[Chaves]

HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
HKCC\Software\Microsoft\Windows\CurrentVersion\Run

[Valores]

"HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v Run
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell