Well, does anyone know what this stuff is or relates to?

Farvatten said:

these Chinese characters show up.

They look like Chinese characters but are not Chinese characters, which I understand. Perhaps they will be displayed as Chinese characters on Chinese Windows.

@Ghot, Can you export the keys and upload them?

Ghot said:

Ok... zune is all Microsoft Store related. the reason I'm looking at zh_auto_file is....


Inside the keys with the wierd character are (Default) REG_SZ values like...

.7z_auto_file
dmp_auto_file
BAK_auto_file
tmp_auto_file
sav_auto_file
zh_auto_file
The first item down from the zh_auto_file expand arrow is... zune

Ahhh Ok..'ah_auto_file' wasn't in the original list. Now it all makes sense. Thanks!

What commands are these other's *_auto_files pointing to?

Ghot said:

Yeah, but why?
I checked them in Bing Translate


Some are Korean and some are Chinese simplified.

When I export zh_auto_file, the weird characters aren't in there. When I export zune, they aren't in there either.




HKEY_CLASSES_ROOT\ᡈ鰣ƅ
HKEY_CLASSES_ROOT\库Ā耀
HKEY_CLASSES_ROOT\�턀蠀￈﨣翹
HKEY_CLASSES_ROOT\뫘ƹ
HKEY_CLASSES_ROOT\伃茀蠀
HKEY_CLASSES_ROOT\炏翹
HKEY_CLASSES_ROOT\縀䆁
HKEY_CLASSES_ROOT\纴북娀蠀
HKEY_CLASSES_ROOT\菍殄ጀ耀
HKEY_CLASSES_ROOT\貅깣鬀蠀
HKEY_CLASSES_ROOT\韎ﵼ琀蠀
HKEY_CLASSES_ROOT\鰀䆟縀䆁
HKEY_CLASSES_ROOT\鰣ƅ
HKEY_CLASSES_ROOT\䎰튔탼뗜


In all of them is just this stuff repeated...

.7z_auto_file
dmp_auto_file
BAK_auto_file
tmp_auto_file
sav_auto_file
zh_auto_file

Mainly the bold ones

'zune' isn't involved, these entries are listed AFTER 'zune' cause 'z' it the end of the ascii alphabet. I confused things by saying 'under' zune. They are after and below 'zune' on the list.

This strange entry points to the zh_auto_file key, etc, so when you export zh_auto_file it won't reference the strange calling key. Several keys can all point to the *_auto_file keys.

Go back up the list and looking inside the 'dmp_auto_file', etc and follow the 'shell' - 'open' - 'command' like you did with 'zh_auto_file'. What's the command?

Ghot said:

I appreciate the help, but I've been through the registry, like a billion times.
There is no shell or open keys under the strange character keys.

what's under the 'sav_auto_file' key.

Ghot said:

zh_auto_file

zh stands for Zhōngwén, the pronunciation of the characters 中文, which means the Chinese language.
zh_auto_file does not exist on my English Windows 10.

Ghot said:

HKEY_CLASSES_ROOT\ᡈ鰣ƅ
HKEY_CLASSES_ROOT\库Ā耀
HKEY_CLASSES_ROOT\�턀蠀￈﨣翹
HKEY_CLASSES_ROOT\뫘ƹ
HKEY_CLASSES_ROOT\伃茀蠀
HKEY_CLASSES_ROOT\炏翹
HKEY_CLASSES_ROOT\縀䆁
HKEY_CLASSES_ROOT\纴북娀蠀
HKEY_CLASSES_ROOT\菍殄ጀ耀
HKEY_CLASSES_ROOT\貅깣鬀蠀
HKEY_CLASSES_ROOT\韎ﵼ琀蠀
HKEY_CLASSES_ROOT\鰀䆟縀䆁
HKEY_CLASSES_ROOT\鰣ƅ
HKEY_CLASSES_ROOT\䎰튔탼뗜

I can confirm that they are meaningless junk characters. I am now running English Windows. I will take a look at your attached files on Chinese Windows PE.

Ghot said:

There is a sav_auto_file key, and under it is the same thing that's under zh_auto_file..

%SystemRoot%\system32\NOTEPAD.EXE %1

ok... thanks!

Notepad may be coughing them up for some odd unknown reason. Did you assign these extensions to Notepad or did some other program do it for you - *.dmp *.BAK *.tmp *.sav *.zh?