---------------------------------------------------
REGISTRY RECORD
---------------------------------------------------
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
IMJPMIG8.1 ; "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
PHIME2002ASync C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /SYNC
PHIME2002A C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE /IMEName
hpsysdrv c:\windows\system\hpsysdrv.exe
HotKeysCmds C:\WINDOWS\System32\hkcmd.exe
CamMonitor c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
HPHUPD05 c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
HPHmon05 C:\WINDOWS\System32\hphmon05.exe
KBD C:\HP\KBD\KBD.EXE
StorageGuard "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
AutoTKit C:\hp\bin\AUTOTKIT.EXE
WinCinemaMgr "C:\Program Files\InterVideo\Common\bin\WinCinemaMgr.exe"
Home Theater SchSvr "C:\Program Files\Common Files\InterVideo\SchSvr\SchSvr.exe"
Recguard C:\WINDOWS\SMINST\RECGUARD.EXE
NvCplDaemon RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
MSPY2002 C:\WINDOWS\System32\IME\PINTLGNT\ImScInst.exe /SYNC
Sunkist2k C:\Program Files\Multimedia Card Reader\shwicon2k.exe
PS2 C:\WINDOWS\system32\ps2.exe
Alitalk C:\PROGRA~1\阿里巴巴\贸易通\AliTalk.EXE -hideframe
Install Alitalk C:\WINDOWS\temp\alitalk\alitalk.exe -hideframe
WangWang "C:\Program Files\淘宝网\淘宝旺旺\WangWang.EXE"
RfwMain "C:\Program Files\Rising\Rfw\rfwmain.exe" -Startup
RavTask "C:\Program Files\Rising\Rav\RavTask.exe" -system
HDCSP RegCertTool C:\Program Files\95599 Certificate Tools\CIDC\RegCertTool.exe
TaxKeyManager C:\Program Files\95599 Certificate Tools\SHANGHAI TAX\TaxKeyManager.exe
nwiz nwiz.exe /install
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
Current operation system is no this registory path
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
Current operation system is no this registory path
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
HKEY_CLASSES_ROOT\Exefile\shell\open\command
Default "%1" %*
HKEY_CLASSES_ROOT\Txtfile\shell\open\command
Default %SystemRoot%\system32\NOTEPAD.EXE %1
---------------------------------------------------
WIN.INI
---------------------------------------------------
AppInit_DLLs=
Beep=yes
BorderWidth=0
CoolSwitch=1
CursorBlinkRate=530
DefaultSeparateVDM=no
DeviceNotSelectedTimeout=15
DoubleClickHeight=4
DoubleClickSpeed=500
DoubleClickWidth=4
DragFullWindows=1
InitialKeyboardIndicators=2
KeyboardDelay=1
KeyboardSpeed=31
LowPowerActive=0
LowPowerTimeOut=0
MouseSpeed=1
MouseThreshold1=6
MouseThreshold2=10
PowerOffActive=0
PowerOffTimeOut=0
ScreenSaveActive=1
ScreenSaveTimeOut=600
SnapToDefaultButton=0
Spooler=yes
swapdisk=
SwapMouseButtons=0
TransmissionRetryTimeout=90
DebugOptions=2048
Documents=
DosPrint=no
NetMessage=no
NullPort=None
Programs=com exe bat pif cmd
load=
run=
Device=hp psc 1100 series,winspool,Ne00:
---------------------------------------------------
SYSTEM.INI
---------------------------------------------------
ScreenSaverIsSecure=0
SCRNSAVE.EXE=C:\WINDOWS\System32\logon.scr
Shell=Explorer.exe
comm.drv=comm.drv
display.drv=vga.drv
drivers=mmsystem.dll
fixedfon.fon=vgafix.fon
fonts.fon=vgasys.fon
keyboard.drv=keyboard.drv
language.dll=
mouse.drv=mouse.drv
network.drv=wfwnet.drv
oemfonts.fon=vgaoem.fon
shell=Explorer.exe
system.drv=system.drv
---------------------------------------------------
WININIT.BAK
---------------------------------------------------
---------------------------------------------------
AUTOEXEC.BAT
---------------------------------------------------
---------------------------------------------------
WININIT.BAT
---------------------------------------------------
