부팅/로그인

HKCU\Software\Microsoft\Windows\CurrentVersion\Run

HKLM\Software\Microsoft\Windows\CurrentVersion\Run

HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run

HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\run

HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

HKLM\Software\Microsoft\Active Setup\Installed Components

서비스/동적라이브러리

HKLM\System\CurrentControlSet\Services

HKLM\Software\Microsoft\WindowsNT\CurrentVersion\Drivers32

HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Drivers32

HKLM\Software\Wow6432Node\Microsoft\WindowsNT\CurrentVersion\Drivers32