Files\Adobe AIR\Versions\1.0\Adobe AIR.dll" on line 3. PROPRIETARY & CONFIDENTIAL PAGE 222 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis The value "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR" of attribute "version" in element "assemblyIdentity" is invalid. Disk Capacity: C: 685.64 GB, 612.02 GB free, 10.74% used D: 12.9 GB, 1.58 GB free, 87.75% used CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Hewlett-Packard/s5710f Memory Banks: Memory Bank0 : DIMM-Synchronous-1024 Mb-1333 Mhz Memory Bank1 : DIMM-Synchronous-2048 Mb-1333 Mhz CPUs: AMD Athlon(tm) II X2 260 Processor : CPU0-2 System Slots: System Slot0 : PCI-E x1-Available-OK System Slot1 : PCI-E x1-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 78:AC:C0:A9:BB:F9 : 10.0.1.76;fe80::cd61:f583:64a6:8763-RTL8167-[00000007] Realtek PCIe PROPRIETARY & CONFIDENTIAL PAGE 223 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis FE Family Controller unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000011] Microsoft Teredo Tunneling Adapter 78:AC:C0:A9:BB:F9 : --[00000012] Deterministic Network Enhancer Miniport B6:A0:20:52:41:53 : --[00000013] Deterministic Network Enhancer Miniport B6:A0:20:52:41:53 : --[00000014] Deterministic Network Enhancer Miniport unknown : -CVirtA-[00000015] Cisco Systems VPN Adapter for 64-bit Windows unknown : --[00000016] Deterministic Network Enhancer Miniport unknown : -tunnel-[00000017] Microsoft ISATAP Adapter unknown : -tunnel-[00000018] Microsoft ISATAP Adapter unknown : -pppop-[00000019] PPPoP WAN Adapter unknown : -tunnel-[00000020] Microsoft ISATAP Adapter unknown : --[00000021] VirtualBox Bridged Networking Driver Miniport 78:AC:C0:A9:BB:F9 : --[00000022] VirtualBox Bridged Networking Driver Miniport 08:00:27:00:58:1A : 192.168.56.1;fe80::1de9:b256:9e1e:5e4e-VBoxNetAdp-[00000023] VirtualBox Host-Only Ethernet Adapter 08:00:27:00:58:1A : --[00000024] Deterministic Network Enhancer Miniport 00:FF:10:A0:5F:04 : -dsNcAdpt-[00000025] Juniper Network Connect Virtual Adapter 00:FF:10:A0:5F:04 : --[00000026] Deterministic Network Enhancer Miniport unknown : -tunnel-[00000027] Microsoft 6to4 Adapter unknown : -vpnva-[00000028] Cisco AnyConnect VPN Virtual Miniport Adapter for Windows x64 unknown : --[00000029] VirtualBox Bridged Networking Driver Miniport unknown : --[00000030] Deterministic Network Enhancer Miniport DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) PROPRIETARY & CONFIDENTIAL PAGE 224 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis OS Caption: Microsoft Windows 7 Professional OS Virtual Memory: 5632 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 8/3/2011 2:42:28 PM Active Anti-virus: N/A Active Anti-spyware: Windows Defender Active Firewall: N/A SHAREPOINT1 SHELDON Windows Server 2003 Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL AMD 6144 Phenom(tm) II MB X4 945 Processor Last 5 System Error Msgs: 10-25-2012 7:56:03 AM 36882 The description for Event ID '36882' in Source 'Schannel' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event: 10-25-2012 7:56:03 AM 36888 The description for Event ID '36888' in Source 'Schannel' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'48', '552' 10-24-2012 1:19:35 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 10-24-2012 12:35:20 PM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. 10-24-2012 10:38:11 AM 1054 The processing of Group Policy failed. Windows could not obtain the name of a domain controller. This could be caused by a name resolution failure. Verify your Domain Name System (DNS) is configured and working correctly. PAGE 225 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Last 5 Application Error Msgs: 10-25-2012 10:25:47 AM 1000 Faulting application name: vmware-vmrc.exe, version: 4.0.0.16081, time stamp: 0x4f241457 Faulting module name: vmwarecui.dll, version: 7.0.0.16081, time stamp: 0x4f24127e Exception code: 0xc0000005 Fault offset: 0x000de4a5 Faulting process id: 0x15c4 Faulting application start time: 0x01cdb2ac7e80b370 Faulting application path: C:\Program Files (x86)\Common Files\VMware\VMware VMRC Plugin\Internet Explorer\vmware-vmrc.exe Faulting module path: C:\Program Files (x86)\Common Files\VMware\VMware VMRC Plug-in\Internet Explorer\vmwarecui.dll Report Id: de1134b1-1eaf-11e2-a6ad-90fba68aa550 10-25-2012 8:27:09 AM 1000 Faulting application name: vmware-vmrc.exe, version: 4.0.0.16081, time stamp: 0x4f241457 Faulting module name: vmwarecui.dll, version: 7.0.0.16081, time stamp: 0x4f24127e Exception code: 0xc0000005 Fault offset: 0x000de4a5 Faulting process id: 0x50d4 Faulting application start time: 0x01cdb2aa6bb3ff10 Faulting application path: C:\Program Files (x86)\Common Files\VMware\VMware VMRC Plugin\Internet Explorer\vmware-vmrc.exe Faulting module path: C:\Program Files (x86)\Common Files\VMware\VMware VMRC Plug-in\Internet Explorer\vmwarecui.dll Report Id: 