HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\
The RunOnce subkey of HKEY_LOCAL_MACHINE\SOFTWARE stores the names of programs that Windows 2000 runs at startup, for all users of the computer, the next time the system starts. When these programs are run, their names are deleted from the RunOnce subkey so that they are not run again automatically.
Each entry in the subkey represents a program. The value of the entry is the name of the executable file for the program. These entries have the following format:
Program Name REG_SZ File name