【回复“段£某人”的帖子】
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<NiceMt><C:\WINDOWS\system32\explore.exe> [N/A]
[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows]
<ms><C:\Program Files\Microsoft\svhost32.exe> [N/A]
<xy><C:\WINDOWS\Download\svhost32.exe> [N/A]
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run]
<Nice><C:\Program Files\Common Files\Microsoft Shared\MSINFO\rehtemp.exe> [N/A]