Side files for HackTheBox Control Writeup https://rawsec.ml/en/hackthebox-control-write-up/
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\1394ohci | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\1394ohci.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\3ware | |
ImagePath REG_EXPAND_SZ System32\drivers\3ware.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ACPI | |
ImagePath REG_EXPAND_SZ System32\drivers\ACPI.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AcpiDev | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\AcpiDev.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\acpiex | |
ImagePath REG_EXPAND_SZ System32\Drivers\acpiex.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\acpipagr | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\acpipagr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AcpiPmi | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\acpipmi.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\acpitime | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\acpitime.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ADP80XX | |
ImagePath REG_EXPAND_SZ System32\drivers\ADP80XX.SYS | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AFD | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\afd.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\afunix | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\afunix.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ahcache | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\ahcache.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AJRouter | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ALG | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\alg.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AmdK8 | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\amdk8.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AmdPPM | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\amdppm.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\amdsata | |
ImagePath REG_EXPAND_SZ System32\drivers\amdsata.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\amdsbs | |
ImagePath REG_EXPAND_SZ System32\drivers\amdsbs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\amdxata | |
ImagePath REG_EXPAND_SZ System32\drivers\amdxata.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppHostSvc | |
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k apphost | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppID | |
ImagePath REG_EXPAND_SZ system32\drivers\appid.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppIDSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Appinfo | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\applockerfltr | |
ImagePath REG_EXPAND_SZ system32\drivers\applockerfltr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppMgmt | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppReadiness | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k AppReadiness -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppVClient | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\AppVClient.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppvStrm | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\AppvStrm.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppvVemgr | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\AppvVemgr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppvVfs | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\AppvVfs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AppXSvc | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k wsappx -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\arcsas | |
ImagePath REG_EXPAND_SZ System32\drivers\arcsas.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AsyncMac | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\asyncmac.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\atapi | |
ImagePath REG_EXPAND_SZ System32\drivers\atapi.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AudioEndpointBuilder | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Audiosrv | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\AxInstSV | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k AxInstSVGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\b06bdrv | |
ImagePath REG_EXPAND_SZ System32\drivers\bxvbda.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bam | |
ImagePath REG_EXPAND_SZ system32\drivers\bam.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BasicDisplay | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_5103ac179273be89\BasicDisplay.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BasicRender | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\DriverStore\FileRepository\basicrender.inf_amd64_0b8d03c3bc0e7fd9\BasicRender.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bcmfn2 | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\bcmfn2.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bfadfcoei | |
ImagePath REG_EXPAND_SZ System32\drivers\bfadfcoei.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bfadi | |
ImagePath REG_EXPAND_SZ System32\drivers\bfadi.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BFE | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bindflt | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\bindflt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BITS | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bowser | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\bowser.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BrokerInfrastructure | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BTAGService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BthAvctpSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BthEnum | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\BthEnum.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BthLEEnum | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BthMini | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\BTHMINI.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BTHPORT | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\BTHport.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bthserv | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BTHUSB | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\BTHUSB.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bttflt | |
ImagePath REG_EXPAND_SZ System32\drivers\bttflt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\buttonconverter | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\buttonconverter.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bxfcoe | |
ImagePath REG_EXPAND_SZ System32\drivers\bxfcoe.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\bxois | |
ImagePath REG_EXPAND_SZ System32\drivers\bxois.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\camsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k appmodel -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CapImg | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\capimg.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CaptureService_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k ClipboardSvcGroup -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cbdhsvc_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k ClipboardSvcGroup -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cdfs | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\cdfs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDPUserSvc_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cdrom | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\cdrom.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CertPropSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cht4iscsi | |
ImagePath REG_EXPAND_SZ System32\drivers\cht4sx64.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cht4vbd | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\cht4vx64.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CldFlt | |
ImagePath REG_EXPAND_SZ system32\drivers\cldflt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CLFS | |
ImagePath REG_EXPAND_SZ System32\drivers\CLFS.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ClipSVC | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k wsappx -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CmBatt | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\CmBatt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CNG | |
ImagePath REG_EXPAND_SZ System32\Drivers\cng.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\cnghwassist | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\cnghwassist.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CompositeBus | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\DriverStore\FileRepository\compositebus.inf_amd64_e4d35af746093dc3\CompositeBus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\COMSysApp | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\condrv | |
ImagePath REG_EXPAND_SZ System32\drivers\condrv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ConsentUxUserSvc_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CoreMessagingRegistrar | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CryptSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k NetworkService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CSC | |
ImagePath REG_EXPAND_SZ system32\drivers\csc.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CscService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dam | |
ImagePath REG_EXPAND_SZ system32\drivers\dam.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DcomLaunch | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\defragsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k defragsvc | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DeviceAssociationService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DeviceInstall | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicePickerUserSvc_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevicesFlowUserSvc_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k DevicesFlow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DevQueryBroker | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dfsc | |
ImagePath REG_EXPAND_SZ System32\Drivers\dfsc.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dhcp | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\diagnosticshub.standardcollector.service | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DiagTrack | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k utcsvc -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Disk | |
ImagePath REG_EXPAND_SZ System32\drivers\disk.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DmEnrollmentSvc | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmvsc | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\dmvsc.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmwappushservice | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Dnscache | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k NetworkService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DoSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dot3svc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DPS | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\drmkaud | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\drmkaud.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DsmSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DsSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DXGKrnl | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\dxgkrnl.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\e1iexpress | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\e1i63x64.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Eaphost | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ebdrv | |
ImagePath REG_EXPAND_SZ System32\drivers\evbda.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EFS | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\lsass.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EhStorClass | |
ImagePath REG_EXPAND_SZ System32\drivers\EhStorClass.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EhStorTcgDrv | |
ImagePath REG_EXPAND_SZ System32\drivers\EhStorTcgDrv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\elxfcoe | |
ImagePath REG_EXPAND_SZ System32\drivers\elxfcoe.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\elxstor | |
ImagePath REG_EXPAND_SZ System32\drivers\elxstor.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\embeddedmode | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EntAppSvc | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k appmodel -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ErrDev | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\errdev.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventLog | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\EventSystem | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fcvsc | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\fcvsc.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fdc | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\fdc.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fdPHost | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FDResPub | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FileCrypt | |
ImagePath REG_EXPAND_SZ system32\drivers\filecrypt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FileInfo | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\fileinfo.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Filetrace | |
