Advanced File Analysis System

File Name: ccsetup533.exe

File Type: PE32 executable (GUI) Intel 80386, for MS Windows

SHA1: c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b

MD5: 75735db7291a19329190757437bdb847

Download Kill Chain Report

Accessed Files

\Device\KsecDD
\??\MountPointManager
C:\Users\user\AppData\Local\Temp\
C:\Users\user\AppData\Local\Temp
C:\Users\user\AppData\Local\Temp\nsaA916.tmp
- C:\Users\user\AppData\Local\Temp\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- C:\Users\user\AppData\Local\Temp\nsqA9C3.tmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp
- C:\Users
- C:\Users\user
- C:\Users\user\AppData
- C:\Users\user\AppData\Local
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\System.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\UserInfo.dll
- C:\Windows\Fonts\staticcache.dat
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gtapi_signed.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gtapi_signed.DLL
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gtapi_signed.DLL.3.Manifest
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcapi_dll.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcapi_dll.DLL
- C:\Users\user\AppData\Local\Temp\WINMM.dll
- C:\Windows\System32\winmm.dll
- C:\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1025.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1026.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1027.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1028.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1029.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1030.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1031.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1032.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1033.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1034.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1035.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1036.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1037.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1038.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1040.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1041.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1042.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1043.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1044.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1045.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1046.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1048.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1049.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1050.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1051.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1053.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1054.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1055.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1057.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1058.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1060.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1061.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1062.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1066.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1102.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_2052.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_2070.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_3098.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\combo-offer.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\pfWWW.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p\pfWWW.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p\syschk.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsExec.dll
- \Device\NamedPipe\
- \Device\NamedPipe
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\pfUI.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\PF_logo.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\CC_logo_72x66.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\PF_computer.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\Montserrat-Regular.otf
- C:\Users\user\AppData\Local\Temp\MSIMG32.dll
- C:\Windows\System32\msimg32.dll
- C:\Users\user\AppData\Local\Temp\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe.Local\
- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80
- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
- C:\Users\user\AppData\Local\Temp\IPHLPAPI.DLL
- C:\Windows\System32\IPHLPAPI.DLL
- C:\Users\user\AppData\Local\Temp\WINNSI.DLL
- C:\Windows\System32\winnsi.dll
- C:\Users\user\AppData\Local\Temp\WTSAPI32.dll
- C:\Windows\System32\wtsapi32.dll
- C:\Users\user\AppData\Local\Temp\NETAPI32.dll
- C:\Windows\System32\netapi32.dll
- C:\Users\user\AppData\Local\Temp\netutils.dll
- C:\Windows\System32\netutils.dll
- C:\Users\user\AppData\Local\Temp\srvcli.dll
- C:\Windows\System32\srvcli.dll
- C:\Users\user\AppData\Local\Temp\ESENT.dll
- C:\Windows\System32\esent.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1031.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1041.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1049.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1053.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1042.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1044.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1040.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-2070.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1043.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1036.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1034.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1045.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1028.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1030.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1035.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1046.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1038.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1029.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-2052.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1027.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1037.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1032.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1055.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1025.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1048.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1110.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1063.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1052.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-3098.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-2074.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1051.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1071.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-5146.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1026.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1050.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1066.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1058.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1061.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1065.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1067.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1079.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-9999.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1068.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1060.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1059.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1087.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1062.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1102.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1057.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1092.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1109.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1054.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1081.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1104.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1155.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1090.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsDialogs.dll
- C:\Windows\System32\UXTHEME.DLL.Config
- C:\Windows\System32\uxtheme.dll
- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-*.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-*.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1025.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1026.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1027.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1028.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1029.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1030.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1031.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1032.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1033.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1033.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1034.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1035.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1036.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1037.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1038.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1040.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1041.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1042.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1043.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1044.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1045.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1046.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1048.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1049.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1050.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1051.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1052.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1053.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1054.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1055.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1057.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1058.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1059.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1060.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1061.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1062.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1063.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1065.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1066.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1067.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1068.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1071.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1079.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1081.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1087.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1090.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1092.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1102.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1104.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1109.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1110.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-1155.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-2052.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-2070.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-2074.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-3098.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-5146.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang\lang-9999.dll
- C:\Windows\SysWOW64\ieframe.dll
- C:\Users\desktop.ini
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1033.html:Zone.Identifier
- C:\Windows\WindowsShell.manifest
- C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files
- C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\desktop.ini
- C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5
- C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\desktop.ini
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies
- C:\Users\user\AppData\Local\Microsoft\Windows\History
- C:\Users\user\AppData\Local\Microsoft\Windows\History\desktop.ini
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\desktop.ini
- C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\
- C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- C:\Users\user\AppData\Local\Microsoft
- C:\Users\user\AppData\Local\Microsoft\Windows
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012016042520160426\desktop.ini
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012016042520160426\*.*
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012016042520160426\index.dat
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012016042520160426\
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012017091920170920\
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012017091920170920\index.dat
- C:\Windows\System32\shell32.dll
- C:\Users\user\AppData\Local\Temp\winsys1.ini
- C:\Users\user\AppData\Local\Temp\winsys2.ini
- C:\Users\user\AppData\Local\Temp\winapp1.ini
- C:\Users\user\AppData\Local\Temp\winapp2.ini
- C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV01.dat
- C:\Users\user\AppData\Local\Microsoft\Windows\WebCache\WebCacheV24.dat
- C:\Users\user\AppData\Local\Spartan\Database\WebCacheV01.dat
- C:\Users\user\AppData\Local\Spartan\Database\WebCacheV24.dat
- C:\Users\user\AppData\Roaming
- C:\Users\user\AppData\Roaming\Microsoft
- C:\Users\user\AppData\Roaming\Microsoft\desktop.ini
- C:\Users\user\AppData\Roaming\Microsoft\Windows
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\desktop.ini
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\*.txt
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\user@c1.microsoft[2].txt
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\user@downloads.sourceforge[1].txt
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\user@google[2].txt
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\user@microsoft[2].txt
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\*.cookie
- C:\Windows\Cookies\*.txt
- C:\Windows\Cookies\*.cookie
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\Low\*.txt
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\Low\*.cookie
- C:\Users\user\AppData\Roaming\Phoenix\Profiles
- C:\Users\user\AppData\Roaming\Phoenix
- C:\Users\user\AppData\Roaming\Phoenix\profiles.ini
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini
- C:\Users\user\AppData\Roaming\Mozilla\Profiles
- C:\Users\user\AppData\Roaming\Mozilla
- C:\Users\user\AppData\Roaming\Mozilla\profiles.ini
- C:\Users\user\AppData\Roaming\Netscape\NSB\Profiles
- C:\Users\user\AppData\Roaming\Netscape\NSB
- C:\Users\user\AppData\Roaming\Netscape\NSB\profiles.ini
- C:\Users\user\AppData\Roaming\Netscape\Navigator\Profiles
- C:\Users\user\AppData\Roaming\Netscape\Navigator
- C:\Users\user\AppData\Roaming\Netscape\Navigator\profiles.ini
- C:\Users\user\AppData\Roaming\Flock\Browser\Profiles
- C:\Users\user\AppData\Roaming\Flock\Browser
- C:\Users\user\AppData\Roaming\Flock\Browser\profiles.ini
- C:\Users\user\AppData\Roaming\Mozilla\SeaMonkey\Profiles
- C:\Users\user\AppData\Roaming\Mozilla\SeaMonkey
- C:\Users\user\AppData\Roaming\Mozilla\SeaMonkey\profiles.ini
- C:\Users\user\AppData\Roaming\Moonchild Productions\Pale Moon\Profiles
- C:\Users\user\AppData\Roaming\Moonchild Productions\Pale Moon
- C:\Users\user\AppData\Roaming\Moonchild Productions\Pale Moon\profiles.ini
- C:\Users\user\AppData\Roaming\K-Meleon\Profiles
- C:\Users\user\AppData\Roaming\K-Meleon
- C:\Users\user\AppData\Roaming\K-Meleon\profiles.ini
- C:\Users\user\AppData\Roaming\SongBird2\Profiles
- C:\Users\user\AppData\Roaming\SongBird2
- C:\Users\user\AppData\Roaming\SongBird2\profiles.ini
- C:\Users\user\AppData\Roaming\Comodo\IceDragon\Profiles
- C:\Users\user\AppData\Roaming\Comodo\IceDragon
- C:\Users\user\AppData\Roaming\Comodo\IceDragon\profiles.ini
- C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\Profiles
- C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox
- C:\Users\user\AppData\Roaming\8pecxstudios\Cyberfox\profiles.ini
- C:\Program Files (x86)\K-Meleon\Profiles
- C:\Program Files (x86)\K-Meleon
- C:\Program Files (x86)\K-Meleon\profiles.ini
- C:\Program Files (x86)\K-Meleon\Profiles\profiles.ini
- C:\Program Files\K-Meleon\Profiles
- C:\Program Files\K-Meleon
- C:\Program Files\K-Meleon\profiles.ini
- C:\Program Files\K-Meleon\Profiles\profiles.ini
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\events\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Crash Reports\events\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\adblockplus\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\adblockplus\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\bookmarkbackups\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\bookmarkbackups\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\crashes\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\crashes\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\crashes\events\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\crashes\events\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\datareporting\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\datareporting\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\datareporting\archived\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\datareporting\archived\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\datareporting\archived\2017-02\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\datareporting\archived\2017-02\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\datareporting\archived\2017-03\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\datareporting\archived\2017-03\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\extensions\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\extensions\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp\WINNT_x86-msvc\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp\WINNT_x86-msvc\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp-eme-adobe\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp-eme-adobe\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp-eme-adobe\17\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp-eme-adobe\17\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp-gmpopenh264\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp-gmpopenh264\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp-gmpopenh264\1.6\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\gmp-gmpopenh264\1.6\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\healthreport\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\healthreport\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\minidumps\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\minidumps\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\sessionstore-backups\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\sessionstore-backups\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\chrome\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\chrome\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\chrome\idb\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\chrome\idb\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\chrome\idb\2918063365piupsah.files\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\chrome\idb\2918063365piupsah.files\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\moz-safe-about+home\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\moz-safe-about+home\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\moz-safe-about+home\idb\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\moz-safe-about+home\idb\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webapps\prefs.js
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webapps\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.txt
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\SiteSecurityServiceState.txt
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite-journal
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite-wal
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite-shm
- C:\Users\user\AppData\Local\Google\Chrome\User Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\Default
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Default
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\Default
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\Default
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\Default
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\Default
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\Default
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\Default
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\Default
- C:\Users\user\AppData\Local\Flock\User Data\*
- C:\Users\user\AppData\Local\Google\Chrome SxS\User Data\*
- C:\Users\user\AppData\Local\Chromium\User Data\*
- C:\Users\user\AppData\Local\RockMelt\User Data\*
- C:\Users\user\AppData\Local\Comodo\Dragon\User Data\*
- C:\Users\user\AppData\Local\MapleStudio\ChromePlus\User Data\*
- C:\Users\user\AppData\Local\Spark\User Data\*
- C:\Users\user\AppData\Local\Torch\User Data\*
- C:\Users\user\AppData\Local\Yandex\YandexBrowser\User Data\*
- C:\Users\user\AppData\Local\Vivaldi\User Data\*
- C:\Users\user\AppData\Roaming\ChromePlus\ChromePlusUserData\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\QuotaManager
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\cookies-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\cookies-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\QuotaManager
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\QuotaManager
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\QuotaManager
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\QuotaManager
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\QuotaManager
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\QuotaManager
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\QuotaManager
- C:\Users\user\AppData\Roaming\Opera\Opera\profile
- C:\Users\user\AppData\Roaming\Opera\Opera7\profile
- C:\Users\user\AppData\Roaming\Opera\Opera75\profile
- C:\Users\user\AppData\Roaming\Opera\Opera 8 Beta\profile
- C:\Users\user\AppData\Roaming\Opera\Opera 9 Beta\profile
- C:\Users\user\AppData\Roaming\Opera\Opera 9\profile
- C:\Users\user\AppData\Roaming\Opera\Opera 10 Beta
- C:\Users\user\AppData\Roaming\Opera\Opera
- C:\Users\user\AppData\Roaming\Opera\Opera 10
- C:\Users\user\AppData\Roaming\Opera Software\Opera Stable
- C:\Users\user\AppData\Roaming\Opera Software\Opera Next
- C:\Users\user\AppData\Roaming\Opera Software\Opera Developer
- C:\Users\user\AppData\Roaming\Opera\*
- C:\Program Files (x86)\Opera\profile
- C:\Program Files (x86)\Opera 9\profile
- C:\Program Files (x86)\Opera\Opera 10 Beta
- C:\Program Files (x86)\Opera\Opera
- C:\Program Files (x86)\Opera\Opera 10
- C:\Program Files (x86)\Opera\*
- C:\Program Files\Opera\profile
- C:\Program Files\Opera 9\profile
- C:\Program Files\Opera\Opera 10 Beta
- C:\Program Files\Opera\Opera
- C:\Program Files\Opera\Opera 10
- C:\Program Files\Opera\*
- C:\Users\user\AppData\Local\Opera\Opera\profile
- C:\Users\user\AppData\Local\Opera\Opera 9\profile
- C:\Users\user\AppData\Local\Opera\Opera 10 Beta
- C:\Users\user\AppData\Local\Opera\Opera
- C:\Users\user\AppData\Local\Opera\Opera 10
- C:\Users\user\AppData\Local\Opera Software\Opera Stable
- C:\Users\user\AppData\Local\Opera Software\Opera Next
- C:\Users\user\AppData\Local\Opera Software\Opera Developer
- C:\Users\user\AppData\Local\Opera\*
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\modern-header.bmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\modern-wizard.bmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ButtonEvent.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsProcess.dll
- C:\Program Files
- C:\Program Files\CCleaner
- C:\Program Files\CCleaner\CCleaner64.exe
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\inetc.dll
- C:\Users\user\AppData\Local\Temp\CheckUpdate.log
- C:\ProgramData\Microsoft\Network\Connections\Pbk\rasphone.pbk
- C:\ProgramData\Microsoft\Network\Connections\Pbk\*.pbk
- C:\Windows\System32\ras\*.pbk
- C:\Users\user\AppData\Roaming\Microsoft\Network\Connections\Pbk\rasphone.pbk
- C:\Users\user\AppData\Roaming\Microsoft\Network\Connections\Pbk\*.pbk
- C:\Program Files\CCleaner\CCleaner.exe
- C:\Program Files\CCleaner\Lang
- C:\Program Files\CCleaner\Lang\lang-1031.dll
- C:\Program Files\CCleaner\Lang\lang-1041.dll
- C:\Program Files\CCleaner\Lang\lang-1049.dll
- C:\Program Files\CCleaner\Lang\lang-1053.dll
- C:\Program Files\CCleaner\Lang\lang-1042.dll
- C:\Program Files\CCleaner\Lang\lang-1044.dll
- C:\Program Files\CCleaner\Lang\lang-1040.dll
- C:\Program Files\CCleaner\Lang\lang-2070.dll
- C:\Program Files\CCleaner\Lang\lang-1043.dll
- C:\Program Files\CCleaner\Lang\lang-1036.dll
- C:\Program Files\CCleaner\Lang\lang-1034.dll
- C:\Program Files\CCleaner\Lang\lang-1045.dll
- C:\Program Files\CCleaner\Lang\lang-1028.dll
- C:\Program Files\CCleaner\Lang\lang-1030.dll
- C:\Program Files\CCleaner\Lang\lang-1035.dll
- C:\Program Files\CCleaner\Lang\lang-1046.dll
- C:\Program Files\CCleaner\Lang\lang-1038.dll
- C:\Program Files\CCleaner\Lang\lang-1029.dll
- C:\Program Files\CCleaner\Lang\lang-2052.dll
- C:\Program Files\CCleaner\Lang\lang-1027.dll
- C:\Program Files\CCleaner\Lang\lang-1037.dll
- C:\Program Files\CCleaner\Lang\lang-1032.dll
- C:\Program Files\CCleaner\Lang\lang-1055.dll
- C:\Program Files\CCleaner\Lang\lang-1025.dll
- C:\Program Files\CCleaner\Lang\lang-1048.dll
- C:\Program Files\CCleaner\Lang\lang-1110.dll
- C:\Program Files\CCleaner\Lang\lang-1063.dll
- C:\Program Files\CCleaner\Lang\lang-1052.dll
- C:\Program Files\CCleaner\Lang\lang-3098.dll
- C:\Program Files\CCleaner\Lang\lang-2074.dll
- C:\Program Files\CCleaner\Lang\lang-1051.dll
- C:\Program Files\CCleaner\Lang\lang-1071.dll
- C:\Program Files\CCleaner\Lang\lang-5146.dll
- C:\Program Files\CCleaner\Lang\lang-1026.dll
- C:\Program Files\CCleaner\Lang\lang-1050.dll
- C:\Program Files\CCleaner\Lang\lang-1066.dll
- C:\Program Files\CCleaner\Lang\lang-1058.dll
- C:\Program Files\CCleaner\Lang\lang-1061.dll
- C:\Program Files\CCleaner\Lang\lang-1065.dll
- C:\Program Files\CCleaner\Lang\lang-1067.dll
- C:\Program Files\CCleaner\Lang\lang-1079.dll
- C:\Program Files\CCleaner\Lang\lang-9999.dll
- C:\Program Files\CCleaner\Lang\lang-1068.dll
- C:\Program Files\CCleaner\Lang\lang-1060.dll
- C:\Program Files\CCleaner\Lang\lang-1059.dll
- C:\Program Files\CCleaner\Lang\lang-1087.dll
- C:\Program Files\CCleaner\Lang\lang-1062.dll
- C:\Program Files\CCleaner\Lang\lang-1102.dll
- C:\Program Files\CCleaner\Lang\lang-1057.dll
- C:\Program Files\CCleaner\Lang\lang-1092.dll
- C:\Program Files\CCleaner\Lang\lang-1109.dll
- C:\Program Files\CCleaner\Lang\lang-1054.dll
- C:\Program Files\CCleaner\Lang\lang-1081.dll
- C:\Program Files\CCleaner\Lang\lang-1104.dll
- C:\Program Files\CCleaner\Lang\lang-1155.dll
- C:\Program Files\CCleaner\Lang\lang-1090.dll
- C:\Users\user\Desktop\CCleaner.lnk
- C:\Users\user\Desktop
- C:\Program Files\desktop.ini
- \??\PIPE\srvsvc
- C:\DosDevices\pipe\
- C:\Program Files\CCleaner\
- C:\Users\Public\Desktop\CCleaner.lnk
- C:\ProgramData
- C:\ProgramData\Microsoft
- C:\ProgramData\Microsoft\Windows
- C:\ProgramData\Microsoft\Windows\Start Menu
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner Homepage.url
- C:\Windows\System32\config\systemprofile\NTUSER.DAT
- C:\Windows\ServiceProfiles\LocalService\NTUSER.DAT
- C:\Windows\ServiceProfiles
- C:\Windows\ServiceProfiles\LocalService
- C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
- C:\Windows\ServiceProfiles\NetworkService
- C:\Users\user\NTUSER.DAT
- C:\Program Files\CCleaner\uninst.exe
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner\Uninstall CCleaner.lnk
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CCleaner
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\*.*
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\*.*
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\*.*
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p\*.*
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\*.*
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\*.*
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\
- C:\Program Files\CCleaner\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\sysnative\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\system\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\api-ms-win-core-fibers-l1-1-1.DLL
- C:\ProgramData\Oracle\Java\javapath\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\sysnative\wbem\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Windows\sysnative\WindowsPowerShell\v1.0\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files (x86)\Universal Extractor\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Python27\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Python27\Scripts\api-ms-win-core-fibers-l1-1-1.DLL
- C:\tools\sysinternals\api-ms-win-core-fibers-l1-1-1.DLL
- C:\tools\api-ms-win-core-fibers-l1-1-1.DLL
- C:\tools\IDA_Pro_v6\python\api-ms-win-core-fibers-l1-1-1.DLL
- C:\Program Files\CCleaner\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\sysnative\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\system\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\api-ms-win-core-localization-l1-2-1.DLL
- C:\ProgramData\Oracle\Java\javapath\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\sysnative\wbem\api-ms-win-core-localization-l1-2-1.DLL
- C:\Windows\sysnative\WindowsPowerShell\v1.0\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-core-localization-l1-2-1.DLL
- C:\Python27\api-ms-win-core-localization-l1-2-1.DLL
- C:\Python27\Scripts\api-ms-win-core-localization-l1-2-1.DLL
- C:\tools\sysinternals\api-ms-win-core-localization-l1-2-1.DLL
- C:\tools\api-ms-win-core-localization-l1-2-1.DLL
- C:\tools\IDA_Pro_v6\python\api-ms-win-core-localization-l1-2-1.DLL
- C:\Program Files\CCleaner\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\sysnative\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\system\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\ProgramData\Oracle\Java\javapath\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\sysnative\wbem\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\sysnative\WindowsPowerShell\v1.0\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Python27\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Python27\Scripts\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\tools\sysinternals\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\tools\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\tools\IDA_Pro_v6\python\api-ms-win-core-sysinfo-l1-2-1.DLL
- C:\Windows\Globalization\Sorting\sortdefault.nls
- C:\Program Files\CCleaner\ccleaner_checkpoint.dat
- C:\Program Files\CCleaner\branding.dll
- C:\Windows\sysnative\en-US\KERNELBASE.dll.mui
- C:\Program Files\CCleaner\ccleaner.ini
- C:\Program Files\CCleaner\portable.dat
- C:\Program Files\CCleaner\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Windows\sysnative\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Windows\system\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Windows\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\ProgramData\Oracle\Java\javapath\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Windows\sysnative\wbem\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Windows\sysnative\WindowsPowerShell\v1.0\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Program Files\Microsoft Network Monitor 3\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Program Files (x86)\Universal Extractor\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Program Files (x86)\Universal Extractor\bin\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Python27\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Python27\Scripts\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\tools\sysinternals\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\tools\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\tools\IDA_Pro_v6\python\api-ms-win-appmodel-runtime-l1-1-1.DLL
- C:\Program Files\CCleaner\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Windows\sysnative\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Windows\system\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Windows\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\ProgramData\Oracle\Java\javapath\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Windows\sysnative\wbem\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Windows\sysnative\WindowsPowerShell\v1.0\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Program Files\Microsoft Network Monitor 3\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Program Files (x86)\Universal Extractor\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Program Files (x86)\Universal Extractor\bin\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Program Files (x86)\Windows Kits\8.1\Windows Performance Toolkit\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Python27\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Python27\Scripts\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\tools\sysinternals\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\tools\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\tools\IDA_Pro_v6\python\ext-ms-win-kernel32-package-current-l1-1-0.DLL
- C:\Program Files (x86)\Google\Chrome\Application\chrome.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\chrome.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\credui.dll
- C:\Windows\System32\credui.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\NETAPI32.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\netutils.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\srvcli.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\HID.DLL
- C:\Windows\System32\hid.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\OLEACC.dll
- C:\Windows\System32\oleacc.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Secur32.dll
- C:\Windows\System32\secur32.dll
- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe.Local\
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\pdh.dll
- C:\Windows\System32\pdh.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\NTDSAPI.dll
- C:\Windows\System32\ntdsapi.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\icudtl.dat
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\snapshot_blob.bin
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\natives_blob.bin
- C:\Users\user\AppData\Local\Google\Chrome\User Data
- C:\Windows\System32\KBDUS.DLL
- \??\Nsi
- C:\Windows\System32\drivers\etc\hosts
- C:\Windows\System32\drivers\etc
- C:\Users\user\AppData\Local\Google\Chrome\User Data\First Run
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\chrome_100_percent.pak
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Locales
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Locales\en.pak
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Locales\en-US.pak
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\resources.pak
- \??\pipe\mojo.1452.2376.14883248807444065675
- C:
- C:\Users\user\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt
- C:\Users\user\AppData\Local\Google\Chrome\User Data\lockfile
- C:\Program Files (x86)\Google\Chrome\Application\new_chrome.exe
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Policy\User Policy
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\README
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\File System\primary.origin
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feedback Reports\Feedback Report.*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Index *
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data Backup
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local App Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_pafkbggdmjlpgkdkcbjmhmfcdpncadgh_0.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Managed Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOCK
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000001
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Top Sites
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Top Sites-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Top Sites-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ChromeDWriteFontCache
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\widevinecdmadapter.dll
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000003.log
- C:\Windows\Fonts\segoeui.ttf
- C:\Windows\Fonts\segoeuib.ttf
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_metadata\verified_contents.json
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.1_0\_metadata\verified_contents.json
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Bookmarks
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Policy\Signing Key
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SupervisedUserWhitelists\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SupervisedUserInstalledWhitelists\*\.json
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_metadata\verified_contents.json
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BFF5.tmp
- C:\Users\user\AppData\Local\Google
- C:\Users\user\AppData\Local\Google\Chrome
- C:\Users\user\AppData\Local\Temp\etilqs_iGaj0dtUtTRn36P
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata\verified_contents.json
- \??\pipe\mojo.1452.2840.4937964858906658848
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Policy
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists
- C:\Program Files\CCleaner\CCleaner.dat
- C:\Program Files\CCleaner\license.ini
- C:\Program Files\CCleaner\autotrial.dat
- C:\Program Files\CCleaner\winsys1.ini
- C:\Program Files\CCleaner\winsys2.ini
- C:\Program Files\CCleaner\winapp1.ini
- C:\Program Files\CCleaner\winapp2.ini
- C:\Program Files\CCleaner\winreg1.ini
- C:\Program Files\CCleaner\winreg2.ini
- C:\Users\user\AppData\Local\Packages\Microsoft.Windows.Spartan_cw5n1h2txyewy
- C:\Users\user\AppData\Local\Packages\Microsoft.MicrosoftEdge_8wekyb3d8bbwe
- C:\Users\user\AppData\Local\Microsoft\Windows\Caches
- C:\Users\user\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
- C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000004a.db
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
- C:\Users\user\Desktop\desktop.ini
- ::\
- ::\{2559A1F3-21D7-11D4-BDAF-00C04F60B9F0}
- ::\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
- ::\{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}
- ::\{2559A1F1-21D7-11D4-BDAF-00C04F60B9F0}
- C:\Program Files\Oracle\VirtualBox Guest Additions\uninst.exe
- C:\Program Files\Oracle\VirtualBox Guest Additions
- C:\Program Files\Oracle\VirtualBox Guest Additions\Oracle VM VirtualBox Guest Additions.url
- C:\tools\totalcmdx32\TOTALCMD.CHM
- C:\tools\totalcmdx32\TCUNINST.EXE
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
- C:\ProgramData\Microsoft\desktop.ini
- C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini
- C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\
- C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat
- ::\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}
- C:\Program Files (x86)\Java\jre1.8.0_91\bin\javacpl.exe
- C:\Program Files (x86)\Java\jre1.8.0_91\bin
- C:\Program Files\CCleaner\http:\java.com\help
- C:\Program Files\CCleaner\http:\java.com\
- C:\Program Files\CCleaner\https:\mpc-hc.org\
- C:\Program Files\Sandboxie\Start.exe
- C:\Program Files\Sandboxie
- C:\Program Files\Sandboxie\SbieCtrl.exe
- C:\Windows\Installer\SandboxieInstall64.exe
- C:\Windows\Installer
- C:\tools\c.pyw
- C:\tools\iDefense\SysAnalyzer\api_logger.exe
- C:\tools\iDefense\SysAnalyzer\SysAnalyzer_help.chm
- C:\Program Files\CCleaner\http:\www.winpcap.org\
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
- C:\Users\Public\Desktop
- C:\Users\Public
- C:\Users\Public\desktop.ini
- C:\Users\Public\Desktop\desktop.ini
- C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned
- C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer
- C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
- C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
- C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\HMUSR64X\www.microsoft[1].xml
- C:\Windows\sysnative\shdocvw.dll
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccc0fa1b9f86f7b3.customDestinations-ms
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BXTFO2NK1XHP4NZZUGU3.temp
- C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\DOMStore\index.dat
- C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\UserData\index.dat
- C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\UserData\Low\index.dat
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\indexedDB\*.sqlite
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\indexedDB\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite-journal
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite-wal
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite-shm
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\OfflineCache\index.sqlite
- C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\jdm2a1on.default\OfflineCache\index.sqlite
- C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\jdm2a1on.default\OfflineCache\index.sqlite-journal
- C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\jdm2a1on.default\OfflineCache\index.sqlite-wal
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\persistent\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\default\*
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\storage\temporary\*
- C:\Users\user\AppData\Roaming\Thunderbird\Profiles
- C:\Users\user\AppData\Roaming\Thunderbird
- C:\Users\user\AppData\Roaming\Thunderbird\profiles.ini
- C:\Users\user\AppData\Local\Google\Chrome\Application\chrome.exe
- C:\Program Files\Google\Chrome\Application\chrome.exe
- C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\Local Storage\*.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\IndexedDB\*.indexeddb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\*.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\*.indexeddb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\Local Storage\*.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\IndexedDB\*.indexeddb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\Local Storage\*.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\IndexedDB\*.indexeddb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\Local Storage\*.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\IndexedDB\*.indexeddb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\Local Storage\*.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\IndexedDB\*.indexeddb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\Local Storage\*.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\IndexedDB\*.indexeddb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\Local Storage\*.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\IndexedDB\*.indexeddb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\Local Storage\*.localstorage
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\IndexedDB\*.indexeddb
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\databases\Databases.db
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db-wal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\databases\Databases.db
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\databases\Databases.db
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\databases\Databases.db
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\databases\Databases.db
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\databases\Databases.db
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\databases\Databases.db
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\databases\Databases.db
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\IndexedDB\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\IndexedDB\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\IndexedDB\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\IndexedDB\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\IndexedDB\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\IndexedDB\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\IndexedDB\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\IndexedDB\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\Pepper Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Caps\Pepper Data\macromedia.com\support\flashplayer\sys\
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\macromedia.com\support\flashplayer\sys\
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\Pepper Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\EVWhitelist\Pepper Data\macromedia.com\support\flashplayer\sys\
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\Pepper Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\PepperFlash\Pepper Data\macromedia.com\support\flashplayer\sys\
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\Pepper Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\pnacl\Pepper Data\macromedia.com\support\flashplayer\sys\
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\Pepper Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\ShaderCache\Pepper Data\macromedia.com\support\flashplayer\sys\
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\Pepper Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwiftShader\Pepper Data\macromedia.com\support\flashplayer\sys\
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\Pepper Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\SwReporter\Pepper Data\macromedia.com\support\flashplayer\sys\
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\Pepper Data\*
- C:\Users\user\AppData\Local\Google\Chrome\User Data\WidevineCDM\Pepper Data\macromedia.com\support\flashplayer\sys\
- C:\Program Files\Safari\Safari.exe
- C:\Program Files (x86)\Safari\Safari.exe
- C:\Windows\sysnative\Macromed\Flash\flashplayer.xpt
- C:\Windows\SysWOW64\Macromed\Flash\flashplayer.xpt
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player\*
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player\#SharedObjects\*
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\*
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\*
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\*
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\*
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
- C:\Program Files\CCleaner\temp_ccupdate
- C:\Program Files\CCleaner\temp_ccupdate\update.ini
- C:\Windows.old*
- C:\$WINDOWS.~Q
- C:\$INPLACE.~TR
- C:\Users\user\AppData\Local\Adobe\Air
- C:\Users\user\AppData\Roaming\Adobe\Acrobat\Distiller 10
- C:\Program Files\AdvancedSearchbar\advancedsearchbar.dll
- C:\Program Files (x86)\AdvancedSearchbar\advancedsearchbar.dll
- C:\Program Files\Google\Google Talk
- C:\Program Files (x86)\Google\Google Talk
- C:\Users\user\AppData\Roaming\Google\Google Talk
- C:\Users\user\AppData\Local\Google\Google Talk
- C:\Users\user\AppData\Roaming\Christofer Persson\Kantaris Media Player
- C:\Windows\ehome\ehshell.exe
- C:\Program Files\Steam\Steam.exe
- C:\Program Files (x86)\Steam\Steam.exe
- C:\Program Files\Xfire\Xfire.exe
- C:\Program Files (x86)\Xfire\Xfire.exe
- C:\Users\user\AppData\Roaming\com.oxygenxml\
- C:\Users\user\AppData\Local\Microsoft\Silverlight\is
- C:\Users\user\AppData\LocalLow\Microsoft\Silverlight\is
- C:\ProgramData\Microsoft\Search
- C:\Program Files\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
- C:\Program Files (x86)\Lavasoft\Ad-Aware SE Personal\Ad-Aware.exe
- C:\Program Files\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe
- C:\Program Files (x86)\Lavasoft\Ad-Aware SE Professional\Ad-Aware.exe
- C:\Program Files\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe
- C:\Program Files (x86)\Lavasoft\Ad-Aware SE Plus\Ad-Aware.exe
- C:\Program Files\Lavasoft\Ad-Aware\Ad-Aware.exe
- C:\Program Files (x86)\Lavasoft\Ad-Aware\Ad-Aware.exe
- C:\Program Files\Driver Cleaner Pro\DCleaner.exe
- C:\Program Files (x86)\Driver Cleaner Pro\DCleaner.exe
- C:\Program Files\videolan\vlc\vlc.exe
- C:\Program Files (x86)\videolan\vlc\vlc.exe
- C:\Program Files\MediaMonkey\MediaMonkey.exe
- C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe
- C:\Program Files\Skype\Phone\Skype.exe
- C:\Program Files (x86)\Skype\Phone\Skype.exe
- C:\Program Files\AIM\aim.exe
- C:\Program Files (x86)\AIM\aim.exe
- C:\Program Files\Camfrog\Camfrog Video Chat
- C:\Program Files (x86)\Camfrog\Camfrog Video Chat
- C:\Users\user\AppData\Roaming\Camfrog\history.db
- C:\Program Files\Miranda IM\miranda32.exe
- C:\Program Files (x86)\Miranda IM\miranda32.exe
- C:\Program Files\Miranda IM\miranda64.exe
- C:\Program Files (x86)\Miranda IM\miranda64.exe
- C:\Program Files\Pidgin\pidgin.exe
- C:\Program Files (x86)\Pidgin\pidgin.exe
- C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
- C:\Program Files (x86)\Yahoo!\Messenger\YahooMessenger.exe
- C:\Program Files\ooVoo\ooVoo.exe
- C:\Program Files (x86)\ooVoo\ooVoo.exe
- C:\Program Files\TeamSpeak 3 Client\ts3client_win32.exe
- C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win32.exe
- C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
- C:\Program Files (x86)\TeamSpeak 3 Client\ts3client_win64.exe
- C:\Program Files\Ventrilo\Ventrilo.exe
- C:\Program Files (x86)\Ventrilo\Ventrilo.exe
- C:\Program Files\VentSrv\ventrilo_srv.exe
- C:\Program Files (x86)\VentSrv\ventrilo_srv.exe
- C:\Program Files\CCleaner\%C:\Users\user\AppData\Local\Microsoft Games
- C:\Users\user\AppData\Local\Microsoft\Windows\GameExplorer
- C:\ProgramData\Speedbit\DAP
- C:\Program Files\Free Download Manager\fdm.exe
- C:\Program Files (x86)\Free Download Manager\fdm.exe
- C:\Users\user\AppData\Roaming\Free Download Manager
- C:\Users\user\AppData\Roaming\DAEMON Tools Lite\
- C:\Users\user\AppData\Roaming\DAEMON Tools Pro\
- C:\Users\user\AppData\Roaming\DAEMON Tools\
- C:\Users\user\AppData\Roaming\Azureus\.lock
- C:\Program Files\BitTorrent\BitTorrent.exe
- C:\Program Files (x86)\BitTorrent\BitTorrent.exe
- C:\Program Files\FrostWire\FrostWire.exe
- C:\Program Files (x86)\FrostWire\FrostWire.exe
- C:\Program Files\uTorrent\uTorrent.exe
- C:\Program Files (x86)\uTorrent\uTorrent.exe
- C:\Program Files\Shareaza Applications\Shareaza\Shareaza.exe
- C:\Program Files (x86)\Shareaza Applications\Shareaza\Shareaza.exe
- C:\Program Files\iMesh Applications\iMesh\iMesh.exe
- C:\Program Files (x86)\iMesh Applications\iMesh\iMesh.exe
- C:\Program Files\BearShare Applications\BearShare\BearShare.exe
- C:\Program Files (x86)\BearShare Applications\BearShare\BearShare.exe
- C:\Program Files\DC++\DCPlusPlus.exe
- C:\Program Files (x86)\DC++\DCPlusPlus.exe
- C:\Program Files\Ares\Ares.exe
- C:\Program Files (x86)\Ares\Ares.exe
- C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
- C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
- C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
- C:\Program Files\OpenOffice.org1.1.4\program\soffice.exe
- C:\Program Files (x86)\OpenOffice.org1.1.4\program\soffice.exe
- C:\Program Files\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
- C:\Program Files (x86)\Microsoft AntiSpyware\GIANTAntiSpywareMain.exe
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\GoogleToolbarData
- C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper
- C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper
- C:\Program Files\Imgburn\imgburn.exe
- C:\Program Files (x86)\Imgburn\imgburn.exe
- C:\Users\user\AppData\Local\FeedDemon\v1
- C:\Program Files\Last.fm\LastFM.exe
- C:\Program Files (x86)\Last.fm\LastFM.exe
- C:\Users\user\AppData\Local\Pando\Pando Files
- C:\Users\user\AppData\Roaming\Ditto
- C:\Users\user\AppData\Roaming\I2P
- C:\ProgramData\McAfee\MCLOGS
- C:\Users\user\.gimp-2.4
- C:\Users\user\.gimp-2.6
- C:\Users\user\.gimp-2.8
- C:\Users\user\AppData\Roaming\Go!Zilla
- C:\Users\user\AppData\Local\Microsoft\zune
- C:\Users\user\AppData\Roaming\FastStone\FSIV
- C:\Users\user\AppData\Roaming\notepad++
- C:\Program Files\ACD Systems\ACDSee\14.0\ACDSeeInTouch2.exe
- C:\Program Files (x86)\ACD Systems\ACDSee\14.0\ACDSeeInTouch2.exe
- C:\Users\user\AppData\Roaming\CoffeeCup Software\CoffeeCup HTML Editor
- C:\Users\user\AppData\Roaming\AIMP3
- C:\Users\user\AppData\Roaming\DivX\Player
- C:\Users\user\AppData\Roaming\Copernic\Agent
- C:\Users\user\AppData\Roaming\Copernic\Agent Pro
- C:\Users\user\AppData\Roaming\Anonymizer\Anonymizer Universal
- C:\Users\user\AppData\Local\Packages\Microsoft.SkypeApp_kzf8qxf38zg5c
- C:\Users\user\AppData\Local\Packages\9E2F88E3.Twitter_wgeqdkkx372wm
- C:\Users\user\AppData\Local\Packages\AdobeSystemsIncorporated.AdobeReader_ynb6jyjzte8ga
- C:\Users\user\AppData\Local\Packages\Microsoft.Bing_8wekyb3d8bbwe
- C:\Users\user\AppData\Local\Packages\Microsoft.BingFinance_8wekyb3d8bbwe
- C:\Users\user\AppData\Local\Packages\Microsoft.BingMaps_8wekyb3d8bbwe
- C:\Users\user\AppData\Local\Packages\Microsoft.BingNews_8wekyb3d8bbwe
- C:\Users\user\AppData\Local\Packages\Microsoft.BingSports_8wekyb3d8bbwe
- C:\Users\user\AppData\Local\Packages\Microsoft.BingTravel_8wekyb3d8bbwe
- C:\Users\user\AppData\Roaming\Sublime Text 3
- C:\Program Files\Tango\Tango.exe
- C:\Program Files (x86)\Tango\Tango.exe
- C:\Program Files (x86)\Google\Chrome\Application\imageres.dll
- C:\Windows\System32\imageres.dll
- \??\pipe\mojo.2680.2976.6919551006740612178
- \??\pipe\mojo.996.3068.11848897747031972764
- C:\Windows\SysWOW64\net.exe
- C:\Windows
- C:\Windows\SysWOW64
- C:\Windows\AppPatch\sysmain.sdb
- C:\Windows\SysWOW64\
- C:\Windows\SysWOW64\*.*
- C:\Windows\SysWOW64\ui\SwDRM.dll
- C:\Windows\SysWOW64\net1.exe
- C:\Windows\sysnative\Tasks
- C:\Windows\sysnative\Tasks\*
- C:\Windows\sysnative\Tasks\GoogleUpdateTaskMachineCore
- C:\Windows\sysnative\Tasks\GoogleUpdateTaskMachineUA
- C:\Windows\Tasks\CCleanerSkipUAC.job
- C:\Windows\sysnative\Tasks\CCleanerSkipUAC
- C:\Windows\sysnative\Tasks\
- C:\Windows\Temp\fwtsqmfile00.sqm
- C:\Windows\SysWOW64\sc.exe
- C:\Windows\SysWOW64\en-US\sc.exe.mui
- C:\Windows\sysnative\shell32.dll
- \??\PIPE\samr
- C:\Windows\sysnative\wbem\repository
- C:\Windows\sysnative\wbem\Logs
- C:\Windows\sysnative\wbem\AutoRecover
- C:\Windows\sysnative\wbem\MOF
- C:\Windows\sysnative\wbem\repository\INDEX.BTR
- C:\Windows\sysnative\wbem\repository\WRITABLE.TST
- C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
- C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
- C:\Windows\sysnative\wbem\repository\WBEM9xUpgd.dat
Show More 1106