4ae9ca60-1e9f-11e2-a6ad-90fba68aa550 10-23-2012 4:25:50 PM 1000 Faulting application name: NvXDSync.exe, version: 7.17.12.6724, time stamp: 0x4d64a7db Faulting module name: ntdll.dll, version: 6.1.7601.17725, time stamp: 0x4ec4aa8e Exception code: 0xc0000374 Fault offset: 0x00000000000c40f2 Faulting process id: 0x4b4 Faulting application start time: 0x01cda55bc4581d8b Faulting application path: C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: d5935dc3-1d4f-11e2-a6ad-90fba68aa550 10-11-2012 10:30:03 AM 1000 Faulting application name: PPSX.exe, version: 0.1.0.20, time stamp: 0x4f977d31 Faulting module name: KERNELBASE.dll, version: 6.1.7601.17651, time stamp: 0x4e211319 Exception code: 0xe0434352 Fault offset: 0x0000b9bc Faulting process id: 0x1548 Faulting application start time: 0x01cda7bce631ae2c Faulting application path: PROPRIETARY & CONFIDENTIAL PAGE 226 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis C:\PortablePSV3Beta\PPSX.exe Faulting module path: C:\Windows\syswow64\KERNELBASE.dll Report Id: 24829efc-13b0-11e2-a6ad90fba68aa550 10-11-2012 10:30:02 AM 1026 Application: PPSX.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. Exception Info: System.Runtime.InteropServices.COMException Stack: at System.Runtime.InteropServices.RuntimeEnvironment.GetDeveloperPath() at System.AppDomain.SetupFusionStore(System.AppDomainSetup, System.AppDomainSetup) at System.AppDomain.SetupDomain(Boolean, System.String, System.String, System.String[], System.String[]) Listening Ports: HTTP (80/TCP), RDP (3389/TCP) Disk Capacity: C: 931.41 GB, 734.24 GB free, 21.17% used CPU Count: 1 CPU Core Count: 4 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Gateway/DX4320 Memory Banks: Memory Bank0 : DIMM-Synchronous-1024 Mb-533 Mhz Memory Bank1 : DIMM-Synchronous-1024 Mb-533 Mhz Memory Bank2 : DIMM-Synchronous-2048 Mb-533 Mhz Memory Bank3 : DIMM-Synchronous-2048 Mb-533 Mhz CPUs: AMD Phenom(tm) II X4 945 Processor : CPU0-4 System Slots: PROPRIETARY & CONFIDENTIAL PAGE 227 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis System Slot0 : PCIE1-In Use-OK System Slot1 : PCIE2-Available-OK System Slot2 : PCIE3-Available-OK System Slot3 : PCI1-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 90:FB:A6:8A:A5:50 : 10.0.1.103;fe80::7074:f618:e27d:cbb1-RTL8167-[00000007] Realtek PCIe GBE Family Controller unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter unknown : -tunnel-[00000011] Microsoft ISATAP Adapter unknown : -tunnel-[00000012] Microsoft Teredo Tunneling Adapter unknown : -RTL8192su-[00000013] D-Link DWA-131 Wireless N Nano USB Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 12288 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 2/1/2011 1:53:38 PM PROPRIETARY & CONFIDENTIAL PAGE 228 of 251 NETWORK ASSESSMENT Computer Name SHREDDER Operating System Windows Server 2003 PROPRIETARY & CONFIDENTIAL CPU Intel(R) Xeon(TM) CPU 2.80GHz RAM 2048 MB Analysis Active Anti-virus: Microsoft Security Essentials Active Anti-spyware: Microsoft Security Essentials Active Firewall: N/A Last 5 System Error Msgs: 10-25-2012 5:22:15 PM 15002 Unable to write to the log file ex121025.log for site W3SVC28824. Disk may be full. If this is a network path, make sure that network connectivity is not broken. 10-25-2012 11:17:58 AM 1005 %Windows Defender scan has encountered an error and terminated. Scan ID: {397D14FE-7912-4B27-8E5B-713917C04AA5} Scan Type: %AntiSpyware Scan Parameters: %Quick Scan User: NT AUTHORITY\NETWORK SERVICE Error Code: 0x8050800d Error description: Some history items could not be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. 10-25-2012 2:32:22 AM 1005 %Windows Defender scan has encountered an error and terminated. Scan ID: {3E612AFF-00A4-418D-9CAD-FF67E4E2DBA1} Scan Type: %AntiSpyware Scan Parameters: %Quick Scan User: NT AUTHORITY\NETWORK SERVICE Error Code: 0x8050800d Error description: Some history items could not be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. 10-24-2012 11:16:59 AM 1005 %Windows Defender scan has encountered an error and terminated. Scan ID: {76AE7E8D-C884-441F-9B0F-BB993F8D7725} Scan Type: %AntiSpyware Scan Parameters: %Quick Scan User: NT AUTHORITY\NETWORK SERVICE Error Code: 0x8050800d Error description: Some history items could not be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. 10-24-2012 2:31:50 AM 1005 %Windows Defender scan has encountered an error and terminated. Scan ID: {3FE89B48-ADFE-4665-BD63-FA5CFC88A450} Scan Type: %AntiSpyware Scan Parameters: %Quick Scan User: NT AUTHORITY\NETWORK SERVICE Error Code: 0x8050800d Error description: Some history items could not PAGE 229 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis be displayed. Please wait a few minutes and try again. If that doesn't work, clear the history and then try again. Last 5 Application Error Msgs: 10-25-2012 5:27:47 PM 439 wuaueng.dll (992) SUS20ClientDataStore: Unable to write a shadowed header for file C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb. Error -1808. 