HKEY_LOCAL_MACHINE\SOFTWARE
\Microsoft\Ncpa
[Ncpa\CurrentVersion]
"NtlanmanInfName"=hex(2):4e,54,4c,41,4e,4d,41,4e,2e,49,4e,46,00
"NcpaShelInfName"=hex(2):4e,43,50,41,53,48,45,4c,2e,49,4e,46,00
"RawRules"=hex(7):28,64,65...
"BindfileEx"="
( \"Machine\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\NetworkCards\\1\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\NdisWan1\" 3 12 4
1 ndisWanBH ndisWanBH \"NdisWan1\" \"NdisWan1\" ())
( \"Machine\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\NetworkCards\\2\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\AsyncMac2\" 3 12
4 1 rasAsyMac rasAsyMac \"AsyncMac2\" \"AsyncMac2\" ())
( \"Machine\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\NetworkCards\\3\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\NdisWan3\" 3 12 4
1 ndiswandialoutIP ndiswandialoutIP \"NdisWan3\" \"NdisWan3\" ())
( \"Machine\\SOFTWARE\\Microsoft\\AsyncMac\\CurrentVersion\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\AsyncMac\" 4 12 3
0 rasAsyMacDrv rasAsyMacDrv \"AsyncMac\" \"NDIS\"
((\"\\Device\\AsyncMac2\" \"\\Device\\AsyncMac2\" rasAsyMacDrv \"RasAsyMac\"
3 (rasAsyMac )) ))
( \"Machine\\SOFTWARE\\Microsoft\\NetBT\\CurrentVersion\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\NetBT\" 5 780 2 1
netbt netbt \"NetBT\" \"PNP_TDI\"
((\"\\Device\\NdisWan3\" \"\\Device\\NetBT_NdisWan3\" netbt \"NetBT\" 3
(ndiswandialoutIP )) ))
( \"Machine\\SOFTWARE\\Microsoft\\NdisWan\\CurrentVersion\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\NdisWan\" 5 15 2
0 ndisWanDrv ndisWanDrv \"NdisWan\" \"NDISWAN\"
((\"\\Device\\NdisWan1\" \"\\Device\\NdisWan1\" ndisWanDrv \"NdisWan\"
3 (ndisWanBH )) (\"\\Device\\NdisWan3\" \"\\Device\\NdisWan3\" ndisWanDrv
\"NdisWan\" 3 (ndiswandialoutIP )) ))
( \"Machine\\SOFTWARE\\Microsoft\\Tcpip\\CurrentVersion\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\" 5 796 2 1
tcpip tcpip \"Tcpip\" \"PNP_TDI\"
((\"\\Device\\NdisWan3\" \"\\Device\\Tcpip\\NdisWan3\" tcpip \"Tcpip\"
3 (ndiswandialoutIP )) ))
( \"Machine\\SOFTWARE\\Microsoft\\RasMan\\CurrentVersion\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\RasMan\" 1 12 1 1
rasManager rasManager \"RasMan\" \"Network\" ())
( \"Machine\\SOFTWARE\\Microsoft\\LanmanWorkstation\\CurrentVersion\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\LanmanWorkstation\"
1 15 1 1 wksta wksta \"LanmanWorkstation\" \"NetworkProvider\"
((\"\\Device\\NetBT_NdisWan3\" \"\\Device\\LanmanWorkstation\\NetBT_NdisWan3\"
wksta \"LanmanWorkstation\" 3 (netbt ndiswandialoutIP )) ))
( \"Machine\\SOFTWARE\\Microsoft\\NetBIOS\\CurrentVersion\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\NetBIOS\" 1 15 1
1 netbios netbios \"NetBIOS\" \"NetBIOSGroup\"
((\"\\Device\\NetBT_NdisWan3\" \"\\Device\\Netbios\\NetBT_NdisWan3\" netbios
\"Netbios\" 3 (netbt ndiswandialoutIP )) ))
( \"Machine\\SOFTWARE\\Microsoft\\LanmanServer\\CurrentVersion\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\LanmanServer\" 1
15 1 1 srv srv \"LanmanServer\" \"LanmanServer\"
((\"\\Device\\NetBT_NdisWan3\" \"\\Device\\LanmanServer\\NetBT_NdisWan3\"
srv \"LanmanServer\" 3 (netbt ndiswandialoutIP )) ))
( \"Machine\\SOFTWARE\\Microsoft\\RemoteAccess\\CurrentVersion\"
\"Machine\\SYSTEM\\CurrentControlSet\\Services\\RemoteAccess\" 1
12 1 1 rasServer rasServer \"RemoteAccess\" \"Network\"
((\"\\Device\\NetBT_NdisWan3\" \"\\Device\\RasServer\\NetBT_NdisWan3\"
rasServer \"RasServer\" 3 (netbt ndiswandialoutIP )) ))"
"ReviewPrograms"=hex(7):4f,45,4d...
"Bindfile"="()"
[Ncpa\InfOptions]
Existe una rama por cada fichero de información. Cada
rama tiene una clave y una subrama. La clave es:
-
DateLow
Un numero entero representando una fecha ¿?¿?
La subrama tiene tres posibles nombres dependiendo de la función
del fichero de información: ¿?¿?
-
NetAdapter.PCI
-
NetService.PCI
-
NetTransport.PCI
Cada una de estas subramas tiene dos claves:
-
OptionList
"=hex(7):41,4d,31...
-
OptionTextList "=hex(7):41,64,61...