召集RD规则达人，制作一个完整的RD规则包

ubuntu

Comodo 正式版的RD 规则 不完整，召集RD规则达人，完善它。
Comodo 的开发人员，以前说过会发布一个完整的规则，但是目前还没有。
因为RD 通用性强，先从RD开始吧。

你可以发布相关规则、键值、网址等等。
谢谢！

心の语

支持U版
RD不熟，如果有人能设定下完整的注册表保护规则就好了

秋叶濛濛

支持 广大hips达人发个完整的RD保护规则
期待

sxingbai

转国外gss强人的规则
我自己的eq一直用这个规则，只是后来添加了很少
Auto Starts :::

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Run** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 1
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Run** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 2
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Session manager | BootExecute | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 3
HKEY_CURRENT_USER\Software\Microsoft\Windows nt\Currentversion\Windows | load | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 4
HKEY_CURRENT_USER\Software\Microsoft\Windows nt\Currentversion\Windows | run | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 5
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | GinaDLL | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 6
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Session manager | *FileRenameOperations | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 7
HKEY_CURRENT_USER\Control panel\Desktop | scrnsave.exe | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 8
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | Userinit | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 9
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | Taskman | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 10
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | VmApplet | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 11
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | System | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 12
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | Shell | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 13
HKEY_CURRENT_USER\Software\Microsoft\Windows nt\Currentversion\Winlogon | Shell | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 14
HKEY_LOCAL_MACHINE\Software\Microsoft\Active setup\Installed components** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 15
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Wow | *cmdline | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 16
HKEY_LOCAL_MACHINE\Software\Microsoft\Command processor | AutoRun | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 17
HKEY_CURRENT_USER\Software\Microsoft\Command processor | AutoRun | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 18
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Accessibility\Utility manager** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 19
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Inifilemapping\System.ini** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 20
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Inifilemapping\Win.ini** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 21
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Explorer\*shell folders | *Startup | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 22
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Explorer\*shell folders | *Startup | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Auto Starts | 23



Drivers / Services:::

HKEY_LOCAL_MACHINE\System\*controlset*\Services\* |  | CREATE KEY, MODIFY KEY | Ask User, Log to Disk | Drivers / Services | 1
HKEY_LOCAL_MACHINE\System\*controlset*\Services\* | imagepath | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 2
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Safeboot** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 3
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Lsa** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 4
HKEY_LOCAL_MACHINE\Software\Microsoft\Ole** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 5
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Svchost** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 6
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Drivers32** | * | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 7
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Backuprestore** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 8
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Computername** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 9
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Class\{4d36e96b-e325-11ce-bfc1-08002be10318} | *Filters | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 10
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Mprservices* | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 11
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Print\Monitors\* | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 12
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Messenger | Start | SET VALUE | Ask User, Log to Disk | Drivers / Services | 13
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Remoteregistry | Start | SET VALUE | Ask User, Log to Disk | Drivers / Services | 14
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Tlntsvr | Start | SET VALUE | Ask User, Log to Disk | Drivers / Services | 15
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Wuauserv | Start | SET VALUE | Ask User, Log to Disk | Drivers / Services | 16
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Sharedaccess | Start | SET VALUE | Ask User, Log to Disk | Drivers / Services | 17
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Wscsvc | Start | SET VALUE | Ask User, Log to Disk | Drivers / Services | 18
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Lanmanserver | Start | SET VALUE | Ask User, Log to Disk | Drivers / Services | 19
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Lanmanworkstation | Start | SET VALUE | Ask User, Log to Disk | Drivers / Services | 20
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Wow\Boot | * | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Drivers / Services | 21
HKEY_LOCAL_MACHINE\System\*controlset*\Services\*\Parameters | ServiceDll | SET VALUE | Ask User, Log to Disk | Drivers / Services | 22
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Srservice | Start | SET VALUE | Ask User, Log to Disk | Drivers / Services | 23

sxingbai

接上
File Associations:::

