uminds

Thank you very much for the response.

I am trying to diagnose a malware problem on a XP machine and used the Windows PE 3.0 CD to boot the system. When I ran regedit, I can't see any startup program at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run. I tried it on various XP installation and got the same result. Can someone tell me what am I missing? Thanks