Reg: reg query "hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices"