注册表过滤相关

黑中见白 · 发表于 2023-1-20 11:39:46

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Linkage
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Linkage
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Linkage
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking 4.0.0.0\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Linkage
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Linkage
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Linkage
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework\Performance
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\1394ohci
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\3ware
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\3ware\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\3ware\Parameters\PnpInterface
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\3ware\StartOverride
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AarSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AarSvc\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AarSvc_5ba4d
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AarSvc_5ba4d\Security
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI\Parameters
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI\Parameters\WakeUp

黑中见白 · 发表于 2023-1-20 11:43:24

本帖最后由黑中见白于 2023-1-20 15:16 编辑

目前逻辑搞不清
主要代码是
ps代码的判断包含
包含=ture
不包含=假
$值1=$line[$x].contains($line[$y-1])

快速抄袭注册表_ps命令.7z (262.82 KB, 下载次数: 28)
搞定了,但是不知道为什么会多2行
"ProtocolName"="MSAFD L2CAP Bluetooth"
"ProtocolName"="MSAFD RfComm Bluetooth"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Data
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET CLR Networking
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for Oracle
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Data Provider for SqlServer
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NET Memory Cache 4.0
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\.NETFramework
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\3ware
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AarSvc
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\ACPI
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\acpiex
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AcpiPmi
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\acpitime

adminkk · 发表于 2023-1-21 16:22:17

嘛意思？

yjkl · 发表于 2023-2-4 11:49:13

感谢分享

yjkl · 发表于 2023-3-2 12:11:33

谢谢分享

ZMLoveLH · 发表于 2023-3-6 16:33:22

楼主到底想说什么，意思没看懂啊

nowayer · 发表于 2023-12-7 02:21:32

提示: 作者被禁止或删除内容自动屏蔽

yyz2191958 · 发表于 2023-12-8 20:33:19

没有看明白

zzzlllxyt · 发表于 2023-12-13 13:34:29

没看懂

		自动登录	找回密码
密码			注册

nowayer nowayer 当前离线积分 3868 IP卡狗仔卡	7^# 发表于 2023-12-7 02:21:32 \| 只看该作者提示: 作者被禁止或删除内容自动屏蔽
nowayer nowayer 当前离线积分 3868 IP卡狗仔卡
	回复使用道具举报显身卡

[求助] 注册表过滤相关