Read Registry Keys

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{d35f944c-ffec-11e6-bdeb-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{d35f944c-ffec-11e6-bdeb-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c4-ccb0-11e5-b7bd-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c4-ccb0-11e5-b7bd-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c5-ccb0-11e5-b7bd-806e6f6e6963}\Data
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c5-ccb0-11e5-b7bd-806e6f6e6963}\Generation
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c6-ccb0-11e5-b7bd-806e6f6e6963}\Data
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c6-ccb0-11e5-b7bd-806e6f6e6963}\Generation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\UseFilter
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\System.dll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\UserInfo.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Version
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Enable Browser Extensions
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Google Toolbar\test
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\pv
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\lastrun
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\nsExec.dll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\LanmanWorkstation\Parameters\RpcCacheTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\nsDialogs.dll
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\th-TH
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\th-TH
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\id-ID
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\id-ID
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\be-BY
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\be-BY
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\sl-SI
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\sl-SI
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\lv-LV
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\lv-LV
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\az-Latn-AZ
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\az-Latn-AZ
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\ka-GE
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\ka-GE
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\hi-IN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\hi-IN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\kk-KZ
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\kk-KZ
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\tk-TM
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\tk-TM
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\tt-RU
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\tt-RU
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\mr-IN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\mr-IN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\mn-MN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\mn-MN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SESSION MANAGER\SafeProcessSearchMode
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Anchor Color
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Anchor Color Visited
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\AllowFileCLSIDJunctions
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FrameTabWindow
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FrameTabWindow
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FrameMerging
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FrameMerging
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SessionMerging
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\SessionMerging
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\AdminTabProcs
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\AdminTabProcs
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\TabProcGrowth
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\TabProcGrowth
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\NavigationDelay
- HKEY_CURRENT_USER\Software\Classes\.html\(Default)
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\ShellEx\IconHandler\(Default)
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\DocObject
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\BrowseInPlace
- HKEY_CURRENT_USER\Software\Classes\.html\Content Type
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\IsShortcut
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\AlwaysShowExt
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32\LoadWithoutCOM
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileMenu
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\UrlEncoding
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_UNC_SAVEDFILECHECK\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_UNC_SAVEDFILECHECK\*
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Flags
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\Flags
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\Flags
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\Flags
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\Flags
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\SpecialFoldersCacheSize
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\SpecialFoldersCacheSize
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SpecialFoldersCacheSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\SpecialFoldersCacheSize
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\No3DBorder
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\No3DBorder
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\UrlEncoding
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\UrlEncoding
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_HANDLING\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_HANDLING\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_SNIFFING\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_SNIFFING\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\IsTextPlainHonored
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SAFE_BINDTOOBJECT\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SAFE_BINDTOOBJECT\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragScrollInset
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragScrollDelay
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragDelay
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragScrollInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\about\CLSID
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2106
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Zoom\ZoomDisabled
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SmartDithering
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SmartDithering
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\RtfConverterFlags
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\UseClearType
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Page_Transitions
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Page_Transitions
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Use_DlgBox_Colors
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Anchor Underline
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\CSS_Compat
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Expand Alt Text
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Display Inline Images
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Display Inline Videos
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Display Inline Videos
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Play_Background_Sounds
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Play_Animations
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Print_Background
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Print_Background
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Use Stylesheets
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SmoothScroll
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\SmoothScroll
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\XMLHTTP
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Show image placeholders
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Show image placeholders
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Disable Script Debugger
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\DisableScriptDebuggerIE
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Move System Caret
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Force Offscreen Composition
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Enable AutoImageResize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Enable AutoImageResize
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\UseThemes
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\UseHR
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Q300829
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Cleanup HTCs
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\XDomainRequest
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\XDomainRequest
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\DOMStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\DOMStorage
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Default_CodePage
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\AutoDetect
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\Default_IEFontSizePrivate
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Anchor Color Hover
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Always Use My Colors
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Always Use My Font Size
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Always Use My Font Face
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Disable Visited Hyperlinks
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Use Anchor Hover Color
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\MiscFlags
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Allow Programmatic Cut_Copy_Paste
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\DisableCachingOfSSLPages
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\DisableCachingOfSSLPages
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\DisableCachingOfSSLPages
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PageSetup\Print_Background
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\(Default)
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\Flags
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\Contexts
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\950
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3\IEFontSize
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3\IEFontSizePrivate
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3\IEPropFontName
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3\IEFixedFontName
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\AcceptLanguage
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Version Vector\VML
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Version Vector\IE
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Version Vector\WindowsEdition
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ZONE_ELEVATION\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ZONE_ELEVATION\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SSLUX\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SSLUX\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2700
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2700
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_XSSFILTER\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_XSSFILTER\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\SecuritySafe
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\NoProtectedModeBanner
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ProtectedModeOffForAllZones
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\CurrentLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\CurrentLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\2500
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\CurrentLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\2500
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\CurrentLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2500
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\CurrentLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CoInternetCombineIUriCacheSize
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CoInternetCombineIUriCacheSize
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CoInternetCombineIUriCacheSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CoInternetCombineIUriCacheSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.png\Content Type
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2106
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2106
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BLOCK_LMZ_IMG\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BLOCK_LMZ_IMG\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnIntranet
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnIntranet
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnIntranet
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AutoRecover
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2000
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2000
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery\Sound
- HKEY_CURRENT_USER\Software\Microsoft\FTP\Use Web Based FTP
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Services\SelectionActivityButtonDisable
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Suggested Sites\Enabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{FF393560-C2A7-11CF-BFF4-444553540000} {000214E6-0000-0000-C000-000000000046} 0xFFFF
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\WindowsSearch\EnabledScopes
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows Search\CurrentVersion
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\LocalizedString
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\MaxRenderLine
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000\ProfileImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\FileSystem\NtfsDisableLastAccessUpdate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\svcVersion
- HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\MS Shell Dlg 2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Tahoma
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\nsProcess.dll
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\experiment_labels
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\inetc.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{55272A00-42CB-11CE-8135-00AA004BB851}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2A1C9EB2-DF62-4154-B800-63278FCB8037}\ProxyStubClsid32\(Default)
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadDecision
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadDecisionTime
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\WpadExpirationDays
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\WpadLastNetwork
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoProxyDetectType
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\EnableFileTracing
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\FileTracingMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\EnableConsoleTracing
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\ConsoleTracingMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\MaxFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\FileDirectory
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\EnableFileTracing
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\FileTracingMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\EnableConsoleTracing
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\ConsoleTracingMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\MaxFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\FileDirectory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\Common Documents
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\CommonPictures
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\CommonMusic
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\CommonVideo
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{DE92C1C7-837F-4F69-A3BB-86E631204A23}
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\My Music
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProfilesDirectory
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Startup
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\Common Startup
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Programs
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\Common Programs
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\CommonFilesDir
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20\ProfileImagePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\GlobalAssocChangedCounter
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\CurrentVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ChromeHTML\shell\open\command\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultTTL
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_CONFIRMCLEAN
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNMOZCACHE
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNMOZHISTORY
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNTHUNDERBIRDCACHE
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNTHUNDERBIRDHISTORY
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNOPERACACHE
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNCHROMECACHE
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SkipUAC
- HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon\state
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000\State
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\opv
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\cmd
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\CommandLine
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\SendsPings
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\WebAccessible
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\AutoRunOnOSUpgrade
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\RunAsUser
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\ap
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\brand
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\UninstallString
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\UninstallArguments
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\oeminstall
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\eulaaccepted
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\msi
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\eulaaccepted
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\ap
- MetricsReportingEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\usagestats
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\metricsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\metricsid
- UserDataDir
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
- HKEY_CURRENT_USER\Keyboard Layout\Preload\1
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts\00000409\Layout File
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts\00000409\Attributes
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DomainNameDevolutionLevel
- HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics\user_experience_metrics.stability.exited_cleanly
- isScriptDebugger
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\DriverVersion
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\DriverDate
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\ProviderName
- HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Google Chrome
- HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\http
- HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\https
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice\Progid
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\brand
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/pdf\Extension
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\reactivationbrand
- HKEY_CURRENT_USER\Software\Google\Software Removal Tool\Cleaner\StartTime
- HKEY_CURRENT_USER\Software\Google\Software Removal Tool\Cleaner\EndTime
- PixelStructure
- C2
- C1I
- C2I
- C7I
- C1
- C1S
- C7
- C7S
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\lang
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\lang
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\referral
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\referral
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Language
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\CCleaner\UpdateCheck
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\UpdateCheck
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CheckTrialOffer
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\BrowserMonitoring
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SystemMonitoring
- HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Brandover
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_LEFT
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_TOP
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_WIDTH
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_HEIGHT
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\EnableAnchorContext
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SplitterPositionCleaner
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\NewVersion
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\JumplistTasks
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\RunICS
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\AutoICS
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CookiesToSave
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SecureDeleteType
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SecureDeleteMethod
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WipeAlternateDataStreams
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WipeClusterTips
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\IEDetailed
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\FFDetailed
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\DelayTemp
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\DelayRB
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Exclude1
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CustomFiles
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CustomFolders
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Include1
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CustomLocation1
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WipeFreeSpaceDrives
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WipeMFTFreeSpace
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Version
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\svcVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCache
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\InitFolderHandler
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Start Menu
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\CallForAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\RestrictedAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORDISPLAY
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideFolderVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\UseDropHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORPARSING
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsParseDisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForOverlay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\MapNetDriveVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForInfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideInWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideOnDesktopPerUser
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsAliasedNotifications
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsUniversalDelegate
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\NoFileFolderJunction
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\PinToNameSpaceTree
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HasNavigationEnum
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMenu
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowCompColor
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\DontPrettyPath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideIcons
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MapNetDrvBtn
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebView
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Filter
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SeparateProcess
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NoNetCrawling
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AutoCheckSelect
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowTypeOverlay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\DocObject
- HKEY_CURRENT_USER\Software\Classes\Folder\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\BrowseInPlace
- HKEY_CURRENT_USER\Software\Classes\Folder\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\IsShortcut
- HKEY_CURRENT_USER\Software\Classes\Folder\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\NeverShowExt
- HKEY_CURRENT_USER\Software\Classes\Folder\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\InitFolderHandler
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Desktop
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\InitFolderHandler
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\IconHandler\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\Content Type
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\CLSID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\NeverShowExt
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\ie4uinit.exe,-735
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\ie4uinit.exe,-734
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\AccessibilityCpl.dll,-10
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\ie4uinit.exe,-737
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuSubFolders
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Start Menu
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\sud.dll,-1
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\wucltux.dll,-1
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\ehome\ehres.dll,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Windows Sidebar\sidebar.exe,-1005
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\WindowsAnytimeUpgradeUI.exe,-1
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\DVD Maker\DVDMaker.exe,-61403
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\FXSRESM.dll,-114
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\unregmp2.exe,-4
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\XpsRchVw.exe,-102
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\displayswitch.exe,-320
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\mblctr.exe,-1008
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\NetProjW.dll,-501
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\mstsc.exe,-4000
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\SnippingTool.exe,-15051
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\SoundRecorder.exe,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\SNTSearch.dll,-505
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\SyncCenter.dll,-3000
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\OobeFldr.dll,-33056
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\dfrgui.exe,-103
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\wdc.dll,-10030
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\msinfo32.exe,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\rstrui.exe,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\miguiresource.dll,-201
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\migwiz\wet.dll,-591
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\migwiz\wet.dll,-588
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Common Files\Microsoft Shared\Ink\ShapeCollector.exe,-298
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Common Files\Microsoft Shared\Ink\TipTsf.dll,-80
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Windows Journal\Journal.exe,-3074
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-102
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-101
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\comres.dll,-3410
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\mycomput.dll,-300
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\odbcint.dll,-1310
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\miguiresource.dll,-101
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\iscsicpl.dll,-5001
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\MdSched.exe,-4001
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\wdc.dll,-10021
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\pmcsnap.dll,-700
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\wsecedit.dll,-718
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\filemgmt.dll,-2204
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\msconfig.exe,-126
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\AuthFWGP.dll,-20
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\gameux.dll,-10082
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.URL\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\ShellEx\IconHandler\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.URL\PerceivedType
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.URL\Content Type
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\CLSID\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\NeverShowExt
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\sdcpl.dll,-101
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\recdisc.exe,-2000
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\msra.exe,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\PROGRA~2\WI3CF2~1\8.1\WINDOW~1\WINDOW~1.DLL,-101
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Programs
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Desktop
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}\SortOrderIndex
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\InitFolderHandler
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\CCleaner64.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuPinnedList
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartPage\FavoritesRemovedChanges
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\FavoritesChanges
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCacheSMP
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\CallForAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\RestrictedAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsFORDISPLAY
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\HideFolderVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\UseDropHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsFORPARSING
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsParseDisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\QueryForOverlay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\MapNetDriveVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\QueryForInfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\HideInWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\HideOnDesktopPerUser
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsAliasedNotifications
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsUniversalDelegate
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\NoFileFolderJunction
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\PinToNameSpaceTree
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\HasNavigationEnum
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{1F3427C8-5C10-4210-AA03-2EE45287D668}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\InProcServer32\LoadWithoutCOM
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\Windows\System32\shdocvw.dll
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{1F3427C8-5C10-4210-AA03-2EE45287D668} {000214E6-0000-0000-C000-000000000046} 0xFFFF
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband\FavoritesChanges
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCacheTBP
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuMFUprogramsList
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_TrackProgs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD313E04-FEFF-11D1-8ECD-0000F87A470C}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\InitFolderHandler
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Recent
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_JumpListItems
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_JumpListItems
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_MinMFU
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_TrackDocs
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_MAX
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Monitoring
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\ShowCleanWarning
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Temporary Internet Files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)History
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Cookies
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Recently Typed URLs
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Delete Index.dat files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Last Download Location
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Autocomplete Form History
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Saved Passwords
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Recent Documents
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Run (in Start Menu)
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Other Explorer MRUs
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Thumbnail Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Taskbar Jump Lists
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Network Passwords
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Empty Recycle Bin
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Temporary Files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Clipboard
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Memory Dumps
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Chkdsk File Fragments
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Windows Log Files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Windows Error Reporting
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)DNS Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Font Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Start Menu Shortcuts
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Desktop Shortcuts
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Windows Event Logs
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Old Prefetch data
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Menu Order Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Tray Notifications Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Window Size/Location Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Environment Path
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)User Assist History
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)IIS Log Files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Custom Folders
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Wipe Free Space
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}\PerUserLocalSettings
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2C41C52-C4CF-4AA9-B020-81515B67A394}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2C41C52-C4CF-4AA9-B020-81515B67A394}\Triggers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C429D89-59A7-46BD-8578-96BFEA72E22E}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C429D89-59A7-46BD-8578-96BFEA72E22E}\Triggers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\SchedulingEngineKnob
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Control Panel\International\LocaleName
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IPHLPSVC\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDllUnloadOnStop
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SystemMonitoringCheckComputer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000B7FD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\LaunchPermission
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\LoadUserSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\CIMV2
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\CIMV2
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
Show More 1161

Modified Files

C:\Users\user\AppData\Local\Temp\nsqA9C3.tmp
C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\System.dll
C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\UserInfo.dll
C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gtapi_signed.dll
C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcapi_dll.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1025.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1026.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1027.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1028.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1029.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1030.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1031.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1032.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1033.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1034.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1035.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1036.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1037.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1038.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1040.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1041.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1042.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1043.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1044.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1045.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1046.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1048.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1049.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1050.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1051.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1053.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1054.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1055.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1057.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1058.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1060.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1061.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1062.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1066.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1102.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_2052.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_2070.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_3098.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\combo-offer.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\pfWWW.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p\pfWWW.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p\syschk.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsExec.dll
- \Device\NamedPipe
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\pfUI.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\PF_logo.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\CC_logo_72x66.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\PF_computer.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\Montserrat-Regular.otf
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1031.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1041.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1049.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1053.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1042.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1044.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1040.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-2070.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1043.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1036.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1034.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1045.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1028.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1030.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1035.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1046.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1038.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1029.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-2052.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1027.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1037.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1032.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1055.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1025.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1048.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1110.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1063.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1052.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-3098.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-2074.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1051.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1071.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-5146.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1026.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1050.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1066.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1058.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1061.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1065.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1067.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1079.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-9999.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1068.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1060.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1059.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1087.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1062.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1102.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1057.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1092.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1109.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1054.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1081.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1104.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1155.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1090.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsDialogs.dll
- C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012017091920170920\index.dat
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite-wal
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite-shm
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\modern-header.bmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\modern-wizard.bmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ButtonEvent.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsProcess.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\inetc.dll
- C:\Users\user\AppData\Local\Temp\CheckUpdate.log
- C:\Program Files\CCleaner\CCleaner.exe
- C:\Program Files\CCleaner\CCleaner64.exe
- C:\Program Files\CCleaner\Lang\lang-1031.dll
- C:\Program Files\CCleaner\Lang\lang-1041.dll
- C:\Program Files\CCleaner\Lang\lang-1049.dll
- C:\Program Files\CCleaner\Lang\lang-1053.dll
- C:\Program Files\CCleaner\Lang\lang-1042.dll
- C:\Program Files\CCleaner\Lang\lang-1044.dll
- C:\Program Files\CCleaner\Lang\lang-1040.dll
- C:\Program Files\CCleaner\Lang\lang-2070.dll
- C:\Program Files\CCleaner\Lang\lang-1043.dll
- C:\Program Files\CCleaner\Lang\lang-1036.dll
- C:\Program Files\CCleaner\Lang\lang-1034.dll
- C:\Program Files\CCleaner\Lang\lang-1045.dll
- C:\Program Files\CCleaner\Lang\lang-1028.dll
- C:\Program Files\CCleaner\Lang\lang-1030.dll
- C:\Program Files\CCleaner\Lang\lang-1035.dll
- C:\Program Files\CCleaner\Lang\lang-1046.dll
- C:\Program Files\CCleaner\Lang\lang-1038.dll
- C:\Program Files\CCleaner\Lang\lang-1029.dll
- C:\Program Files\CCleaner\Lang\lang-2052.dll
- C:\Program Files\CCleaner\Lang\lang-1027.dll
- C:\Program Files\CCleaner\Lang\lang-1037.dll
- C:\Program Files\CCleaner\Lang\lang-1032.dll
- C:\Program Files\CCleaner\Lang\lang-1055.dll
- C:\Program Files\CCleaner\Lang\lang-1025.dll
- C:\Program Files\CCleaner\Lang\lang-1048.dll
- C:\Program Files\CCleaner\Lang\lang-1110.dll
- C:\Program Files\CCleaner\Lang\lang-1063.dll
- C:\Program Files\CCleaner\Lang\lang-1052.dll
- C:\Program Files\CCleaner\Lang\lang-3098.dll
- C:\Program Files\CCleaner\Lang\lang-2074.dll
- C:\Program Files\CCleaner\Lang\lang-1051.dll
- C:\Program Files\CCleaner\Lang\lang-1071.dll
- C:\Program Files\CCleaner\Lang\lang-5146.dll
- C:\Program Files\CCleaner\Lang\lang-1026.dll
- C:\Program Files\CCleaner\Lang\lang-1050.dll
- C:\Program Files\CCleaner\Lang\lang-1066.dll
- C:\Program Files\CCleaner\Lang\lang-1058.dll
- C:\Program Files\CCleaner\Lang\lang-1061.dll
- C:\Program Files\CCleaner\Lang\lang-1065.dll
- C:\Program Files\CCleaner\Lang\lang-1067.dll
- C:\Program Files\CCleaner\Lang\lang-1079.dll
- C:\Program Files\CCleaner\Lang\lang-9999.dll
- C:\Program Files\CCleaner\Lang\lang-1068.dll
- C:\Program Files\CCleaner\Lang\lang-1060.dll
- C:\Program Files\CCleaner\Lang\lang-1059.dll
- C:\Program Files\CCleaner\Lang\lang-1087.dll
- C:\Program Files\CCleaner\Lang\lang-1062.dll
- C:\Program Files\CCleaner\Lang\lang-1102.dll
- C:\Program Files\CCleaner\Lang\lang-1057.dll
- C:\Program Files\CCleaner\Lang\lang-1092.dll
- C:\Program Files\CCleaner\Lang\lang-1109.dll
- C:\Program Files\CCleaner\Lang\lang-1054.dll
- C:\Program Files\CCleaner\Lang\lang-1081.dll
- C:\Program Files\CCleaner\Lang\lang-1104.dll
- C:\Program Files\CCleaner\Lang\lang-1155.dll
- C:\Program Files\CCleaner\Lang\lang-1090.dll
- \??\PIPE\srvsvc
- C:\Users\Public\Desktop\CCleaner.lnk
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner Homepage.url
- C:\Program Files\CCleaner\uninst.exe
- \??\pipe\mojo.1452.2376.14883248807444065675
- C:\Users\user\AppData\Local\Google\Chrome\User Data\lockfile
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG.old
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOCK
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000001
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Top Sites
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000003.log
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BFF5.tmp
- C:\Users\user\AppData\Local\Temp\etilqs_iGaj0dtUtTRn36P
- \??\pipe\mojo.1452.2840.4937964858906658848
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
- C:
- C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BXTFO2NK1XHP4NZZUGU3.temp
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccc0fa1b9f86f7b3.customDestinations-ms
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite-wal
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite-shm
- C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\jdm2a1on.default\OfflineCache\index.sqlite
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db
- \??\pipe\mojo.2680.2976.6919551006740612178
- \??\pipe\mojo.996.3068.11848897747031972764
- C:\Windows\sysnative\Tasks\CCleanerSkipUAC
- C:\Windows\Temp\fwtsqmfile00.sqm
- \??\PIPE\samr
- C:\Windows\sysnative\wbem\repository\WRITABLE.TST
- C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
- C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
- C:\Windows\sysnative\wbem\repository\INDEX.BTR
Show More 225

