HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms			
+ rdpclip	RDP Clip Monitor	Microsoft Corporation	c:\windows\system32\rdpclip.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit			
+ C:\WINDOWS\system32\userinit.exe	Userinit Logon Application	Microsoft Corporation	c:\windows\system32\userinit.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell			
+ Explorer.exe	Windows Explorer	Microsoft Corporation	c:\windows\explorer.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run			
+ IMJPMIG8.1			ûзļ:   C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE
+ PHIME2002A	΢ܛעݔ뷨 2002a	Microsoft Corporation	c:\windows\system32\ime\tintlgnt\tintsetp.exe
+ PHIME2002ASync	΢ܛעݔ뷨 2002a	Microsoft Corporation	c:\windows\system32\ime\tintlgnt\tintsetp.exe
+ RavTray	Rising tray framework	Beijing Rising Information Technology Co., Ltd.	c:\program files\rising\rav\rstray.exe
+ RFWTray	Rising tray framework	Beijing Rising Information Technology Co., Ltd.	c:\program files\rising\rfw\rstray.exe
+ runeip	RSTray	Beijing Rising Information Technology Co., Ltd.	c:\program files\rising\antispyware\rstray.exe
+ UserFaultCheck	Windows Error Reporting Dump Reporting Tool	Microsoft Corporation	c:\windows\system32\dumprep.exe
+ VMware Tools	VMware Tools tray application	VMware, Inc.	c:\program files\vmware\vmware tools\vmwaretray.exe
+ VMware User Process	VMware Tools Service	VMware, Inc.	c:\program files\vmware\vmware tools\vmwareuser.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run			
+ ctfmon.exe	CTF Loader	Microsoft Corporation	c:\windows\system32\ctfmon.exe
+ QQDownload	Ѷ	Tencent Technology (Shenzhen) Company Limited	c:\program files\tencent\qqdownload2\qqdownload.exe
HKLM\SOFTWARE\Classes\Protocols\Filter			
+ Class Install Handler	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ deflate	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ gzip	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ lzdhtml	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ text/webviewhtml	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKLM\SOFTWARE\Classes\Protocols\Handler			
+ about	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ cdl	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ dvd	ActiveX control for streaming video	Microsoft Corporation	c:\windows\system32\msvidctl.dll
+ file	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ ftp	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ gopher	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ http	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ https	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ its	Microsoft? InfoTech Storage System Library	Microsoft Corporation	c:\windows\system32\itss.dll
+ javascript	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ local	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ mailto	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ mhtml	Microsoft Internet Messaging API	Microsoft Corporation	c:\windows\system32\inetcomm.dll
+ mk	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ ms-its	Microsoft? InfoTech Storage System Library	Microsoft Corporation	c:\windows\system32\itss.dll
+ res	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ sysimage	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ tv	ActiveX control for streaming video	Microsoft Corporation	c:\windows\system32\msvidctl.dll
+ vbscript	Microsoft (R) HTML Viewer	Microsoft Corporation	c:\windows\system32\mshtml.dll
+ wia	WIA Scripting Layer	Microsoft Corporation	c:\windows\system32\wiascr.dll
HKCU\SOFTWARE\Microsoft\Internet Explorer\Desktop\Components			
+ 0			ûзļ:   About:Home
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components			
+ Internet Explorer	Windows NT User Data Migration Tool	Microsoft Corporation	c:\windows\system32\shmgrate.exe
+ Internet Explorer 6	IE 5.0 Per-User Install Utility	Microsoft Corporation	c:\windows\system32\ie4uinit.exe
+ Microsoft Outlook Express 6	Outlook Express Setup Library	Microsoft Corporation	c:\program files\outlook express\setup50.exe
+ Microsoft Windows Media Player	Microsoft Windows Media Player װʵó	Microsoft Corporation	c:\windows\inf\unregmp2.exe
+ Microsoft Windows Media Player	ADVPACK	Microsoft Corporation	c:\windows\system32\advpack.dll
+ Outlook Express	Windows NT User Data Migration Tool	Microsoft Corporation	c:\windows\system32\shmgrate.exe
+ Themes Setup	Microsoft(C) Register Server	Microsoft Corporation	c:\windows\system32\regsvr32.exe
+ Windows 	Microsoft(C) Register Server	Microsoft Corporation	c:\windows\system32\regsvr32.exe
+ ͨѶ 6	Outlook Express Setup Library	Microsoft Corporation	c:\program files\outlook express\setup50.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler			
+ Browseui Ԥس	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ 𻺴	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad			
+ CDBurn	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ PostBootReminder	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ SysTray	Systray shell service object	Microsoft Corporation	c:\windows\system32\stobject.dll
+ WebCheck	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks			
+ URL ִйҹ	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers			
+ 7-Zip	7-Zip ˵չ	Igor Pavlov	c:\program files\7-zip\7-zip.dll
+ Offline Files	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+ Open With	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ Open With EncryptionMenu	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ RisingRavExt	Rising Shell Ext Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\ravext.dll
+ WinRAR			c:\program files\winrar\rarext.dll
+ ʼ˵	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKLM\Software\Classes\AllFileSystemObjects\ShellEx\ContextMenuHandlers			
