SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE
SOFTWARE\\AUTOIT V3\\AUTOIT
SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\URLSEARCHHOOKS
SOFTWARE\\MICROSOFT\\ACTIVE SETUP\\INSTALLED COMPONENTS
SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\POWERSHELL
SYSTEM\\CURRENTCONTROLSET\\CONTROL\\SAFEBOOT
SOFTWARE\\POLICIES\\MICROSOFT\\WINDOWS\\WINDOWSUPDATE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\SHELL
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\USERINIT
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS\\APPINIT_DLLS
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINDOWS\\LOADAPPINIT_DLLS
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\EXPLORER\\BROWSER HELPER OBJECTS
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\SHELLSERVICEOBJECTDELAYLOAD
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\WINLOGON\\NOTIFY
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\IMAGE FILE EXECUTION OPTIONS
SYSTEM\\CURRENTCONTROLSET\\SERVICES\\WINSOCK2\\PARAMETERS\\PROTOCOL_CATALOG9
SYSTEM\\CURRENTCONTROLSET\\CONTROL\\SESSION MANAGER\\KNOWNDLLS
SOFTWARE\\MICROSOFT\\WINDOWS\\POWERSHELL\\1\\SHELLIDS\\MICROSOFT.POWERSHELL_PROFILE
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\AEDEBUG
SOFTWARE\\MICROSOFT\\SHARED TOOLS\\MSCONFIG\\STARTUPREG
SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\CONTROL PANEL\\CPLS
SOFTWARE\\MICROSOFT\\WINDOWS NT\\CURRENTVERSION\\SCHEDULE\\TASKCACHE\\TREE