Resolved APIs

version.dll.GetFileVersionInfoW
shfolder.dll.SHGetFolderPathW
cryptbase.dll.SystemFunction036
uxtheme.dll.ThemeInitApiHook
user32.dll.IsProcessDPIAware
- setupapi.dll.CM_Get_Device_Interface_List_Size_ExW
- setupapi.dll.CM_Get_Device_Interface_List_ExW
- kernel32.dll.GetUserDefaultUILanguage
- system.dll.Alloc
- system.dll.Call
- kernel32.dll.GetVersionExW
- system.dll.Free
- dwmapi.dll.DwmIsCompositionEnabled
- comctl32.dll.RegisterClassNameW
- uxtheme.dll.EnableThemeDialogTexture
- ole32.dll.CoInitializeEx
- ole32.dll.CoUninitialize
- ole32.dll.CoRegisterInitializeSpy
- ole32.dll.CoRevokeInitializeSpy
- gdi32.dll.GetLayout
- gdi32.dll.GdiRealizationInfo
- gdi32.dll.FontIsLinked
- advapi32.dll.RegOpenKeyExW
- advapi32.dll.RegQueryInfoKeyW
- gdi32.dll.GetTextFaceAliasW
- advapi32.dll.RegEnumValueW
- advapi32.dll.RegCloseKey
- advapi32.dll.RegQueryValueExW
- gdi32.dll.GetFontAssocStatus
- advapi32.dll.RegQueryValueExA
- advapi32.dll.RegEnumKeyExW
- gdi32.dll.GdiIsMetaPrintDC
- userinfo.dll.GetAccountType
- advapi32.dll.CheckTokenMembership
- kernel32.dll.GetCurrentProcess
- kernel32.dll.IsWow64Process
- kernel32.dll.FlsAlloc
- kernel32.dll.FlsGetValue
- kernel32.dll.FlsSetValue
- kernel32.dll.FlsFree
- kernel32.dll.InitializeCriticalSectionAndSpinCount
- gtapi_signed.dll.ToolbarCompatibilityCheck
- kernel32.dll.QueryActCtxW
- kernel32.dll.GetModuleHandleExW
- kernel32.dll.CreateActCtxW
- kernel32.dll.ActivateActCtx
- kernel32.dll.FindActCtxSectionStringW
- kernel32.dll.DeactivateActCtx
- kernel32.dll.VerifyVersionInfoA
- kernel32.dll.VerSetConditionMask
- advapi32.dll.OpenProcessToken
- advapi32.dll.GetTokenInformation
- advapi32.dll.IsValidSid
- advapi32.dll.GetSidIdentifierAuthority
- advapi32.dll.GetSidSubAuthorityCount
- advapi32.dll.GetSidSubAuthority
- kernel32.dll.InitializeCriticalSectionEx
- kernel32.dll.CreateEventExW
- kernel32.dll.CreateSemaphoreExW
- kernel32.dll.SetThreadStackGuarantee
- kernel32.dll.CreateThreadpoolTimer
- kernel32.dll.SetThreadpoolTimer
- kernel32.dll.WaitForThreadpoolTimerCallbacks
- kernel32.dll.CloseThreadpoolTimer
- kernel32.dll.CreateThreadpoolWait
- kernel32.dll.SetThreadpoolWait
- kernel32.dll.CloseThreadpoolWait
- kernel32.dll.FlushProcessWriteBuffers
- kernel32.dll.FreeLibraryWhenCallbackReturns
- kernel32.dll.GetCurrentProcessorNumber
- kernel32.dll.GetLogicalProcessorInformation
- kernel32.dll.CreateSymbolicLinkW
- kernel32.dll.EnumSystemLocalesEx
- kernel32.dll.CompareStringEx
- kernel32.dll.GetDateFormatEx
- kernel32.dll.GetLocaleInfoEx
- kernel32.dll.GetTimeFormatEx
- kernel32.dll.GetUserDefaultLocaleName
- kernel32.dll.IsValidLocaleName
- kernel32.dll.LCMapStringEx
- kernel32.dll.GetTickCount64
- shell32.dll.CommandLineToArgvW
- gcapi_dll.dll.GoogleChromeCompatibilityCheck
- gcapi_dll.dll.CanOfferReactivation
- nsexec.dll.Exec
- kernel32.dll.AddVectoredExceptionHandler
- kernel32.dll.RemoveVectoredExceptionHandler
- kernel32.dll.GetNativeSystemInfo
- ntdll.dll.NtQuerySystemInformation
- ntdll.dll.NtQueryInformationProcess
- psapi.dll.QueryWorkingSet
- psapi.dll.QueryWorkingSetEx
- kernel32.dll.CreateHardLinkW
- pfui.dll.Set
- nsdialogs.dll.CreateControl
- nsdialogs.dll.OnClick
- pfui.dll.ShowWelcome
- uxtheme.dll.OpenThemeData
- uxtheme.dll.GetThemeBool
- uxtheme.dll.IsThemePartDefined
- uxtheme.dll.GetThemeMargins
- uxtheme.dll.GetThemeInt
- comctl32.dll.HIMAGELIST_QueryInterface
- comctl32.dll.DrawShadowText
- comctl32.dll.DrawSizeBox
- comctl32.dll.DrawScrollBar
- comctl32.dll.SizeBoxHwnd
- comctl32.dll.ScrollBar_MouseMove
- comctl32.dll.ScrollBar_Menu
- comctl32.dll.HandleScrollCmd
- comctl32.dll.DetachScrollBars
- comctl32.dll.AttachScrollBars
- comctl32.dll.CCSetScrollInfo
- comctl32.dll.CCGetScrollInfo
- comctl32.dll.CCEnableScrollBar
- comctl32.dll.QuerySystemGestureStatus
- uxtheme.dll.#49
- uxtheme.dll.CloseThemeData
- uxtheme.dll.SetWindowTheme
- uxtheme.dll.GetThemeFont
- uxtheme.dll.GetThemeColor
- imm32.dll.ImmIsIME
- urlmon.dll.#414
- kernel32.dll.IsProcessorFeaturePresent
- user32.dll.GetWindowInfo
- user32.dll.GetAncestor
- user32.dll.GetMonitorInfoA
- user32.dll.EnumDisplayMonitors
- user32.dll.EnumDisplayDevicesA
- gdi32.dll.ExtTextOutW
- windowscodecs.dll.DllGetClassObject
- kernel32.dll.WerRegisterMemoryBlock
- uxtheme.dll.DrawThemeBackground
- uxtheme.dll.GetThemeBackgroundContentRect
- uxtheme.dll.GetThemePartSize
- sxs.dll.SxsOleAut32RedirectTypeLibrary
- advapi32.dll.RegOpenKeyW
- advapi32.dll.RegQueryValueW
- sxs.dll.SxsOleAut32MapConfiguredClsidToReferenceClsid
- urlmon.dll.CreateUri
- kernel32.dll.InitializeSRWLock
- kernel32.dll.AcquireSRWLockExclusive
- kernel32.dll.AcquireSRWLockShared
- kernel32.dll.ReleaseSRWLockExclusive
- kernel32.dll.ReleaseSRWLockShared
- urlmon.dll.CreateIUriBuilder
- urlmon.dll.CreateURLMonikerEx
- urlmon.dll.CreateAsyncBindCtxEx
- urlmon.dll.RegisterBindStatusCallback
- urlmon.dll.CreateFormatEnumerator
- urlmon.dll.UrlMkGetSessionOption
- urlmon.dll.CoInternetCreateSecurityManager
- shell32.dll.SHGetFolderPathW
- urlmon.dll.CoInternetIsFeatureEnabled
- oleaut32.dll.#6
- oleaut32.dll.#7
- oleaut32.dll.#8
- ieframe.dll.#302
- urlmon.dll.RegisterFormatEnumerator
- urlmon.dll.RevokeBindStatusCallback
- urlmon.dll.CoInternetCreateZoneManager
- urlmon.dll.#101
- user32.dll.GetSystemMetrics
- user32.dll.MonitorFromWindow
- user32.dll.MonitorFromRect
- user32.dll.MonitorFromPoint
- user32.dll.EnumDisplayDevicesW
- user32.dll.GetMonitorInfoW
- oleaut32.dll.#2
- oleaut32.dll.VariantClear
- imgutil.dll.DecodeImage
- version.dll.GetFileVersionInfoSizeW
- version.dll.VerQueryValueW
- mlang.dll.#112
- wininet.dll.GetUrlCacheEntryInfoExW
- kernel32.dll.SetFileInformationByHandle
- comctl32.dll.ImageList_Create
- comctl32.dll.ImageList_ReplaceIcon
- urlmon.dll.#330
- wininet.dll.GetUrlCacheEntryInfoA
- urlmon.dll.CoInternetQueryInfo
- wininet.dll.CommitUrlCacheEntryA
- wininet.dll.FindFirstUrlCacheContainerA
- wininet.dll.FindNextUrlCacheContainerA
- wininet.dll.FindCloseUrlCache
- wininet.dll.CreateUrlCacheContainerA
- wininet.dll.DeleteUrlCacheContainerA
- wininet.dll.FindFirstUrlCacheEntryA
- wininet.dll.DeleteUrlCacheEntryW
- wininet.dll.FindNextUrlCacheEntryA
- urlmon.dll.IntlPercentEncodeNormalize
- wininet.dll.GetUrlCacheEntryInfoW
- wininet.dll.CommitUrlCacheEntryW
- oleaut32.dll.#4
- uxtheme.dll.IsAppThemed
- msimg32.dll.AlphaBlend
- sechost.dll.LookupAccountSidLocalW
- msimtf.dll.MsimtfIsWindowFiltered
- wininet.dll.InternetSetOptionW
- comctl32.dll.ImageList_Destroy
- oleaut32.dll.#201
- oleaut32.dll.#500
- pfui.dll.Get
- buttonevent.dll.AddEventHandler
- uxtheme.dll.GetThemeTextExtent
- pfui.dll.ShowInstall
- nsprocess.dll._FindProcess
- nsprocess.dll._Unload
- gcapi_dll.dll.ReactivateChrome
- advapi32.dll.RegSetValueExW
- inetc.dll.get
- wininet.dll.FtpCommandW
- rasapi32.dll.RasConnectionNotificationW
- sechost.dll.NotifyServiceStatusChangeA
- advapi32.dll.RegDeleteTreeA
- advapi32.dll.RegDeleteTreeW
- ole32.dll.CoCreateInstance
- ole32.dll.CoTaskMemAlloc
- oleaut32.dll.#9
- oleaut32.dll.DllGetClassObject
- oleaut32.dll.DllCanUnloadNow
- ole32.dll.CoTaskMemFree
- ole32.dll.StringFromIID
- iphlpapi.dll.GetAdaptersAddresses
- dhcpcsvc.dll.DhcpRequestParams
- propsys.dll.PSCreateMemoryPropertyStore
- linkinfo.dll.CreateLinkInfoW
- user32.dll.IsCharAlphaW
- user32.dll.CharPrevW
- ntshrui.dll.GetNetResourceFromLocalPathW
- srvcli.dll.NetShareEnum
- cscapi.dll.CscNetApiGetInterface
- slc.dll.SLGetWindowsInformationDWORD
- shlwapi.dll.PathRemoveFileSpecW
- linkinfo.dll.DestroyLinkInfo
- sechost.dll.OpenSCManagerW
- sechost.dll.OpenServiceW
- sechost.dll.QueryServiceStatus
- sechost.dll.CloseServiceHandle
- kernel32.dll.GetVersion
- advapi32.dll.LookupPrivilegeValueW
- advapi32.dll.AdjustTokenPrivileges
- kernel32.dll.CloseHandle
- advapi32.dll.RegLoadKeyW
- shell32.dll.SHChangeNotify
- uxtheme.dll.BufferedPaintInit
- uxtheme.dll.BufferedPaintRenderAnimation
- uxtheme.dll.BeginBufferedAnimation
- uxtheme.dll.IsThemeBackgroundPartiallyTransparent
- uxtheme.dll.DrawThemeParentBackground
- uxtheme.dll.DrawThemeText
- uxtheme.dll.EndBufferedAnimation
- uxtheme.dll.BufferedPaintStopAllAnimations
- nsdialogs.dll.Create
- nsdialogs.dll.SetRTL
- user32.dll.GetClientRect
- user32.dll.LoadImageW
- user32.dll.SetFocus
- pfui.dll.ShowFinish
- nsdialogs.dll.Show
- user32.dll.IsWindowVisible
- user32.dll.CharLowerW
- gdi32.dll.DeleteObject
- uxtheme.dll.BufferedPaintUnInit
- comctl32.dll.#388
- kernel32.dll.MoveFileExW
- netutils.dll.NetApiBufferFree
- rpcrt4.dll.RpcBindingFree
- advapi32.dll.UnregisterTraceGuids
- cryptsp.dll.CryptReleaseContext
- comctl32.dll.#321
- kernel32.dll.InitOnceExecuteOnce
- kernel32.dll.CreateSemaphoreW
- kernel32.dll.GetFileInformationByHandleEx
- kernel32.dll.InitializeConditionVariable
- kernel32.dll.WakeConditionVariable
- kernel32.dll.WakeAllConditionVariable
- kernel32.dll.SleepConditionVariableCS
- kernel32.dll.TryAcquireSRWLockExclusive
- kernel32.dll.SleepConditionVariableSRW
- kernel32.dll.CreateThreadpoolWork
- kernel32.dll.SubmitThreadpoolWork
- kernel32.dll.CloseThreadpoolWork
- user32.dll.EnableScrollBar
- user32.dll.GetScrollInfo
- user32.dll.GetScrollPos
- user32.dll.GetScrollRange
- user32.dll.SetScrollInfo
- user32.dll.SetScrollPos
- user32.dll.SetScrollRange
- user32.dll.ShowScrollBar
- kernel32.dll.CreateToolhelp32Snapshot
- kernel32.dll.Thread32First
- kernel32.dll.Thread32Next
- kernel32.dll.SortGetHandle
- kernel32.dll.SortCloseHandle
- dbghelp.dll.MiniDumpWriteDump
- rpcrt4.dll.UuidCreate
- sspicli.dll.GetUserNameExW
- kernel32.dll.NlsGetCacheUpdateCount
- sechost.dll.LookupAccountNameLocalW
- kernel32.dll.GetProductInfo
- user32.dll.SetProcessDPIAware
- chrome.exe.GetHandleVerifier
- kernel32.dll.SetProcessDEPPolicy
- sechost.dll.ConvertSidToStringSidW
- chrome.dll.ChromeMain
- chrome.exe.DumpProcessWithoutCrash
- chrome.exe.IsSandboxedProcess
- advapi32.dll.EventRegister
- advapi32.dll.EventWrite
- advapi32.dll.EventUnregister
- chrome.exe.SetCrashKeyValueImpl
- chrome.exe.ClearCrashKeyValueImpl
- ntmarta.dll.GetMartaExtensionInterface
- user32.dll.GetUserObjectSecurity
- kbdus.dll.#1
- user32.dll.SetUserObjectSecurity
- dwrite.dll.DWriteCreateFactory
- ws2_32.dll.#115
- ws2_32.dll.#111
- chrome.exe.CrashForException
- kernel32.dll.GetThreadPreferredUILanguages
- ws2_32.dll.WSALookupServiceBeginW
- nlaapi.dll.NSPStartup
- iphlpapi.dll.GetAdapterIndex
- ws2_32.dll.WSALookupServiceNextW
- ws2_32.dll.WSALookupServiceEnd
- ws2_32.dll.WSACreateEvent
- iphlpapi.dll.NotifyAddrChange
- cfgmgr32.dll.CMP_RegisterNotification
- cfgmgr32.dll.CM_MapCrToWin32Err
- gpapi.dll.RegisterGPNotificationInternal
- sechost.dll.QueryServiceConfigW
- gpapi.dll.GetAppliedGPOListInternalW
- setupapi.dll.SetupDiGetClassDevsW
- wlanapi.dll.WlanOpenHandle
- wlanapi.dll.WlanEnumInterfaces
- wlanapi.dll.WlanQueryInterface
- wlanapi.dll.WlanSetInterface
- wlanapi.dll.WlanFreeMemory
- wlanapi.dll.WlanCloseHandle
- setupapi.dll.SetupDiEnumDeviceInfo
- setupapi.dll.SetupDiGetDeviceRegistryPropertyW
- cfgmgr32.dll.CM_Get_Device_IDW
- setupapi.dll.SetupDiDestroyDeviceInfoList
- wintrust.dll.WinVerifyTrust
- cryptbase.dll.SystemFunction001
- cryptbase.dll.SystemFunction002
- cryptbase.dll.SystemFunction003
- cryptbase.dll.SystemFunction004
- cryptbase.dll.SystemFunction005
- cryptbase.dll.SystemFunction028
- cryptbase.dll.SystemFunction029
- cryptbase.dll.SystemFunction034
- cryptbase.dll.SystemFunction040
- cryptbase.dll.SystemFunction041
- shell32.dll.SHGetKnownFolderPath
- sechost.dll.ConvertStringSidToSidW
- samcli.dll.NetUserGetLocalGroups
- setupapi.dll.SetupDiGetClassDevsExW
- setupapi.dll.SetupDiGetDeviceInstanceIdW
- setupapi.dll.CM_Get_DevNode_Status
- setupapi.dll.SetupDiEnumDeviceInterfaces
- setupapi.dll.SetupDiGetDeviceInterfaceDetailW
- kernel32.dll.RegisterApplicationRestart
- shell32.dll.SHGetPropertyStoreForWindow
- propsys.dll.PSStringFromPropertyKey
- propsys.dll.PropVariantToString
- winsta.dll.WinStationQueryInformationW
- advapi32.dll.LookupAccountSidW
- uxtheme.dll.DrawThemeBackgroundEx
- uxtheme.dll.SetThemeAppProperties
- uxtheme.dll.IsThemeActive
- advapi32.dll.CreateWellKnownSid
- rpcrt4.dll.RpcStringBindingComposeW
- rpcrt4.dll.RpcBindingFromStringBindingW
- rpcrt4.dll.RpcStringFreeW
- rpcrt4.dll.RpcBindingSetAuthInfoExW
- rpcrt4.dll.NdrClientCall2
- user32.dll.IsWindow
- user32.dll.GetWindowThreadProcessId
- winsta.dll.WinStationRegisterConsoleNotification
- rpcrt4.dll.RpcAsyncInitializeHandle
- rpcrt4.dll.NdrAsyncClientCall
- kernel32.dll.GetPhysicallyInstalledSystemMemory
- kernel32.dll.GlobalMemoryStatusEx
- user32.dll.ChangeWindowMessageFilterEx
- imm32.dll.ImmAssociateContext
- imm32.dll.ImmGetContext
- imm32.dll.ImmReleaseContext
- wininet.dll.FindFirstUrlCacheEntryExW
- wininet.dll.FindNextUrlCacheEntryExW
- shell32.dll.#66
- ole32.dll.CoGetApartmentType
- comctl32.dll.#236
- ole32.dll.CoGetMalloc
- ole32.dll.CreateBindCtx
- comctl32.dll.#320
- comctl32.dll.#324
- comctl32.dll.#323
- advapi32.dll.RegEnumKeyW
- advapi32.dll.InitializeSecurityDescriptor
- advapi32.dll.SetEntriesInAclW
- advapi32.dll.SetSecurityDescriptorDacl
- advapi32.dll.IsTextUnicode
- comctl32.dll.#332
- comctl32.dll.#338
- comctl32.dll.#339
- shell32.dll.#102
- comctl32.dll.#386
- apphelp.dll.ApphelpCheckShellObject
- comctl32.dll.#385
- comctl32.dll.#329
- comctl32.dll.#336
- ntdll.dll.RtlDllShutdownInProgress
- comctl32.dll.#333
- propsys.dll.PropVariantToBoolean
- ole32.dll.PropVariantClear
- cryptsp.dll.CryptAcquireContextW
- cryptsp.dll.CryptGenRandom
- ole32.dll.NdrOleInitializeExtension
- ole32.dll.CoGetClassObject
- ole32.dll.CoGetMarshalSizeMax
- ole32.dll.CoMarshalInterface
- ole32.dll.CoUnmarshalInterface
- ole32.dll.CoGetPSClsid
- ole32.dll.CoReleaseMarshalData
- ole32.dll.DcomChannelSetHResult
- kernel32.dll.GetSystemWow64DirectoryW
- kernel32.dll.SetThreadPreferredUILanguages
- kernel32.dll.LocaleNameToLCID
- kernel32.dll.LCIDToLocaleName
- kernel32.dll.GetSystemDefaultLocaleName
- kernel32.dll.SetWaitableTimerEx
- pcwum.dll.PerfDeleteInstance
- pcwum.dll.PerfStopProvider
- advapi32.dll.WmiCloseBlock
- propsys.dll.PropVariantToVariant
- ole32.dll.CoDisconnectObject
- wbemcore.dll.Shutdown
- advapi32.dll.RegDeleteKeyExW
- kernel32.dll.RegDeleteValueW
- advapi32.dll.OpenThreadToken
- comctl32.dll.#328
- comctl32.dll.#334
- vssapi.dll.CreateWriter
- advapi32.dll.LookupAccountNameW
- samcli.dll.NetLocalGroupGetMembers
- samlib.dll.SamConnect
- rpcrt4.dll.NdrClientCall3
- samlib.dll.SamOpenDomain
- samlib.dll.SamLookupNamesInDomain
- samlib.dll.SamOpenAlias
- samlib.dll.SamFreeMemory
- samlib.dll.SamCloseHandle
- samlib.dll.SamGetMembersInAlias
- ole32.dll.CoCreateGuid
- ole32.dll.StringFromCLSID
- propsys.dll.VariantToPropVariant
- wbemcore.dll.Reinitialize
- wbemsvc.dll.DllGetClassObject
- wbemsvc.dll.DllCanUnloadNow
- authz.dll.AuthzInitializeContextFromToken
- authz.dll.AuthzInitializeObjectAccessAuditEvent2
- authz.dll.AuthzAccessCheck
- authz.dll.AuthzFreeAuditEvent
- authz.dll.AuthzFreeContext
- authz.dll.AuthzInitializeResourceManager
- authz.dll.AuthzFreeResourceManager
- rpcrt4.dll.RpcBindingCreateW
- rpcrt4.dll.RpcBindingBind
- rpcrt4.dll.I_RpcMapWin32Status
- kernel32.dll.RegCloseKey
- kernel32.dll.RegSetValueExW
- kernel32.dll.RegOpenKeyExW
- kernel32.dll.RegQueryValueExW
- wmisvc.dll.IsImproperShutdownDetected
- wevtapi.dll.EvtRender
- wevtapi.dll.EvtNext
- wevtapi.dll.EvtClose
- wevtapi.dll.EvtQuery
- wevtapi.dll.EvtCreateRenderContext
- rpcrt4.dll.RpcBindingSetOption
- ole32.dll.CoCreateFreeThreadedMarshaler
- ole32.dll.CreateStreamOnHGlobal
- advapi32.dll.RegCreateKeyExW
- kernelbase.dll.InitializeAcl
- kernelbase.dll.AddAce
- sechost.dll.ConvertStringSecurityDescriptorToSecurityDescriptorW
- kernel32.dll.IsThreadAFiber
- kernel32.dll.OpenProcessToken
- kernelbase.dll.GetTokenInformation
- kernelbase.dll.DuplicateTokenEx
- kernelbase.dll.AdjustTokenPrivileges
- kernelbase.dll.AllocateAndInitializeSid
- kernelbase.dll.CheckTokenMembership
- kernel32.dll.SetThreadToken
- ole32.dll.CLSIDFromString
- oleaut32.dll.#17
- oleaut32.dll.#20
- oleaut32.dll.#19
- oleaut32.dll.#25
- authz.dll.AuthzInitializeContextFromSid
- ole32.dll.CoGetCallContext
Show More 500