+ Send To	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers			
+ RisingRavExt	Rising Shell Ext Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\ravext.dll
+ WinRAR			c:\program files\winrar\rarext.dll
HKLM\Software\Classes\Directory\ShellEx\ContextMenuHandlers			
+ 7-Zip	7-Zip ˵չ	Igor Pavlov	c:\program files\7-zip\7-zip.dll
+ EncryptionMenu	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ Offline Files	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+ RisingRavExt	Rising Shell Ext Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\ravext.dll
+ Sharing	Shell extensions for sharing	Microsoft Corporation	c:\windows\system32\ntshrui.dll
+ WinRAR			c:\program files\winrar\rarext.dll
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers			
+ New	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKLM\Software\Classes\Folder\Shellex\ColumnHandlers			
+ {0D2E74C4-3C34-11d2-A27E-00C04FC30871}	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ {24F14F01-7B1C-11d1-838f-0000F80461CF}	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ {24F14F02-7B1C-11d1-838f-0000F80461CF}	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ {66742402-F9B9-11D1-A202-0000F81FEDEE}	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers			
+ Offline Files	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved			
+ %DESC_PublishDropTarget%	Photo Printing Wizard	Microsoft Corporation	c:\windows\system32\photowiz.dll
+ 7-Zip Shell Extension	7-Zip ˵չ	Igor Pavlov	c:\program files\7-zip\7-zip.dll
+ ActiveX ٻļ	Object Control Viewer	Microsoft Corporation	c:\windows\system32\occache.dll
+ Audio Media Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ Auto Update Property Sheet Extension	Automatic Updates Control Panel	Microsoft Corporation	c:\windows\system32\wuaucpl.cpl
+ Avi Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ BandProxy	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ CDF Extension Copy Hook	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Channel Menu	Channel Definition File Viewer	Microsoft Corporation	c:\windows\system32\cdfview.dll
+ Channel Properties	Channel Definition File Viewer	Microsoft Corporation	c:\windows\system32\cdfview.dll
+ Code Download Agent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Compatibility Page	Compatibility Tab Shell Extension DLL	Microsoft Corporation	c:\windows\system32\slayerxp.dll
+ ConnectionAgent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Crypto PKO Extension	Crypto Shell Extensions	Microsoft Corporation	c:\windows\system32\cryptext.dll
+ Crypto Sign Extension	Crypto Shell Extensions	Microsoft Corporation	c:\windows\system32\cryptext.dll
+ Darwin App Publisher	Shell Application Manager	Microsoft Corporation	c:\windows\system32\appwiz.cpl
+ DfsShell	Distributed File System shell extension	Microsoft Corporation	c:\windows\system32\dfsshlex.dll
+ Directory Context Menu Verbs	Directory Service Common UI	Microsoft Corporation	c:\windows\system32\dsuiext.dll
+ Directory Object Find	Directory Service Find	Microsoft Corporation	c:\windows\system32\dsquery.dll
+ Directory Property UI	Directory Service Common UI	Microsoft Corporation	c:\windows\system32\dsuiext.dll
+ Directory Query UI	Directory Service Find	Microsoft Corporation	c:\windows\system32\dsquery.dll
+ Directory Start/Search Find	Directory Service Find	Microsoft Corporation	c:\windows\system32\dsquery.dll
+ Disk Copy Extension	Windows DiskCopy	Microsoft Corporation	c:\windows\system32\diskcopy.dll
+ Disk Quota UI	Windows Shell Disk Quota UI DLL	Microsoft Corporation	c:\windows\system32\dskquoui.dll
+ Display Adapter CPL Extension	Advanced display adapter properties	Microsoft Corporation	c:\windows\system32\deskadp.dll
+ Display Monitor CPL Extension	Advanced display monitor properties	Microsoft Corporation	c:\windows\system32\deskmon.dll
+ Display Panning CPL Extension			ûзļ:   deskpan.dll
+ Display TroubleShoot CPL Extension	Advanced display performance properties	Microsoft Corporation	c:\windows\system32\deskperf.dll
+ DS Security Page	Directory Service Security UI	Microsoft Corporation	c:\windows\system32\dssec.dll
+ Extensions Manager Folder	Extensions Manager	Microsoft Corporation	c:\windows\system32\extmgr.dll
+ Favorites Band	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ FTP Folders Webview	Microsoft Internet Explorer FTP Folder Shell Extension	Microsoft Corporation	c:\windows\system32\msieftp.dll
+ GDI+ ļͼѹ	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ History Band	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ HTML ͼĽѹ	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ HyperTerminal Icon Ext	HyperTerminal Applet Library	Hilgraeve, Inc.	c:\windows\system32\hticons.dll
+ ICC ļ	Microsoft Color Matching System User Interface DLL	Microsoft Corporation	c:\windows\system32\icmui.dll
+ ICM ӡ	Microsoft Color Matching System User Interface DLL	Microsoft Corporation	c:\windows\system32\icmui.dll
+ ICM 	Microsoft Color Matching System User Interface DLL	Microsoft Corporation	c:\windows\system32\icmui.dll
+ ICM ɨǹ	Microsoft Color Matching System User Interface DLL	Microsoft Corporation	c:\windows\system32\icmui.dll
+ IE Microsoft AutoComplete	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ IE Search Band	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ IE4 ׼ʼĻ	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Installed Apps Enumerator	Shell Application Manager	Microsoft Corporation	c:\windows\system32\appwiz.cpl