HKEY_CLASSES_ROOT\.bat | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 1
HKEY_CLASSES_ROOT\.cmd | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 2
HKEY_CLASSES_ROOT\.exe | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 3
HKEY_CLASSES_ROOT\.txt | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 4
HKEY_CLASSES_ROOT\.pif | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 5
HKEY_CLASSES_ROOT\.html | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 6
HKEY_CLASSES_ROOT\Directory\Shell** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 7
HKEY_CLASSES_ROOT\.com | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 8
HKEY_CLASSES_ROOT\.doc | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 9
HKEY_CLASSES_ROOT\.htm | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 10
HKEY_CLASSES_ROOT\.gif | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 11
HKEY_CLASSES_ROOT\.hta | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 12
HKEY_CLASSES_ROOT\.jpg | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 13
HKEY_CLASSES_ROOT\.js | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 14
HKEY_CLASSES_ROOT\.mdb | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 15
HKEY_CLASSES_ROOT\.mp3 | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 16
HKEY_CLASSES_ROOT\.png | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 17
HKEY_CLASSES_ROOT\.ppt | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 18
HKEY_CLASSES_ROOT\.rtf | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 19
HKEY_CLASSES_ROOT\*\Shell\*\Command | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 20
HKEY_CLASSES_ROOT\.shs | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 21
HKEY_CLASSES_ROOT\.vbs | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 22
HKEY_CLASSES_ROOT\.wsh | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 23
HKEY_CLASSES_ROOT\.xls | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 24
HKEY_CLASSES_ROOT\.zip | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 25
HKEY_CLASSES_ROOT\Shell** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 26
HKEY_CLASSES_ROOT\Unknown\Shell** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 27
HKEY_CLASSES_ROOT\Folder\Shell** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 28
HKEY_CLASSES_ROOT\.eml | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 29
HKEY_CLASSES_ROOT\.cpl | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 30
HKEY_CLASSES_ROOT\.reg | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 31
HKEY_CLASSES_ROOT\?\Shell** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 32
HKEY_CLASSES_ROOT\.jpeg | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 33
HKEY_CLASSES_ROOT\* | *ShowExt | SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 34
HKEY_CLASSES_ROOT\.scr | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 35
HKEY_CLASSES_ROOT\*\Shellnew | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | File Associations | 36




Networking :::
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Winsock2** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Networking Protection | 1
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Policies\Network** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Networking Protection | 2
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Tcpip\Parameters | DataBasePath | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Networking Protection | 3
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Tcpip\Parameters\Interfaces** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Networking Protection | 4
HKEY_LOCAL_MACHINE\Software\Microsoft\Ras** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Networking Protection | 5
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Session manager | UserAgent | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Networking Protection | 6
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Internet settings\User agent\Post platform | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Networking Protection | 7



Special Registry:::
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Windows | AppInit_DLLs | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 1
HKEY_CURRENT_USER\Control panel\Don't load | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 2
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Control panel\Don't load | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 3
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Image file execution options** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 4
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Session manager | ExcludeFromKnownDlls | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 5
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Explorer\Shellexecutehooks | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 6
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Shellserviceobjectdelayload | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 7
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Explorer\Sharedtaskscheduler | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 8
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon\Notify** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 9
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Setup | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 10
HKEY_CURRENT_USER\Software\Vb and vba program settings** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 11
HKEY_CURRENT_USER\Environment | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 12
HKEY_CURRENT_USER\Software\Microsoft\Windows nt\Currentversion\Windows | programs | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 13
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Extensions** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 14
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Shell extensions\Approved* | * | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 15
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | Defaultpassword | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 16
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Wmi\Globallogger* | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 17
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\App paths** | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 18
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Secedit** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 19
HKEY_CLASSES_ROOT\Clsid\{e6fb5e20-de35-11cf-9c87-00aa005127ed}** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 20
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | SFC* | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 21
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | ReportBootOk | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 22
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 23
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Shellserviceobjectdelayload | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 24
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Session manager\Knowndlls* | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 25
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Bootverificationprogram | ImagePath | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 26
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon | UIHost | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 27
HKEY_LOCAL_MACHINE\System\Select* | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 28
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Winlogon\Gpextensions** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 29
HKEY_LOCAL_MACHINE\Software\Clients\Mail\*\Protocols\Mailto** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 30
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Session manager | AllowProtectedRenames | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 31
HKEY_LOCAL_MACHINE\System\*controlset*\Control\Session manager\Environment | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 32
HKEY_LOCAL_MACHINE\System\Lastknowngoodrecovery** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Special Registry Items | 33

sxingbai

再接
Security - Policies:::