Deleted Files

C:\Users\user\AppData\Local\Temp\nsaA916.tmp
C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp
C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012016042520160426\index.dat
C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012016042520160426\
C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite-shm
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite-wal
- C:\Users\user\AppData\Local\Temp\CheckUpdate.log
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ButtonEvent.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcapi_dll.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\combo-offer.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1025.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1026.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1027.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1028.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1029.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1030.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1031.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1032.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1033.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1034.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1035.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1036.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1037.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1038.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1040.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1041.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1042.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1043.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1044.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1045.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1046.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1048.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1049.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1050.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1051.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1053.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1054.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1055.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1057.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1058.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1060.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1061.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1062.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1066.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1102.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_2052.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_2070.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_3098.html
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gtapi_signed.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\pfWWW.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\inetc.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\modern-header.bmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\modern-wizard.bmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsDialogs.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsExec.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsProcess.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p\pfWWW.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p\syschk.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\p\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\System.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\pfUI.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\CC_logo_72x66.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1025.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1026.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1027.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1028.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1029.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1030.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1031.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1032.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1034.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1035.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1036.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1037.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1038.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1040.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1041.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1042.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1043.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1044.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1045.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1046.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1048.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1049.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1050.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1051.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1052.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1053.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1054.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1055.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1057.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1058.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1059.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1060.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1061.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1062.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1063.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1065.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1066.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1067.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1068.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1071.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1079.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1081.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1087.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1090.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1092.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1102.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1104.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1109.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1110.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-1155.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-2052.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-2070.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-2074.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-3098.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-5146.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\lang-9999.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\Montserrat-Regular.otf
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\PF_computer.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\PF_logo.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\UserInfo.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BFF5.tmp
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BXTFO2NK1XHP4NZZUGU3.temp
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite-shm
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite-wal
- C:\Windows\Tasks\CCleanerSkipUAC.job
Show More 128

Deleted Registry Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Google Toolbar\test
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\AddToFavoritesInitialSelection
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\AddToFeedsInitialSelection
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\InstallDate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\FirstNotDefault\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\AutoICS
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\AutoUpdateNotificationExpiryTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\CCleanerSkipUAC.job
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\CCleanerSkipUAC.job.fp
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
Show More 9