+ Internet	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Internet	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Internet Name Space	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Internet ʱļ	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Internet ʱļ	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ InternetShortcut	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ISFBand OC	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Microsoft Agent Character Property Sheet Handler	Microsoft Agent Property Sheet Handler	Microsoft Corporation	c:\windows\msagent\agentpsh.dll
+ Microsoft Browser Architecture	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Microsoft BrowserBand	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft DocProp Inplace Calendar Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Inplace Droplist Combo Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Inplace Edit Box Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Inplace ML Edit Box Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Inplace Time Control	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft DocProp Shell Ext	Microsoft DocProp Shell Ext	Microsoft Corporation	c:\windows\system32\docprop2.dll
+ Microsoft Internet 	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft Url History 	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Microsoft Url ҽ	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Microsoft Զб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft ʷԶб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Microsoft 	Microsoft Data Access - OLE DB Core Services	Microsoft Corporation	c:\program files\common files\system\ole db\oledb32.dll
+ Microsoft ļԶб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Midi Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ MMC Icon Handler	MMC Shell Extension DLL	Microsoft Corporation	c:\windows\system32\mmcshext.dll
+ MRU Զб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Multimedia File Property Sheet	Control Panel Drivers Applet	Microsoft Corporation	c:\windows\system32\mmsys.cpl
+ MyDocs Copy Hook	My Documents Folder UI	Microsoft Corporation	c:\windows\system32\mydocs.dll
+ MyDocs Drop Target	My Documents Folder UI	Microsoft Corporation	c:\windows\system32\mydocs.dll
+ MyDocs Properties	My Documents Folder UI	Microsoft Corporation	c:\windows\system32\mydocs.dll
+ NTFS Security Page	Security Shell Extension	Microsoft Corporation	c:\windows\system32\rshx32.dll
+ Offline Files Folder Options	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+ Offline Files Menu	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+ OLE Docfile Property Page	OLE DocFile Property Page	Microsoft Corporation	c:\windows\system32\docprop.dll
+ PlusPack CPL Extension	Windows Theme API	Microsoft Corporation	c:\windows\system32\themeui.dll
+ Portable Media Devices	Яý豸нչ	Microsoft Corporation	c:\windows\system32\audiodev.dll
+ Portable Media Devices Menu	Яý豸нչ	Microsoft Corporation	c:\windows\system32\audiodev.dll
+ PostAgent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Printers Security Page	Security Shell Extension	Microsoft Corporation	c:\windows\system32\rshx32.dll
+ Remote Sessions CPL Extension	Remote Sessions CPL Extension	Microsoft Corporation	c:\windows\system32\remotepg.dll
+ RISING	Rising Shell Ext Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\ravext.dll
+ Search Assistant OC	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Sendmail service	Send Mail	Microsoft Corporation	c:\windows\system32\sendmail.dll
+ Sendmail service	Send Mail	Microsoft Corporation	c:\windows\system32\sendmail.dll
+ Set Program Access and Defaults	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Shell Application Manager	Shell Application Manager	Microsoft Corporation	c:\windows\system32\appwiz.cpl
+ Shell Automation Inproc Service	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Shell Band Site Menu	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Shell DocObject Viewer	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Shell extensions for Microsoft Windows Network objects	Network object shell UI	Microsoft Corporation	c:\windows\system32\ntlanui2.dll
+ Shell extensions for sharing	Shell extensions for sharing	Microsoft Corporation	c:\windows\system32\ntshrui.dll
+ Shell extensions for sharing	Shell extensions for sharing	Microsoft Corporation	c:\windows\system32\ntshrui.dll
+ Shell Image Data Factory	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ Shell Image Property Handler	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ Shell Image Verbs	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ Shell Microsoft AutoComplete	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Shell properties for a DS object	Directory Service Find	Microsoft Corporation	c:\windows\system32\dsquery.dll
+ Shell Scrap DataHandler	Shell scrap object handler	Microsoft Corporation	c:\windows\system32\shscrap.dll
+ Shell Search Band	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Subscription Mgr	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Tasks Folder Icon Handler	Task Scheduler interface DLL	Microsoft Corporation	c:\windows\system32\mstask.dll
+ Tasks Folder Shell Extension	Task Scheduler interface DLL	Microsoft Corporation	c:\windows\system32\mstask.dll
+ TrayAgent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ TridentImageExtractor	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Video Media Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ Video Thumbnail Extractor	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ Wav Properties Handler	Media File Property Extractor Shell Extension	Microsoft Corporation	c:\windows\system32\shmedia.dll
+ Web Printer Shell Extension	Print UI DLL	Microsoft Corporation	c:\windows\system32\printui.dll
