就是它们两个存在形式
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
+ mspg C:\WINDOWS\SYSTEM32\MSPG.EXE
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
+ {648D5EE7-0BF3-2052-0727-060810050056} C:\PROGRAM FILES\COMMON FILES\{648D5EE7-0BF3-2052-0727-060810050056}\UPDATE.EXE
C:\WINDOWS\SYSTEM.INI