|
Registry Location:
NTUSER.DAT
Key Location:
\Software\Yahoo\Pager\Profiles\Screen_name\IMVironments
Description:
Yahoo environment settings
..................................................................................................................................................
Registry Location:
NTUSER.DAT
Key Location:
\Software\Yahoo\Profiles\Screen_name\IMVironments\Recent
Description:
Recent contacts and IMV used
..................................................................................................................................................
Registry Location:
NTUSER.DAT
Key Location:
\Software\Yahoo\Yserver
Description:
File transfer settings used
..................................................................................................................................................
Registry Location:
HKCU
Key Location:
\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU
Description:
List of entries typed into Start/Run box
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\ControlSet001\Control\TimeZoneInformation\StandardName
Description:
Time zone setting
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\ControlSet002\Control\TimeZoneInformation\StandardName
Description:
Time zone setting
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\
Description:
List of programs run at system start
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run\anysubkey\
Description:
List of programs run at system start
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\System\CurrentControlSet\Control\Session Manager\BootExecute
Description:
List of applications that run at start up
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\System\CurrentControlSet\Control\Session Manager\KnownDLLs
Description:
List of DLLS loaded at system start
..................................................................................................................................................
Triage LHF module reports on this key
|
