SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCEEX
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNSERVICES
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNSERVICESONCE
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\POLICIES\\EXPLORER\\RUN
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\STARTUPAPPROVED\\RUN
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\STARTUPAPPROVED\\RUN32
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\USER SHELL FOLDERS\\STARTUP
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\SHELL FOLDERS\\STARTUP
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\GROUP POLICY\\SCRIPTS\\STARTUP
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\GROUP POLICY\\SCRIPTS\\SHUTDOWN
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\SHELL
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\USERINIT
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\NOTIFY
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\TASKMAN
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\UIHOST
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS\\APPINIT_DLLS
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS\\LOADAPPINIT_DLLS
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS\\RUN
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS\\LOAD
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\SETHC.EXE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\UTILMAN.EXE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\OSK.EXE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\NARRATOR.EXE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\MAGNIFY.EXE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS\\ATBROKER.EXE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\SCHEDULE\\TASKCACHE\\TREE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\SCHEDULE\\TASKCACHE\\TASKS
SOFTWARE\\MICROSOFT\\SHARED TOOLS\\MSCONFIG\\STARTUPREG
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\BROWSER HELPER OBJECTS
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\SHELLSERVICEOBJECTDELAYLOAD
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\CONTROL PANEL\\CPLS
SOFTWARE\\MICROSOFT\\COMMAND PROCESSOR\\AUTORUN
SOFTWARE\\CLASSES\\EXEFILE\\SHELL\\OPEN\\COMMAND
SOFTWARE\\CLASSES\\FOLDER\\SHELL\\OPEN\\COMMAND
SOFTWARE\\CLASSES\\DIRECTORY\\SHELL\\OPEN\\COMMAND
SOFTWARE\\CLASSES\\MS-SETTINGS\\SHELL\\OPEN\\COMMAND
SOFTWARE\\AUTOIT V3\\AUTOIT
SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\URLSEARCHHOOKS
SOFTWARE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS
SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\POWERSHELL
SOFTWARE\\MICROSOFT\\WINDOWS\\POWERSHELL\\1\\SHELLIDS\\MICROSOFT.POWERSHELL_PROFILE
SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\AEDEBUG
SYSTEM\\CURRENTCONTROLSET\\CONTROL\\SAFEBOOT
SYSTEM\\CURRENTCONTROLSET\\CONTROL\\SESSION MANAGER\\KNOWNDLLS
SYSTEM\\CURRENTCONTROLSET\\SERVICES\\WINSOCK2\\PARAMETERS\\PROTOCOL_CATALOG9