ImagePath REG_EXPAND_SZ system32\drivers\filetrace.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\flpydisk | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\flpydisk.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FltMgr | |
ImagePath REG_EXPAND_SZ system32\drivers\fltmgr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FontCache | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FrameServer | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k Camera | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\FsDepends | |
ImagePath REG_EXPAND_SZ System32\drivers\FsDepends.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gencounter | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmgencounter.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\genericusbfn | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\genericusbfn.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GPIOClx0101 | |
ImagePath REG_EXPAND_SZ System32\Drivers\msgpioclx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\gpsvc | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\GraphicsPerfSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k GraphicsPerfSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HdAudAddService | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\HdAudio.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HDAudBus | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\HDAudBus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HidBatt | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\HidBatt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hidinterrupt | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\hidinterrupt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hidserv | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HidUsb | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\hidusb.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HpSAMD | |
ImagePath REG_EXPAND_SZ System32\drivers\HpSAMD.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP | |
ImagePath REG_EXPAND_SZ system32\drivers\HTTP.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hvcrash | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\hvcrash.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HvHost | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hvservice | |
ImagePath REG_EXPAND_SZ system32\drivers\hvservice.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HwNClx0101 | |
ImagePath REG_EXPAND_SZ System32\Drivers\mshwnclx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hwpolicy | |
ImagePath REG_EXPAND_SZ System32\drivers\hwpolicy.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\hyperkbd | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\hyperkbd.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HyperVideo | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\HyperVideo.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\i8042prt | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\i8042prt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iaLPSSi_GPIO | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\iaLPSSi_GPIO.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iaLPSSi_I2C | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\iaLPSSi_I2C.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iaStorAVC | |
ImagePath REG_EXPAND_SZ System32\drivers\iaStorAVC.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iaStorV | |
ImagePath REG_EXPAND_SZ System32\drivers\iaStorV.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ibbus | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ibbus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\icssvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IKEEXT | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IndirectKmd | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\IndirectKmd.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\InstallService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\intelide | |
ImagePath REG_EXPAND_SZ system32\drivers\intelide.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\intelpep | |
ImagePath REG_EXPAND_SZ System32\drivers\intelpep.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\intelppm | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\intelppm.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IpFilterDriver | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\ipfltdrv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iphlpsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetSvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPMIDRV | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\IPMIDrv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPNAT | |
ImagePath REG_EXPAND_SZ System32\drivers\ipnat.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPsecGW | |
ImagePath REG_EXPAND_SZ system32\drivers\ipsecgw.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\IPT | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ipt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\isapnp | |
ImagePath REG_EXPAND_SZ System32\drivers\isapnp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\iScsiPrt | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\msiscsi.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ItSas35i | |
ImagePath REG_EXPAND_SZ System32\drivers\ItSas35i.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kbdclass | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\kbdclass.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kbdhid | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\kbdhid.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\kdnic | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\kdnic.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KeyIso | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\lsass.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KPSSVC | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k KpsSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KSecDD | |
ImagePath REG_EXPAND_SZ System32\Drivers\ksecdd.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KSecPkg | |
ImagePath REG_EXPAND_SZ System32\Drivers\ksecpkg.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ksthunk | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\ksthunk.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\KtmRm | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k smbsvcs | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lfsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LicenseManager | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lltdio | |
ImagePath REG_EXPAND_SZ system32\drivers\lltdio.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lltdsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lmhosts | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSI_SAS | |
ImagePath REG_EXPAND_SZ System32\drivers\lsi_sas.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSI_SAS2i | |
ImagePath REG_EXPAND_SZ System32\drivers\lsi_sas2i.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSI_SAS3i | |
ImagePath REG_EXPAND_SZ System32\drivers\lsi_sas3i.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSI_SSS | |
ImagePath REG_EXPAND_SZ System32\drivers\lsi_sss.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LSM | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\luafv | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\luafv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MapsBroker | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MariaDB | |
ImagePath REG_EXPAND_SZ "C:\Program Files\MariaDB 10.4\bin\mysqld.exe" "--defaults-file=C:\MariaDB\my.ini" "MariaDB" | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mausbhost | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mausbhost.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mausbip | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mausbip.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\megasas | |
ImagePath REG_EXPAND_SZ System32\drivers\megasas.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\megasas2i | |
ImagePath REG_EXPAND_SZ System32\drivers\MegaSas2i.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\megasas35i | |
ImagePath REG_EXPAND_SZ System32\drivers\megasas35i.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\megasr | |
ImagePath REG_EXPAND_SZ System32\drivers\megasr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Microsoft_Bluetooth_AvrcpTransport | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mlx4_bus | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mlx4_bus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MMCSS | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\mmcss.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Modem | |
ImagePath REG_EXPAND_SZ system32\drivers\modem.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\monitor | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\monitor.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mouclass | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mouclass.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mouhid | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mouhid.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mountmgr | |
ImagePath REG_EXPAND_SZ System32\drivers\mountmgr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mpsdrv | |
ImagePath REG_EXPAND_SZ System32\drivers\mpsdrv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mpssvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mrxsmb | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\mrxsmb.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mrxsmb20 | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\mrxsmb20.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MsBridge | |
ImagePath REG_EXPAND_SZ System32\drivers\bridge.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSDTC | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\msdtc.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\msgpiowin32 | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\msgpiowin32.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mshidkmdf | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mshidkmdf.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mshidumdf | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mshidumdf.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\msisadrv | |
ImagePath REG_EXPAND_SZ System32\drivers\msisadrv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSiSCSI | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\msiserver | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\msiexec.exe /V | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSKSSRV | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MSKSSRV.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MsLbfoProvider | |
ImagePath REG_EXPAND_SZ System32\drivers\MsLbfoProvider.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MsLldp | |
ImagePath REG_EXPAND_SZ system32\drivers\mslldp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSPCLOCK | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MSPCLOCK.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSPQM | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MSPQM.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MsSecFlt | |
ImagePath REG_EXPAND_SZ system32\drivers\mssecflt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mssmbios | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\mssmbios.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSTEE | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MSTEE.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MTConfig | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\MTConfig.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Mup | |
ImagePath REG_EXPAND_SZ System32\Drivers\mup.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\mvumis | |
ImagePath REG_EXPAND_SZ System32\drivers\mvumis.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NcaSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetSvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NcbService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ndfltr | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ndfltr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NDIS | |
ImagePath REG_EXPAND_SZ system32\drivers\ndis.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisCap | |
ImagePath REG_EXPAND_SZ System32\drivers\ndiscap.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisImPlatform | |
ImagePath REG_EXPAND_SZ System32\drivers\NdisImPlatform.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisTapi | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\ndistapi.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ndisuio | |
ImagePath REG_EXPAND_SZ system32\drivers\ndisuio.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisVirtualBus | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\NdisVirtualBus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NdisWan | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ndiswan.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ndiswanlegacy | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\ndiswan.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ndproxy | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\NDProxy.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetAdapterCx | |
