RegLook

Lade reglook.zip und entzippen (auf dem Desktop) - > reglook.bat doppeltklicken --> der Texteditor (Notepad) wird sich öffnen)

Beispiel:

Handle OK.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows

(key has 0 subkeys and 7 value entries - last modified 05:40(UTC) 29/03/2004)

[AppInit_DLLs] = "wbsys.dll" (REG_SZ)

----------------------------------------

Handle OK.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon

(key has 5 subkeys and 32 value entries - last modified 20:21(UTC) 29/01/2005)

[Userinit] = "C:\WINDOWS\system32\userinit.exe," (REG_SZ)

----------------------------------------

Handle OK.

HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\system.ini\boot

(key has 0 subkeys and 5 value entries - last modified 00:50(UTC) 01/01/2002)

[Shell] = "SYS:Microsoft\Windows NT\CurrentVersion\Winlogon" (REG_SZ)

Suche im Web