+ Web 	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ WebCheck	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ WebCheck SyncMgr Handler	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ WebCheckChannelAgent	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ WebCheckWebCrawler	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ Windows Media Player Add to Playlist Context Menu Handler	Windows Media Player Launcher	Microsoft Corporation	c:\windows\system32\wmpshell.dll
+ Windows Media Player Burn Audio CD Context Menu Handler	Windows Media Player Launcher	Microsoft Corporation	c:\windows\system32\wmpshell.dll
+ Windows Media Player Play as Playlist Context Menu Handler	Windows Media Player Launcher	Microsoft Corporation	c:\windows\system32\wmpshell.dll
+ Windows Script Host  Shell extensions	Microsoft (R) Shell Extension for Windows Script Host	Microsoft Corporation	c:\windows\system32\wshext.dll
+ WinRAR shell extension			c:\program files\winrar\rarext.dll
+ ֧	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ֧	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ļ	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ļ 2	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ е	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ַ EditBox	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ַ(&A)	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ʼ	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ٵ	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ İ	Windows Briefcase	Microsoft Corporation	c:\windows\system32\syncui.dll
+ 	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ȡ Passport 	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ ɷʵ	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ʷ¼	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ Ƶ	Channel Definition File Viewer	Microsoft Corporation	c:\windows\system32\cdfview.dll
+ Ƶݷʽ	Channel Definition File Viewer	Microsoft Corporation	c:\windows\system32\cdfview.dll
+ Ƶļ	Channel Definition File Viewer	Microsoft Corporation	c:\windows\system32\cdfview.dll
+ ȫļ	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ƻ	Task Scheduler interface DLL	Microsoft Corporation	c:\windows\system32\mstask.dll
+ ͡ʼ˵	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ ɨǺ	Imaging Devices Shell Folder UI	Microsoft Corporation	c:\windows\system32\wiashext.dll
+ 	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ͨ Web Ƭ	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ ѻļ	Client Side Caching UI	Microsoft Corporation	c:\windows\system32\cscui.dll
+  DeskBar	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+  DeskBarApp	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+  Rebar BandSite	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ǳ򵼶	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ 	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ 	Network Connections Shell	Microsoft Corporation	c:\windows\system32\netshell.dll
+ 	Network Connections Shell	Microsoft Corporation	c:\windows\system32\netshell.dll
+ ״̬	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ǰİ汾	Previous Versions property page	Microsoft Corporation	c:\windows\system32\twext.dll
+ ǰİ汾ҳ	Previous Versions property page	Microsoft Corporation	c:\windows\system32\twext.dll
+ û(&P)...	Find People	Microsoft Corporation	c:\program files\outlook express\wabfind.dll
+ û	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ ûʻ	Map Network Drives/Network Places Wizard	Microsoft Corporation	c:\windows\system32\netplwiz.dll
+ Ԥļ	Web Site Monitor	Microsoft Corporation	c:\windows\system32\webcheck.dll
+ ...	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ ժҪϢͼ(DOCFILES)	Windows ͼƬʹ鿴	Microsoft Corporation	c:\windows\system32\shimgvw.dll
+ עĿ·ѡʵó	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ Զ MRU Զб	Shell Browser UI Library	Microsoft Corporation	c:\windows\system32\browseui.dll
+ 	Windows Font Folder	Microsoft Corporation	c:\windows\system32\fontext.dll
+ 	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
+ 	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects			
+ QQCycloneHelper Class		Tencent Technology (Shenzhen) Company Limited	c:\program files\tencent\qqdownload2\qqiehelper01.dll
+ ȫ	Rising AntiSpyware UrlFilter Module	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\urlfilter.dll
HKCU\Software\Microsoft\Internet Explorer\UrlSearchHooks			
+ Microsoft Url ҽ	Shell Doc Object and Control Library	Microsoft Corporation	c:\windows\system32\shdocvw.dll
HKLM\Software\Microsoft\Internet Explorer\Toolbar			
+ ǿ	ToolBar	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\kakatool.dll
HKLM\Software\Microsoft\Internet Explorer\Extensions			
+ ...	Network Diagnostic for Windows XP	Microsoft Corporation	c:\windows\network diagnostic\xpnetdiag.exe
HKLM\System\CurrentControlSet\Services			
+ AudioSrv	 Windows ĳƵ豸˷ֹƵ豸Ч˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\audiosrv.dll
+ BITS	ں̨ͻ˺ͷ֮ݡ BITSһЩܣ Windows Update޷С	Microsoft Corporation	c:\windows\system32\qmgr.dll
+ Browser	άϼĸббṩָֹͣбᱻ»ά񱻽ãκֱڴ˷ķ޷	Microsoft Corporation	c:\windows\system32\browser.dll
+ CryptSvc	ṩֹ: ¼ݿȷ Windows ļǩ; ܱĸӴ˼ӺɾŸ֤֤;Կ(Key)ע˼ȡ֤顣˷ֹЩ޷С˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\cryptsvc.dll
+ DcomLaunch	Ϊ DCOM ṩعܡ	Microsoft Corporation	c:\windows\system32\rpcss.dll
+ Dhcp	ͨע͸ IP ַԼ DNS á	Microsoft Corporation	c:\windows\system32\dhcpcsvc.dll
+ dmserver	ͼӲ߼̹;ϢԱá˷ֹ̬״̬Ϣʱ˷񱻽ãκķ޷	Microsoft Corp.	c:\windows\system32\dmserver.dll
+ Dnscache	Ϊ˼ͻϵͳ (DNS) ơ˷ֹͣܽ DNS Ʋλ Active Directory ˷񱻽ãκȷķ񽫲	Microsoft Corporation	c:\windows\system32\dnsrslvr.dll
+ ERSvc	ӦóڷǱ׼ʱ󱨸档	Microsoft Corporation	c:\windows\system32\ersvc.dll
+ Eventlog	¼鿴鿴 Windows ĳ䷢¼־Ϣ޷ֹ˷	Microsoft Corporation	c:\windows\system32\services.exe