10-25-2012 5:27:45 PM 439 wuaueng.dll (992) SUS20ClientDataStore: Unable to write a shadowed header for file C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb. Error -1808. 10-25-2012 5:27:44 PM 439 wuaueng.dll (992) SUS20ClientDataStore: Unable to write a shadowed header for file C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb. Error -1808. 10-25-2012 5:27:43 PM 439 wuaueng.dll (992) SUS20ClientDataStore: Unable to write a shadowed header for file C:\WINDOWS\SoftwareDistribution\DataStore\Logs\tmp.edb. Error -1808. 10-25-2012 4:31:18 PM 1005 Some JET database is corrupt. Run esentutl /g to check the integrity of the security database %windir%\security\Database\secedit.sdb. If it is corrupt, attempt a soft recovery first by running esentutl /r in the %windir%\security directory. If soft recovery fails, attempt a repair with esentutl /p on %windir%\security\Database\secedit.sdb. Then delete the log files in %windir%\security. Error opening some security database(s) such as %windir%\security\database\secedit.sdb. Listening Ports: HTTP (80/TCP), HTTPS (443/TCP), Oracle (1521/TCP), RDP (3389/TCP) Disk Capacity: C: 68.32 GB, 0 GB free, 100% used PROPRIETARY & CONFIDENTIAL PAGE 230 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Service Tag: GTZV171 CPU Count: 2 CPU Core Count: 2 Windows Key: HTT48-2D2W3-6YMRW-HYDMF-JK8YB Make and Model: Dell Computer Corporation/PowerEdge 1850 Memory Banks: Memory Bank0 : DIMM-Synchronous-512 Mb-400 Mhz Memory Bank1 : DIMM-Synchronous-512 Mb-400 Mhz Memory Bank2 : DIMM-Synchronous-512 Mb-400 Mhz Memory Bank3 : DIMM-Synchronous-512 Mb-400 Mhz CPUs: Intel(R) Xeon(TM) CPU 2.80GHz : CPU0-1 Intel(R) Xeon(TM) CPU 2.80GHz : CPU1-1 System Slots: System Slot0 : PCI1-Available-OK System Slot1 : PCI2-Available-OK System Slot2 : RAC_CONN-Available-OK NICs: 00:11:43:DE:62:D9 : 10.0.1.11-E1000-[00000001] Intel(R) PRO/1000 MT Network Connection unknown : -E1000-[00000002] Intel(R) PRO/1000 MT Network Connection unknown : -AsyncMac-[00000003] RAS Async Adapter unknown : -Rasl2tp-[00000004] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000005] WAN Miniport (PPTP) 33:50:6F:45:30:30 : -RasPppoe-[00000006] WAN Miniport (PPPOE) unknown : -Raspti-[00000007] Direct Parallel unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -NdisWan-[00000009] WAN Miniport (Network Monitor) unknown : -CVirtA-[00000010] Cisco Systems VPN Adapter PROPRIETARY & CONFIDENTIAL PAGE 231 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : --[00000011] SecuRemote Miniport unknown : --[00000012] Deterministic Network Enhancer Miniport 60:52:20:52:41:53 : --[00000013] Deterministic Network Enhancer Miniport 00:11:43:DE:62:D9 : --[00000014] SecuRemote Miniport 60:52:20:52:41:53 : --[00000015] Deterministic Network Enhancer Miniport unknown : -pppop-[00000016] PPPoP WAN Adapter unknown : --[00000017] Deterministic Network Enhancer Miniport 60:52:20:52:41:53 : --[00000018] SecuRemote Miniport unknown : --[00000019] SecuRemote Miniport 00:11:43:DE:62:D9 : --[00000020] Deterministic Network Enhancer Miniport DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 5.2.3790 Service Pack 2 (Build 3790) OS Caption: Microsoft(R) Windows(R) Server 2003, Standard Edition OS Virtual Memory: 3952 MB OS System Directory: C:\WINDOWS\system32 OS Windows Directory: C:\WINDOWS OS Install Date: 4/14/2005 10:14:15 AM STARSCREAM STARTEAM STORAGE01 Windows Server 2003 Windows 2000 Server Windows Server 2008 R2 Enterprise PROPRIETARY & CONFIDENTIAL Intel(R) Xeon(R) CPU 5110 @ 1.60GHz 9216 MB Last 5 System Error Msgs: 10-25-2012 5:25:53 PM 7011 A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UxSms service. 10-25-2012 5:25:23 PM 7011 A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UmRdpService service. 10-25-2012 5:24:53 PM 7011 A timeout (30000 milliseconds) was reached while waiting for a PAGE 232 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis transaction response from the Netman service. 10-25-2012 5:24:23 PM 7011 A timeout (30000 milliseconds) was reached while waiting for a transaction response from the hidserv service. 10-25-2012 5:23:53 PM 7011 A timeout (30000 milliseconds) was reached while waiting for a transaction response from the UxSms service. Last 5 Application Error Msgs: 10-24-2012 7:41:42 PM 17106708 An error occurred while trying to read configuration information for the provider. The Windows Deployment Services server will not process incoming client requests. Error Information: 0x3A 10-24-2012 6:09:44 AM 107360259 USN log read failure on partition D:\, status=0. See ESENT event log entries, if any, for details. 10-20-2012 12:36:28 AM 107360259 USN log read failure on partition D:\, status=0. See ESENT event log entries, if any, for details. 