Thanks Shane... I did a reg search and found the following path on Win8.1, but this returned nothing but garbage. Did you actually run the script on xp? If so, what id it return?

 Code:
const HKEY_CURRENT_USER = &H80000001

Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\.\root\default:StdRegProv")

'strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Explorer\TrayNotify"
strKeyPath = "Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\TrayNotify"


strValueName = "IconStreams"

oReg.GetBinaryValue HKEY_CURRENT_USER,strKeyPath,strValueName,dwValue

WScript.Echo RegBinaryToString(dwValue)

function RegBinaryToString(arrValue)  
 strInfo=""  
  for i=0 to ubound(arrValue)  
   if arrValue(i)<>0 then strInfo=strInfo & chr(arrValue(i))  
  next  
 RegBinaryToString=strInfo  
end function