Registry Jumper favorites list: DLL, Explorer, Internet Explorer...

• DLL

• HKLM\System\CurrentControlSet\Control\Session Manager\KnownDlls
• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs

• Explorer

• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler
• HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks
• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer

• Internet Explorer

• Browser Helper Objects (All users)
• Browser Helper Objects (Current user)
• HKLM\Software\Microsoft\Internet Explorer\Extensions
• Extensions (Current user)
• Toolbar (All users)
• Toolbar (Current user)
• Explorer bars (All users)
• Explorer bars (Current user)
• Menu extensions (All users)
• Menu extensions (Current user)
• HKCU\SOFTWARE\Microsoft\Internet Explorer\Main
• HKLM\SOFTWARE\Microsoft\Internet Explorer\Main
• HKLM\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions
• HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel

• Policies

• HKCU\Software\Microsoft\Windows\CurrentVersion\Policies
• HKCU\Software\Policies\Microsoft\Internet Explorer
• HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel
• HKLM\Software\Microsoft\Windows\CurrentVersion\Policies

• Run

• HKLM\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
• HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
• HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices
• HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
• HKLM\Software\Microsoft\Windows\CurrentVersion\Run
• HKCU\Software\Microsoft\Windows\CurrentVersion\Run
• HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce
• HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
• HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx

• Service

• HKLM\SYSTEM\CurrentControlSet\Services
• HKLM\SYSTEM\ControlSet001\Services
• HKLM\SYSTEM\ControlSet003\Services

• Startup

• Run (All users)
• Run(CurrentUser)
• RunOnce (All users)
• RunOnce (Current user)
• RunServices (All users)
• RunServices (Current user)
• RunServicesOnce (All users)
• RunServicesOnce (Current user)
• RunOnceEx (All Users)
• RunOnceEx (Current user)
• BootExecute

• System(Shell)

• Shell Folders (All users)
• Shell Folders (Current user)
• Shell Execute Hooks
• MIME filters
• Shell Extensions\Approved
• ShellServiceObjectDelayLoad

• Uninstall

• HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall
• HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

• Winlogon

• HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
• HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
• HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify

• Winsock

• HKLM\SYSTEM\CurrentControlSet\Services\Winsock
• HKLM\SYSTEM\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9

• ZoneMap

• HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
• HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges
• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains
• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges
• AppInitt
• CLSID
• KillBit
• Security Center
• Plugins
• PROTOCOLS
• Installed Components
• Image File Execution Options
• DCOM
• Desktop
• ShellServiceObjectDelayLoad
• BHO(AllUser)
• BHO(CurrentUser)
• ZoneMap
• WinIni2
• WinIni1
• NotePad HKLM\SOFTWARE\CLASSES\txtfile\shell\open\command
• DPF

Powered by TOK2