10-19-2012 4:57:18 AM 17106708 An error occurred while trying to read configuration information for the provider. The Windows Deployment Services server will not process incoming client requests. Error Information: 0x3A 10-18-2012 3:41:39 PM 107360259 USN log read failure on partition E:\, status=0. See ESENT event log entries, if any, for details. Listening Ports: HTTP (80/TCP), HTTPS (443/TCP), RDP (3389/TCP) Disk Capacity: C: D: E: G: PROPRIETARY & CONFIDENTIAL 123.92 GB, 89.74 GB free, 27.58% used 1738.99 GB, 747.75 GB free, 57% used 1788.14 GB, 854.57 GB free, 52.21% used 596.17 GB, 565.98 GB free, 5.06% used PAGE 233 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Service Tag: 36HD6D1 CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Dell Inc./PowerEdge 1950 Memory Banks: Memory Bank0 : unknown-Synchronous-2048 Mb-667 Mhz Memory Bank1 : unknown-Synchronous-2048 Mb-667 Mhz Memory Bank2 : unknown-Synchronous-1024 Mb-667 Mhz Memory Bank3 : unknown-Synchronous-1024 Mb-667 Mhz Memory Bank4 : unknown-Synchronous-1024 Mb-667 Mhz Memory Bank5 : unknown-Synchronous-1024 Mb-667 Mhz Memory Bank6 : unknown-Synchronous-512 Mb-667 Mhz Memory Bank7 : unknown-Synchronous-512 Mb-667 Mhz CPUs: Intel(R) Xeon(R) CPU 5110 @ 1.60GHz : CPU0-2 System Slots: System Slot0 : PCI1-In Use-OK System Slot1 : PCI2-Available-OK NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) unknown : -l2nd-[00000007] Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) PROPRIETARY & CONFIDENTIAL PAGE 234 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -tunnel-[00000008] Microsoft ISATAP Adapter unknown : -NdisWan-[00000009] WAN Miniport (IP) unknown : -l2nd-[00000010] Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter unknown : -VMSMP-[00000012] Microsoft Virtual Network Switch Adapter 00:15:5D:FF:45:00 : 169.254.78.111;fe80::c48:1350:1e15:4e6f-VMSMP-[00000013] Microsoft Virtual Network Switch Adapter unknown : -tunnel-[00000014] Microsoft ISATAP Adapter 00:19:B9:E4:BA:92 : -l2nd-[00000015] Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) 00:19:B9:E4:BA:94 : 10.255.255.69-l2nd-[00000016] Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) unknown : -tunnel-[00000017] Microsoft ISATAP Adapter 00:19:B9:E4:BA:92 : 192.168.11.1;10.0.1.69;fe80::81b6:ee1f:fa76:6921-VMSMP-[00000018] Microsoft Virtual Network Switch Adapter 02:19:B9:E4:BA:92 : -Netft-[00000019] Microsoft Failover Cluster Virtual Adapter unknown : -tunnel-[00000020] Microsoft ISATAP Adapter DEP: On for All programs and services except those I select TERMINUS Windows 7 Enterprise PROPRIETARY & CONFIDENTIAL Intel(R) Core(TM) i52400S CPU @ 6144 MB OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Enterprise OS Virtual Memory: 23024 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 1/28/2011 4:42:28 PM Last 5 System Error Msgs: 10-10-2012 10:28:16 AM 6008 The previous system shutdown at 12:06:17 AM on 10/10/2012 was unexpected. PAGE 235 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU 2.50GHz RAM Analysis 10-9-2012 11:07:13 AM 20 Installation Failure: Windows failed to install the following update with error 0x80242016: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 for x64-based Systems (KB2686830). 10-9-2012 11:07:13 AM 20 Installation Failure: Windows failed to install the following update with error 0x80242016: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 for x64-based Systems (KB2604114). 10-9-2012 11:07:12 AM 20 Installation Failure: Windows failed to install the following update with error 0x80242016: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 for x64-based Systems (KB2656372). 10-9-2012 11:07:12 AM 20 Installation Failure: Windows failed to install the following update with error 0x80242016: Security Update for Microsoft .NET Framework 3.5.1 on Windows 7 and Windows Server 2008 R2 for x64-based Systems (KB2656410). Last 5 Application Error Msgs: 10-15-2012 1:50:30 PM 1000 Faulting application name: communicator.exe, version: 4.0.7577.4061, time stamp: 0x4f2275f7 Faulting module name: TitleBar.dll_unloaded, version: 0.0.0.0, time stamp: 0x4a812aba Exception code: 0xc0000005 Fault offset: 0x10004e7b Faulting process id: 0xb70 Faulting application start time: 0x01cda6f3c16121d9 Faulting application path: C:\Program Files (x86)\Microsoft Lync\communicator.exe Faulting module path: TitleBar.dll Report Id: cf0fa8c8-16f0-11e2-a8fd-e06995e315b6 10-9-2012 11:08:07 AM 215 WinMail (616) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed. 10-9-2012 11:08:03 AM 215 WinMail (3548) WindowsMail0: The backup has been stopped because it was halted by the client or the connection with the client failed. 10-9-2012 11:07:15 AM 1107 .