Registry Keys

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{d35f944c-ffec-11e6-bdeb-806e6f6e6963}\
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{d35f944c-ffec-11e6-bdeb-806e6f6e6963}\Data
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{d35f944c-ffec-11e6-bdeb-806e6f6e6963}\Generation
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c4-ccb0-11e5-b7bd-806e6f6e6963}\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c4-ccb0-11e5-b7bd-806e6f6e6963}\Data
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c4-ccb0-11e5-b7bd-806e6f6e6963}\Generation
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c5-ccb0-11e5-b7bd-806e6f6e6963}\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c5-ccb0-11e5-b7bd-806e6f6e6963}\Data
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c5-ccb0-11e5-b7bd-806e6f6e6963}\Generation
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c6-ccb0-11e5-b7bd-806e6f6e6963}\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c6-ccb0-11e5-b7bd-806e6f6e6963}\Data
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume\{2400a2c6-ccb0-11e5-b7bd-806e6f6e6963}\Generation
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\CCleaner
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\UseFilter
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\System.dll
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Locale\Alternate Sorts
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\Language Groups
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Locale\00000409
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\Language Groups\1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\TIP\{0000897b-83df-4b96-be07-0fb58b01c4a4}\LanguageProfile\0x00000000\{0001bea3-ed56-483d-a2e2-aeae25577436}\Enable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\CTF\EnableAnchorContext
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\KnownClasses
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontLink\SystemLink
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\Disable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\DataStore_V1.0\DataFilePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane4
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane5
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane6
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane7
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane8
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane9
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane10
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane11
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane12
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane13
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane14
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane15
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Plane16
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg 2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\UserInfo.dll
- HKEY_LOCAL_MACHINE\SOFTWARE\CCleaner
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ProgramFilesDir
- HKEY_CURRENT_USER\Software\Piriform\CCleaner
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\CurrentVersion
- HKEY_CLASSES_ROOT\CLSID\{2318C2B1-4965-11d4-9B18-009027A5CD4F}\InprocServer32
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\URLAssociations\http\UserChoice
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice\Progid
- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Version
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Enable Browser Extensions
- HKEY_LOCAL_MACHINE\SOFTWARE\Google\Google Toolbar
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Google Toolbar\test
- HKEY_LOCAL_MACHINE\Software\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\pv
- HKEY_CURRENT_USER\Software\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\lastrun
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\reactivation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\nsExec.dll
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\SideBySide\AssemblyStorageRoots
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\LanmanWorkstation\Parameters\RpcCacheTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\nsDialogs.dll
- HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance
- HKEY_CLASSES_ROOT\CLSID\{FAE3D380-FEA4-4623-8C75-C6B61110B681}\Instance\Disabled
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\CustomLocale
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\th-TH
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Nls\ExtendedLocale
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\th-TH
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\id-ID
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\id-ID
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\be-BY
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\be-BY
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\sl-SI
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\sl-SI
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\lv-LV
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\lv-LV
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\az-Latn-AZ
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\az-Latn-AZ
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\ka-GE
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\ka-GE
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\hi-IN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\hi-IN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\kk-KZ
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\kk-KZ
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\tk-TM
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\tk-TM
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\tt-RU
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\tt-RU
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\mr-IN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\mr-IN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\mn-MN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\mn-MN
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SESSION MANAGER\SafeProcessSearchMode
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\FontSubstitutes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Segoe UI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Tahoma
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Anchor Color
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Anchor Color Visited
- HKEY_CURRENT_USER\Software\Classes
- HKEY_CURRENT_USER\Software\Classes\TypeLib
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\1.1\0\win32\(Default)
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CreateUriCacheSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\EnablePunycode
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Security_HKLM_only
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main\FeatureControl
- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\FeatureControl
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ALLOW_REVERSE_SOLIDUS_IN_USERINFO_KB932562
- HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions
- HKEY_CLASSES_ROOT\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Drive\shellex\FolderExtensions\{fbeb8a05-beee-4442-804e-409d6c4515e9}\DriveMask
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\AllowFileCLSIDJunctions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FrameTabWindow
- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FrameTabWindow
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FrameMerging
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FrameMerging
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SessionMerging
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\SessionMerging
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\AdminTabProcs
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\AdminTabProcs
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Main
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Main
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\TabProcGrowth
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\TabProcGrowth
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\NavigationDelay
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_IEDDE_REGISTER_PROTOCOL
- HKEY_CLASSES_ROOT\.html
- HKEY_CURRENT_USER\Software\Classes\.html\(Default)
- HKEY_CLASSES_ROOT\.html\OpenWithProgids
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithProgids
- HKEY_CLASSES_ROOT\htmlfile
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\UserChoice\Progid
- HKEY_CLASSES_ROOT\FirefoxHTML
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\CurVer
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\ShellEx\IconHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\FirefoxHTML\ShellEx\IconHandler\(Default)
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\DocObject
- HKEY_CLASSES_ROOT\SystemFileAssociations\.html
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\DocObject
- HKEY_CLASSES_ROOT\SystemFileAssociations\document
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\BrowseInPlace
- HKEY_CURRENT_USER\Software\Classes\.html\Content Type
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\Clsid
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\IsShortcut
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\AlwaysShowExt
- HKEY_CURRENT_USER\Software\Classes\FirefoxHTML\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.html\NeverShowExt
- HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\InProcServer32\LoadWithoutCOM
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked
- HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{e7e4bc40-e76a-11ce-a9bb-00aa004ae837}\InProcServer32
- HKEY_CLASSES_ROOT\CLSID\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}\ShellFolder
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837} {000214E6-0000-0000-C000-000000000046} 0xFFFF
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows
- HKEY_LOCAL_MACHINE\Software\Microsoft\SQMClient\Windows
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows\CEIPEnable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{E7E4BC40-E76A-11CE-A9BB-00AA004AE837}
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFileMenu
- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\MediaTypeClass
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Accepted Documents
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Ratings
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SHOW_FAILED_CONNECT_CONTENT_KB942615
- HKEY_LOCAL_MACHINE\Software\Policies
- HKEY_CURRENT_USER\Software\Policies
- HKEY_CURRENT_USER\Software
- HKEY_LOCAL_MACHINE\Software
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\UrlEncoding
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_IGNORE_POLICIES_ZONEMAP_IF_ESC_ENABLED_KB918915
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_UNC_SAVEDFILECHECK
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_UNC_SAVEDFILECHECK\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_UNC_SAVEDFILECHECK\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ZONES_CHECK_ZONEMAP_POLICY_KB941001
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProtocolDefaults\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security\DisableSecuritySettingsCheck
- HKEY_LOCAL_MACHINE\System\Setup
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\SystemSetupInProgress
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Flags
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\Flags
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\IntranetName
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\Flags
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\Flags
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\Flags
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN\*
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\0
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\1
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\2
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\3
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Lockdown_Zones\4
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ZONES_DEFAULT_DRIVE_INTRANET_KB941000
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\SpecialFoldersCacheSize
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\SpecialFoldersCacheSize
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SpecialFoldersCacheSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\SpecialFoldersCacheSize
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\No3DBorder
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\No3DBorder
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\UrlEncoding
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\UrlEncoding
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_HANDLING
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_HANDLING\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_HANDLING\*
- HKEY_CLASSES_ROOT\PROTOCOLS\Name-Space Handler\
- HKEY_CLASSES_ROOT\PROTOCOLS\Name-Space Handler\file\
- HKEY_CLASSES_ROOT\PROTOCOLS\Name-Space Handler\*\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ProxyEnable
- HKEY_CURRENT_USER\SOFTWARE\Classes\PROTOCOLS\Filter\text/html
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Filter\text/html
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_SNIFFING
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_SNIFFING\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MIME_SNIFFING\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\IsTextPlainHonored
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SAFE_BINDTOOBJECT
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SAFE_BINDTOOBJECT\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SAFE_BINDTOOBJECT\*
- HKEY_CURRENT_USER
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragScrollInset
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragScrollDelay
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragDelay
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows\DragScrollInterval
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MANAGE_SCRIPT_CIRCULAR_REFS
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security\Floppy Access
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Security\Adv AddrBar Spoof Detection
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Security\Adv AddrBar Spoof Detection
- HKEY_CLASSES_ROOT\PROTOCOLS\Name-Space Handler\about\
- HKEY_CURRENT_USER\SOFTWARE\Classes\PROTOCOLS\Handler\about
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\about
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\about\CLSID
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_DOCUMENT_COMPATIBLE_MODE
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2106
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Zoom
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Zoom
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Zoom
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Zoom\ZoomDisabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Zoom
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_WEBOC_DOCUMENT_ZOOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_IPERSISTMONIKER_LOAD_REDIRECTED_URL_KB976425
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SmartDithering
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SmartDithering
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\RtfConverterFlags
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\UseClearType
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Page_Transitions
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Page_Transitions
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Use_DlgBox_Colors
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Anchor Underline
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\CSS_Compat
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Expand Alt Text
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Display Inline Images
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Display Inline Videos
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Display Inline Videos
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Play_Background_Sounds
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Play_Animations
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Print_Background
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Print_Background
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Use Stylesheets
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\SmoothScroll
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\SmoothScroll
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\XMLHTTP
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Show image placeholders
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Show image placeholders
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Disable Script Debugger
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\DisableScriptDebuggerIE
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Move System Caret
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Force Offscreen Composition
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Enable AutoImageResize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Enable AutoImageResize
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\UseThemes
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\UseHR
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Q300829
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Cleanup HTCs
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\XDomainRequest
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\XDomainRequest
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\DOMStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\DOMStorage
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Default_CodePage
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\AutoDetect
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\Default_IEFontSizePrivate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\International\Scripts
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Anchor Color Hover
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Settings
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Always Use My Colors
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Always Use My Font Size
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Always Use My Font Face
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Disable Visited Hyperlinks
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\Use Anchor Hover Color
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Settings\MiscFlags
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Styles
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Allow Programmatic Cut_Copy_Paste
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\DisableCachingOfSSLPages
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\DisableCachingOfSSLPages
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\DisableCachingOfSSLPages
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PageSetup
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PageSetup\Print_Background
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\(Default)
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\Flags
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MenuExt\E&xport to Microsoft Excel\Contexts
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nls\CodePage
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CodePage\950
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3\IEFontSize
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3\IEFontSizePrivate
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3\IEPropFontName
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\Scripts\3\IEFixedFontName
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\International\AcceptLanguage
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\TravelLog
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\TravelLog
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Version Vector
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Version Vector\VML
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Version Vector\IE
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Version Vector\WindowsEdition
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ZONE_ELEVATION\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ZONE_ELEVATION\*
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SSLUX\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SSLUX\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2700
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2700
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_XSSFILTER
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_XSSFILTER\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_XSSFILTER\*
- HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings\Zones
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\SecuritySafe
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\NoProtectedModeBanner
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ProtectedModeOffForAllZones
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_READ_ZONE_STRINGS_FROM_REGISTRY
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\CurrentLevel
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\CurrentLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1\2500
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\CurrentLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\2500
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\CurrentLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3\2500
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\MinLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\RecommendedLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\CurrentLevel
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4\2500
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Montserrat
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CoInternetCombineIUriCacheSize
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\CoInternetCombineIUriCacheSize
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\CoInternetCombineIUriCacheSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\CoInternetCombineIUriCacheSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_IGNORE_LEADING_FILE_SEPARATOR_IN_URI_KB933105
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN\*
- HKEY_CLASSES_ROOT\.png
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.png\Content Type
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2106
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2106
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\Feature_Enable_Compat_Logging
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_SCRIPTURL_MITIGATION
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BLOCK_LMZ_IMG
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BLOCK_LMZ_IMG\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BLOCK_LMZ_IMG\*
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnIntranet
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnIntranet
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\WarnOnIntranet
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Restrictions
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Restrictions
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Recovery\AutoRecover
- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Recovery
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_USE_IETLDLIST_FOR_DOMAIN_DETERMINATION
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionLow
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldDllVersionHigh
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionLow
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\IETld\IETldVersionHigh
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Url History\DaysToKeep
- HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\SyncMode5
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Signature
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\DOMStore\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\feedplat\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\iecompat\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\ietld\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016042520160426\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\PrivacIE:\CacheOptions
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Control Panel
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_IEDDE_REGISTER_URLECHO
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2000
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0\2000
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Feed Discovery
- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Feed Discovery
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feed Discovery\Sound
- HKEY_CURRENT_USER\Software\Microsoft\Ftp
- HKEY_CURRENT_USER\Software\Microsoft\FTP\Use Web Based FTP
- HKEY_LOCAL_MACHINE\Software\Microsoft\Ftp
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Services
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Services\SelectionActivityButtonDisable
- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Services
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Activities
- HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Activities
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Suggested Sites
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Suggested Sites\Enabled
- HKEY_CLASSES_ROOT\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}
- HKEY_CLASSES_ROOT\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\InProcServer32\LoadWithoutCOM
- HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{ff393560-c2a7-11cf-bff4-444553540000}\InProcServer32
- HKEY_CLASSES_ROOT\CLSID\{FF393560-C2A7-11CF-BFF4-444553540000}\ShellFolder
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{FF393560-C2A7-11CF-BFF4-444553540000} {000214E6-0000-0000-C000-000000000046} 0xFFFF
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{FF393560-C2A7-11CF-BFF4-444553540000}
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\App Paths\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\WindowsSearch
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\WindowsSearch\EnabledScopes
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Feeds
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Feeds
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Search
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows Search\CurrentVersion
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\(Default)
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\Desktop\NameSpace\NameCustomizations
- HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\LocalizedString
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BINARY_CALLER_SERVICE_PROVIDER
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\MaxRenderLine
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000\ProfileImagePath
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\FileSystem\NtfsDisableLastAccessUpdate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\svcVersion
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\AddToFavoritesInitialSelection
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\LowRegistry\AddToFeedsInitialSelection
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_ADDITIONAL_IE8_MEMORY_CLEANUP
- HKEY_CURRENT_USER\Control Panel\Desktop
- HKEY_CURRENT_USER\Control Panel\Desktop\SmoothScroll
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\EnableBalloonTips
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewAlphaSelect
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ListviewShadow
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AccListViewV6
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\UseDoubleClickTimer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\Segoe UI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\MS Shell Dlg 2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\FontSubstitutes\Tahoma
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\nsProcess.dll
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\reactivationbrand
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\reactivation\PRFK
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\experiment_labels
- HKEY_LOCAL_MACHINE\Software\Piriform
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\CR
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DllNXOptions\inetc.dll
- HKEY_CURRENT_USER\Software\Classes\Interface\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{26656EAA-54EB-4E6F-8F85-4F0EF901A406}\ProxyStubClsid32\(Default)
- HKEY_CURRENT_USER\Software\Classes\Interface\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{8A40A45D-055C-4B62-ABD7-6D613E2CEAEC}\ProxyStubClsid32\(Default)
- HKEY_CURRENT_USER\Software\Classes\Interface\{55272A00-42CB-11CE-8135-00AA004BB851}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{55272A00-42CB-11CE-8135-00AA004BB851}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{55272A00-42CB-11CE-8135-00AA004BB851}\ProxyStubClsid32\(Default)
- HKEY_CURRENT_USER\Software\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocHandler
- HKEY_LOCAL_MACHINE\Software\Microsoft\OleAut
- HKEY_CURRENT_USER\Software\Classes\Interface\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{BCD1DE7E-2DB1-418B-B047-4A74E101F8C1}\ProxyStubClsid32\(Default)
- HKEY_CURRENT_USER\Software\Classes\Interface\{2A1C9EB2-DF62-4154-B800-63278FCB8037}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2A1C9EB2-DF62-4154-B800-63278FCB8037}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{2A1C9EB2-DF62-4154-B800-63278FCB8037}\ProxyStubClsid32\(Default)
- HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings\Wpad
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadDecision
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadDecisionTime
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\WpadExpirationDays
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\WpadLastNetwork
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\AutoProxyDetectType
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadDecisionReason
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadNetworkName
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00\WpadDecisionReason
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00\WpadDecisionTime
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00\WpadDecision
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\0a-00-27-00-00-00
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\EnableFileTracing
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\FileTracingMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\EnableConsoleTracing
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\ConsoleTracingMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\MaxFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASAPI32\FileDirectory
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\EnableFileTracing
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\FileTracingMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\EnableConsoleTracing
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\ConsoleTracingMask
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\MaxFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b_RASMANCS\FileDirectory
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProgramData
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\AppData
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_CURRENT_USER\Software\Microsoft\windows\CurrentVersion\Internet Settings\Connections
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings
- HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\SessionInfo\1\KnownFolders
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\Common Documents
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\CommonPictures
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\CommonMusic
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\CommonVideo
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{DE92C1C7-837F-4F69-A3BB-86E631204A23}
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\My Music
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\{3D644C9B-1FB8-4F30-9B45-F670235F79C0}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\ProfilesDirectory
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Startup
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\Common Startup
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\Public
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Programs
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\User Shell Folders\Common Programs
