#
# The list of files and directories, usually those that belong to the tested product.
# The first line determines the number of the files and directories in the list.
# Then the list of files and directories follows.
# This list must be modified before testing.
#
files=3
C:\Program Files\Real-time Defender
C:\windows\system32\drivers\diskpt.sys
C:\Program Files\Real-time Defender\RTDefender.sys

#
# The list of registry entries, usually those that belong to the tested product.
# The first line determines the number of the registry entries in the list.
# Then the list of registry entries follows.
# Registry values, unlike registry keys, are written in format "KEY_NAME\\VALUE_NAME".
# These registry roots are valid: HKCR, HKCU, HKLM.
# This list must be modified before testing.
#
registry=4
HKLM\SOFTWARE\RTDefender
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\RTD_Alarm
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\RTD_RuleEditor
HKLM\SYSTEM\CurrentControlSet\Services\RTDSessionService

#
# The list of important services and drivers, usually those that belong to the tested product.
# The first line determines the number of the services and drivers in the list.
# Then the names of the services and drivers follows.
# This list must be modified before testing.
#
services=2
RTDefender
RTDSessionService

二、符号链接