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to execute command from the offline queue: uninstall "Narrator, Version=6.1.0.0, Culture=Neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=msil". The error returned was Error: The specified assembly is not installed. . PROPRIETARY & CONFIDENTIAL PAGE 236 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis 10-9-2012 11:07:15 AM 1107 .NET Runtime Optimization Service (clr_optimization_v2.0.50727_32) - Failed to execute command from the offline queue: uninstall "System.Security, Version=2.0.0.0, Culture=Neutral, PublicKeyToken=b03f5f7f11d50a3a, processorArchitecture=msil" /NoDependencies . The error returned was Error: The specified assembly is not installed. . Listening Ports: RDP (3389/TCP) Disk Capacity: C: 920.37 GB, 763.24 GB free, 17.07% used D: 11.04 GB, 1.35 GB free, 87.77% used Service Tag: DM0001 CPU Count: 1 CPU Core Count: 4 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Hewlett-Packard/p7-1047c Memory Banks: Memory Bank0 : DIMM-Synchronous-4096 Mb-1333 Mhz Memory Bank1 : DIMM-Synchronous-2048 Mb-1333 Mhz CPUs: Intel(R) Core(TM) i5-2400S CPU @ 2.50GHz : CPU0-4 System Slots: System Slot0 : J6B2-Available-OK System Slot1 : J6B1-Available-OK System Slot2 : J6D1-Available-OK System Slot3 : J7B1-Available-OK NICs: PROPRIETARY & CONFIDENTIAL PAGE 237 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) E0:69:95:E3:15:B6 : 10.0.1.118;fe80::9821:6058:d460:44ad-RTL8167-[00000007] Realtek PCIe GBE Family Controller unknown : -NdisWan-[00000008] WAN Miniport (IP) 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter D0:DF:9A:4E:F2:CE : -netr28x-[00000011] 802.11n Wireless LAN Card unknown : -tunnel-[00000012] Microsoft ISATAP Adapter D0:DF:9A:4E:F2:CE : --[00000013] Deterministic Network Enhancer Miniport E0:69:95:E3:15:B6 : --[00000014] Deterministic Network Enhancer Miniport AE:0D:20:52:41:53 : --[00000015] Deterministic Network Enhancer Miniport AE:0D:20:52:41:53 : --[00000016] Deterministic Network Enhancer Miniport unknown : -CVirtA-[00000017] Cisco Systems VPN Adapter for 64-bit Windows unknown : --[00000018] Deterministic Network Enhancer Miniport unknown : -tunnel-[00000019] Microsoft ISATAP Adapter unknown : -tunnel-[00000020] Microsoft ISATAP Adapter D0:DF:9A:4E:F2:CF : -vwifimp-[00000021] Microsoft Virtual WiFi Miniport Adapter D0:DF:9A:4E:F2:CF : --[00000022] Deterministic Network Enhancer Miniport DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 12112 MB OS System Directory: C:\Windows\system32 PROPRIETARY & CONFIDENTIAL PAGE 238 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis OS Windows Directory: C:\Windows OS Install Date: 8/3/2011 3:06:22 PM Active Anti-virus: N/A Active Anti-spyware: Windows Defender Active Firewall: N/A TESTSERVER1 TESTXP01 THRASH2 USAL9K49RH1 USER-PC23 UTIL01 Windows Server 2008 R2 Standard Windows XP Professional Windows 2000 Server Windows XP Professional Windows 7 Enterprise Windows Server 2008 R2 Datacenter PROPRIETARY & CONFIDENTIAL Intel(R) Xeon(R) CPU 5110 @ 1.60GHz 512 MB Last 5 System Error Msgs: 10-25-2012 5:13:40 PM 36888 The description for Event ID '36888' in Source 'Schannel' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'40', '1205' 10-25-2012 5:13:40 PM 36874 The description for Event ID '36874' in Source 'Schannel' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'TLS 1.0' 10-25-2012 5:13:38 PM 36888 The description for Event ID '36888' in Source 'Schannel' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'10', '1203' 10-25-2012 5:13:28 PM 36888 The description for Event ID '36888' in Source 'Schannel' PAGE 239 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'10', '1203' 10-24-2012 9:34:40 PM 20255 CoId={06B4A41C-E5A4-4754-9BE8-2FFF778D2B40}: The following error occurred in the Point to Point Protocol module on port: VPN0-14, UserName: pKirby. The connection could not be established because the authentication method used by your connection profile is not permitted for use by an access policy configured on the RAS/VPN server. Specifically, this could be due to configuration differences between the authentication method selected on the RAS/VPN server and the access policy configured for it. Last 5 Application Error Msgs: 4-29-2012 7:58:08 PM 20227 CoId={D3442B56-18F7-4D27-90F3-36D99564349C}: The user SYSTEM dialed a connection named PGK Test1 which has failed. The error code returned on failure is 0. Listening Ports: DNS (53/TCP), HTTP (80/TCP), HTTPS (443/TCP), RDP (3389/TCP) Disk Capacity: C: 126.9 GB, 107.79 GB free, 15.06% used Service Tag: 9332-4313-6097-9969-5934-5416-50 CPU Count: 1 CPU Core Count: 2 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Microsoft Corporation/Virtual Machine Memory Banks: Memory Bank0 : Unknown-Unknown-512 Mb-unknown Mhz PROPRIETARY & CONFIDENTIAL PAGE 240 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis <slot available> CPUs: Intel(R) Xeon(R) CPU 5110 @ 1.60GHz : CPU0-2 NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) unknown : -dc21x4VM-[00000007] Intel 21140-Based PCI Fast Ethernet Adapter (Emulated) unknown : -tunnel-[00000008] Microsoft ISATAP