ImagePath REG_EXPAND_SZ system32\drivers\NetAdapterCx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBIOS | |
ImagePath REG_EXPAND_SZ system32\drivers\netbios.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetBT | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\netbt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\lsass.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netman | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\netprofm | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetSetupSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NetTcpPortSharing | |
ImagePath REG_EXPAND_SZ %systemroot%\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\netvsc | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\netvsc.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NgcCtnrSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NgcSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\NlaSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\npsvctrig | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\npsvctrig.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nsi | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nsiproxy | |
ImagePath REG_EXPAND_SZ system32\drivers\nsiproxy.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nvdimm | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\nvdimm.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nvraid | |
ImagePath REG_EXPAND_SZ System32\drivers\nvraid.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nvstor | |
ImagePath REG_EXPAND_SZ System32\drivers\nvstor.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Parport | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\parport.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\partmgr | |
ImagePath REG_EXPAND_SZ System32\drivers\partmgr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PcaSvc | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pci | |
ImagePath REG_EXPAND_SZ System32\drivers\pci.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pciide | |
ImagePath REG_EXPAND_SZ System32\drivers\pciide.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pcmcia | |
ImagePath REG_EXPAND_SZ System32\drivers\pcmcia.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pcw | |
ImagePath REG_EXPAND_SZ System32\drivers\pcw.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pdc | |
ImagePath REG_EXPAND_SZ system32\drivers\pdc.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PEAUTH | |
ImagePath REG_EXPAND_SZ system32\drivers\peauth.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\percsas2i | |
ImagePath REG_EXPAND_SZ System32\drivers\percsas2i.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\percsas3i | |
ImagePath REG_EXPAND_SZ System32\drivers\percsas3i.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PerfHost | |
ImagePath REG_EXPAND_SZ %SystemRoot%\SysWow64\perfhost.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PhoneSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PimIndexMaintenanceSvc_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PktMon | |
ImagePath REG_EXPAND_SZ system32\drivers\PktMon.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pla | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PlugPlay | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\pmem | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\pmem.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PNPMEM | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\pnpmem.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PolicyAgent | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k NetworkServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Power | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PptpMiniport | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\raspptp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintNotify | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k print | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k PrintWorkflow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k PrintWorkflow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k PrintWorkflow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k PrintWorkflow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PrintWorkflowUserSvc_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k PrintWorkflow | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Processor | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\processr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ProfSvc | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Psched | |
ImagePath REG_EXPAND_SZ System32\drivers\pacer.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\PushToInstall | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\qebdrv | |
ImagePath REG_EXPAND_SZ System32\drivers\qevbda.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\qefcoe | |
ImagePath REG_EXPAND_SZ System32\drivers\qefcoe.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\qeois | |
ImagePath REG_EXPAND_SZ System32\drivers\qeois.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ql2300i | |
ImagePath REG_EXPAND_SZ System32\drivers\ql2300i.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ql40xx2i | |
ImagePath REG_EXPAND_SZ System32\drivers\ql40xx2i.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\qlfcoei | |
ImagePath REG_EXPAND_SZ System32\drivers\qlfcoei.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QWAVE | |
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\QWAVEdrv | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\qwavedrv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ramdisk | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\ramdisk.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasAcd | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\rasacd.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasAgileVpn | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\AgileVpn.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasAuto | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasGre | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rasgre.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Rasl2tp | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rasl2tp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasMan | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasPppoe | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\raspppoe.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RasSstp | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rassstp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rdbss | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\rdbss.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rdpbus | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rdpbus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RDPDR | |
ImagePath REG_EXPAND_SZ System32\drivers\rdpdr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RdpVideoMiniport | |
ImagePath REG_EXPAND_SZ System32\drivers\rdpvideominiport.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteRegistry | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k localService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RFCOMM | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rfcomm.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rhproxy | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\rhproxy.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RmSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RpcEptMapper | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k RPCSS -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RpcLocator | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\locator.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RpcSs | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k rpcss -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RSoPProv | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\RSoPProv.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\rspndr | |
ImagePath REG_EXPAND_SZ system32\drivers\rspndr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\s3cap | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vms3cap.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sacdrv | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\sacdrv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sacsvr | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SamSs | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\lsass.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sbp2port | |
ImagePath REG_EXPAND_SZ System32\drivers\sbp2port.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SCardSvr | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ScDeviceEnum | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\scfilter | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\scfilter.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Schedule | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\scmbus | |
ImagePath REG_EXPAND_SZ System32\drivers\scmbus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SCPolicySvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sdbus | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\sdbus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SDFRd | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\SDFRd.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sdstor | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\sdstor.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\seclogon | |
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SecurityHealthService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\SecurityHealthService.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SEMgrSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SENS | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Sense | |
ImagePath REG_EXPAND_SZ "%ProgramFiles%\Windows Defender Advanced Threat Protection\MsSense.exe" | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SensorDataService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\SensorDataService.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SensorService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SensrSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SerCx | |
ImagePath REG_EXPAND_SZ system32\drivers\SerCx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SerCx2 | |
ImagePath REG_EXPAND_SZ system32\drivers\SerCx2.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Serenum | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\serenum.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Serial | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\serial.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sermouse | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\sermouse.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SessionEnv | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sfloppy | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\sfloppy.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SgrmAgent | |
ImagePath REG_EXPAND_SZ system32\drivers\SgrmAgent.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SgrmBroker | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\SgrmBroker.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ShellHWDetection | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\shpamsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SiSRaid2 | |
ImagePath REG_EXPAND_SZ System32\drivers\SiSRaid2.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SiSRaid4 | |
ImagePath REG_EXPAND_SZ System32\drivers\sisraid4.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SmartSAMD | |
ImagePath REG_EXPAND_SZ System32\drivers\SmartSAMD.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\smbdirect | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\smbdirect.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\smphost | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k smphost | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SNMPTRAP | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\snmptrap.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\spaceport | |
ImagePath REG_EXPAND_SZ System32\drivers\spaceport.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SpbCx | |
ImagePath REG_EXPAND_SZ system32\drivers\SpbCx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Spooler | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\spoolsv.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\sppsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\sppsvc.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\srv2 | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\srv2.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\srvnet | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\srvnet.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSDPSRV | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ssh-agent | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\OpenSSH\ssh-agent.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SstpSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\StateRepository | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k appmodel -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\stexstor | |
