从BS牛和其他的webshell里提取出来的
===================================================
HKLM\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName\ComputerName
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\AutoAdminLogon
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultUserName
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DefaultPassword
HKLM\SYSTEM\CurrentControlSet\Services\Serv-U-Counters\Performance\Library
HKLM\SYSTEM\CurrentControlSet\Services\Serv-U\ImagePath
HKLM\SOFTWARE\Cat Soft\Serv-U\Domains\DomainList\DomainList
HKLM\SYSTEM\Radmin\v2.0\Server\Parameters\Parameter
HKLM\SYSTEM\Radmin\v2.0\Server\Parameters\Port
HKLM\SYSTEM\Radmin\v2.0\Server\Parameters\NTAuThenabled
HKLM\SYSTEM\Radmin\v2.0\Server\Parameters\FilterIp
HKLM\SYSTEM\Radmin\v2.0\Server\iplist\0
HKLM\SOFTWARE\ORL\WinVNC3\default\Password
HKLM\SOFTWARE\RealVNC\WinVNC4\Password
HKLM\SOFTWARE\hzhost\config\Settings\mysqlpass
HKLM\SOFTWARE\hzhost\config\Settings\mastersvrpass
HKLM\SOFTWARE\hzhost\config\Settings\sysdbpss
3389端口
HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\PortNumber
pcany端口
HKLM\SOFTWARE\Symantec\pcAnywhere\CurrentVersion\System\TCPIPDataPort