Adapter unknown : -NdisWan-[00000009] WAN Miniport (IP) 00:15:5D:FF:45:07 : 10.0.1.5;fe80::4161:d912:9404:d946-netvsc-[00000010] Microsoft Virtual Machine Bus Network Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000011] RAS Async Adapter unknown : -tunnel-[00000012] Microsoft Teredo Tunneling Adapter unknown : -netvsc-[00000013] Microsoft Virtual Machine Bus Network Adapter unknown : -tunnel-[00000014] Microsoft ISATAP Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.1.7601 Service Pack 1 (Build 7601) OS Caption: Microsoft Windows Server 2008 R2 Datacenter OS Virtual Memory: 3584 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 2/10/2011 11:34:39 AM PROPRIETARY & CONFIDENTIAL PAGE 241 of 251 NETWORK ASSESSMENT Computer Name Operating System VM1-WIN2003 Windows Server 2003 Windows Server 2003 Windows 7 Enterprise Windows Server 2003 Windows 7 Enterprise VM2-2003 VM-JDresdenWIN7 VM-WIN2003 VM-WIN7 CPU RAM Analysis AMD Phenom(tm) 9150e QuadCore Processor 512 MB Last 5 System Error Msgs: 10-25-2012 5:29:31 PM 7000 The Diagnostic Service Host service failed to start due to the following error: %%1297 10-25-2012 6:00:15 AM 7000 The Diagnostic Service Host service failed to start due to the following error: %%1297 10-24-2012 2:33:46 PM 7000 The Diagnostic Service Host service failed to start due to the following error: %%1297 10-24-2012 10:15:35 AM 7000 The Diagnostic Service Host service failed to start due to the following error: %%1297 10-24-2012 9:49:56 AM 7000 The Diagnostic Service Host service failed to start due to the following error: %%1297 Last 5 Application Error Msgs: 9-5-2012 1:40:53 PM 1000 Faulting application name: sddc.exe, version: 1.0.0.0, time stamp: 0x504754ab Faulting module name: KERNELBASE.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdaae Exception code: 0xe0434f4d Fault offset: 0x00009617 Faulting process id: 0xa68 Faulting application start time: 0x01cd8b8d853bbdc3 Faulting application path: C:\Users\administrator\Desktop\NetworkDetectiveDataCollector\sddc.exe Faulting module path: C:\Windows\system32\KERNELBASE.dll Report Id: d64add31-f780-11e1-855300155d0b0a04 PROPRIETARY & CONFIDENTIAL PAGE 242 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Listening Ports: RDP (3389/TCP) Disk Capacity: C: 14.9 GB, 7.7 GB free, 48.32% used Service Tag: 1858-7754-5042-7181-0643-7212-06 CPU Count: 1 CPU Core Count: 1 Windows Key: BBBBB-BBBBB-BBBBB-BBBBB-BBBBB Make and Model: Microsoft Corporation/Virtual Machine Memory Banks: Memory Bank0 : Unknown-Unknown-512 Mb-unknown Mhz <slot available> CPUs: AMD Phenom(tm) 9150e Quad-Core Processor : CPU0-1 NICs: unknown : -RasSstp-[00000000] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000001] WAN Miniport (IKEv2) unknown : -Rasl2tp-[00000002] WAN Miniport (L2TP) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IPv6) unknown : -NdisWan-[00000006] WAN Miniport (Network Monitor) 00:15:5D:0B:0A:04 : 10.0.1.37;fe80::298f:80a5:d80c:5d26-netvsc-[00000007] Microsoft Virtual Machine Bus Network Adapter unknown : -NdisWan-[00000008] WAN Miniport (IP) unknown : -tunnel-[00000009] Microsoft ISATAP Adapter 20:41:53:59:4E:FF : -AsyncMac-[00000010] RAS Async Adapter PROPRIETARY & CONFIDENTIAL PAGE 243 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -tunnel-[00000011] Microsoft Teredo Tunneling Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.1.7600 unknown (Build 7600) OS Caption: Microsoft Windows 7 Enterprise OS Virtual Memory: 1536 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 8/26/2010 10:23:11 AM Active Anti-virus: N/A Active Anti-spyware: Windows Defender Active Firewall: N/A VM-WIN7-2 VM-WIN7-3 VM-WIN8BETA W2012TEST Windows 7 Enterprise Windows 7 Enterprise Windows 8 Consumer Preview Windows Server 2012 Datacenter PROPRIETARY & CONFIDENTIAL Intel(R) Xeon(R) CPU E5320 @ 1.86GHz 512 MB Last 5 System Error Msgs: 10-11-2012 8:51:35 PM 2 The description for Event ID '2' in Source 'Microsoft-WindowsHyper-V-Netvsc' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'3', '4.0', '3221225473' 10-11-2012 8:50:57 PM 4097 The description for Event ID '4097' in Source 'NetJoin' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'CLIENTDOM.COM', 'W2012TEST', '1332' 10-11-2012 8:50:24 PM 4097 The description for Event ID '4097' in Source 'NetJoin' cannot PAGE 244 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'CLIENT', 'W2012TEST', '1355' 10-11-2012 8:50:09 PM 4097 The description for Event ID '4097' in Source 'NetJoin' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'CLIENT', 'W2012TEST', '1355' 10-11-2012 8:20:26 PM 2 The description for Event ID '2' in Source 'Microsoft-WindowsHyper-V-Netvsc' cannot be found. The local computer may not have the necessary registry information or message DLL files to display the message, or you may not have permission to access them. The following information is part of the