瑞星卡卡安全论坛

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet

The CurrentControlSet subkey does not actually contain a control set.
The subkeys and entries that appear in the CurrentControlSet subkey are the contents of one of the numbered control sets, such as ControlSet001.
The control set that appears in CurrentControlSet is selected by the system at startup and identified by the value of Current in the Select subkey.


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control

The CurrentControlSet\Control subkey and its subkeys contain entries that control system startup, such as the subsystems to load and the size and location of paging files.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum

Contains a database representing all devices installed on the computer and recognized by the system. The database in Enum stores configuration data for hardware devices independent of the drivers they use. This subkey is critical to the configuration of Plug and Play devices in Windows 2000.


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Hardware Profiles

Stores the hardware profiles on your system.


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

The Services subkeys contain entries for standard and optional Windows 2000 services, such as device drivers, file system drivers, and Win32 service drivers. Although the values of the entries differ for each service, most Services subkeys have the same subkeys and entries.

【帮MM翻最后一小段哈（班门弄斧）】
Services子键包含Windows 2000系统的标准和任选服务的注册表项，如：设备驱动、文件系统驱动以及Win32服务驱动。虽然每个设备的这些注册表项键值不同，但大多数子键都有相同的子键名和项名。