|
Registry Location:
NTUSER.DAT
Key Location:
\Software\Microsoft\MessengerService\ListCache\>NET\MessengerService
Description:
IM groups, contacts, file transfer information
..................................................................................................................................................
Registry Location:
NTUSER.DAT
Key Location:
\Software\Microsoft\MSNMessenger\FilesSharing-Autoshare
Description:
File sharing on/off
..................................................................................................................................................
Registry Location:
NTUSER.DAT
Key Location:
\Software\Microsoft\MSNMessenger\FTReceiveFolder
Description:
Received files locations
..................................................................................................................................................
Registry Location:
NTUSER.DAT
Key Location:
\Software\Microsoft\MessengerService\ContactListPath
Description:
Location of saved Contact List (.ctt)
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate
Description:
Last access times update on/off
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\UserInit
Description:
List of programs run upon user login
..................................................................................................................................................
Registry Location:
HKCU
Key Location:
\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU
Description:
List of files accessed through Explorer dialog boxes
..................................................................................................................................................
Registry Location:
HKCU
Key Location:
\Software\Microsoft\Internet Explorer\TypedURLs
Description:
Typed URLS
..................................................................................................................................................
Registry Location:
NTUSER.DAT
Key Location:
\Software\Microsoft\InternetExplorer\main
Description:
IE settings
..................................................................................................................................................
Registry Location:
NTUSER.DAT
Key Location:
\Software\Microsoft\InternetExplorer\TypedURLS
Description:
Data entered into URL address bar (typed or pasted)
..................................................................................................................................................
Triage LHF module reports on this key
|