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Policies\System** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 1
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet explorer** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 2
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Policies\Activedesktop** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 3
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Policies** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 4
HKEY_CURRENT_USER\Software\Microsoft\Windows nt\Currentversion\Systemrestore** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 5
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows nt\Currentversion\Systemrestore | DisableSR | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 6
HKEY_CURRENT_USER\Software\Policies\Microsoft** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 7
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 8
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Policies\Explorer** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 9
HKEY_CURRENT_USER\Control panel\Desktop | *Wallpaper* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 10
HKEY_CURRENT_USER\Software\Microsoft\Windows nt\Currentversion\Windows | Open | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 11
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Explorer\Advanced | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 12
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Windowsupdate** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 13
HKEY_CURRENT_USER\Control panel\Desktop | ScreenSave* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 14
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Explorer\Advanced | EnforceShellExtensionSecurity | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 15
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Explorer\Advanced | Hide* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 16
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Explorer\Advanced | No*Menu | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 17
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Explorer\Advanced | *hidden | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 18
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Explorer | Search* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 19
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Explorer | IncludeSubFolders | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 20
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Explorer\Documents | HideMyDocsFolder | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 21
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Policies\Uninstall** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 22
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Group policy objects** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 23
HKEY_CURRENT_USER\Software\Microsoft\Security center** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 24
HKEY_LOCAL_MACHINE\Software\Microsoft\Security center** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 25
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Explorer | ShellState | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 26
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Explorer\Advanced\Folder\Hidden** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 27
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Explorer\Advanced\Folder\Hidefileext | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 28
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Explorer\Advanced\Folder\Superhidden** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 29
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Netcache | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 30
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Explorer\Windowsupdate** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 31
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Sharedaccess\Parameters\Firewallpolicy** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 32
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Sharedaccess\Parameters\Firewallpolicy\*profile  | enablefirewall | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 33
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Sharedaccess\Parameters\Firewallpolicy\*profile  | DoNotAllowExceptions* | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 34
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Sharedaccess\Parameters\Firewallpolicy\*profile  | DisableNotifications | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 35
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Sharedaccess\Parameters\Firewallpolicy\*profile\Authorizedapplications\List  | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 36
HKEY_LOCAL_MACHINE\System\*controlset*\Services\Sharedaccess\Parameters\Firewallpolicy\*profile\Globallyopenports\List  | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 37
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Desktop\General | Wallpaper | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 38
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Group policy objects** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Security - Policies | 39



Browser Protection:::

HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Extensions** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 1
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Extensions** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 2
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Menuext** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 3
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Toolbar | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 4
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Explorer\Browser helper objects** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 5
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Styles** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 6
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Main | *Page* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 7
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Main | HOMEOldSP | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 8
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Main | *Search* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 9
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Main | *Page* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 10
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Main | HOMEOldSP | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 11
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Main | *Search* | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 12
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Search** | * | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 13
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Internet settings\Zonemap\Domains\* | * | CREATE KEY, MODIFY KEY | Ask User, Log to Disk | Web Browser Protection | 14
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Internet settings | MinLevel | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 15
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Internet settings | *Warning Level | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 16
HKEY_CLASSES_ROOT\Protocols\Handler** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 17
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Search** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 18
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Urlsearchhooks** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 19
HKEY_CLASSES_ROOT\Clsid\{871c5380-42a0-1069-a2ea-08002b30309d}\Shell\Openhomepage\Command* | * | MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 20
HKEY_LOCAL_MACHINE\Software\Microsoft\Code store database\Distribution units** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 21
HKEY_LOCAL_MACHINE\Software\Clients\Startmenuinternet** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 22
HKEY_CLASSES_ROOT\Protocols\Filter** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 23
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Internet settings | Security* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 24
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Wintrust\Trust providers\Software publishing* | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 25
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Abouturls* | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 26
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Menuext** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 27
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Urlsearchhooks** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 28
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Internet settings\Safesites** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 29
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Url** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 30
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Explorer bars** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 31
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Main\Featurecontrol** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 32
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Internet settings\Zonemap\Domains\* | * | CREATE KEY, MODIFY KEY | Ask User, Log to Disk | Web Browser Protection | 33
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Styles** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 34
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Internet settings | User Agent | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 35
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Plugins** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 36
HKEY_CURRENT_USER\Software\Clients\Startmenuinternet** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 37
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Explorer bars** | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 38
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Internet settings | Warnon* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 39
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Internet settings | *Cert* | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 40
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Internet settings\Zonemap\Ranges\* | * | CREATE KEY, MODIFY KEY | Ask User, Log to Disk | Web Browser Protection | 41
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Internet settings\Zonemap\Ranges\* | * | CREATE KEY, MODIFY KEY | Ask User, Log to Disk | Web Browser Protection | 42
HKEY_CURRENT_USER\Software\Microsoft\Windows\Currentversion\Internet settings\*zones\* | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 43
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Internet settings\*zones\* | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 44
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Currentversion\Internet settings\Zonemap\Protocoldefaults | * | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 45
HKEY_CURRENT_USER\Software\Microsoft\Internet explorer\Main | Enable Browser Extensions | SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 46
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet explorer\Activex compatibility\* | * | CREATE KEY, MODIFY KEY, SET VALUE, DELETE VALUE | Ask User, Log to Disk | Web Browser Protection | 47

7sumetai

……V3中的RD部分，似乎没有看到有对键值还是项的具体区分吧？而且也没有看到对具体操作的定义吧……
还有，不知道在RD规则中abc*和abc\*有什么区别啊……

Firewall

强烈期待！！！！！中.......