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\ProgramFilesDir
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\CommonFilesDir
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Rpc
- HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\Run CCleaner\command
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\Run CCleaner\command\(Default)
- HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\Open CCleaner...\command
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\Open CCleaner...\command\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\CCleaner\UpdateCheck
- HKEY_CLASSES_ROOT\cclaunch
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\URL Protocol
- HKEY_CLASSES_ROOT\cclaunch\shell
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\shell\(Default)
- HKEY_CLASSES_ROOT\cclaunch\shell\open
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\shell\open\(Default)
- HKEY_CLASSES_ROOT\cclaunch\shell\open\command
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\shell\open\command\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\ccleaner.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ccleaner.exe\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ccleaner.exe\Path
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\CCleaner\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\UninstallString
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\Publisher
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\InstallDate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\InstallLocation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\VersionMajor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\VersionMinor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\DisplayVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\DisplayIcon
- HKEY_USERS\
- HKEY_USERS\.DEFAULT\Software\Piriform\CCleaner
- HKEY_USERS\.DEFAULT\SOFTWARE\Piriform\CCleaner\AutoICS
- HKEY_USERS\.DEFAULT\SOFTWARE\Piriform\CCleaner\Brandover
- HKEY_USERS\S-1-5-19\Software\Piriform\CCleaner
- HKEY_USERS\S-1-5-19\Software\Piriform\CCleaner\AutoICS
- HKEY_USERS\S-1-5-19\Software\Piriform\CCleaner\Brandover
- HKEY_USERS\S-1-5-20\Software\Piriform\CCleaner
- HKEY_USERS\S-1-5-20\Software\Piriform\CCleaner\AutoICS
- HKEY_USERS\S-1-5-20\Software\Piriform\CCleaner\Brandover
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Piriform\CCleaner
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\AutoICS
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Brandover
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_Classes\Software\Piriform\CCleaner
- HKEY_CURRENT_USER\Software\Classes\Software\Piriform\CCleaner\AutoICS
- HKEY_CURRENT_USER\Software\Classes\Software\Piriform\CCleaner\Brandover
- HKEY_USERS\S-1-5-18\Software\Piriform\CCleaner
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18\ProfileImagePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19\ProfileImagePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20\ProfileImagePath
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\GlobalAssocChangedCounter
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\LanguagePack\SurrogateFallback\MS Shell Dlg
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Language
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\CurrentVersion
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice\Progid
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\ftp\UserChoice
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\ftp\UserChoice\Progid
- HKEY_CLASSES_ROOT\ChromeHTML\shell\open\command
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ChromeHTML\shell\open\command\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\GRE_Initialize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\GRE_Initialize\DisableMetaFiles
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DefaultTTL
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Windows Error Reporting\WMR
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\Windows Error Reporting\WMR\Disable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Windows Error Reporting\WMR\Disable
- HKEY_CURRENT_USER\Software\VB and VBA Program Settings\CCleaner\Options
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_CONFIRMCLEAN
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNMOZCACHE
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNMOZHISTORY
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNTHUNDERBIRDCACHE
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNTHUNDERBIRDHISTORY
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNOPERACACHE
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\MSG_WARNCHROMECACHE
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SkipUAC
- HKEY_CURRENT_USER\SOFTWARE\Google\Chrome\BLBeacon
- HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon\state
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en-US
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en-US
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000\State
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-21-2298303332-66077612-2598613238-1000\Preference
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\opv
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\cmd
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\CommandLine
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\SendsPings
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\WebAccessible
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\AutoRunOnOSUpgrade
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\RunAsUser
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\ap
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\brand
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\UninstallString
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\UninstallArguments
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\oeminstall
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\eulaaccepted
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\msi
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{8A69D345-D564-463c-AFF1-A69D9E530F96}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\usagestats
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\eulaaccepted
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\ap
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome
- MetricsReportingEnabled
- HKEY_CURRENT_USER\SOFTWARE\Policies\Google\Chrome
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\usagestats
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\dr
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\dr
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\metricsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\metricsid
- UserDataDir
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA\AccessProviders
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\AccessProviders\MartaExtension
- HKEY_CURRENT_USER\Keyboard Layout\Preload
- HKEY_CURRENT_USER\Keyboard Layout\Preload\1
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Keyboard Layouts\00000409
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts\00000409\Layout File
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Keyboard Layouts\00000409\Attributes
- HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\Location Awareness
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Hostname
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Diagnostics
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\UserenvDebugLevel
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System\GpSvcDebugLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\System\DNSClient
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\SearchList
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Domain
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\UseDomainNameDevolution
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Dnscache\Parameters\DomainNameDevolutionLevel
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\UseDomainNameDevolution
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\DomainNameDevolutionLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig
- HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics
- HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics\user_experience_metrics.stability.exited_cleanly
- HKEY_LOCAL_MACHINE\SOFTWARE\Macromedia\FlashPlayerPepper
- isScriptDebugger
- HKEY_LOCAL_MACHINE\SOFTWARE
- HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo
- HKEY_LOCAL_MACHINE\SOFTWARE\DisplayLink
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\DriverVersion
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\DriverDate
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CLASS\{4D36E968-E325-11CE-BFC1-08002BE10318}\0000\ProviderName
- HKEY_CURRENT_USER\SOFTWARE\MozillaPlugins
- HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins
- HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications
- HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Google Chrome
- HKEY_LOCAL_MACHINE\Software\Clients\StartMenuInternet\Google Chrome\Capabilities
- HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations
- HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\http
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http
- HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\Capabilities\URLAssociations\https
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{8A69D345-D564-463c-AFF1-A69D9E530F96}\LastWasDefault
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{8A69D345-D564-463c-AFF1-A69D9E530F96}\FirstNotDefault
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\FirstNotDefault\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_CURRENT_USER\Software\Google\Chrome\BrowserExitCodes
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{8A69D345-D564-463c-AFF1-A69D9E530F96}\_NumAccounts
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumAccounts\aggregate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumAccounts\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{8A69D345-D564-463c-AFF1-A69D9E530F96}\_NumSignedIn
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumSignedIn\aggregate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumSignedIn\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\brand
- HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/pdf
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/pdf\Extension
- HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions
- HKEY_CURRENT_USER\Software\Google\Chrome\Extensions
- HKEY_CURRENT_USER\Software\Google\Chrome\IncidentsSent
- HKEY_CURRENT_USER\Software\Google\Software Removal Tool\Cleaner
- HKEY_CURRENT_USER\Software\Google\Software Removal Tool\Cleaner\StartTime
- HKEY_CURRENT_USER\Software\Google\Software Removal Tool\Cleaner\EndTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Avalon.Graphics\DISPLAY1
- PixelStructure
- HKEY_LOCAL_MACHINE\Software\Microsoft\Avalon.Graphics
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\RLZs
- C2
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\StatefulEvents\_PRFK\C
- C1I
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C1I
- C2I
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C2I
- C7I
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C7I
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\RLZs\_PRFK
- C1
- C1S
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C1S
- C7
- C7S
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C7S
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\lang
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\lang
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\referral
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\referral
- HKEY_LOCAL_MACHINE\Software\Google\Common\Rlz
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\PTimes\_PRFK
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\PTimes\_PRFK\C
- HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Update
- HKEY_LOCAL_MACHINE\Software\Piriform\CCleaner
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\UpdateCheck
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CheckTrialOffer
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\BrowserMonitoring
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SystemMonitoring
- HKEY_LOCAL_MACHINE\Hardware\Description\System\CentralProcessor
- HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0
- HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProductName
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_LEFT
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_TOP
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_WIDTH
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_HEIGHT
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\CCleaner64.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\EnableAnchorContext
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SplitterPositionCleaner
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\NewVersion
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\JumplistTasks
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\RunICS
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CookiesToSave
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SecureDeleteType
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SecureDeleteMethod
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WipeAlternateDataStreams
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WipeClusterTips
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\IEDetailed
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\FFDetailed
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\DelayTemp
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\DelayRB
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Exclude1
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CustomFiles
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CustomFolders
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Include1
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CustomLocation1
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WipeFreeSpaceDrives
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WipeMFTFreeSpace
- HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer
- HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.Windows.Spartan_cw5n1h2txyewy
- HKEY_CURRENT_USER\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.MicrosoftEdge_8wekyb3d8bbwe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Version
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\svcVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\SessionStartTimeDefaultDeltaSecs
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Content\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Cookies\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\History\PerUserItem
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesMyComputer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoPropertiesRecycleBin
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoControlPanel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSetFolders
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoInternetIcon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Applications\CCleaner64.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoCommonGroups
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCache
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{625B53C3-AB48-4EC1-BA1F-A1EF4146FC19}\PropertyBag
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Start Menu
- HKEY_CLASSES_ROOT\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\CallForAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\RestrictedAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORDISPLAY
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideFolderVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\UseDropHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsFORPARSING
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsParseDisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForOverlay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\MapNetDriveVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\QueryForInfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideInWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HideOnDesktopPerUser
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsAliasedNotifications
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\WantsUniversalDelegate
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\NoFileFolderJunction
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\PinToNameSpaceTree
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder\HasNavigationEnum
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}\ShellFolder
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\NonEnum
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{20D04FE0-3AEA-1069-A2D8-08002B30309D}
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer
- HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DontShowSuperHidden
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ClassicShell
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\SeparateProcess
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoNetCrawling
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSimpleStartMenu
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Hidden
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowCompColor
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideFileExt
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\DontPrettyPath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowInfoTip
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\HideIcons
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\MapNetDrvBtn
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\WebView
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Filter
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowSuperHidden
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\SeparateProcess
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\NoNetCrawling
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\AutoCheckSelect
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\IconsOnly
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\ShowTypeOverlay
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Shell\RegisteredApplications\UrlAssociations\Directory\OpenWithProgids
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\Directory
- HKEY_CLASSES_ROOT\Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\CurVer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\ShellEx\IconHandler
- HKEY_CLASSES_ROOT\Folder
- HKEY_CURRENT_USER\Software\Classes\Folder\ShellEx\IconHandler
- HKEY_CLASSES_ROOT\AllFilesystemObjects
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\ShellEx\IconHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\DocObject
- HKEY_CURRENT_USER\Software\Classes\Folder\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\BrowseInPlace
- HKEY_CURRENT_USER\Software\Classes\Folder\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\Clsid
- HKEY_CURRENT_USER\Software\Classes\Folder\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\IsShortcut
- HKEY_CURRENT_USER\Software\Classes\Folder\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\NeverShowExt
- HKEY_CURRENT_USER\Software\Classes\Folder\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AllFilesystemObjects\NeverShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Desktop
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}\PropertyBag
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{1B3EA5DC-B587-4786-B4EF-BD1DC332AEAE}
- HKEY_CLASSES_ROOT\.lnk
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\(Default)
- HKEY_CLASSES_ROOT\.lnk\OpenWithProgids
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\OpenWithProgids
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.lnk\UserChoice
- HKEY_CLASSES_ROOT\lnkfile
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\CurVer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\ShellEx\IconHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\shellex\IconHandler\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\DocObject
- HKEY_CLASSES_ROOT\SystemFileAssociations\.lnk
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\DocObject
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.lnk\Content Type
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\CLSID\(Default)
- HKEY_CLASSES_ROOT\CLSID\{00021401-0000-0000-C000-000000000046}\Implemented Categories\{00021490-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SystemFileAssociations\.lnk\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\lnkfile\NeverShowExt
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MUI\StringCacheSettings
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MUI\StringCacheSettings\StringCacheGeneration
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6d\52C64B7E
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\LanguageList
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\ie4uinit.exe,-735
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\ie4uinit.exe,-734
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\AccessibilityCpl.dll,-10
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\ie4uinit.exe,-737
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A77F5D77-2E2B-44C3-A6A2-ABA601054A51}\PropertyBag
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuSubFolders
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{A4115719-D62E-491D-AA7C-E74B8BE3B067}\PropertyBag
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Start Menu
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\sud.dll,-1
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\wucltux.dll,-1
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\ehome\ehres.dll,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Windows Sidebar\sidebar.exe,-1005
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\WindowsAnytimeUpgradeUI.exe,-1
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\DVD Maker\DVDMaker.exe,-61403
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\FXSRESM.dll,-114
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\unregmp2.exe,-4
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\XpsRchVw.exe,-102
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\displayswitch.exe,-320
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Common Files\Microsoft Shared\Ink\mip.exe,-291
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\mblctr.exe,-1008
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\NetProjW.dll,-501
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\mstsc.exe,-4000
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\SnippingTool.exe,-15051
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\SoundRecorder.exe,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\SNTSearch.dll,-505
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\SyncCenter.dll,-3000
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\OobeFldr.dll,-33056
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\Speech\SpeechUX\sapi.cpl,-5555
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\dfrgui.exe,-103
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\wdc.dll,-10030
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\msinfo32.exe,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\rstrui.exe,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\miguiresource.dll,-201
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\migwiz\wet.dll,-591
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\migwiz\wet.dll,-588
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Common Files\Microsoft Shared\Ink\ShapeCollector.exe,-298
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Common Files\Microsoft Shared\Ink\TipTsf.dll,-80
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Program Files\Windows Journal\Journal.exe,-3074
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-102
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe,-101
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\comres.dll,-3410
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\mycomput.dll,-300
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\odbcint.dll,-1310
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\miguiresource.dll,-101
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\iscsicpl.dll,-5001
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\MdSched.exe,-4001
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\wdc.dll,-10021
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\pmcsnap.dll,-700
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\wsecedit.dll,-718
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\filemgmt.dll,-2204
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\msconfig.exe,-126
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\System32\AuthFWGP.dll,-20
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\gameux.dll,-10082
- HKEY_CLASSES_ROOT\.url
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.URL\(Default)
- HKEY_CLASSES_ROOT\.url\OpenWithProgids
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.url\OpenWithProgids
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.url
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.url\
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.url\UserChoice
- HKEY_CLASSES_ROOT\InternetShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\CurVer
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\ShellEx\IconHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\ShellEx\IconHandler\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\DocObject
- HKEY_CLASSES_ROOT\SystemFileAssociations\.url
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.URL\PerceivedType
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\BrowseInPlace
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.URL\Content Type
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\Clsid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\CLSID\(Default)
- HKEY_CLASSES_ROOT\CLSID\{FBF23B40-E3F0-101B-8488-00AA003E56F8}\Implemented Categories\{00021490-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\IsShortcut
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\AlwaysShowExt
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\InternetShortcut\NeverShowExt
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\sdcpl.dll,-101
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\recdisc.exe,-2000
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\Windows\system32\msra.exe,-100
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\@C:\PROGRA~2\WI3CF2~1\8.1\WINDOW~1\WINDOW~1.DLL,-101
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0139D44E-6AFE-49F2-8690-3DAFCAE6FFB8}\PropertyBag
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Programs
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{C4AA340D-F20F-4863-AFEF-F87EF2E6BA25}\PropertyBag
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Common Desktop
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{CAC52C1A-B53D-4EDC-92D7-6B2E8AC19434}\PropertyBag
- HKEY_CLASSES_ROOT\CLSID\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}\SortOrderIndex
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{ED228FDF-9EA8-4870-83B1-96B02CFE0D52}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}\PropertyBag
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\{9E3995AB-1F9C-4F13-B827-48B24B6C7174}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{52A4F021-7B75-48A9-9F6B-4B87A210BC8F}\PropertyBag
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\CCleaner64.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE\*
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Extensible Cache\DOMStore
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\UserData
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\LowCache\Extensible Cache\UserData
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuPinnedList
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartPage
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartPage\FavoritesRemovedChanges
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\FavoritesChanges
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCacheSMP
- HKEY_CLASSES_ROOT\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\CallForAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\RestrictedAttributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsFORDISPLAY
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\HideFolderVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\UseDropHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsFORPARSING
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsParseDisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\QueryForOverlay
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\MapNetDriveVerbs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\QueryForInfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\HideInWebView
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\HideOnDesktopPerUser
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsAliasedNotifications
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\WantsUniversalDelegate
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\NoFileFolderJunction
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\PinToNameSpaceTree
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder\HasNavigationEnum
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\ShellFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\NonEnum\{1F3427C8-5C10-4210-AA03-2EE45287D668}
- HKEY_CLASSES_ROOT\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\InProcServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1F3427C8-5C10-4210-AA03-2EE45287D668}\InProcServer32\LoadWithoutCOM
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SafeBoot\Option
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\AppCompatibility
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppCompat
- HKEY_LOCAL_MACHINE\Software\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\InProcServer32
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers\C:\Windows\System32\shdocvw.dll
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\shdocvw.dll
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached\{1F3427C8-5C10-4210-AA03-2EE45287D668} {000214E6-0000-0000-C000-000000000046} 0xFFFF
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellCompatibility\Objects\{1F3427C8-5C10-4210-AA03-2EE45287D668}
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband\FavoritesChanges
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StartPage2\ProgramsCacheTBP
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoStartMenuMFUprogramsList
- HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_TrackProgs
- HKEY_CLASSES_ROOT\CLSID\{DD313E04-FEFF-11D1-8ECD-0000F87A470C}\InProcServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD313E04-FEFF-11D1-8ECD-0000F87A470C}\InProcServer32\(Default)
- HKEY_CLASSES_ROOT\Applications\CCleaner64.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{AE50C081-EBD2-438A-8655-8A092E34987A}\PropertyBag
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders\Recent
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_JumpListItems
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_JumpListItems
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_MinMFU
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRecentDocsHistory
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_TrackDocs
- HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Extensions
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Rpc\Extensions\NdrOleExtDLL
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WINDOW_MAX
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\AutoUpdateNotificationExpiryTime
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Monitoring
- HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\System\DNSclient
- HKEY_CURRENT_USER\Software\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\en
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\en
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\ShowCleanWarning
- HKEY_CURRENT_USER\Software\Microsoft\Search Assistant
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\OptimalLayout
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\w3svc
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Temporary Internet Files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)History
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Cookies
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Recently Typed URLs
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Delete Index.dat files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Last Download Location