event:'3', '4.0', '3221225473' Last 5 Application Error Msgs: 10-24-2012 8:52:13 PM 8198 License Activation (slui.exe) failed with the following error code: hr=0xC004C003 Command-line arguments: RuleId=31e71c49-8da7-4a2f-ad9245d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983ed6ec3f16059f;SkuId=dfcc0524-eb83-4602-a604cd51ef986848;NotificationInterval=1440;Trigger=TimerEvent 10-24-2012 8:52:12 PM 1014 Acquisition of End User License failed. hr=0xC004C003 Sku Id=dfcc0524-eb83-4602-a604-cd51ef986848 10-24-2012 8:52:12 PM 8200 License acquisition failure details. hr=0xC004C003 10-23-2012 8:52:16 PM 8198 License Activation (slui.exe) failed with the following error code: hr=0xC004C003 Command-line arguments: RuleId=31e71c49-8da7-4a2f-ad9245d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983ed6ec3f16059f;SkuId=dfcc0524-eb83-4602-a604cd51ef986848;NotificationInterval=1440;Trigger=TimerEvent 10-23-2012 8:52:16 PM 1014 Acquisition of End User License failed. hr=0xC004C003 Sku Id=dfcc0524-eb83-4602-a604-cd51ef986848 PROPRIETARY & CONFIDENTIAL PAGE 245 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Disk Capacity: C: 126.65 GB, 116.47 GB free, 8.04% used Service Tag: 7757-4664-2065-9826-9030-8426-41 CPU Count: 1 CPU Core Count: 4 Windows Key: Q6XTW-BB76K-FJ2H6-B3KGW-MR9XX Make and Model: Microsoft Corporation/Virtual Machine Memory Banks: Memory Bank0 : Unknown-Unknown-512 Mb-unknown Mhz <slot available> CPUs: Intel(R) Xeon(R) CPU E5320 @ 1.86GHz : CPU0-4 NICs: unknown : -Rasl2tp-[00000000] WAN Miniport (L2TP) unknown : -RasSstp-[00000001] WAN Miniport (SSTP) unknown : -RasAgileVpn-[00000002] WAN Miniport (IKEv2) unknown : -PptpMiniport-[00000003] WAN Miniport (PPTP) unknown : -RasPppoe-[00000004] WAN Miniport (PPPOE) unknown : -NdisWan-[00000005] WAN Miniport (IP) unknown : -NdisWan-[00000006] WAN Miniport (IPv6) unknown : -NdisWan-[00000007] WAN Miniport (Network Monitor) unknown : -kdnic-[00000008] Microsoft Kernel Debug Network Adapter unknown : -AsyncMac-[00000009] RAS Async Adapter unknown : -dc21x4VM-[00000010] Intel 21140-Based PCI Fast Ethernet Adapter (Emulated) unknown : -tunnel-[00000011] Microsoft ISATAP Adapter 00:15:5D:01:3C:20 : 10.0.1.15;fe80::64d3:7a47:88ac:8f19-netvsc-[00000012] Microsoft Hyper-V Network Adapter unknown : -tunnel-[00000013] Microsoft ISATAP Adapter PROPRIETARY & CONFIDENTIAL PAGE 246 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis unknown : -tunnel-[00000014] Microsoft Teredo Tunneling Adapter DEP: On for All programs and services except those I select OS Manufacturer: Microsoft Corporation OS Version: 6.2.9200 unknown (Build 9200) OS Caption: Microsoft Windows Server 2012 Datacenter OS Virtual Memory: 1632 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 10/11/2012 5:49:10 PM WIN2008 WIN2008R2 WIN7ULT WINDESKTOP Windows Server 2008 Standard Windows Server 2008 R2 Enterprise Windows 7 Ultimate Windows Vista Ultimate Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz 4096 MB Last 5 System Error Msgs: 10-25-2012 12:06:07 AM 262151 The device, \Device\Harddisk0\DR0, has a bad block. 10-25-2012 12:06:04 AM 262151 The device, \Device\Harddisk0\DR0, has a bad block. 10-25-2012 12:06:00 AM 262151 The device, \Device\Harddisk0\DR0, has a bad block. 10-25-2012 12:02:52 AM 262151 The device, \Device\Harddisk0\DR0, has a bad block. 10-25-2012 12:02:49 AM 262151 The device, \Device\Harddisk0\DR0, has a bad block. Last 5 Application Error Msgs: 8-16-2012 12:00:33 AM 12289 Volume Shadow Copy Service error: Unexpected error VSS_E_WRITER_STATUS_NOT_AVAILABLE. An older active writer session state is being overwritten by a newer session. The most common cause is that the number of parallel backups has exceeded the maximum supported limit. hr = 0x80042409. Operation: PostSnapshot Event Context: Maximum supported sessions: 64 Completed sessions: 8 Active sessions: 64 Aborted sessions: 0 Writer failed sessions: 0 New snaphot set: PROPRIETARY & CONFIDENTIAL PAGE 247 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis {c9b61fdc-35e8-4164-950c-4712f6631fa2} Old snapshot set: {50b94298-23ad-40af-9869be484d7995ae} Old operation: 1013 Old state: 5 Old failure: 0 Execution Context: Writer Writer Class Id: {cd3f2362-8bef-46c7-9181-d62844cdc0b2} Writer Name: MSSearch Service Writer Writer Instance ID: {2bb1bbdd-b4e4-4632-b1fe-fb2ae0e74e4e} 8-16-2012 12:00:27 AM 12289 Volume Shadow Copy Service error: Unexpected error VSS_E_WRITER_STATUS_NOT_AVAILABLE. An older active writer session state is being overwritten by a newer session. The most common cause is that the number of parallel backups has exceeded the maximum supported limit. hr = 0x80042409. Operation: PostSnapshot Event Context: Maximum supported sessions: 64 Completed sessions: 8 Active sessions: 64 Aborted sessions: 0 Writer failed sessions: 0 New snaphot set: {c9b61fdc-35e8-4164-950c-4712f6631fa2} Old snapshot set: {50b94298-23ad-40af-9869be484d7995ae} Old