|
Registry Location:
HKCU
Key Location:
\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU
Description:
Open saved most recently used
..................................................................................................................................................
Registry Location:
HKCU
Key Location:
\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs
Description:
Recent documents most recently used
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
Description:
Windows programs uninstall location
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\Software\Microsoft\Windows\CurrentVersion\Policies\Explore\NoDriveTypeAutoRun
Description:
Designates which drives will parse autorun.inf files located in the root of the drive
..................................................................................................................................................
Registry Location:
HKCU
Key Location:
\Software\Microsoft\Windows\CurrentVersion\Policies\Explore\NoDriveTypeAutoRun
Description:
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveAutoRun
Description:
..................................................................................................................................................
Registry Location:
HKCU
Key Location:
\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoDriveAutoRun
Description:
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate
Description:
If set to 1, updating of last access times is disabled.
..................................................................................................................................................
Registry Location:
HKLM
Key Location:
\System\CurrentControlSet\Control\Session Manager\KnownDLLs
Description:
Contains a list of DLLs to be loaded at system start
..................................................................................................................................................
Registry Location:
HKCU
Key Location:
\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ParseAuotExec
Description:
By default, Windows 2K+ systems do not parse the autoexec.bat file. Set this Registry entry to "1" to enable parsing of the file.
..................................................................................................................................................
Triage LHF module reports on this key
|