+ LanmanServer	ִ֧˼ͨļӡֹܵͣЩܲá񱻽ãκֱڴ˷ķ޷	Microsoft Corporation	c:\windows\system32\srvsvc.dll
+ lanmanworkstation	άԶ̷ĿͻӡֹͣЩӽá񱻽ãκֱڴ˷ķ޷	Microsoft Corporation	c:\windows\system32\wkssvc.dll
+ LmHosts	ԡTCP/IP  NetBIOS (NetBT)Լ NetBIOS ƽ֧֡	Microsoft Corporation	c:\windows\system32\lmhsvc.dll
+ PlugPlay	ʹڼٻûûʶӦӲĸġֹô˷ϵͳȶ	Microsoft Corporation	c:\windows\system32\services.exe
+ PolicyAgent	 IP ȫԼ ISAKMP/Oakley (IKE)  IP ȫ	Microsoft Corporation	c:\windows\system32\lsass.exe
+ ProtectedStorage	ṩ(˽Կ)ıԴ洢ԱֹδȨķ񣬹̻ûķǷʡ	Microsoft Corporation	c:\windows\system32\lsass.exe
+ RemoteRegistry	ʹԶû޸Ĵ˼ϵעá˷ֹֻд˼ϵû޸ע˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\regsvc.dll
+ RpcSs	ṩսӳ (endpoint mapper) Լ RPC 	Microsoft Corporation	c:\windows\system32\rpcss.dll
+ RsRavMon	ravmond	Beijing Rising Information Technology Co., Ltd.	c:\program files\rising\rav\ravmond.exe
+ RsRFWMon	ravmond	Beijing Rising Information Technology Co., Ltd.	c:\program files\rising\rfw\ravmond.exe
+ SamSs	洢ûʻİȫϢ	Microsoft Corporation	c:\windows\system32\lsass.exe
+ Schedule	ʹûڴ˼úƶԶճ̡˷ֹЩ޷ճʱС˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\schedsvc.dll
+ seclogon	滻ƾµý̡˷ֹ͵¼ʽá˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\seclogon.dll
+ SENS	ϵͳ¼¼ WindowsԼԴ¼ȡЩ¼֪ͨ COM+ ¼ϵͳ (subscriber)	Microsoft Corporation	c:\windows\system32\sens.dll
+ SharedAccess	ΪͥСͰ칫ṩַתѰַƽ/ֱ	Microsoft Corporation	c:\windows\system32\ipnathlp.dll
+ ShellHWDetection	ΪԶӲ¼ṩ֪ͨ	Microsoft Corporation	c:\windows\system32\shsvcs.dll
+ Spooler	ļصڴԱٺӡ	Microsoft Corporation	c:\windows\system32\spoolsv.exe
+ srservice	ִϵͳԭܡ Ҫֹͣӡҵĵԡеϵͳԭѡرϵͳԭ	Microsoft Corporation	c:\windows\system32\srsvc.dll
+ Themes	Ϊûṩʹľ顣	Microsoft Corporation	c:\windows\system32\shsvcs.dll
+ TrkWks	ڼ NTFS ļ֮䱣ӻеļ֮䱣ӡ	Microsoft Corporation	c:\windows\system32\trkwks.dll
+ VMTools	Ϊϵͳͱͻϵͳ֮Ķͬṩ֧֡	VMware, Inc.	c:\program files\vmware\vmware tools\vmwareservice.exe
+ VMware Physical Disk Helper Service	ô̷֧	VMware, Inc.	c:\program files\vmware\vmware tools\vmacthlp.exe
+ W32Time	άϵпͻ˺ͷʱͬ˷ֹͣʱڵͬá˷񱻽ãκȷķ񶼽	Microsoft Corporation	c:\windows\system32\w32time.dll
+ WebClient	ʹ Windows ĳܴʺ޸Ļ Internet ļ˷ֹʧȥЩܡ˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\webclnt.dll
+ winmgmt	ṩͬĽͶģʽԱйزϵͳ豸ӦóͷĹϢ˷ֹ Windows ޷С˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\wbem\wmisvc.dll
+ wuauserv	زװ Windows ¡˷񱻽ãʹ Windows Update վԶ¹ܡ	Microsoft Corporation	c:\windows\system32\wuauserv.dll
+ WZCSVC	Ϊ 802.11 ṩԶ	Microsoft Corporation	c:\windows\system32\wzcsvc.dll
HKLM\System\CurrentControlSet\Services			
+ 2310_00	rr231x/230x Miniport Driver	HighPoint Technologies, Inc.	c:\windows\system32\drivers\2310_00.sys
+ ACPI	ACPI Driver for NT	Microsoft Corporation	c:\windows\system32\drivers\acpi.sys
+ aec	Microsoft Acoustic Echo Canceller	Microsoft Corporation	c:\windows\system32\drivers\aec.sys
+ AFD	AFD ֻ֧	Microsoft Corporation	c:\windows\system32\drivers\afd.sys
+ agp440	440 NT AGP Filter	Microsoft Corporation	c:\windows\system32\drivers\agp440.sys
+ AsyncMac	RAS Asynchronous Media Driver	Microsoft Corporation	c:\windows\system32\drivers\asyncmac.sys
+ atapi	IDE/ATAPI Port Driver	Microsoft Corporation	c:\windows\system32\drivers\atapi.sys
+ Atmarpc	ATM ARP Client Protocol	Microsoft Corporation	c:\windows\system32\drivers\atmarpc.sys
+ audstub	AudStub Driver	Microsoft Corporation	c:\windows\system32\drivers\audstub.sys
+ Beep	BEEP Driver	Microsoft Corporation	c:\windows\system32\drivers\beep.sys
+ Cdaudio	CD-ROM Audio Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\cdaudio.sys
+ Cdrom	SCSI CD-ROM Driver	Microsoft Corporation	c:\windows\system32\drivers\cdrom.sys
+ Changer			ûзļ:   C:\WINDOWS\System32\Drivers\Changer.sys
+ CmBatt	Control Method Battery Driver	Microsoft Corporation	c:\windows\system32\drivers\cmbatt.sys
+ Compbatt	Composite Battery Driver	Microsoft Corporation	c:\windows\system32\drivers\compbatt.sys
+ DC21x4	NDIS 5.0 DC21X4 miniport driver	Intel Corporation.	c:\windows\system32\drivers\dc21x4.sys
+ Disk	PnP Disk Driver	Microsoft Corporation	c:\windows\system32\drivers\disk.sys
+ dmio	NT Disk Manager I/O Driver	Microsoft Corp., Veritas Software	c:\windows\system32\drivers\dmio.sys
+ dmload	NT Disk Manager Startup Driver	Microsoft Corp., Veritas Software.	c:\windows\system32\drivers\dmload.sys
+ DMusic	Microsoft Kernel DLS Synthesizer	Microsoft Corporation	c:\windows\system32\drivers\dmusic.sys
+ drmkaud	Microsoft Kernel DRM Audio Descrambler Filter	Microsoft Corporation	c:\windows\system32\drivers\drmkaud.sys
+ es1371	ENSONIQ AudioPCI 97 WDM Audio Miniport	Creative Technology Ltd.	c:\windows\system32\drivers\es1371mp.sys
+ Fdc	Floppy Disk Controller Driver	Microsoft Corporation	c:\windows\system32\drivers\fdc.sys
+ Fips	FIPS Crypto Driver	Microsoft Corporation	c:\windows\system32\drivers\fips.sys
+ Flpydisk	Floppy Driver	Microsoft Corporation	c:\windows\system32\drivers\flpydisk.sys
+ FltMgr	ļϵͳɸѡ	Microsoft Corporation	c:\windows\system32\drivers\fltmgr.sys
+ FsVga	Full Screen Video Driver	Microsoft Corporation	c:\windows\system32\drivers\fsvga.sys
+ Ftdisk	FT Disk Driver	Microsoft Corporation	c:\windows\system32\drivers\ftdisk.sys
+ gameenum	Game Port Enumerator	Microsoft Corporation	c:\windows\system32\drivers\gameenum.sys
+ Gpc	Generic Packet Classifier	Microsoft Corporation	c:\windows\system32\drivers\msgpc.sys
+ HidUsb	USB Miniport Driver for Input Devices	Microsoft Corporation	c:\windows\system32\drivers\hidusb.sys
+ hookcont	HookCont Driver for x86	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\hookcont.sys
+ hooksys	Hooksys.sys	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\hooksys.sys
+ hptmv6	hptmv6 Miniport Driver	HighPoint Technologies, Inc.	c:\windows\system32\drivers\hptmv6.sys
+ HTTP	˷ʵֳıЭ(HTTP)˷񱻽ãκķ޷	Microsoft Corporation	c:\windows\system32\drivers\http.sys