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Autocomplete Form History
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Saved Passwords
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Recent Documents
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Run (in Start Menu)
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Other Explorer MRUs
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Thumbnail Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Taskbar Jump Lists
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Network Passwords
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Empty Recycle Bin
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Temporary Files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Clipboard
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Memory Dumps
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Chkdsk File Fragments
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Windows Log Files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Windows Error Reporting
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)DNS Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Font Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Start Menu Shortcuts
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Desktop Shortcuts
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Windows Event Logs
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Old Prefetch data
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Menu Order Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Tray Notifications Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Window Size/Location Cache
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Environment Path
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)User Assist History
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)IIS Log Files
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Custom Folders
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\(App)Wipe Free Space
- HKEY_LOCAL_MACHINE\SOFTWARE\Apple Inc.\Apple Application Support
- HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\5.0\AVGeneral\cRecentFiles
- HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\6.0\AVGeneral
- HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\7.0\AVGeneral
- HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\8.0
- HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\9.0
- HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\10.0
- HKEY_CURRENT_USER\Software\Adobe\Acrobat Reader\11.0
- HKEY_LOCAL_MACHINE\Software\Adobe\Acrobat Reader\DC
- HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\8.0
- HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\9.0
- HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\10.0
- HKEY_CURRENT_USER\Software\Adobe\Adobe Acrobat\11.0
- HKEY_CURRENT_USER\Software\Adobe\ImageReady 7.0
- HKEY_CURRENT_USER\Software\Adobe\ImageReady 8.0
- HKEY_CURRENT_USER\Software\Adobe\Photoshop\6.0
- HKEY_CURRENT_USER\Software\Adobe\Photoshop\7.0
- HKEY_CURRENT_USER\Software\Adobe\Photoshop\8.0
- HKEY_CURRENT_USER\Software\Adobe\Photoshop\9.0
- HKEY_CURRENT_USER\Software\Adobe\Photoshop\10.0
- HKEY_CURRENT_USER\Software\Adobe\Photoshop\11.0
- HKEY_CURRENT_USER\Software\Adobe\Photoshop\12.0
- HKEY_CURRENT_USER\Software\Adobe\Photoshop\60.0
- HKEY_CURRENT_USER\Software\Adobe\Photoshop Elements\12.0
- HKEY_CURRENT_USER\Software\Adobe\MediaBrowser\MRU\illustrator
- HKEY_CURRENT_USER\Software\Adobe\MediaBrowser\MRU\Dreamweaver
- HKEY_LOCAL_MACHINE\SOFTWARE\Adobe\Premiere Pro\7.0
- HKEY_CURRENT_USER\Software\Adobe\Premiere Pro\7.0
- HKEY_CURRENT_USER\Software\Adobe\Premiere Elements\12.0
- HKEY_CURRENT_USER\Software\Yahoo\Companion
- HKEY_CURRENT_USER\Software\Microsoft\MSN Apps\SearchBox
- HKEY_CURRENT_USER\Software\Google\NavClient\1.1
- HKEY_CURRENT_USER\Software\Google\Google Toolbar
- HKEY_CURRENT_USER\Software\Google\Deskbar
- HKEY_CURRENT_USER\Software\Google\Google Calendar Sync
- HKEY_CURRENT_USER\Software\Google\Google Talk
- HKEY_CURRENT_USER\Software\KMPlayer
- HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player
- HKEY_CURRENT_USER\Software\RealNetworks\RealPlayer\6.0
- HKEY_CURRENT_USER\Software\RealNetworks\RealPlayer\12.0
- HKEY_CURRENT_USER\Software\RealNetworks\RealPlayer\15.0
- HKEY_CURRENT_USER\Software\RealNetworks\RealPlayer\16.0
- HKEY_CURRENT_USER\Software\RealNetworks\RealPlayer\17.0
- HKEY_CURRENT_USER\Software\RealNetworks\RealPlayer\18.0
- HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.\QuickTime
- HKEY_CURRENT_USER\Software\Andrei Jefremov\AVIPreview by Andrei Jefremov, visit www.avipreview.com for more
- HKEY_CURRENT_USER\Software\Altova\XML Spy
- HKEY_CURRENT_USER\Software\DJJ Holdings\SWiSH
- HKEY_CURRENT_USER\Software\Jasc\Paint Shop Pro 7
- HKEY_CURRENT_USER\Software\Jasc\Paint Shop Pro 8
- HKEY_CURRENT_USER\Software\Jasc\Paint Shop Pro 9
- HKEY_CURRENT_USER\Software\Corel\Paint Shop Pro\10
- HKEY_CURRENT_USER\Software\Corel\Paint Shop Pro\11
- HKEY_CURRENT_USER\Software\Corel\Paint Shop Pro\12
- HKEY_CURRENT_USER\Software\Corel\Paint Shop Pro\12.5
- HKEY_CURRENT_USER\Software\Corel\Paint Shop Pro\13
- HKEY_CURRENT_USER\Software\Corel\PaintShop Pro\X4
- HKEY_CURRENT_USER\Software\Corel\PaintShop Pro\X5
- HKEY_CURRENT_USER\Software\Corel\PaintShop Pro\X6
- HKEY_CURRENT_USER\ HKCU\Software\Microsoft\Works\4.0
- HKEY_CURRENT_USER\Software\Microsoft\Office\8.0\Common
- HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Common
- HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Common
- HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Common
- HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common
- HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Common
- HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common
- HKEY_CURRENT_USER\Software\InstallShield\Developer\7.0
- HKEY_CURRENT_USER\Software\Macromedia\Flash 4
- HKEY_CURRENT_USER\Software\Macromedia\Flash 5
- HKEY_CURRENT_USER\Software\Macromedia\Flash 6
- HKEY_CURRENT_USER\Software\Macromedia\Flash 7
- HKEY_CURRENT_USER\Software\Macromedia\HomeSite5
- HKEY_CURRENT_USER\Software\Macromedia\Firework 6
- HKEY_CURRENT_USER\Software\Adobe\Fireworks\12.0
- HKEY_CURRENT_USER\Software\Macromedia\Dreamweaver MX 2004
- HKEY_CURRENT_USER\Software\Macromedia\Shockwave 10
- HKEY_LOCAL_MACHINE\Software\Macromedia\Shockwave 10
- HKEY_LOCAL_MACHINE\Software\Adobe\Shockwave 11
- HKEY_CURRENT_USER\Software\Adobe\Shockwave 11
- HKEY_LOCAL_MACHINE\Software\Microsoft\Silverlight
- HKEY_CURRENT_USER\Software\Ulead Systems\Ulead SmartSaver Pro\3.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Norton AntiVirus NT\Install\7.50
- HKEY_LOCAL_MACHINE\SOFTWARE\Symantec\Symantec AntiVirus\Install\7.50
- HKEY_CURRENT_USER\Software\Microsoft\Snapshot Viewer
- HKEY_CURRENT_USER\Software\Microsoft\Terminal Server Client
- HKEY_CURRENT_USER\Software\Microsoft\Microsoft Management Console
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Paint
- HKEY_CURRENT_USER\Software\Microsoft\Photo Editor\3.0\Microsoft Photo Editor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{62AB5D82-FDC1-4DC3-A9DD-070D1D495D97}\PropertyBag
- HKEY_CURRENT_USER\Software\ahead\Nero - Burning Rom
- HKEY_CURRENT_USER\Software\Nero\Nero 9
- HKEY_CURRENT_USER\Software\Nero\Nero 10
- HKEY_CURRENT_USER\Software\Nero\Nero 15\Nero Burning ROM
- HKEY_LOCAL_MACHINE\Software\Nero\Nero 12
- HKEY_LOCAL_MACHINE\Software\Nero\Nero 15
- HKEY_CURRENT_USER\Software\Nero\Nero 11\Nero Vision
- HKEY_CURRENT_USER\Software\Nero\Nero 10\Nero Vision
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero BackItUp
- HKEY_CURRENT_USER\Software\Nero\Nero 15\Nero BackItUp
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Nero\Nero 15\Nero Express
- HKEY_CURRENT_USER\Software\Nero\Nero 15\Nero Express
- HKEY_CURRENT_USER\Software\e-merge\WinAce\2.0
- HKEY_CURRENT_USER\Software\Safer Networking Limited\SpybotSnD
- HKEY_CURRENT_USER\Software\Webroot\SpySweeper
- HKEY_CURRENT_USER\Software\Kazaa
- HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Main
- HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\6.0
- HKEY_CURRENT_USER\Software\Axialis\IconWorkshop
- HKEY_CURRENT_USER\Software\eMule
- HKEY_LOCAL_MACHINE\Software\WinISO
- HKEY_CURRENT_USER\Software\Smart Projects\IsoBuster
- HKEY_CURRENT_USER\Software\Gabest\Media Player Classic
- HKEY_CURRENT_USER\Software\MPC-HC\MPC-HC
- HKEY_CURRENT_USER\Software\BST\bsplayer
- HKEY_LOCAL_MACHINE\Software\VideoLAN\VLC
- HKEY_CURRENT_USER\Software\MediaMonkey
- HKEY_CURRENT_USER\Software\Winamp
- HKEY_CURRENT_USER\Software\Musicmatch\Musicmatch Jukebox
- HKEY_CURRENT_USER\Software\Sonic Foundry\Sound Forge\6.0\Metrics
- HKEY_CURRENT_USER\Software\Audacity
- HKEY_CURRENT_USER\Software\Microsoft\MSNMessenger\PerPassportSettings
- HKEY_CURRENT_USER\Software\MySpace\IM
- HKEY_CURRENT_USER\Software\Acronis\TrueImage
- HKEY_CURRENT_USER\Software\Acronis\TrueImageHome
- HKEY_CURRENT_USER\Software\Acronis\ True Image Home
- HKEY_LOCAL_MACHINE\Software\Acronis\TrueImage
- HKEY_CURRENT_USER\Software\Nico Mak Computing\WinZip
- HKEY_CURRENT_USER\Software\WinRAR
- HKEY_CURRENT_USER\Software\7-Zip\
- HKEY_CURRENT_USER\Software\Bitberry\BitZipper
- HKEY_CURRENT_USER\Software\PowerArchiver
- HKEY_LOCAL_MACHINE\SOFTWARE\PowerArchiverInt
- HKEY_CURRENT_USER\Software\Mijenix\ZipMagic
- HKEY_CURRENT_USER\Software\PicoZip
- HKEY_CURRENT_USER\Software\PKWARE\PKZIP70
- HKEY_LOCAL_MACHINE\SOFTWARE\JavaSoft\Java Plug-in
- HKEY_CURRENT_USER\Software\FreshDevices\FreshDownload
- HKEY_CURRENT_USER\Software\Microsoft\MovieMaker
- HKEY_CURRENT_USER\Software\Helios\TextPad 4
- HKEY_CURRENT_USER\Software\Freeware\VirtualDub
- HKEY_CURRENT_USER\Software\Visicom Media\AceHTML 5 Freeware
- HKEY_CURRENT_USER\Software\Alcohol Soft\Alcohol 120%
- HKEY_CURRENT_USER\Software\Alcohol Soft\Alcohol 52%
- HKEY_CURRENT_USER\Software\Cronosoft\LeechGet
- HKEY_CURRENT_USER\Software\Headlight\GetRight\
- HKEY_CURRENT_USER\Software\SpeedBit\Download Accelerator
- HKEY_CURRENT_USER\Software\2VG\Internet Download Accelerator
- HKEY_LOCAL_MACHINE\Software\Internet Download Manager
- HKEY_LOCAL_MACHINE\SOFTWARE\Orbit
- HKEY_CURRENT_USER\Software\Morpheus
- HKEY_CURRENT_USER\Software\ORL\VNCviewer
- HKEY_CURRENT_USER\Software\RealVNC\VNCviewer4
- HKEY_CURRENT_USER\Software\DVD Shrink\
- HKEY_CURRENT_USER\SOFTWARE\TiVo\Desktop
- HKEY_LOCAL_MACHINE\SOFTWARE\ComputerAssociates\Anti-Virus
- HKEY_LOCAL_MACHINE\SOFTWARE\Zone Labs\ZoneAlarm
- HKEY_LOCAL_MACHINE\SOFTWARE\Google\Google Earth Plus
- HKEY_LOCAL_MACHINE\SOFTWARE\Google\Google Earth Pro
- HKEY_CURRENT_USER\SOFTWARE\Google\Google Earth Plus
- HKEY_CURRENT_USER\SOFTWARE\Google\Google Earth Pro
- HKEY_CURRENT_USER\Software\Raxco\PerfectDisk\7.0
- HKEY_CURRENT_USER\Software\DT Soft
- HKEY_CURRENT_USER\Software\Azureus
- HKEY_CURRENT_USER\Software\BitTorrent\BitTorrent
- HKEY_CURRENT_USER\Software\BitTorrent\uTorrent
- HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE\CuteFTP 7 Professional
- HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE\CuteFTP 7 Home
- HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE\CuteFTP 8 Professional
- HKEY_LOCAL_MACHINE\SOFTWARE\GlobalSCAPE\CuteFTP 8 Home
- HKEY_USERS\.DEFAULT\Software\Globalscape\CuteFTP 9
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Globalscape\CuteFTP 9
- HKEY_CURRENT_USER\Software\FTPWare
- HKEY_LOCAL_MACHINE\SOFTWARE\FileZilla Client
- HKEY_CURRENT_USER\SOFTWARE\FileZilla Client
- HKEY_CURRENT_USER\Software\SmartFTP
- HKEY_CURRENT_USER\Software\ClamWin
- HKEY_LOCAL_MACHINE\Software\ewido
- HKEY_LOCAL_MACHINE\SOFTWARE\Grisoft\AVGAntiSpyware
- HKEY_LOCAL_MACHINE\Software\Malwarebytes' Anti-Malware
- HKEY_CURRENT_USER\Software\Spyware Terminator
- HKEY_LOCAL_MACHINE\Software\SUPERAntiSpyware.com\SUPERAntiSpyware
- HKEY_LOCAL_MACHINE\Software\Emsi Software GmbH\a-squared Free
- HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader
- HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader 6.0
- HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader 7.0
- HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader 8.0
- HKEY_CURRENT_USER\Software\Paint.NET
- HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org\OpenOffice.org\2.0
- HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org\OpenOffice.org\2.1
- HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
- HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
- HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
- HKEY_CURRENT_USER\SOFTWARE\OpenOffice.org\OpenOffice.org\3.0
- HKEY_CURRENT_USER\SOFTWARE\OpenOffice.org\OpenOffice.org\3.1
- HKEY_CURRENT_USER\SOFTWARE\OpenOffice.org\OpenOffice.org\3.2
- HKEY_CURRENT_USER\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
- HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice.org\OpenOffice.org\3.3
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\OpenOffice\OpenOffice\4.0.0
- HKEY_LOCAL_MACHINE\SOFTWARE\OpenOffice\OpenOffice\4.0.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Grisoft\Avg7
- HKEY_LOCAL_MACHINE\SOFTWARE\AVG\Avg8
- HKEY_LOCAL_MACHINE\SOFTWARE\AVG\Avg9
- HKEY_LOCAL_MACHINE\SOFTWARE\AVG\Avg10
- HKEY_LOCAL_MACHINE\SOFTWARE\AVG\AVG2012
- HKEY_LOCAL_MACHINE\SOFTWARE\AVG\AVG2013
- HKEY_LOCAL_MACHINE\SOFTWARE\Avira\AntiVir Desktop
- HKEY_CURRENT_USER\SOFTWARE\Avira\AntiVirus
- HKEY_CURRENT_USER\Software\ALWIL Software\Avast\4.0
- HKEY_CURRENT_USER\Software\ALWIL Software\Avast\5.0
- HKEY_LOCAL_MACHINE\Software\Avast Software\Avast
- HKEY_CURRENT_USER\Software\Avast Software\Avast
- HKEY_LOCAL_MACHINE\Software\Softwin\BitDefender Desktop
- HKEY_CURRENT_USER\Software\TUGZip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender
- HKEY_CURRENT_USER\Software\IZSoftware\IZArc
- HKEY_CURRENT_USER\Software\Microsoft\Office
- HKEY_CURRENT_USER\Software\ImgBurn
- HKEY_LOCAL_MACHINE\Software\SlySoft\CloneCD
- HKEY_CURRENT_USER\Software\Elaborate Bytes\VirtualCloneDrive
- HKEY_CURRENT_USER\Software\BillP Studios\WinPatrol
- HKEY_CURRENT_USER\Software\LogMeIn
- HKEY_LOCAL_MACHINE\SOFTWARE\LogMeIn, Inc.
- HKEY_CURRENT_USER\Software\Ashampoo\Ashampoo Burning Studio 10
- HKEY_CURRENT_USER\Software\Ashampoo\Ashampoo Burning Studio 11
- HKEY_CURRENT_USER\Software\Ashampoo\Ashampoo Burning Studio 14
- HKEY_CURRENT_USER\Software\PrestoSoft\ExamDiff
- HKEY_CURRENT_USER\Software\PrestoSoft\ExamDiff Pro
- HKEY_CURRENT_USER\Software\grigsoft.com\Compare It!
- HKEY_CURRENT_USER\Software\Microsoft\Windiff
- HKEY_CURRENT_USER\Software\Bradbury\FeedDemon\1.0
- HKEY_CURRENT_USER\Software\TechSmith\SnagIt\9
- HKEY_CURRENT_USER\Software\TechSmith\SnagIt\10
- HKEY_CURRENT_USER\Software\TechSmith\SnagIt\11
- HKEY_CURRENT_USER\Software\TechSmith\SnagIt\12
- HKEY_CURRENT_USER\Software\Evernote
- HKEY_CURRENT_USER\Software\Raxco\PerfectDisk\8.0
- HKEY_CURRENT_USER\Software\Raxco\PerfectDisk\9.0
- HKEY_CURRENT_USER\Software\Raxco\PerfectDisk\10.0
- HKEY_CURRENT_USER\Software\Raxco\PerfectDisk\11.0
- HKEY_CURRENT_USER\Software\Raxco\PerfectDisk\12.0
- HKEY_CURRENT_USER\Software\Raxco\PerfectDisk\12.5
- HKEY_CURRENT_USER\Software\PowerISO
- HKEY_CURRENT_USER\Software\EasyBoot Systems\UltraISO\5.0
- HKEY_CURRENT_USER\Software\MagicISO
- HKEY_CURRENT_USER\Software\BreezeSystems\BreezeBrowserPro
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\FSCapture.exe
- HKEY_CURRENT_USER\Software\Akelsoft\AkelPad
- HKEY_LOCAL_MACHINE\Software\NoteXpad
- HKEY_LOCAL_MACHINE\SOFTWARE\DCSoft\RegEditX
- HKEY_CURRENT_USER\Software\Foxit Software\Foxit Reader 5.0
- HKEY_LOCAL_MACHINE\SOFTWARE\ACD Systems\ACDSee\140
- HKEY_CURRENT_USER\Software\TechSmith\Camtasia Studio\7.0\Camtasia Studio
- HKEY_CURRENT_USER\Software\TechSmith\Camtasia Studio\8.0
- HKEY_CURRENT_USER\Software\AnvSoft\Any Video Converter Ultimate
- HKEY_CURRENT_USER\Software\Freemake\FreemakeVideoDownloader
- HKEY_CURRENT_USER\Software\Freemake\FreemakeAudioConverter
- HKEY_CURRENT_USER\Software\Freemake\FreemakeVideoConverter
- HKEY_CURRENT_USER\Software\VSO\ConvertXToDVD
- HKEY_CURRENT_USER\Software\VSO\ConvertXtoDVD\5
- HKEY_CURRENT_USER\Software\VSO\Blu-ray Converter Ultimate\2
- HKEY_CURRENT_USER\Software\VSO\DVD Converter Ultimate\2
- HKEY_CURRENT_USER\Software\Ulead Systems\Corel VideoStudio Pro\14.0
- HKEY_CURRENT_USER\Software\Ulead Systems\Corel VideoStudio Pro\15.0
- HKEY_CURRENT_USER\Software\ESTsoft\ALZip
- HKEY_CURRENT_USER\Software\CyberLink\PhotoDirector3
- HKEY_CURRENT_USER\Software\CyberLink\PowerDirector\10.0
- HKEY_CURRENT_USER\Software\CyberLink\PowerDirector12
- HKEY_CURRENT_USER\Software\CyberLink\AudioDirector4
- HKEY_CURRENT_USER\Software\UniExtract
- HKEY_CURRENT_USER\Software\4Sync
- HKEY_CURRENT_USER\Software\Copernic\DesktopSearch2
- HKEY_LOCAL_MACHINE\Software\DVDFab
- HKEY_CURRENT_USER\Software\DVDFab
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\inkscape.exe
- HKEY_CURRENT_USER\Software\GG
- HKEY_CURRENT_USER\Software\Gadu-Gadu 10
- HKEY_CURRENT_USER\Software\Nowe Gadu-Gadu
- HKEY_CURRENT_USER\Software\Gadu-Gadu
- HKEY_CURRENT_USER\Software\Foxit Software\Foxit PhantomPDF 5.0
- HKEY_LOCAL_MACHINE\Software\Foxit Software\Foxit PhantomPDF
- HKEY_CURRENT_USER\Software\Foxit Software\Foxit PhantomPDF 6.0
- HKEY_CURRENT_USER\Software\PDFCreator
- HKEY_CURRENT_USER\Software\PDFCreator.net
- HKEY_CURRENT_USER\Software\pdfforge\PDFCreator
- HKEY_CURRENT_USER\Software\PDF Architect
- HKEY_CURRENT_USER\Software\PDF Architect 2
- HKEY_CURRENT_USER\Software\FireTrust\MailWasher Pro
- HKEY_CURRENT_USER\Software\FireTrust\MailWasher
- HKEY_CURRENT_USER\Software\FireTrust\MailWasherPro
- HKEY_CURRENT_USER\Software\Samsung\Kies2.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Connectify
- HKEY_CURRENT_USER\Software\NCH Software\Scribe
- HKEY_CURRENT_USER\Software\GRETECH\GomPlayer
- HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Microsoft.SkypeApp_kzf8qxf38zg5c
- HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\9E2F88E3.Twitter_wgeqdkkx372wm
- HKEY_LOCAL_MACHINE\SOFTWARE\Sony Creative Software\Vegas Pro\12.0
- HKEY_LOCAL_MACHINE\SOFTWARE\GPSoftware\Directory Opus
- HKEY_CURRENT_USER\Software\NVIDIA Corporation
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Canneverbe Limited\CDBurnerXP
- HKEY_CURRENT_USER\Software\Canneverbe Limited\CDBurnerXP
- HKEY_CURRENT_USER\Software\IDM Computer Solutions\UltraEdit
- HKEY_LOCAL_MACHINE\SOFTWARE\Photodex Media Sources
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Photodex Media Sources
- HKEY_CURRENT_USER\Software\SketchUp
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Handbrake_RASAPI32
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Tracing\Handbrake_RASMANCS
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\Handbrake.exe
- HKEY_CURRENT_USER\Software\ABBYY\FineReader\11.00
- HKEY_CURRENT_USER\Software\RIT\The Bat!
- HKEY_LOCAL_MACHINE\SOFTWARE\Wondershare\Wondershare Video Converter Ultimate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Picasa
- HKEY_CURRENT_USER\SOFTWARE\Kingsoft\Kingsoft\Office\6.0
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Kingsoft\Office\6.0
- HKEY_CURRENT_USER\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\SystemAppData\Facebook.Facebook_8xx8rvfyw5nnt
- HKEY_LOCAL_MACHINE\Software\Xilisoft\Video Converter Platinum
- HKEY_LOCAL_MACHINE\Software\Xilisoft\Video Converter Ultimate
- HKEY_CURRENT_USER\Software\Xilisoft\Video Converter Ultimate
- HKEY_LOCAL_MACHINE\Software\Xilisoft\Video Converter Standard
- HKEY_LOCAL_MACHINE\Software\Xilisoft\DVD Ripper Ultimate SE
- HKEY_CURRENT_USER\Software\Illustrate\dBpoweramp
- HKEY_CURRENT_USER\Software\2BrightSparks\SyncBackFree
- HKEY_LOCAL_MACHINE\SOFTWARE\Wondershare\Wondershare Video Converter Pro
- HKEY_LOCAL_MACHINE\SOFTWARE\Aimersoft\Aimersoft Video Converter Ultimate
- HKEY_CURRENT_USER\Software\Stardock\WindowBlinds
- HKEY_CURRENT_USER\Software\Nitro\Pro\9.0
- HKEY_CURRENT_USER\Software\Nitro\Reader\3.0
- HKEY_CURRENT_USER\Software\VirtualDJ
- HKEY_CURRENT_USER\Software\FreeTime\FormatFactory
- HKEY_CURRENT_USER\Software\TeamViewer
- HKEY_CURRENT_USER\Software\Microsoft\SkyDrive
- HKEY_CURRENT_USER\Software\RealVNC\vncviewer
- HKEY_CURRENT_USER\Software\Softpointer\Tag&Rename3.7\Config
- HKEY_CURRENT_USER\Software\Mooii\PhotoScape
- HKEY_LOCAL_MACHINE\Software\Bluestacks
- HKEY_CURRENT_USER\Software\Visicom Media\ManyCam
- HKEY_LOCAL_MACHINE\Software\XnView
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\CTF\Compatibility\chrome.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Group Policy\History\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\GPExtensions\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}\PerUserLocalSettings
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy\History\{35378EAC-683F-11D2-A89A-00C04FBBCFA2}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\RepositoryRestoreInProgress
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
- HKEY_USERS\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\Cache
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net.exe
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\net1.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineCore\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2C41C52-C4CF-4AA9-B020-81515B67A394}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2C41C52-C4CF-4AA9-B020-81515B67A394}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2C41C52-C4CF-4AA9-B020-81515B67A394}\Triggers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GoogleUpdateTaskMachineUA\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C429D89-59A7-46BD-8578-96BFEA72E22E}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C429D89-59A7-46BD-8578-96BFEA72E22E}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6C429D89-59A7-46BD-8578-96BFEA72E22E}\Triggers
- HKEY_LOCAL_MACHINE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\SchedulingEngineKnob
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\CCleanerSkipUAC.job
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\CCleanerSkipUAC.job.fp
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Control Panel\International
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Control Panel\International\LocaleName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B6E6044-AE3F-4525-9FE7-8D52F5479A4F}\Path
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B6E6044-AE3F-4525-9FE7-8D52F5479A4F}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC\Index
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B6E6044-AE3F-4525-9FE7-8D52F5479A4F}\Triggers
- HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\iphlpsvc
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IPHLPSVC\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\IPHLPSVC\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
- HKEY_LOCAL_MACHINE\Software\Classes
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0000000C-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\ESS
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InProcServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7C857801-7381-11CF-884D-00AA004B2E24}\InprocHandler
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PreviousServiceShutdown
- HKEY_LOCAL_MACHINE\system\Setup
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\winmgmt
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Winmgmt\Parameters\ServiceDllUnloadOnStop
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Custom\sc.exe
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\CCleaner Monitoring
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SystemMonitoringCheckComputer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Category
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Name
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\ParentFolder
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Description
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\RelativePath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\ParsingName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\InfoTip
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\LocalizedName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Icon
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Security
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\StreamResource
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\StreamResourceType
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\LocalRedirectOnly
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Roamable
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PreCreate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Stream
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PublishExpandedPath
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\Attributes
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\FolderTypeID
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\InitFolderHandler
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{3EB685DB-65F9-4CF6-A03A-E3EF65729F3D}\PropertyBag
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\KnownFolderSettings
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\PreferExternalManifest
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#IDE#CdRomVBOX_CD-ROM_____________________________1.0_____#5&106af171&0&1.0.0#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000000100000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000006500000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000B7FD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\#
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000B7FD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\##?#STORAGE#Volume#{2400a2c0-ccb0-11e5-b7bd-806e6f6e6963}#0000000B7FD00000#{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}\DeviceInstance
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\LocalService
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\ServiceParameters
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\RunAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\ActivateAtStorage
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\ROTFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\AppIDFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\LaunchPermission
- HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyAuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\OLE\LegacyImpersonationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\AuthenticationLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\RemoteServerName
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\SRPTrustLevel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\PreferredServerBitness
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{8BC3F05E-D86B-11D0-A075-00C04FB68820}\LoadUserSettings
- HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\Tracing\WMI
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\SessionEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Level
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AreaFlags
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\Session
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\BufferSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MinimumBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumBuffers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\MaximumFileSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\LogFileMode
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\FlushTimer
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Tracing\WMI\AgeLimit
- HKEY_LOCAL_MACHINE\SYSTEM\Setup
- HKEY_LOCAL_MACHINE\SYSTEM\Setup\UpgradeInProgress
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Safeboot\Option
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\VssAccessControl
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Settings
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\ActiveWriterStateTimeout
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Diag\(Default)
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\VSS\Diag\WMI Writer
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\VSS\Settings\TornComponentsMax
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{00000100-0000-0000-C000-000000000046}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9555-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{609B9557-4FB6-11D1-9971-00C04FBBB345}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F309AD18-D86A-11D0-A075-00C04FB68820}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D4781CD6-E5D3-44DF-AD94-930EFE48A887}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\IdentifierLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\QueryLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PathLimit
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbThrottlingEnabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighMaxLimitFactor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbTaskMaxSleep
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold1Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold2Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ArbSystemHighThreshold3Mult
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Unchecked Task Count
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Working Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Build
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Logging Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\MOF Self-Install Directory
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Default Repository Driver
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueCoreFsrepVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Repository Cache Spill Ratio
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckPointValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SnapShotValue
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\CheckRepositoryOnNextStartup
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NumWriteIdCheck
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Class Cache Item Age (ms)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableObjectValidation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\NextAutoRecoverFile
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Enable Provider Subsystem
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{07B00B8A-8D78-444F-9EF6-F5BA82100A47}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{386BAD19-A129-470E-A6DB-5FE177FEE62D}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{94426C32-71C4-410A-A095-79082150EAC0}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\Provider
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\Scope
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\Locale
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\User
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Client\{B7849844-D1EB-4894-8831-991E426E120D}\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\EnableEvents
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssToBeInitialized
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Low Threshold On Events (B)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\High Threshold On Events (B)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Wait On Events (ms)
- HKEY_LOCAL_MACHINE\software\microsoft\wbem\cimom
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\SetupDate
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Async Result Queue Size
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Merger Query Arbitration Enabled
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/subscription
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\CIMOM
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerBatchSize
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ClientCallbackTimeout
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\FinalizerQueueThreshold
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\Max Tasks
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\CustomLocale\CIMV2
- HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Nls\ExtendedLocale\CIMV2
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{9556DC99-828C-11CF-A37E-00AA003240C7}\ProxyStubClsid32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\TreatAs
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\Progid
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\InprocServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{D68AF00A-29CB-43FA-8504-CE99A996D9EA}\InprocHandler
- HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InProcServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\(Default)
- HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\LocalServer32
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\ThreadingModel
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\InprocServer32\Synchronization
- HKEY_CLASSES_ROOT\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{661FF7F6-F4D1-4593-B59D-4C54C1ECE68B}\AppId
- HKEY_LOCAL_MACHINE\system\currentcontrolset\control\minint
Show More 2207

