HKLM\Software\Microsoft\Windows NT\CurrentVersion\WinLogon...Shell - change cmd.exe to Explorer.exe