+ i2omgmt	I2O Utility Filter	Microsoft Corporation	c:\windows\system32\drivers\i2omgmt.sys
+ i8042prt	i8042 Port Driver	Microsoft Corporation	c:\windows\system32\drivers\i8042prt.sys
+ Imapi	IMAPI Kernel Driver	Microsoft Corporation	c:\windows\system32\drivers\imapi.sys
+ IntelIde	Intel PCI IDE Driver	Microsoft Corporation	c:\windows\system32\drivers\intelide.sys
+ intelppm	Processor Device Driver	Microsoft Corporation	c:\windows\system32\drivers\intelppm.sys
+ Ip6Fw	ΪͥСͰ칫ṩֱ	Microsoft Corporation	c:\windows\system32\drivers\ip6fw.sys
+ IpFilterDriver	IP Traffic Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\ipfltdrv.sys
+ IpInIp	IP in IP Tunnel Driver	Microsoft Corporation	c:\windows\system32\drivers\ipinip.sys
+ IpNat	IP Network Address Translator	Microsoft Corporation	c:\windows\system32\drivers\ipnat.sys
+ IPSec	IPSEC driver	Microsoft Corporation	c:\windows\system32\drivers\ipsec.sys
+ IRENUM	Infra-Red Bus Enumerator	Microsoft Corporation	c:\windows\system32\drivers\irenum.sys
+ isapnp	PNP ISA Bus Driver	Microsoft Corporation	c:\windows\system32\drivers\isapnp.sys
+ Kbdclass	Keyboard Class Driver	Microsoft Corporation	c:\windows\system32\drivers\kbdclass.sys
+ kmixer	Kernel Mode Audio Mixer	Microsoft Corporation	c:\windows\system32\drivers\kmixer.sys
+ KSecDD	Kernel Security Support Provider Interface	Microsoft Corporation	c:\windows\system32\drivers\ksecdd.sys
+ lbrtfdc			ûзļ:   C:\WINDOWS\System32\Drivers\lbrtfdc.sys
+ Modem	Modem Device Driver	Microsoft Corporation	c:\windows\system32\drivers\modem.sys
+ Mouclass	Mouse Class Driver	Microsoft Corporation	c:\windows\system32\drivers\mouclass.sys
+ mouhid	HID Mouse Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\mouhid.sys
+ MountMgr	Mount Manager	Microsoft Corporation	c:\windows\system32\drivers\mountmgr.sys
+ MRxDAV	WebDav Client Redirector	Microsoft Corporation	c:\windows\system32\drivers\mrxdav.sys
+ MRxSmb	MRXSMB	Microsoft Corporation	c:\windows\system32\drivers\mrxsmb.sys
+ Msfs	Mailslot driver	Microsoft Corporation	c:\windows\system32\drivers\msfs.sys
+ MSKSSRV	MS KS Server	Microsoft Corporation	c:\windows\system32\drivers\mskssrv.sys
+ MSPCLOCK	MS Proxy Clock	Microsoft Corporation	c:\windows\system32\drivers\mspclock.sys
+ MSPQM	MS Proxy Quality Manager	Microsoft Corporation	c:\windows\system32\drivers\mspqm.sys
+ mssmbios	System Management BIOS Driver	Microsoft Corporation	c:\windows\system32\drivers\mssmbios.sys
+ Mup	Multiple UNC Provider driver	Microsoft Corporation	c:\windows\system32\drivers\mup.sys
+ NDIS	NDIS 5.1 wrapper driver	Microsoft Corporation	c:\windows\system32\drivers\ndis.sys
+ NdisTapi	Remote Access NDIS TAPI Driver	Microsoft Corporation	c:\windows\system32\drivers\ndistapi.sys
+ Ndisuio	NDIS ûģʽ I/O Э	Microsoft Corporation	c:\windows\system32\drivers\ndisuio.sys
+ NdisWan	Remote Access NDIS WAN Driver	Microsoft Corporation	c:\windows\system32\drivers\ndiswan.sys
+ NDProxy	NDIS Proxy	Microsoft Corporation	c:\windows\system32\drivers\ndproxy.sys
+ NetBIOS	NetBIOS Interface	Microsoft Corporation	c:\windows\system32\drivers\netbios.sys
+ NetBT	NetBios over Tcpip	Microsoft Corporation	c:\windows\system32\drivers\netbt.sys
+ NPF	npf.sys (NT5/6 x86) Kernel Driver	CACE Technologies	c:\windows\system32\drivers\npf.sys
+ Npfs	NPFS Driver	Microsoft Corporation	c:\windows\system32\drivers\npfs.sys
+ Null	NULL Driver	Microsoft Corporation	c:\windows\system32\drivers\null.sys
+ NwlnkFlt	IPX Traffic Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\nwlnkflt.sys
+ NwlnkFwd	IPX Traffic Forwarder Driver	Microsoft Corporation	c:\windows\system32\drivers\nwlnkfwd.sys
+ Parport	Parallel Port Driver	Microsoft Corporation	c:\windows\system32\drivers\parport.sys
+ PartMgr	Partition Manager	Microsoft Corporation	c:\windows\system32\drivers\partmgr.sys
+ PCI	NT Plug and Play PCI Enumerator	Microsoft Corporation	c:\windows\system32\drivers\pci.sys
+ PCIDump			ûзļ:   C:\WINDOWS\System32\Drivers\PCIDump.sys
+ PCnet	NDIS 5.0 driver	AMD Inc.	c:\windows\system32\drivers\pcntpci5.sys
+ PDCOMP			ûзļ:   C:\WINDOWS\System32\Drivers\PDCOMP.sys
+ PDFRAME			ûзļ:   C:\WINDOWS\System32\Drivers\PDFRAME.sys
+ PDRELI			ûзļ:   C:\WINDOWS\System32\Drivers\PDRELI.sys
+ PDRFRAME			ûзļ:   C:\WINDOWS\System32\Drivers\PDRFRAME.sys
+ PptpMiniport	WAN Miniport (PPTP)	Microsoft Corporation	c:\windows\system32\drivers\raspptp.sys
+ PSched	QoS Packet Scheduler	Microsoft Corporation	c:\windows\system32\drivers\psched.sys
+ Ptilink	Direct Parallel Link Driver	Parallel Technologies, Inc.	c:\windows\system32\drivers\ptilink.sys
+ RasAcd	Remote Access Auto Connection Driver	Microsoft Corporation	c:\windows\system32\drivers\rasacd.sys
+ Rasl2tp	WAN Miniport (L2TP)	Microsoft Corporation	c:\windows\system32\drivers\rasl2tp.sys
+ RasPppoe	Զ̷ PPPOE 	Microsoft Corporation	c:\windows\system32\drivers\raspppoe.sys
+ Raspti	Direct Parallel	Microsoft Corporation	c:\windows\system32\drivers\raspti.sys
+ Rdbss	Rdbss	Microsoft Corporation	c:\windows\system32\drivers\rdbss.sys
+ RDPCDD	RDP Miniport	Microsoft Corporation	c:\windows\system32\drivers\rdpcdd.sys
+ rdpdr	Microsoft RDP Device redirector	Microsoft Corporation	c:\windows\system32\drivers\rdpdr.sys
+ RDPWD	RDP Terminal Stack Driver (US/Canada Only, Not for Export)	Microsoft Corporation	c:\windows\system32\drivers\rdpwd.sys
+ redbook	Redbook Audio Filter Driver	Microsoft Corporation	c:\windows\system32\drivers\redbook.sys
+ RFWARP	Rising RfwARP Driver	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\rfwarp.sys
+ RfwBase9	rfwbase5.sys	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\rfwbase.sys
+ rfwtdi	rfwtdi.sys	Beijing Rising Information Technology Co., Ltd.	c:\program files\rising\rfw\rfwtdi.sys
+ rr172x	rr172x Miniport Driver	HighPoint Technologies, Inc.	c:\windows\system32\drivers\rr172x.sys
+ rr174x	rr174x Miniport Driver	HighPoint Technologies, Inc.	c:\windows\system32\drivers\rr174x.sys
+ rr232x	RR232x Miniport Driver	HighPoint Technologies, Inc.	c:\windows\system32\drivers\rr232x.sys
+ rr2340	RR2340 Miniport Driver	HighPoint Technologies, Inc.	c:\windows\system32\drivers\rr2340.sys
+ rsfwdrv	rsfwdrv.sys	Beijing Rising Information Technology Co., Ltd.	c:\program files\rising\rfw\rsfwdrv.sys
+ RsNTGDI	RsNTGDI	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\drivers\rsntgdi.sys
+ RsProtect			ûзļ:   system32\drivers\RsPtect.sys
+ s3legacy	s3 Miniport Driver	Microsoft Corporation	c:\windows\system32\drivers\s3legacy.sys
+ Secdrv	SafeDisc driver	Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.	c:\windows\system32\drivers\secdrv.sys
+ serenum	Serial Port Enumerator	Microsoft Corporation	c:\windows\system32\drivers\serenum.sys
+ Serial	Serial Device Driver	Microsoft Corporation	c:\windows\system32\drivers\serial.sys
+ Sfloppy	SCSI Floppy Driver	Microsoft Corporation	c:\windows\system32\drivers\sfloppy.sys
+ splitter	Microsoft Kernel Audio Splitter	Microsoft Corporation	c:\windows\system32\drivers\splitter.sys
+ Srv	Srv	Microsoft Corporation	c:\windows\system32\drivers\srv.sys
+ swenum	Plug and Play Software Device Enumerator	Microsoft Corporation	c:\windows\system32\drivers\swenum.sys
+ swmidi	Microsoft GS Wavetable Synthesizer	Microsoft Corporation	c:\windows\system32\drivers\swmidi.sys
+ sysaudio	System Audio WDM Filter	Microsoft Corporation	c:\windows\system32\drivers\sysaudio.sys
+ Tcpip	TCP/IP Protocol Driver	Microsoft Corporation	c:\windows\system32\drivers\tcpip.sys
+ TDPIPE	Named Pipe Transport Driver	Microsoft Corporation	c:\windows\system32\drivers\tdpipe.sys
+ TDTCP	TCP Transport Driver	Microsoft Corporation	c:\windows\system32\drivers\tdtcp.sys
+ TermDD	Terminal Server Driver	Microsoft Corporation	c:\windows\system32\drivers\termdd.sys
+ Update	Update Driver	Microsoft Corporation	c:\windows\system32\drivers\update.sys
+ usbccgp	USB Common Class Generic Parent Driver	Microsoft Corporation	c:\windows\system32\drivers\usbccgp.sys
+ usbehci	EHCI eUSB Miniport Driver	Microsoft Corporation	c:\windows\system32\drivers\usbehci.sys
+ usbhub	Default Hub Driver for USB	Microsoft Corporation	c:\windows\system32\drivers\usbhub.sys
+ usbuhci	UHCI USB Miniport Driver	Microsoft Corporation	c:\windows\system32\drivers\usbuhci.sys
+ VgaSave	VGA/Super VGA Video Driver	Microsoft Corporation	c:\windows\system32\drivers\vga.sys
+ vmci	VMware PCI VMCI Bus Device	VMware, Inc.	c:\windows\system32\drivers\vmci.sys
+ vmdebug	VMware Replay Debugging Driver	VMware, Inc.	c:\windows\system32\drivers\vmdebug.sys
+ vmdesched-driver	VMware Descheduled Time Accounting Service [driver]	VMware, Inc.	c:\windows\system32\drivers\vmdesched.sys
+ vmhgfs	VMware HGFS File System Driver	VMware, Inc.	c:\windows\system32\drivers\vmhgfs.sys
+ VMMEMCTL	VMware server memory controller	VMware, Inc.	c:\program files\vmware\vmware tools\drivers\memctl\vmmemctl.sys
+ vmmouse	VMware Pointing Device Driver	VMware, Inc.	c:\windows\system32\drivers\vmmouse.sys
+ VMscsi	VMware SCSI Controller Driver	VMware, Inc.	c:\windows\system32\drivers\vmscsi.sys
+ vmx_svga	VMware SVGA II Miniport	VMware, Inc.	c:\windows\system32\drivers\vmx_svga.sys
+ vmxnet	VMware PCI Ethernet Adapter	VMware, Inc.	c:\windows\system32\drivers\vmxnet.sys
+ VolSnap	Volume Shadow Copy Driver	Microsoft Corporation	c:\windows\system32\drivers\volsnap.sys
+ Wanarp	Remote Access IP ARP Driver	Microsoft Corporation	c:\windows\system32\drivers\wanarp.sys
+ WDICA			ûзļ:   C:\WINDOWS\System32\Drivers\WDICA.sys
+ wdmaud	MMSYSTEM Wave/Midi API mapper	Microsoft Corporation	c:\windows\system32\drivers\wdmaud.sys
+ WS2IFSL	Winsock2 IFS Layer	Microsoft Corporation	c:\windows\system32\drivers\ws2ifsl.sys
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute			
+ autocheck autochk *			ûзļ:   autocheck
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options			
+ Your Image File Name Here without a path	Symbolic Debugger for Windows 2000	Microsoft Corporation	c:\windows\system32\ntsd.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows\Appinit_Dlls			
+ kmon.dll	KaKa Monitors	Beijing Rising Information Technology Co., Ltd.	c:\windows\system32\kmon.dll
HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls			
+ advapi32	Advanced Windows 32 Base API	Microsoft Corporation	c:\windows\system32\advapi32.dll
+ comdlg32	Common Dialogs DLL	Microsoft Corporation	c:\windows\system32\comdlg32.dll
+ gdi32	GDI Client DLL	Microsoft Corporation	c:\windows\system32\gdi32.dll
+ imagehlp	Windows NT Image Helper	Microsoft Corporation	c:\windows\system32\imagehlp.dll
+ kernel32	Windows NT BASE API Client DLL	Microsoft Corporation	c:\windows\system32\kernel32.dll
+ lz32	LZ Expand/Compress API DLL	Microsoft Corporation	c:\windows\system32\lz32.dll
+ ole32	Microsoft OLE for Windows	Microsoft Corporation	c:\windows\system32\ole32.dll
+ oleaut32		Microsoft Corporation	c:\windows\system32\oleaut32.dll
+ olecli32	Object Linking and Embedding Client Library	Microsoft Corporation	c:\windows\system32\olecli32.dll
+ olecnv32	Microsoft OLE for Windows	Microsoft Corporation	c:\windows\system32\olecnv32.dll
+ olesvr32	Object Linking and Embedding Server Library	Microsoft Corporation	c:\windows\system32\olesvr32.dll
+ olethk32	Microsoft OLE for Windows	Microsoft Corporation	c:\windows\system32\olethk32.dll
+ rpcrt4	Remote Procedure Call Runtime	Microsoft Corporation	c:\windows\system32\rpcrt4.dll
+ shell32	Windows Shell Common Dll	Microsoft Corporation	c:\windows\system32\shell32.dll
