JavaScript отключён. Чтобы полноценно использовать наш сайт, включите JavaScript в своём браузере.

Ответить в теме

Сообщение: [QUOTE="Dragokas, post: 174353, member: 6966"] [B][COLOR=#0000ff]ListRegistryLinks - Построение списка симлинков в реестре[/COLOR][/B] Автор: Helge Klein [URL='https://helgeklein.com/blog/2008/05/free-tool-list-registry-links-reg_link/']Оф.сайт[/URL] Утилита консольная - отдельно x32 и x64 бита. Пример вызова: [code]ListRegistryLinks.exe HKLM -v[/code] Если указан ключ -v то будут также выведены ключи, к которым был запрещен доступ. Чтобы получить максимальный результат - запускать через cmd с повышенными правами: Пуск -> cmd -> правый клик на "cmd.exe" -> Запуск от имени администратора. [spoiler=Пример вывода утилиты без ключа -v для Windows 7 x64] HKCU, HKCR, HKCC - нет симлинков. [spoiler=HKLM] "HKLM\SOFTWARE\Classes\Wow6432Node\AppID" -> "HKLM\SOFTWARE\Classes\AppID" "HKLM\SOFTWARE\Classes\Wow6432Node\PROTOCOLS" -> "HKLM\SOFTWARE\Classes\PROTOCOLS" "HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib" -> "HKLM\SOFTWARE\Classes\TypeLib" "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\009" [error while querying] "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\019" [error while querying] "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib\CurrentLanguage" [error while querying] "HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Calais\Current" -> "HKLM\SOFTWARE\Microsoft\Cryptography\Calais\Current" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Calais\Readers" -> "HKLM\SOFTWARE\Microsoft\Cryptography\Calais\Readers" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Cryptography\Services" -> "HKLM\SOFTWARE\Microsoft\Cryptography\Services" "HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\SystemShared" -> "HKLM\SOFTWARE\Microsoft\CTF\SystemShared" "HKLM\SOFTWARE\Wow6432Node\Microsoft\CTF\TIP" -> "HKLM\SOFTWARE\Microsoft\CTF\TIP" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Notepad\DefaultFonts" -> "HKLM\SOFTWARE\Microsoft\Notepad\DefaultFonts" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Software\Microsoft\Shared Tools\Msinfo" -> "HKLM\SOFTWARE\Microsoft\Software\Microsoft\Shared Tools\Msinfo" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Control Panel\Cursors\Schemes" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\AutoplayHandlers" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\DriveIcons" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\DriveIcons" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\KindMap" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\KindMap" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Telephony\Locations" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Telephony\Locations" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Group Policy" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\PreviewHandlers" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\PreviewHandlers" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Setup" -> "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Console" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Console" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\FontDPI" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontDPI" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\FontLink" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\FontMapper" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontMapper" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Fonts" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Fonts" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\FontSubstitutes" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\GRE_Initialize" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\LanguagePack" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\NetworkCards" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkCards" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Perflib" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Ports" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Ports" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Print" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Print" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\ProfileList" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Time Zones" -> "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Time Zones" "HKLM\SOFTWARE\Wow6432Node\Microsoft\COM3" -> "HKLM\SOFTWARE\Microsoft\COM3" "HKLM\SOFTWARE\Wow6432Node\Microsoft\DFS" -> "HKLM\SOFTWARE\Microsoft\DFS" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Driver Signing" -> "HKLM\SOFTWARE\Microsoft\Driver Signing" "HKLM\SOFTWARE\Wow6432Node\Microsoft\EnterpriseCertificates" -> "HKLM\SOFTWARE\Microsoft\EnterpriseCertificates" "HKLM\SOFTWARE\Wow6432Node\Microsoft\EventSystem" -> "HKLM\SOFTWARE\Microsoft\EventSystem" "HKLM\SOFTWARE\Wow6432Node\Microsoft\MSMQ" -> "HKLM\SOFTWARE\Microsoft\MSMQ" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Non-Driver Signing" -> "HKLM\SOFTWARE\Microsoft\Non-Driver Signing" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Ole" -> "HKLM\SOFTWARE\Microsoft\Ole" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Ras" -> "HKLM\SOFTWARE\Microsoft\Ras" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Rpc" -> "HKLM\SOFTWARE\Microsoft\Rpc" "HKLM\SOFTWARE\Wow6432Node\Microsoft\SystemCertificates" -> "HKLM\SOFTWARE\Microsoft\SystemCertificates" "HKLM\SOFTWARE\Wow6432Node\Microsoft\TermServLicensing" -> "HKLM\SOFTWARE\Microsoft\TermServLicensing" "HKLM\SOFTWARE\Wow6432Node\Microsoft\Transaction Server" -> "HKLM\SOFTWARE\Microsoft\Transaction Server" "HKLM\SOFTWARE\Wow6432Node\Classes" -> "HKLM\SOFTWARE\Classes\Wow6432Node" "HKLM\SOFTWARE\Wow6432Node\Clients" -> "HKLM\SOFTWARE\Clients" "HKLM\SOFTWARE\Wow6432Node\Policies" -> "HKLM\SOFTWARE\Policies" "HKLM\SOFTWARE\Wow6432Node\RegisteredApplications" -> "HKLM\SOFTWARE\RegisteredApplications" "HKLM\SYSTEM\ControlSet001\Control\Print\Printers" -> "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Print\Printers" "HKLM\SYSTEM\ControlSet001\Control\Video\{3C5AB8D1-6F8A-4448-8880-D3FBE874D647}\0000" -> "HKLM\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0001" "HKLM\SYSTEM\ControlSet001\Control\Video\{3C5AB8D1-6F8A-4448-8880-D3FBE874D647}\0001" -> "HKLM\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0001" "HKLM\SYSTEM\ControlSet001\Control\Video\{3C5AB8D1-6F8A-4448-8880-D3FBE874D647}\0002" -> "HKLM\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0001" "HKLM\SYSTEM\ControlSet001\Control\Video\{3C5AB8D1-6F8A-4448-8880-D3FBE874D647}\0003" -> "HKLM\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0001" "HKLM\SYSTEM\ControlSet001\Hardware Profiles\Current" -> "HKLM\System\CurrentControlSet\Hardware Profiles\0001" "HKLM\SYSTEM\CurrentControlSet" -> "HKLM\System\ControlSet001" [/spoiler] [spoiler=HKU] "HKU\S-1-5-21-2757108031-2077976367-87274058-1000\Software\SecuROM\License information" [error while querying] "HKU\S-1-5-21-2757108031-2077976367-87274058-1000\Software\Classes" -> "HKU\S-1-5-21-2757108031-2077976367-87274058-1000_Classes" "HKU\S-1-5-18" -> "HKU\.Default" [/spoiler] [/spoiler] [/QUOTE]

Проверка