例子:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ RunShadowTip ShadowTip PowerShadow C:\WINDOWS\SYSTEM32\SHADOW\SHADOWTIP.EXE
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
+ AMonitor eTrust Activity Monitor Computer Associates International, Inc. C:\PROGRAM FILES\TINY FIREWALL PRO\AMON.EXE
C:\Documents and Settings\baohelin\「开始」菜单\程序\启动
+ 腾讯QQ.lnk QQ TENCENT C:\PROGRA~1\TENCENT\QQ\QQ.EXE
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
+ ShadowSystemService C:\WINDOWS\SYSTEM32\SHADOW\SHADOWSERVICE.EXE
+ TUWinStylerThemeSvc TuneUp WinStyler Theme Service TuneUp Software GmbH C:\PROGRAM FILES\TUNEUP UTILITIES 2004\WINSTYLERTHEMESVC.EXE
+ UmxAgent eTrust Event Manager Computer Associates International, Inc. C:\PROGRAM FILES\TINY FIREWALL PRO\UMXAGENT.EXE
+ UmxCfg eTrust Configuration Engine Computer Associates International, Inc. C:\PROGRAM FILES\COMMON FILES\PFSHARED\UMXCFG.EXE
+ UmxFwHlp eTrust Firewall User-Mode Helper Computer Associates International, Inc. C:\PROGRAM FILES\TINY FIREWALL PRO\UMXFWHLP.EXE
+ UmxLU Live Update Monitor Tiny Software, Inc. C:\PROGRAM FILES\COMMON FILES\PFSHARED\UMXLU.EXE
+ UmxPol eTrust FW Policy Manager Service Computer Associates International, Inc. C:\PROGRAM FILES\COMMON FILES\PFSHARED\UMXPOL.EXE
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
+ ac97intc Intel(r) Integrated Controller Hub Audio Driver Intel Corporation C:\windows\SYSTEM32\DRIVERS\AC97INTC.SYS
+ ExpScaner ExpScan.sys C:\PROGRAM FILES\RISING\RAV\EXPSCAN.SYS
+ HookCont TDI HOOK Driver Rising tech Co. ltd C:\PROGRAM FILES\RISING\RAV\HOOKCONT.SYS
+ HookReg C:\PROGRAM FILES\RISING\RAV\HOOKREG.SYS
+ HookSys Hooksys Rising C:\PROGRAM FILES\RISING\RAV\HOOKSYS.SYS
+ KmxAgent eTrust Agent driver Computer Associates International, Inc. C:\windows\SYSTEM32\DRIVERS\KMXAGENT.SYS
+ KmxBiG eTrust Integrity Guard driver Computer Associates International, Inc. C:\windows\SYSTEM32\DRIVERS\KMXBIG.SYS
+ KmxCfg KMX - Configuration Cache Computer Associates International, Inc. C:\windows\SYSTEM32\DRIVERS\KMXCFG.SYS
+ KmxFile eTrust File Guard driver Computer Associates International, Inc. C:\windows\SYSTEM32\DRIVERS\KMXFILE.SYS
+ KmxFw eTrust firewall security engine Computer Associates International, Inc. C:\windows\SYSTEM32\DRIVERS\KMXFW.SYS
+ KmxIds TPF: IDS engine plug-in Computer Associates International, Inc. C:\windows\SYSTEM32\DRIVERS\KMXIDS.SYS
+ KmxNdis eTrust NDIS filter Computer Associates International, Inc. C:\windows\SYSTEM32\DRIVERS\KMXNDIS.SYS
+ KmxSbx eTrust Registry, Spawning and Devices Guard driver Computer Associates International, Inc. C:\windows\SYSTEM32\DRIVERS\KMXSBX.SYS
+ ltmodem5 LT Windows Modem LT C:\windows\SYSTEM32\DRIVERS\LTMDMNT.SYS
+ MEMSCAN MemScan Driver 瑞星软件有限公司 C:\PROGRAM FILES\RISING\RAV\MEMSCAN.SYS
+ npkcrypt nProtect KeyCrypt Driver INCA Internet Co., Ltd. C:\PROGRAM FILES\TENCENT\QQ\NPKCRYPT.SYS
+ npkcusb nProtect KeyCrypt Driver INCA Internet Co., Ltd. C:\PROGRAM FILES\TENCENT\QQ\NPKCUSB.SYS
+ nv NVIDIA Compatible Windows 2000 Miniport Driver, Version 56.73 NVIDIA Corporation C:\windows\SYSTEM32\DRIVERS\NV4_MINI.SYS
+ Ptilink Direct Parallel Link Driver Parallel Technologies, Inc. C:\windows\SYSTEM32\DRIVERS\PTILINK.SYS
+ rtl8139 Realtek RTL8139 NDIS 5.0 Driver Realtek Semiconductor Corporation C:\windows\SYSTEM32\DRIVERS\RTL8139.SYS
+ safemon System Safety Monitor 2.0 extension for Windows security layer System Safety Limited C:\windows\SYSTEM32\DRIVERS\SAFEMON.SYS
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved
+ HyperTerminal Icon Ext HyperTerminal Applet Library Hilgraeve, Inc. C:\WINDOWS\SYSTEM32\HTICONS.DLL
+ WinRAR C:\PROGRAM FILES\WINRAR\RAREXT.DLL
+ SnagIt SnagIt Add-in for Internet Explorer TechSmith Corporation C:\PROGRAM FILES\TECHSMITH\SNAGIT 7\SNAGITIEADDIN.DLL
+ TuneUp Shredder Shell Context Menu Extension TuneUp Shredder Shell Extension TuneUp Software GmbH C:\PROGRAM FILES\TUNEUP UTILITIES 2004\SDSHELEX.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper
Objects
+ Helper
Object Class SnagIt Browser Helper
Object for Internet Explorer TechSmith Corporation C:\PROGRAM FILES\TECHSMITH\SNAGIT 7\SNAGITBHO.DLL
+ QQBrowserHelper
Object Class QQIEHelper Module 深圳市腾讯计算机系统有限公司 C:\PROGRAM FILES\TENCENT\QQ\QQIEHELPER.DLL
+ IeCatch2 Class jccatch Module Amaze Soft C:\PROGRA~1\FLASHGET\JCCATCH.DLL
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar
+ FlashGet Bar FlashGet IE Bar Amaze Soft C:\PROGRA~1\FLASHGET\FGIEBAR.DLL
+ SnagIt SnagIt Add-in for Internet Explorer TechSmith Corporation C:\PROGRAM FILES\TECHSMITH\SNAGIT 7\SNAGITIEADDIN.DLL
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Extensions