+ url	Internet Shortcut Shell Extension DLL	Microsoft Corporation	c:\windows\system32\url.dll
+ urlmon	OLE32 Extensions for Win32	Microsoft Corporation	c:\windows\system32\urlmon.dll
+ user32	Windows XP USER API Client DLL	Microsoft Corporation	c:\windows\system32\user32.dll
+ version	Version Checking and File Installation Libraries	Microsoft Corporation	c:\windows\system32\version.dll
+ wininet	Internet Extensions for Win32	Microsoft Corporation	c:\windows\system32\wininet.dll
+ wldap32	Win32 LDAP API DLL	Microsoft Corporation	c:\windows\system32\wldap32.dll
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UIHost			
+ logonui.exe	Windows Logon UI	Microsoft Corporation	c:\windows\system32\logonui.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify			
+ crypt32chain	Crypto API32	Microsoft Corporation	c:\windows\system32\crypt32.dll
+ cryptnet	Crypto Network Related API	Microsoft Corporation	c:\windows\system32\cryptnet.dll
+ cscdll	Offline Network Agent	Microsoft Corporation	c:\windows\system32\cscdll.dll
+ dimsntfy	DIMS Notification Handler	Microsoft Corporation	c:\windows\system32\dimsntfy.dll
+ ScCertProp	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
+ Schedule	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
+ sclgntfy	Secondary Logon Service Notification DLL	Microsoft Corporation	c:\windows\system32\sclgntfy.dll
+ SensLogn	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
+ termsrv	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
+ TPSvc	TPSvc DLL	ThinPrint GmbH	c:\windows\system32\tpsvc.dll
+ wlballoon	Common DLL to receive Winlogon notifications	Microsoft Corporation	c:\windows\system32\wlnotify.dll
HKCU\Control Panel\Desktop\Scrnsave.exe			
+ C:\WINDOWS\System32\logon.scr	Logon Screen Saver	Microsoft Corporation	c:\windows\system32\logon.scr
HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9			
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{0E534733-30C5-467E-84BD-00367BE08324}] DATAGRAM 0	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{0E534733-30C5-467E-84BD-00367BE08324}] SEQPACKET 0	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{3D0D10E3-C7D8-4E4B-970E-670A00B33439}] DATAGRAM 1	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{3D0D10E3-C7D8-4E4B-970E-670A00B33439}] SEQPACKET 1	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{917E584A-5E52-47DA-9FE4-DB70A41E9DC8}] DATAGRAM 2	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD NetBIOS [\Device\NetBT_Tcpip_{917E584A-5E52-47DA-9FE4-DB70A41E9DC8}] SEQPACKET 2	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD Tcpip [RAW/IP]	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD Tcpip [TCP/IP]	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ MSAFD Tcpip [UDP/IP]	Microsoft Windows Sockets 2.0 Service Provider	Microsoft Corporation	c:\windows\system32\mswsock.dll
+ RSVP TCP Service Provider	Microsoft Windows Rsvp 1.0 Service Provider	Microsoft Corporation	c:\windows\system32\rsvpsp.dll
+ RSVP UDP Service Provider	Microsoft Windows Rsvp 1.0 Service Provider	Microsoft Corporation	c:\windows\system32\rsvpsp.dll
+ VMCI sockets DGRAM	VSockets Library	VMware, Inc.	c:\program files\vmware\vmware tools\vsock sdk\bin\win32\vsocklib.dll
+ VMCI sockets STREAM	VSockets Library	VMware, Inc.	c:\program files\vmware\vmware tools\vsock sdk\bin\win32\vsocklib.dll
HKLM\SYSTEM\CurrentControlSet\Control\Print\Monitors			
+ BJ Language Monitor	Langage Monitor for Canon Bubble-Jet Printer	Microsoft Corporation	c:\windows\system32\cnbjmon.dll
+ Local Port	Local Spooler DLL	Microsoft Corporation	c:\windows\system32\localspl.dll
+ PJL Language Monitor	PJL Language monitor	Microsoft Corporation	c:\windows\system32\pjlmon.dll
+ Standard TCP/IP Port	Standard TCP/IP Port Monitor DLL	Microsoft Corporation	c:\windows\system32\tcpmon.dll
+ ThinPrint Print Port Monitor for VMWare	.print for VMware Print Port Monitor	ThinPrint GmbH	c:\windows\system32\tpvmmon.dll
+ USB Monitor	Standard Dynamic Printing Port Monitor DLL	Microsoft Corporation	c:\windows\system32\usbmon.dll
HKLM\SYSTEM\CurrentControlSet\Control\SecurityProviders\SecurityProviders			
+ digest.dll	Digest SSPI Authentication Package	Microsoft Corporation	c:\windows\system32\digest.dll
+ msapsspc.dll	DPA Client for 32 bit platforms	Microsoft Corporation	c:\windows\system32\msapsspc.dll
+ msnsspc.dll	MSN Internet Access	Microsoft Corporation	c:\windows\system32\msnsspc.dll
+ schannel.dll	TLS / SSL Security Provider	Microsoft Corporation	c:\windows\system32\schannel.dll
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Authentication Packages			
+ msv1_0	Microsoft Authentication Package v1.0	Microsoft Corporation	c:\windows\system32\msv1_0.dll
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Notification Packages			
+ scecli	Windows Security Configuration Editor Client Engine	Microsoft Corporation	c:\windows\system32\scecli.dll
HKLM\SYSTEM\CurrentControlSet\Control\Lsa\Security Packages			
+ kerberos	Kerberos Security Package	Microsoft Corporation	c:\windows\system32\kerberos.dll
+ msv1_0	Microsoft Authentication Package v1.0	Microsoft Corporation	c:\windows\system32\msv1_0.dll
+ schannel	TLS / SSL Security Provider	Microsoft Corporation	c:\windows\system32\schannel.dll
+ wdigest	Microsoft Digest Access	Microsoft Corporation	c:\windows\system32\wdigest.dll
HKLM\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order			
+ LanmanWorkstation	Microsoft Windows Network	Microsoft Corporation	c:\windows\system32\ntlanman.dll
+ RDPNP	Microsoft Terminal Services	Microsoft Corporation	c:\windows\system32\drprov.dll
+ vmhgfs	VMware ļ	VMware, Inc.	c:\windows\system32\vmhgfs.dll
+ WebClient	Web Client Network	Microsoft Corporation	c:\windows\system32\davclnt.dll