Executed Commands

ping -n 1 -w 1000 www.piriform.com
ping -n 1 -w 5000 www.piriform.com
C:\Program Files\CCleaner\CCleaner64.exe /createSkipUAC
"C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" --new-window "http://www.google.com" "http://www.piriform.com/go/app_releasenotes?p=1&v=5.33.6162&l=1033&b=1&a=0"
C:\Program Files\CCleaner\CCleaner64.exe

Read Files

\Device\KsecDD
C:\Users\user\AppData\Local\Temp\nsaA916.tmp
C:\Users\user\AppData\Local\Temp\c705c0b0210ebda6a3301c6ca9c6091b2ee11d5b.exe
C:\Users\user\AppData\Local\Temp\nsqA9C3.tmp
C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\System.dll
- C:\Windows\Fonts\staticcache.dat
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\UserInfo.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gtapi_signed.DLL
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gtapi_signed.DLL.3.Manifest
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcapi_dll.DLL
- C:\Windows\System32\winmm.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsExec.dll
- \Device\NamedPipe\
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\pfUI.dll
- C:\Windows\System32\msimg32.dll
- C:\Windows\winsxs\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\GdiPlus.dll
- C:\Windows\System32\IPHLPAPI.DLL
- C:\Windows\System32\winnsi.dll
- C:\Windows\System32\wtsapi32.dll
- C:\Windows\System32\netapi32.dll
- C:\Windows\System32\netutils.dll
- C:\Windows\System32\srvcli.dll
- C:\Windows\System32\esent.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsDialogs.dll
- C:\Windows\System32\UXTHEME.DLL.Config
- C:\Windows\System32\uxtheme.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\CC_logo_72x66.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\PF_logo.png
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\PF_computer.png
- C:\Windows\SysWOW64\ieframe.dll
- C:\
- C:\Users\desktop.ini
- C:\Users
- C:\Users\user
- C:\Users\user\AppData
- C:\Users\user\AppData\Local
- C:\Users\user\AppData\Local\Temp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\g\gcombo\ComboOffer_1033.html
- C:\Windows\WindowsShell.manifest
- C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
- C:\Users\user\AppData\Local\Microsoft
- C:\Users\user\AppData\Local\Microsoft\Windows
- C:\Users\user\AppData\Local\Microsoft\Windows\History\desktop.ini
- C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012017091920170920\index.dat
- C:\Windows\System32\shell32.dll
- C:\Users\user\AppData\Roaming
- C:\Users\user\AppData\Roaming\Microsoft\desktop.ini
- C:\Users\user\AppData\Roaming\Microsoft
- C:\Users\user\AppData\Roaming\Microsoft\Windows
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\desktop.ini
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\user@c1.microsoft[2].txt
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\user@downloads.sourceforge[1].txt
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\user@google[2].txt
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\user@microsoft[2].txt
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\profiles.ini
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\SiteSecurityServiceState.txt
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite-wal
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\cookies.sqlite-shm
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Origin Bound Certs
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\modern-header.bmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ButtonEvent.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\nsProcess.dll
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\inetc.dll
- C:\Program Files\desktop.ini
- C:\Program Files
- C:\Program Files\CCleaner
- \??\PIPE\srvsvc
- C:\Program Files\CCleaner\CCleaner64.exe
- C:\Users\Public\Desktop\CCleaner.lnk
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner Homepage.url
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\modern-wizard.bmp
- C:\Users\user\AppData\Local\Temp\nsgA9D4.tmp\ui\res\Montserrat-Regular.otf
- C:\Windows\Globalization\Sorting\sortdefault.nls
- C:\Program Files\CCleaner\ccleaner_checkpoint.dat
- C:\Windows\sysnative\en-US\KERNELBASE.dll.mui
- C:\Program Files (x86)\Google\Chrome\Application\chrome.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\chrome.dll
- C:\Windows\System32\credui.dll
- C:\Windows\System32\hid.dll
- C:\Windows\System32\oleacc.dll
- C:\Windows\System32\secur32.dll
- C:\Windows\System32\pdh.dll
- C:\Windows\System32\ntdsapi.dll
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\icudtl.dat
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\snapshot_blob.bin
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\natives_blob.bin
- C:\Windows\System32\KBDUS.DLL
- C:\Windows\System32\drivers\etc\hosts
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Local State
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\chrome_100_percent.pak
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\Locales\en-US.pak
- C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.103\resources.pak
- \??\pipe\mojo.1452.2376.14883248807444065675
- C:\Users\user\AppData\Local\Google\Chrome\User Data\chrome_shutdown_ms.txt
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Managed Mode Settings
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\File System\primary.origin
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOCK
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\CURRENT
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000001
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Top Sites
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\ChromeDWriteFontCache
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000003.log
- C:\Windows\Fonts\segoeui.ttf
- C:\Windows\Fonts\segoeuib.ttf
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek\0.9_0\_metadata\verified_contents.json
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Shortcuts-journal
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi\1.1_0\_metadata\verified_contents.json
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap\1.1_0\_metadata\verified_contents.json
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BFF5.tmp
- C:\Users\user\AppData\Local\Temp\etilqs_iGaj0dtUtTRn36P
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake\0.9_0\_metadata\verified_contents.json
- \??\pipe\mojo.1452.2840.4937964858906658848
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Certificate Revocation Lists
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal
- C:
- C:\Users\user\AppData\Local\Microsoft\Windows\Caches\cversions.1.db
- C:\Users\user\AppData\Local\Microsoft\Windows\Caches\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000004a.db
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\desktop.ini
- C:\Users\user\Desktop\desktop.ini
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\desktop.ini
- C:\ProgramData
- C:\ProgramData\Microsoft\desktop.ini
- C:\ProgramData\Microsoft
- C:\ProgramData\Microsoft\Windows
- C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini
- C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\index.dat
- C:\ProgramData\Microsoft\Windows\Start Menu
- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini
- C:\Users\Public\desktop.ini
- C:\Users\Public
- C:\Users\Public\Desktop\desktop.ini
- C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer
- C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\desktop.ini
- C:\Users\user\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
- C:\Windows\sysnative\shdocvw.dll
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccc0fa1b9f86f7b3.customDestinations-ms
- C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\BXTFO2NK1XHP4NZZUGU3.temp
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite-wal
- C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\jdm2a1on.default\webappsstore.sqlite-shm
- C:\Users\user\AppData\Local\Mozilla\Firefox\Profiles\jdm2a1on.default\OfflineCache\index.sqlite
- C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\databases\Databases.db
- C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
- C:\Windows\System32\imageres.dll
- \??\pipe\mojo.2680.2976.6919551006740612178
- \??\pipe\mojo.996.3068.11848897747031972764
- C:\Windows\SysWOW64\net.exe
- C:\Windows\AppPatch\sysmain.sdb
- C:\Windows\SysWOW64\
- C:\Windows\SysWOW64\net1.exe
- C:\Windows\sysnative\Tasks\CCleanerSkipUAC
- C:\Windows\Temp\fwtsqmfile00.sqm
- C:\Windows\SysWOW64\sc.exe
- C:\Windows\SysWOW64\en-US\sc.exe.mui
- C:\Windows\sysnative\shell32.dll
- \??\PIPE\samr
- C:\Windows\sysnative\wbem\repository\MAPPING1.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING2.MAP
- C:\Windows\sysnative\wbem\repository\MAPPING3.MAP
- C:\Windows\sysnative\wbem\repository\OBJECTS.DATA
- C:\Windows\sysnative\wbem\repository\INDEX.BTR
Show More 176

Mutexes

CicLoadWinStaWinSta0
Local\MSCTF.CtfMonitorInstMutexDefault1
Local\WininetStartupMutex
Local\ZonesCounterMutex
Local\ZoneAttributeCacheCounterMutex
- Local\ZonesCacheCounterMutex
- Local\ZonesLockedCacheCounterMutex
- Local\!IETld!Mutex
- Local\_!MSFTHISTORY!_
- Local\c:!users!user!appdata!local!microsoft!windows!temporary internet files!content.ie5!
- Local\c:!users!user!appdata!roaming!microsoft!windows!cookies!
- Local\c:!users!user!appdata!local!microsoft!windows!history!history.ie5!
- _!SHMSFTHISTORY!_
- Local\c:!users!user!appdata!local!microsoft!windows!history!history.ie5!mshist012017091920170920!
- IESQMMUTEX_0_208
- Piriform_CCleaner_PreventSecondInstance
- Piriform_CCleaner_Monitoring
- Local\ChromeProcessSingletonStartup!
- {A946A6A9-917E-4949-B9BC-6BADA8C7FD63}
- Piriform_CCleaner_SystemTrayIconActive
- Local\c:!users!user!appdata!local!microsoft!internet explorer!domstore!
- Piriform_CCleaner_Checking_for_Updates
- Piriform_CCleaner_SystemTraySingleIcon
- Piriform_CCleaner_SystemTrayMonitorIconActive
Show More 19

Modified Registry Keys

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Google Toolbar
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Google Toolbar\test
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CachePath
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CachePrefix
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CacheLimit
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CacheOptions
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012017091920170920\CacheRepair
- HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\reactivationbrand
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\reactivation
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\reactivation\PRFK
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\experiment_labels
- HKEY_LOCAL_MACHINE\Software\Piriform
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\CR
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadDecisionReason
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadDecisionTime
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadDecision
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\{E2D0CA08-2243-4725-9430-A8A2D5F46E6B}\WpadNetworkName
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00\WpadDecisionReason
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00\WpadDecisionTime
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\0a-00-27-00-00-00\WpadDecision
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\WpadLastNetwork
- HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\Run CCleaner\command
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\Run CCleaner\command\(Default)
- HKEY_CLASSES_ROOT\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\Shell\Open CCleaner...\command
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\shell\Open CCleaner...\command\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\CCleaner
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\CCleaner\UpdateCheck
- HKEY_CLASSES_ROOT\cclaunch
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\URL Protocol
- HKEY_CLASSES_ROOT\cclaunch\shell
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\shell\(Default)
- HKEY_CLASSES_ROOT\cclaunch\shell\open
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\shell\open\(Default)
- HKEY_CLASSES_ROOT\cclaunch\shell\open\command
- HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cclaunch\shell\open\command\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\App Paths\ccleaner.exe
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ccleaner.exe\(Default)
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\ccleaner.exe\Path
- HKEY_LOCAL_MACHINE\SOFTWARE\Piriform\CCleaner\(Default)
- HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\DisplayName
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\UninstallString
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\Publisher
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\InstallLocation
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\VersionMajor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\VersionMinor
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\DisplayVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner\DisplayIcon
- HKEY_USERS\.DEFAULT\Software\Piriform\CCleaner
- HKEY_USERS\.DEFAULT\SOFTWARE\Piriform\CCleaner\AutoICS
- HKEY_USERS\.DEFAULT\SOFTWARE\Piriform\CCleaner\Brandover
- HKEY_USERS\S-1-5-19\Software\Piriform\CCleaner
- HKEY_USERS\S-1-5-19\Software\Piriform\CCleaner\AutoICS
- HKEY_USERS\S-1-5-19\Software\Piriform\CCleaner\Brandover
- HKEY_USERS\S-1-5-20\Software\Piriform\CCleaner
- HKEY_USERS\S-1-5-20\Software\Piriform\CCleaner\AutoICS
- HKEY_USERS\S-1-5-20\Software\Piriform\CCleaner\Brandover
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000\Software\Piriform\CCleaner
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\AutoICS
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Brandover
- HKEY_USERS\S-1-5-21-2298303332-66077612-2598613238-1000_Classes\Software\Piriform\CCleaner
- HKEY_CURRENT_USER\Software\Classes\Software\Piriform\CCleaner\AutoICS
- HKEY_CURRENT_USER\Software\Classes\Software\Piriform\CCleaner\Brandover
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\GlobalAssocChangedCounter
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Language
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice\Progid
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice\Progid
- HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Associations\UrlAssociations\ftp\UserChoice\Progid
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SkipUAC
- HKEY_CURRENT_USER\Software\Google\Chrome\BLBeacon\state
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{8A69D345-D564-463c-AFF1-A69D9E530F96}\dr
- HKEY_CURRENT_USER\Software\Google\Update\ClientState\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\dr
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}\usagestats
- HKEY_LOCAL_MACHINE\Software\Google\Update\ClientStateMedium\{8A69D345-D564-463c-AFF1-A69D9E530F96}\LastWasDefault
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastWasDefault\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumAccounts\aggregate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumAccounts\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumSignedIn\aggregate
- HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Google\Update\ClientStateMedium\{8A69D345-D564-463C-AFF1-A69D9E530F96}\_NumSignedIn\S-1-5-21-2298303332-66077612-2598613238-1000
- HKEY_CURRENT_USER\Software\Google\Chrome\StabilityMetrics\user_experience_metrics.stability.exited_cleanly
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C1I
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C2I
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C7I
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C1S
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\Events\_PRFK\C\C7S
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\PTimes\_PRFK
- HKEY_CURRENT_USER\Software\Google\Common\Rlz\PTimes\_PRFK\C
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\WipeFreeSpaceDrives
- HKEY_CURRENT_USER\Software\Classes\Local Settings\MuiCache\6D\52C64B7E\LanguageList
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\CookiesToSave
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\RunICS
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\NewVersion
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B6E6044-AE3F-4525-9FE7-8D52F5479A4F}\Path
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B6E6044-AE3F-4525-9FE7-8D52F5479A4F}\Hash
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC\Id
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CCleanerSkipUAC\Index
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{4B6E6044-AE3F-4525-9FE7-8D52F5479A4F}\Triggers
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\LastServiceStart
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\PreviousServiceShutdown
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ProcessID
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\Monitoring
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\CCleaner Monitoring
- HKEY_CURRENT_USER\Software\Piriform\CCleaner\SystemMonitoring
- HKEY_LOCAL_MACHINE\Software\Microsoft\Wbem\Transports\Decoupled\Server
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\CreationTime
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\MarshaledProxy
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\Transports\Decoupled\Server\ProcessIdentifier
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\ConfigValueEssNeedsLoading
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM\List of event-active namespaces
- HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\ESS\//./root/CIMV2\SCM Event Provider
Show More 113

Loading...