ImagePath REG_EXPAND_SZ System32\drivers\stexstor.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\stisvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k imgsvc | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storahci | |
ImagePath REG_EXPAND_SZ System32\drivers\storahci.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storflt | |
ImagePath REG_EXPAND_SZ System32\drivers\vmstorfl.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\stornvme | |
ImagePath REG_EXPAND_SZ System32\drivers\stornvme.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storqosflt | |
ImagePath REG_EXPAND_SZ system32\drivers\storqosflt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\StorSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storufs | |
ImagePath REG_EXPAND_SZ System32\drivers\storufs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\storvsc | |
ImagePath REG_EXPAND_SZ System32\drivers\storvsc.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\svsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\swenum | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\DriverStore\FileRepository\swenum.inf_amd64_31f554b660026323\swenum.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\swprv | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k swprv | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Synth3dVsc | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\Synth3dVsc.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SysMain | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SystemEventsBroker | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k DcomLaunch -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TabletInputService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tapisrv | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip | |
ImagePath REG_EXPAND_SZ System32\drivers\tcpip.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip6 | |
ImagePath REG_EXPAND_SZ System32\drivers\tcpip.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tcpipreg | |
ImagePath REG_EXPAND_SZ System32\drivers\tcpipreg.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tdx | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\tdx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\terminpt | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\terminpt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TermService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k termsvcs | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Themes | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TieringEngineService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\TieringEngineService.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TimeBrokerSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TokenBroker | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TPM | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\tpm.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TrkWks | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TrustedInstaller | |
ImagePath REG_EXPAND_SZ %SystemRoot%\servicing\TrustedInstaller.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TsUsbFlt | |
ImagePath REG_EXPAND_SZ system32\drivers\tsusbflt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\TsUsbGD | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\TsUsbGD.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tsusbhub | |
ImagePath REG_EXPAND_SZ system32\drivers\tsusbhub.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tunnel | |
ImagePath REG_EXPAND_SZ System32\drivers\tunnel.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\tzautoupdate | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UALSVC | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UASPStor | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\uaspstor.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmCx0101 | |
ImagePath REG_EXPAND_SZ System32\Drivers\UcmCx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmTcpciCx0101 | |
ImagePath REG_EXPAND_SZ System32\Drivers\UcmTcpciCx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmUcsi | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UcmUcsi.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmUcsiAcpiClient | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UcmUcsiAcpiClient.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UcmUcsiCx0101 | |
ImagePath REG_EXPAND_SZ System32\Drivers\UcmUcsiCx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ucx01000 | |
ImagePath REG_EXPAND_SZ system32\drivers\ucx01000.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UdeCx | |
ImagePath REG_EXPAND_SZ system32\drivers\udecx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\udfs | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\udfs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UEFI | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UEFI.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UevAgentDriver | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\UevAgentDriver.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UevAgentService | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\AgentService.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ufx01000 | |
ImagePath REG_EXPAND_SZ system32\drivers\ufx01000.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UfxChipidea | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UfxChipidea.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ufxsynopsys | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\ufxsynopsys.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\umbus | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\umbus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UmPass | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\umpass.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UmRdpService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\System32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\System32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\System32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UnistoreSvc_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\System32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\upnphost | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceAndNoImpersonation -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UrsChipidea | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\urschipidea.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UrsCx01000 | |
ImagePath REG_EXPAND_SZ system32\drivers\urscx01000.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UrsSynopsys | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\urssynopsys.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbccgp | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbccgp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbehci | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbehci.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbhub | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbhub.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\USBHUB3 | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\UsbHub3.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbohci | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbohci.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbprint | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbprint.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbser | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbser.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\USBSTOR | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\USBSTOR.SYS | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbuhci | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\usbuhci.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\usbvideo | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\Drivers\usbvideo.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\USBXHCI | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\USBXHCI.SYS | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserDataSvc_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UserManager | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\UsoSvc | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VaultSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\lsass.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vdrvroot | |
ImagePath REG_EXPAND_SZ System32\drivers\vdrvroot.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vds | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\vds.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VerifierExt | |
ImagePath REG_EXPAND_SZ System32\drivers\VerifierExt.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VGAuthService | |
ImagePath REG_EXPAND_SZ "C:\Program Files\VMware\VMware Tools\VMware VGAuth\VGAuthService.exe" | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vhdmp | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vhdmp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vhf | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vhf.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vm3dmp | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vm3dmp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vm3dmp-debug | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vm3dmp-debug.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vm3dmp-stats | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vm3dmp-stats.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vm3dmp_loader | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vm3dmp_loader.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmbus | |
ImagePath REG_EXPAND_SZ System32\drivers\vmbus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VMBusHID | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\VMBusHID.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmci | |
ImagePath REG_EXPAND_SZ System32\drivers\vmci.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmgid | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmgid.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmhgfs | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\vmhgfs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicguestinterface | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicheartbeat | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k ICService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmickvpexchange | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicrdv | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k ICService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicshutdown | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmictimesync | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicvmsession | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmicvss | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VMMemCtl | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vmmemctl.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmmouse | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmmouse.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmrawdsk | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\DRIVERS\vmrawdsk.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VMTools | |
ImagePath REG_EXPAND_SZ "C:\Program Files\VMware\VMware Tools\vmtoolsd.exe" | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmusbmouse | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmusbmouse.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmvss | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\dllhost.exe /Processid:{31E13218-C792-4EAE-BD63-885ACCBE7FE8} | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vmxnet3ndis6 | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vmxnet3.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\volmgr | |
ImagePath REG_EXPAND_SZ System32\drivers\volmgr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\volmgrx | |
ImagePath REG_EXPAND_SZ System32\drivers\volmgrx.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\volsnap | |
ImagePath REG_EXPAND_SZ System32\drivers\volsnap.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\volume | |
ImagePath REG_EXPAND_SZ System32\drivers\volume.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vpci | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vpci.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vsmraid | |
ImagePath REG_EXPAND_SZ System32\drivers\vsmraid.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vsock | |
ImagePath REG_EXPAND_SZ system32\DRIVERS\vsock.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VSS | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\vssvc.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\VSTXRAID | |
ImagePath REG_EXPAND_SZ System32\drivers\vstxraid.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\vwifibus | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\vwifibus.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W32Time | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalService | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\w3logsvc | |
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k apphost | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\W3SVC | |
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k iissvcs | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WaaSMedicSvc | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k wusvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WacomPen | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\wacompen.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WalletService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k appmodel -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wanarp | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\wanarp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wanarpv6 | |
ImagePath REG_EXPAND_SZ System32\DRIVERS\wanarp.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WarpJITSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WAS | |
ImagePath REG_EXPAND_SZ %windir%\system32\svchost.exe -k iissvcs | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WbioSrvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k WbioSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wcifs | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\wcifs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wcmsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wcnfs | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\wcnfs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdBoot | |
ImagePath REG_EXPAND_SZ system32\drivers\wd\WdBoot.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wdf01000 | |
ImagePath REG_EXPAND_SZ system32\drivers\Wdf01000.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdFilter | |
ImagePath REG_EXPAND_SZ system32\drivers\wd\WdFilter.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdiServiceHost | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdiSystemHost | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdmCompanionFilter | |
ImagePath REG_EXPAND_SZ system32\drivers\WdmCompanionFilter.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdNisDrv | |
ImagePath REG_EXPAND_SZ system32\drivers\wd\WdNisDrv.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdNisSvc | |
ImagePath REG_EXPAND_SZ "%ProgramData%\Microsoft\Windows Defender\platform\4.18.1910.4-0\NisSrv.exe" | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Wecsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k NetworkService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WEPHOSTSVC | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k WepHostSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wercplsupport | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WerSvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k WerSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WFPLWFS | |
ImagePath REG_EXPAND_SZ System32\drivers\wfplwfs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WiaRpc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WIMMount | |
ImagePath REG_EXPAND_SZ system32\drivers\wimmount.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinDefend | |
ImagePath REG_EXPAND_SZ "C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1910.4-0\MsMpEng.exe" | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WindowsTrustedRT | |
ImagePath REG_EXPAND_SZ system32\drivers\WindowsTrustedRT.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WindowsTrustedRTProxy | |
ImagePath REG_EXPAND_SZ System32\drivers\WindowsTrustedRTProxy.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinHttpAutoProxySvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinMad | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\winmad.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Winmgmt | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinNat | |
ImagePath REG_EXPAND_SZ system32\drivers\winnat.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinQuic | |
ImagePath REG_EXPAND_SZ system32\drivers\winquic.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinRM | |
ImagePath REG_EXPAND_SZ %SystemRoot%\System32\svchost.exe -k NetworkService -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WINUSB | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\WinUSB.SYS | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinVerbs | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\winverbs.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wisvc | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wlidsvc | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WmiAcpi | |
ImagePath REG_EXPAND_SZ \SystemRoot\System32\drivers\wmiacpi.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wmiApSrv | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\wbem\WmiApSrv.exe | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WMPNetworkSvc | |
ImagePath REG_EXPAND_SZ "%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe" | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WPDBusEnum | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpdUpFltr | |
ImagePath REG_EXPAND_SZ System32\drivers\WpdUpFltr.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnService | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService | |
ImagePath REG_EXPAND_SZ %SystemRoot%\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService_4248c | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService_4b162 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService_80d08 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WpnUserService_ee306 | |
ImagePath REG_EXPAND_SZ C:\Windows\system32\svchost.exe -k UnistackSvcGroup | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\ws2ifsl | |
ImagePath REG_EXPAND_SZ \SystemRoot\system32\drivers\ws2ifsl.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WSearch | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\SearchIndexer.exe /Embedding | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wuauserv | |
ImagePath REG_EXPAND_SZ %systemroot%\system32\svchost.exe -k netsvcs -p | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WudfPf | |
ImagePath REG_EXPAND_SZ system32\drivers\WudfPf.sys | |
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WUDFRd | |
ImagePath REG_EXPAND_SZ system32\drivers\WudfRd.sys | |
End of search: 589 match(es) found. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET CLR Data | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET CLR Networking | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET CLR Networking 4.0.0.0 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET Data Provider for Oracle | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET Data Provider for SqlServer | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NET Memory Cache 4.0 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\.NETFramework | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\1394ohci | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\3ware | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ACPI | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AcpiDev | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\acpiex | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\acpipagr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AcpiPmi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\acpitime | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ADOVMPPackage | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ADP80XX | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\adsi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ADWS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AFD | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\afunix | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ahcache | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AJRouter | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ALG | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AmdK8 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AmdPPM | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\amdsata | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\amdsbs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\amdxata | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppHostSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppID | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppIDSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Appinfo | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\applockerfltr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppMgmt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppReadiness | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppVClient | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppvStrm | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppvVemgr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppvVfs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AppXSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\arcsas | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AsyncMac | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\atapi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AudioEndpointBuilder | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Audiosrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\AxInstSV | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\b06bdrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bam | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BasicDisplay | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BasicRender | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BattC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bcmfn2 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Beep | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bfadfcoei | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bfadi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BFE | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bindflt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BITS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bowser | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BrokerInfrastructure | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BTAGService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BthAvctpSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BthEnum | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BthLEEnum | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BthMini | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BTHPORT | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bthserv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\BTHUSB | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bttflt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\buttonconverter | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bxfcoe | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\bxois | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\camsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CapImg | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CaptureService_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cbdhsvc_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cdfs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CDPUserSvc_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cdrom | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CertPropSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cht4iscsi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cht4vbd | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CldFlt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CLFS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ClipSVC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\clr_optimization_v4.0.30319_32 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\clr_optimization_v4.0.30319_64 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CmBatt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CNG | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\cnghwassist | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\coherence | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CompositeBus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\COMSysApp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\condrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ConsentUxUserSvc_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CoreMessagingRegistrar | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CoreUI | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\crypt32 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CryptSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CSC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\CscService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dam | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DCLocator | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DcomLaunch | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\defragsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DeviceAssociationService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DeviceInstall | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicePickerUserSvc_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevicesFlowUserSvc_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DevQueryBroker | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Dfs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Dfsc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DFSR | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Dhcp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\diagnosticshub.standardcollector.service | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DiagTrack | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Disk | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DmEnrollmentSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dmvsc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dmwappushservice | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DNS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Dnscache | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DoSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\dot3svc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DPS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\drmkaud | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DsmSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DsSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\DXGKrnl | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\e1iexpress | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Eaphost | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ebdrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EFS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EhStorClass | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EhStorTcgDrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\elxfcoe | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\elxstor | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\embeddedmode | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EntAppSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ErrDev | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ESENT | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EventLog | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\EventSystem | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\exfat | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fastfat | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fcvsc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fdc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\fdPHost | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FDResPub | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FileCrypt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FileInfo | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Filetrace | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\flpydisk | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FltMgr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FontCache | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FrameServer | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\FsDepends | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Fs_Rec | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gencounter | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\genericusbfn | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\GPIOClx0101 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\gpsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\GraphicsPerfSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HdAudAddService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HDAudBus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HidBatt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hidinterrupt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hidserv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HidUsb | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HomeGroupListener | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HpSAMD | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HTTP | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hvcrash | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HvHost | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hvservice | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HwNClx0101 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hwpolicy | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\hyperkbd | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\HyperVideo | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\i8042prt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iaLPSSi_GPIO | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iaLPSSi_I2C | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iaStorAVC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iaStorV | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ibbus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\icssvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IKEEXT | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IndirectKmd | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\inetaccs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\InetInfo | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\InstallService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\intelide | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\intelpep | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\intelppm | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iorate | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IpFilterDriver | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iphlpsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IPMIDRV | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IPNAT | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IPsecGW | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\IPT | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\isapnp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\iScsiPrt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ItSas35i | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\kbdclass | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\kbdhid | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\kdnic | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KeyIso | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KPSSVC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KSecDD | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KSecPkg | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ksthunk | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\KtmRm | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LanmanServer | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LanmanWorkstation | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ldap | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\lfsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LicenseManager | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\lltdio | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\lltdsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\lmhosts | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Lsa | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSI_SAS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSI_SAS2i | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSI_SAS3i | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSI_SSS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\LSM | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\luafv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MapsBroker | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MariaDB | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mausbhost | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mausbip | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\megasas | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\megasas2i | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\megasas35i | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\megasr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Microsoft_Bluetooth_AvrcpTransport | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mlx4_bus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MMCSS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Modem | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\monitor | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mouclass | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mouhid | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mountmgr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mpsdrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mpssvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mrxsmb | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mrxsmb20 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsBridge | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSDTC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSDTC Bridge 4.0.0.0 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Msfs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\msgpiowin32 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mshidkmdf | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mshidumdf | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\msisadrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSiSCSI | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\msiserver | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSKSSRV | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsLbfoProvider | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsLldp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSPCLOCK | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSPQM | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsRPC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSSCNTRS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MsSecFlt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mssmbios | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MSTEE | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\MTConfig | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Mup | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\mvumis | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\napagent | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NcaSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NcbService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ndfltr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NDIS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisCap | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisImPlatform | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisTapi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ndisuio | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisVirtualBus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NdisWan | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ndiswanlegacy | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ndproxy | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetAdapterCx | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetBIOS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetbiosSmb | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetBT | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Netlogon | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Netman | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\netprofm | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetSetupSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NetTcpPortSharing | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\netvsc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\netvscvfpp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NgcCtnrSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NgcSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\NlaSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Npfs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\npsvctrig | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nsi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nsiproxy | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ntfs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Null | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nvdimm | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nvraid | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\nvstor | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Parport | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\partmgr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PcaSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pci | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pciide | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pcmcia | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pcw | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pdc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PEAUTH | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\percsas2i | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\percsas3i | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfDisk | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfHost | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfNet | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfOS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PerfProc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PhoneSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PimIndexMaintenanceSvc_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PktMon | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pla | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PlugPlay | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pmem | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PNPMEM | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PolicyAgent | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PortProxy | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Power | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PptpMiniport | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintNotify | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PrintWorkflowUserSvc_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Processor | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ProfSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Psched | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\PushToInstall | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\pvscsi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\qebdrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\qefcoe | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\qeois | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ql2300i | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ql40xx2i | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\qlfcoei | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\QWAVE | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\QWAVEdrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ramdisk | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasAcd | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasAgileVpn | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasAuto | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasGre | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Rasl2tp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasMan | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasPppoe | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RasSstp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rdbss | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RDMANDK | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rdpbus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RDPDR | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RDPNP | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RDPUDD | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RdpVideoMiniport | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ReFS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ReFSv1 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RemoteAccess | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RemoteRegistry | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RFCOMM | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rhelfltr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rhelnet | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rhelscsi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rhproxy | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RmSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RpcEptMapper | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RpcLocator | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RpcSs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\RSoPProv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\rspndr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\s3cap | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sacdrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sacsvr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SamSs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sbp2port | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SCardSvr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ScDeviceEnum | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\scfilter | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Schedule | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\scmbus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SCPolicySvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sdbus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SDFRd | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sdstor | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\seclogon | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SecurityHealthService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SEMgrSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SENS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Sense | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SensorDataService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SensorService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SensrSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SerCx | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SerCx2 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Serenum | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Serial | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sermouse | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SessionEnv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sfloppy | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SgrmAgent | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SgrmBroker | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SharedAccess | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ShellHWDetection | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\shpamsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SiSRaid2 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SiSRaid4 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SmartPqi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SmartSAMD | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\smbdirect | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\smphost | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SMSvcHost 4.0.0.0 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SNMP | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SNMPTRAP | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\spaceport | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SpbCx | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Spooler | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sppsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\srv2 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\srvnet | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SSDPSRV | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ssh-agent | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SstpSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\StateRepository | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\stexstor | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\stisvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storahci | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storflt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\stornvme | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storqosflt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\StorSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storufs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\storvsc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\svsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\swenum | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\swprv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Synth3dVsc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SysMain | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\SystemEventsBroker | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TabletInputService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tapisrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Tcpip | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Tcpip6 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TCPIP6TUNNEL | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tcpipreg | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TCPIPTUNNEL | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tdx | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\terminpt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TermService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Themes | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TieringEngineService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TimeBrokerSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TokenBroker | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\toolsrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TPM | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TrkWks | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TrustedInstaller | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TSDDD | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TsUsbFlt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\TsUsbGD | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tsusbhub | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tunnel | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\tzautoupdate | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UALSVC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UASPStor | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmCx0101 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmTcpciCx0101 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmUcsi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmUcsiAcpiClient | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UcmUcsiCx0101 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ucx01000 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UdeCx | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\udfs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UEFI | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UevAgentDriver | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UevAgentService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Ufx01000 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UfxChipidea | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ufxsynopsys | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UGatherer | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UGTHRSVC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\umbus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UmPass | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UmRdpService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UnistoreSvc_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\upnphost | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UrsChipidea | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UrsCx01000 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UrsSynopsys | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbccgp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbehci | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbhub | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\USBHUB3 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbohci | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbprint | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbser | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\USBSTOR | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbuhci | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\usbvideo | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\USBXHCI | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserDataSvc_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UserManager | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\UsoSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VaultSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vdrvroot | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vds | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VerifierExt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VGAuthService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vhdmp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vhf | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vm3dmp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vm3dmp-debug | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vm3dmp-stats | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vm3dmp_loader | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmbus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VMBusHID | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmci | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmgid | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmhgfs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicguestinterface | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicheartbeat | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmickvpexchange | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicrdv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicshutdown | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmictimesync | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicvmsession | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmicvss | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VMMemCtl | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmmouse | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmrawdsk | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VMTools | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmusbmouse | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmvss | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmwefifw | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vmxnet3ndis6 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\volmgr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\volmgrx | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\volsnap | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\volume | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vpci | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VPCMap | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vsmraid | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vsock | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VSS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\VSTXRAID | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\vwifibus | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\W32Time | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\w3logsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\W3SVC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WaaSMedicSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WacomPen | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WalletService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wanarp | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wanarpv6 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WarpJITSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WAS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WbioSrvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wcifs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Wcmsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wcnfs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdBoot | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Wdf01000 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdFilter | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdiServiceHost | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdiSystemHost | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdmCompanionFilter | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdNisDrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WdNisSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Wecsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WEPHOSTSVC | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wercplsupport | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WerSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WFPLWFS | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WiaRpc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WIMMount | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinDefend | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Windows Workflow Foundation 4.0.0.0 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WindowsTrustedRT | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WindowsTrustedRTProxy | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinHttpAutoProxySvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinMad | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Winmgmt | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinNat | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinQuic | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinRM | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Winsock | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinSock2 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WINUSB | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WinVerbs | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wisvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WlanSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wlidsvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WmiAcpi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WmiApRpl | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wmiApSrv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WMPNetworkSvc | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\Wof | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\workerdd | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WPDBusEnum | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpdUpFltr | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService_4248c | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService_4b162 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService_80d08 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WpnUserService_ee306 | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\ws2ifsl | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WSearch | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WSearchIdxPi | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\wuauserv | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WudfPf | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\WUDFRd | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\xmlprov | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{60E8E863-2974-47D1-89E0-E507677AA14F} | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{6D197A8D-04EB-44C6-B602-FF2798EB7BB3} | |
HKEY_LOCAL_MACHINE\system\currentcontrolset\services\{CB20B026-8E3E-4F7D-88FD-E7FB0E93CF39} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
1394ohci | |
3ware | |
ACPI | |
AcpiDev | |
acpiex | |
acpipagr | |
AcpiPmi | |
acpitime | |
ADOVMPPackage | |
ADP80XX | |
adsi | |
ADWS | |
AFD | |
afunix | |
ahcache | |
AJRouter | |
ALG | |
AmdK8 | |
AmdPPM | |
amdsata | |
amdsbs | |
amdxata | |
AppHostSvc | |
AppID | |
AppIDSvc | |
Appinfo | |
applockerfltr | |
AppMgmt | |
AppReadiness | |
AppVClient | |
AppvStrm | |
AppvVemgr | |
AppvVfs | |
AppXSvc | |
arcsas | |
AsyncMac | |
atapi | |
AudioEndpointBuilder | |
Audiosrv | |
AxInstSV | |
b06bdrv | |
bam | |
BasicDisplay | |
BasicRender | |
BattC | |
bcmfn2 | |
Beep | |
bfadfcoei | |
bfadi | |
BFE | |
bindflt | |
BITS | |
bowser | |
BrokerInfrastructure | |
BTAGService | |
BthAvctpSvc | |
BthEnum | |
BthLEEnum | |
BthMini | |
BTHPORT | |
bthserv | |
BTHUSB | |
bttflt | |
buttonconverter | |
bxfcoe | |
bxois | |
camsvc | |
CapImg | |
CaptureService | |
CaptureService_4248c | |
CaptureService_4b162 | |
CaptureService_80d08 | |
CaptureService_ee306 | |
cbdhsvc | |
cbdhsvc_4248c | |
cbdhsvc_4b162 | |
cbdhsvc_80d08 | |
cbdhsvc_ee306 | |
cdfs | |
CDPSvc | |
CDPUserSvc | |
CDPUserSvc_4248c | |
CDPUserSvc_4b162 | |
CDPUserSvc_80d08 | |
CDPUserSvc_ee306 | |
cdrom | |
CertPropSvc | |
cht4iscsi | |
cht4vbd | |
CldFlt | |
CLFS | |
ClipSVC | |
clr_optimization_v4.0.30319_32 | |
clr_optimization_v4.0.30319_64 | |
CmBatt | |
CNG | |
cnghwassist | |
coherence | |
CompositeBus | |
COMSysApp | |
condrv | |
ConsentUxUserSvc | |
ConsentUxUserSvc_4248c | |
ConsentUxUserSvc_4b162 | |
ConsentUxUserSvc_80d08 | |
ConsentUxUserSvc_ee306 | |
CoreMessagingRegistrar | |
CoreUI | |
crypt32 | |
CryptSvc | |
CSC | |
CscService | |
dam | |
DCLocator | |
DcomLaunch | |
defragsvc | |
DeviceAssociationService | |
DeviceInstall | |
DevicePickerUserSvc | |
DevicePickerUserSvc_4248c | |
DevicePickerUserSvc_4b162 | |
DevicePickerUserSvc_80d08 | |
DevicePickerUserSvc_ee306 | |
DevicesFlowUserSvc | |
DevicesFlowUserSvc_4248c | |
DevicesFlowUserSvc_4b162 | |
DevicesFlowUserSvc_80d08 | |
DevicesFlowUserSvc_ee306 | |
DevQueryBroker | |
Dfs | |
Dfsc | |
DFSR | |
Dhcp | |
diagnosticshub.standardcollector.service | |
DiagTrack | |
Disk | |
DmEnrollmentSvc | |
dmvsc | |
dmwappushservice | |
DNS | |
Dnscache | |
DoSvc | |
dot3svc | |
DPS | |
drmkaud | |
DsmSvc | |
DsSvc | |
DXGKrnl | |
e1iexpress | |
Eaphost | |
ebdrv | |
EFS | |
EhStorClass | |
EhStorTcgDrv | |
elxfcoe | |
elxstor | |
embeddedmode | |
EntAppSvc | |
ErrDev | |
ESENT | |
EventLog | |
EventSystem | |
exfat | |
fastfat | |
fcvsc | |
fdc | |
fdPHost | |
FDResPub | |
FileCrypt | |
FileInfo | |
Filetrace | |
flpydisk | |
FltMgr | |
FontCache | |
FrameServer | |
FsDepends | |
Fs_Rec | |
gencounter | |
genericusbfn | |
GPIOClx0101 | |
gpsvc | |
GraphicsPerfSvc | |
HdAudAddService | |
HDAudBus | |
HidBatt | |
hidinterrupt | |
hidserv | |
HidUsb | |
HomeGroupListener | |
HpSAMD | |
HTTP | |
hvcrash | |
HvHost | |
hvservice | |
HwNClx0101 | |
hwpolicy | |
hyperkbd | |
HyperVideo | |
i8042prt | |
iaLPSSi_GPIO | |
iaLPSSi_I2C | |
iaStorAVC | |
iaStorV | |
ibbus | |
icssvc | |
IKEEXT | |
IndirectKmd | |
inetaccs | |
InetInfo | |
InstallService | |
intelide | |
intelpep | |
intelppm | |
iorate | |
IpFilterDriver | |
iphlpsvc | |
IPMIDRV | |
IPNAT | |
IPsecGW | |
IPT | |
isapnp | |
iScsiPrt | |
ItSas35i | |
kbdclass | |
kbdhid | |
kdnic | |
KeyIso | |
KPSSVC | |
KSecDD | |
KSecPkg | |
ksthunk | |
KtmRm | |
LanmanServer | |
LanmanWorkstation | |
ldap | |
lfsvc | |
LicenseManager | |
lltdio | |
lltdsvc | |
lmhosts | |
Lsa | |
LSI_SAS | |
LSI_SAS2i | |
LSI_SAS3i | |
LSI_SSS | |
LSM | |
luafv | |
MapsBroker | |
MariaDB | |
mausbhost | |
mausbip | |
megasas | |
megasas2i | |
megasas35i | |
megasr | |
Microsoft_Bluetooth_AvrcpTransport | |
mlx4_bus | |
MMCSS | |
Modem | |
monitor | |
mouclass | |
mouhid | |
mountmgr | |
mpsdrv | |
mpssvc | |
mrxsmb | |
mrxsmb20 | |
MsBridge | |
MSDTC | |
MSDTC Bridge 4.0.0.0 | |
Msfs | |
msgpiowin32 | |
mshidkmdf | |
mshidumdf | |
msisadrv | |
MSiSCSI | |
msiserver | |
MSKSSRV | |
MsLbfoProvider | |
MsLldp | |
MSPCLOCK | |
MSPQM | |
MsRPC | |
MSSCNTRS | |
MsSecFlt | |
mssmbios | |
MSTEE | |
MTConfig | |
Mup | |
mvumis | |
napagent | |
NcaSvc | |
NcbService | |
ndfltr | |
NDIS | |
NdisCap | |
NdisImPlatform | |
NdisTapi | |
Ndisuio | |
NdisVirtualBus | |
NdisWan | |
ndiswanlegacy | |
ndproxy | |
NetAdapterCx | |
NetBIOS | |
NetbiosSmb | |
NetBT | |
Netlogon | |
Netman | |
netprofm | |
NetSetupSvc | |
NetTcpPortSharing | |
netvsc | |
netvscvfpp | |
NgcCtnrSvc | |
NgcSvc | |
NlaSvc | |
Npfs | |
npsvctrig | |
nsi | |
nsiproxy | |
Ntfs | |
Null | |
nvdimm | |
nvraid | |
nvstor | |
Parport | |
partmgr | |
PcaSvc | |
pci | |
pciide | |
pcmcia | |
pcw | |
pdc | |
PEAUTH | |
percsas2i | |
percsas3i | |
PerfDisk | |
PerfHost | |
PerfNet | |
PerfOS | |
PerfProc | |
PhoneSvc | |
PimIndexMaintenanceSvc | |
PimIndexMaintenanceSvc_4248c | |
PimIndexMaintenanceSvc_4b162 | |
PimIndexMaintenanceSvc_80d08 | |
PimIndexMaintenanceSvc_ee306 | |
PktMon | |
pla | |
PlugPlay | |
pmem | |
PNPMEM | |
PolicyAgent | |
PortProxy | |
Power | |
PptpMiniport | |
PrintNotify | |
PrintWorkflowUserSvc | |
PrintWorkflowUserSvc_4248c | |
PrintWorkflowUserSvc_4b162 | |
PrintWorkflowUserSvc_80d08 | |
PrintWorkflowUserSvc_ee306 | |
Processor | |
ProfSvc | |
Psched | |
PushToInstall | |
pvscsi | |
qebdrv | |
qefcoe | |
qeois | |
ql2300i | |
ql40xx2i | |
qlfcoei | |
QWAVE | |
QWAVEdrv | |
Ramdisk | |
RasAcd | |
RasAgileVpn | |
RasAuto | |
RasGre | |
Rasl2tp | |
RasMan | |
RasPppoe | |
RasSstp | |
rdbss | |
RDMANDK | |
rdpbus | |
RDPDR | |
RDPNP | |
RDPUDD | |
RdpVideoMiniport | |
ReFS | |
ReFSv1 | |
RemoteAccess | |
RemoteRegistry | |
RFCOMM | |
rhelfltr | |
rhelnet | |
rhelscsi | |
rhproxy | |
RmSvc | |
RpcEptMapper | |
RpcLocator | |
RpcSs | |
RSoPProv | |
rspndr | |
s3cap | |
sacdrv | |
sacsvr | |
SamSs | |
sbp2port | |
SCardSvr | |
ScDeviceEnum | |
scfilter | |
Schedule | |
scmbus | |
SCPolicySvc | |
sdbus | |
SDFRd | |
sdstor | |
seclogon | |
SecurityHealthService | |
SEMgrSvc | |
SENS | |
Sense | |
SensorDataService | |
SensorService | |
SensrSvc | |
SerCx | |
SerCx2 | |
Serenum | |
Serial | |
sermouse | |
SessionEnv | |
sfloppy | |
SgrmAgent | |
SgrmBroker | |
SharedAccess | |
ShellHWDetection | |
shpamsvc | |
SiSRaid2 | |
SiSRaid4 | |
SmartPqi | |
SmartSAMD | |
smbdirect | |
smphost | |
SMSvcHost 4.0.0.0 | |
SNMP | |
SNMPTRAP | |
spaceport | |
SpbCx | |
Spooler | |
sppsvc | |
srv2 | |
srvnet | |
SSDPSRV | |
ssh-agent | |
SstpSvc | |
StateRepository | |
stexstor | |
stisvc | |
storahci | |
storflt | |
stornvme | |
storqosflt | |
StorSvc | |
storufs | |
storvsc | |
svsvc | |
swenum | |
swprv | |
Synth3dVsc | |
SysMain | |
SystemEventsBroker | |
TabletInputService | |
tapisrv | |
Tcpip | |
Tcpip6 | |
TCPIP6TUNNEL | |
tcpipreg | |
TCPIPTUNNEL | |
tdx | |
terminpt | |
TermService | |
Themes | |
TieringEngineService | |
TimeBrokerSvc | |
TokenBroker | |
toolsrv | |
TPM | |
TrkWks | |
TrustedInstaller | |
TSDDD | |
TsUsbFlt | |
TsUsbGD | |
tsusbhub | |
tunnel | |
tzautoupdate | |
UALSVC | |
UASPStor | |
UcmCx0101 | |
UcmTcpciCx0101 | |
UcmUcsi | |
UcmUcsiAcpiClient | |
UcmUcsiCx0101 | |
Ucx01000 | |
UdeCx | |
udfs | |
UEFI | |
UevAgentDriver | |
UevAgentService | |
Ufx01000 | |
UfxChipidea | |
ufxsynopsys | |
UGatherer | |
UGTHRSVC | |
umbus | |
UmPass | |
UmRdpService | |
UnistoreSvc | |
UnistoreSvc_4248c | |
UnistoreSvc_4b162 | |
UnistoreSvc_80d08 | |
UnistoreSvc_ee306 | |
upnphost | |
UrsChipidea | |
UrsCx01000 | |
UrsSynopsys | |
usbccgp | |
usbehci | |
usbhub | |
USBHUB3 | |
usbohci | |
usbprint | |
usbser | |
USBSTOR | |
usbuhci | |
usbvideo | |
USBXHCI | |
UserDataSvc | |
UserDataSvc_4248c | |
UserDataSvc_4b162 | |
UserDataSvc_80d08 | |
UserDataSvc_ee306 | |
UserManager | |
UsoSvc | |
VaultSvc | |
vdrvroot | |
vds | |
VerifierExt | |
VGAuthService | |
vhdmp | |
vhf | |
vm3dmp | |
vm3dmp-debug | |
vm3dmp-stats | |
vm3dmp_loader | |
vmbus | |
VMBusHID | |
vmci | |
vmgid | |
vmhgfs | |
vmicguestinterface | |
vmicheartbeat | |
vmickvpexchange | |
vmicrdv | |
vmicshutdown | |
vmictimesync | |
vmicvmsession | |
vmicvss | |
VMMemCtl | |
vmmouse | |
vmrawdsk | |
VMTools | |
vmusbmouse | |
vmvss | |
vmwefifw | |
vmxnet3ndis6 | |
volmgr | |
volmgrx | |
volsnap | |
volume | |
vpci | |
VPCMap | |
vsmraid | |
vsock | |
VSS | |
VSTXRAID | |
vwifibus | |
W32Time | |
w3logsvc | |
W3SVC | |
WaaSMedicSvc | |
WacomPen | |
WalletService | |
wanarp | |
wanarpv6 | |
WarpJITSvc | |
WAS | |
WbioSrvc | |
wcifs | |
Wcmsvc | |
wcnfs | |
WdBoot | |
Wdf01000 | |
WdFilter | |
WdiServiceHost | |
WdiSystemHost | |
WdmCompanionFilter | |
WdNisDrv | |
WdNisSvc | |
Wecsvc | |
WEPHOSTSVC | |
wercplsupport | |
WerSvc | |
WFPLWFS | |
WiaRpc | |
WIMMount | |
WinDefend | |
Windows Workflow Foundation 4.0.0.0 | |
WindowsTrustedRT | |
WindowsTrustedRTProxy | |
WinHttpAutoProxySvc |