\registry\machine\system\currentcontrolset\services\valueadd
    DisplayName = REG_SZ "Value add USB lower filter driver"
    ErrorControl = REG_DWORD 0x00000001
    Group = REG_SZ "extended base"
    ImagePath = REG_EXPAND_SZ "\SystemRoot\System32\drivers\valueadd.sys"
    Start = REG_DWORD 0x00000002
    Type = REG_DWORD 0x00000001