operation: 1013 Old state: 5 Old failure: 0 Execution Context: Writer Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {9b7fe6a7-9574-4d92-bc23-274b6cc78d70} 8-16-2012 12:00:27 AM 12289 Volume Shadow Copy Service error: Unexpected error VSS_E_WRITER_STATUS_NOT_AVAILABLE. An older active writer session state is being overwritten by a newer session. The most common cause is that the number of parallel backups has exceeded the maximum supported limit. hr = 0x80042409. Operation: PostSnapshot Event Context: Maximum supported sessions: 64 Completed sessions: 8 Active sessions: 64 Aborted sessions: 0 Writer failed sessions: 0 New snaphot set: {c9b61fdc-35e8-4164-950c-4712f6631fa2} Old snapshot set: {50b94298-23ad-40af-9869be484d7995ae} Old operation: 1013 Old state: 5 Old failure: 0 Execution Context: Writer Writer Class Id: {a6ad56c2-b509-4e6c-bb19-49d8f43532f0} Writer Name: WMI Writer Writer Instance ID: {1d779f55-e802-44e7-8418-f3775034af3b} 8-15-2012 12:00:36 AM 12289 Volume Shadow Copy Service error: Unexpected error VSS_E_WRITER_STATUS_NOT_AVAILABLE. An older active writer session state is being overwritten by a newer session. The most common cause is that the number of parallel backups has exceeded the maximum supported limit. hr = 0x80042409. Operation: PostSnapshot Event Context: Maximum supported sessions: 64 Completed sessions: 8 PROPRIETARY & CONFIDENTIAL PAGE 248 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Active sessions: 64 Aborted sessions: 0 Writer failed sessions: 0 New snaphot set: {2945fee6-a5a5-48c4-8df0-47cb6248493a} Old snapshot set: {e2caa2a2-2c76-466b-8a50e11e34013def} Old operation: 1013 Old state: 5 Old failure: 0 Execution Context: Writer Writer Class Id: {cd3f2362-8bef-46c7-9181-d62844cdc0b2} Writer Name: MSSearch Service Writer Writer Instance ID: {2bb1bbdd-b4e4-4632-b1fe-fb2ae0e74e4e} 8-15-2012 12:00:30 AM 12289 Volume Shadow Copy Service error: Unexpected error VSS_E_WRITER_STATUS_NOT_AVAILABLE. An older active writer session state is being overwritten by a newer session. The most common cause is that the number of parallel backups has exceeded the maximum supported limit. hr = 0x80042409. Operation: PostSnapshot Event Context: Maximum supported sessions: 64 Completed sessions: 8 Active sessions: 64 Aborted sessions: 0 Writer failed sessions: 0 New snaphot set: {2945fee6-a5a5-48c4-8df0-47cb6248493a} Old snapshot set: {e2caa2a2-2c76-466b-8a50e11e34013def} Old operation: 1013 Old state: 5 Old failure: 0 Execution Context: Writer Writer Class Id: {e8132975-6f93-4464-a53e-1050253ae220} Writer Name: System Writer Writer Instance ID: {9b7fe6a7-9574-4d92-bc23-274b6cc78d70} Listening Ports: RDP (3389/TCP) Disk Capacity: C: 372.61 GB, 174.85 GB free, 53.07% used Service Tag: DM0001 CPU Count: 1 CPU Core Count: 2 Windows Key: C627R-223JB-VT339-B9QVH-F8WTD Make and Model: HP-Pavilion/GN559AA-ABA a6220n Memory Banks: Memory Bank0 : DIMM-Synchronous-1024 Mb-667 Mhz PROPRIETARY & CONFIDENTIAL PAGE 249 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis Memory Bank1 : DIMM-Synchronous-1024 Mb-667 Mhz Memory Bank2 : DIMM-Synchronous-1024 Mb-667 Mhz Memory Bank3 : DIMM-Synchronous-1024 Mb-667 Mhz CPUs: Intel(R) Core(TM)2 Duo CPU E4500 @ 2.20GHz : CPU0-2 System Slots: System Slot0 : PCI-E x16-Available-OK System Slot1 : PCI-E x1-Available-OK System Slot2 : PCI-E x1-Available-OK System Slot3 : PCI1-Available-OK NICs: unknown : -Rasl2tp-[00000000] WAN Miniport (L2TP) 50:50:54:50:30:30 : -PptpMiniport-[00000001] WAN Miniport (PPTP) 33:50:6F:45:30:30 : -RasPppoe-[00000002] WAN Miniport (PPPOE) unknown : -NdisWan-[00000003] WAN Miniport (IPv6) 00:1B:2F:BF:0A:F8 : 10.0.1.122;fe80::c433:ca9e:8be4:69fd-RTL8169-[00000004] Realtek RTL8169/8110 Family PCI Gigabit Ethernet NIC (NDIS 6.0) unknown : -tunnel-[00000005] Microsoft ISATAP Adapter unknown : -NdisWan-[00000006] WAN Miniport (IP) unknown : -RasSstp-[00000007] WAN Miniport (SSTP) unknown : -NdisWan-[00000008] WAN Miniport (Network Monitor) 20:41:53:59:4E:FF : -AsyncMac-[00000009] RAS Async Adapter unknown : -tunnel-[00000010] Microsoft ISATAP Adapter unknown : -tunnel-[00000011] Microsoft ISATAP Adapter 00:1D:60:13:40:6C : -e1express-[00000012] Intel(R) 82566DC-2 Gigabit Network Connection unknown : -tunnel-[00000014] Microsoft ISATAP Adapter DEP: On for essential Windows programs and services only OS Manufacturer: Microsoft Corporation OS Version: 6.0.6002 Service Pack 2 (Build 6002) PROPRIETARY & CONFIDENTIAL PAGE 250 of 251 NETWORK ASSESSMENT Computer Name Operating System CPU RAM Analysis OS Caption: Microsoft Windows Vista Ultimate OS Virtual Memory: 6880 MB OS System Directory: C:\Windows\system32 OS Windows Directory: C:\Windows OS Install Date: 10/10/2007 9:50:01 PM Active Anti-virus: N/A Active Anti-spyware: Windows Defender Active Firewall: N/A wmartinez1 Windows 7 Ultimate PROPRIETARY & CONFIDENTIAL PAGE 251 of 251