RTKT_AGENT.MAQ

October 12, 2012

ALIASES:

PWS:Win32/OnLineGames.NJ (Microsoft); generic!bg.bnk (McAfee); Infostealer.Gampass (Symantec); PAK:PE_Patch, PAK:UPack, Trojan.Win32.Agent.airl (Kaspersky); Trojan.Win32.Packer.Upack0.3.9 (ep) (Sunbelt); Trojan.Generic.6649373 (FSecure)

PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

OVERALL RISK RATING:

DAMAGE POTENTIAL:

DISTRIBUTION POTENTIAL:

REPORTED INFECTION:

Threat Type: Trojan
Destructiveness: No
Encrypted:
In the wild: Yes

OVERVIEW

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

It deletes itself after execution.

TECHNICAL DETAILS

File Size:

22,898 bytes

File Type:

EXE

Memory Resident:

Initial Samples Received Date:

04 May 2012

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Other System Modifications

This Trojan deletes the following files:

%System%\B3721C07.cfg
%System%\B3721C07.dll
%User Temp%\liv1.tmp

(Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, or C:\Windows\System32 on Windows XP and Server 2003.. %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003.)

It adds the following registry keys:

HKEY_CLASSES_ROOT\CLsID\{B3721C07-62B3-411A-9DC7-F5F27E3E21FF}\
InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}

It adds the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{B3721C07-62B3-411A-9DC7-F5F27E3E21FF}\InprocServer32
ThreadingModel = "Apartment"

It deletes the following registry keys:

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\ClassicViewState

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\ControlPanelInMyComputer

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\DesktopProcess\
Policy\SeparateProcess

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\DesktopProcess\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\DesktopProcess

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\DisableThumbCache

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\FolderSizeTip

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\FriendlyTree

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\Hidden\
NOHIDDEN

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\Hidden\
SHOWALL

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\Hidden

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\HideFileExt

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\NetCrawler\
Policy\NoNetCrawling

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\NetCrawler\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\NetCrawler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\PersistBrowsers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\ShowCompColor

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\ShowFullPath

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\ShowFullPathAddress

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\ShowInfoTip

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\SimpleSharing

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\SuperHidden\
Policy\DontShowSuperHidden

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\SuperHidden\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\SuperHidden

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder\WebViewBarricade

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced\Folder

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Advanced

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AppKey\15

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AppKey\16

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AppKey\17

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AppKey\18

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AppKey\7

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AppKey

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Associations

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\CancelAutoplay\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\CancelAutoplay\Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\CancelAutoplay

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\MusicFilesContentHandler\
EventHandlers\MediaArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\MusicFilesContentHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\MusicFilesContentHandler\
FriendlyName

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\MusicFilesContentHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\PicturesContentHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\PicturesContentHandler\
EventHandlers\MediaArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\PicturesContentHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\PicturesContentHandler\
FriendlyName

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\PicturesContentHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\VideoFilesContentHandler\
EventHandlers\MediaArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\VideoFilesContentHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\VideoFilesContentHandler\
FriendlyName

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers\VideoFilesContentHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeSniffers\MusicFilesContentSniffer

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeSniffers\PicturesContentSniffer

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeSniffers\VideoFilesContentSniffer

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\ContentTypeSniffers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceClasses\{53f5630d-b6bf-11d0-94f2-00a0c91efb8b}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceClasses\{CC7BFB41-F175-11D1-A392-00E0291F3959}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceClasses

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\Camera

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\CellPhone

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\CFStorage

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\ClikDrive

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\FaxDevice

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\ImageMate

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\JazDrive

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\MemoryStick

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\MemoryStick-MG

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\OpticalDrive

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\PCMCIAStorage

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\PocketPC

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\PortableAudioPlayer

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\Printer

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\Scanner

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\SMStorage

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\TapeDrive

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\VideoCamera

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\ZipDrive100

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups\ZipDrive250

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceGroups

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CompaqPA1Handler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CompaqPA1Handler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CompaqPA1Handler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadIIcHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadIIcHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadIIcHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadIIHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadIIHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadIIHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadIIMGHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadIIMGHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadIIMGHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadJukeboxHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadJukeboxHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\CreativeNomadJukeboxHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\DigisetteDuo64Handler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\DigisetteDuo64Handler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\DigisetteDuo64Handler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\DLinkDMP110Handler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\DLinkDMP110Handler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\DLinkDMP110Handler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\GenericVolumeHandler\
ContentTypes

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\GenericVolumeHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\GenericVolumeHandler\
EventHandlers\MediaArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\GenericVolumeHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\GenericVolumeHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Intel3000Handler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Intel3000Handler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Intel3000Handler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\IntelPocketConcertHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\IntelPocketConcertHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\IntelPocketConcertHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\IomegaHipZipHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\IomegaHipZipHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\IomegaHipZipHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\NikepsaplayHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\NikepsaplayHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\NikepsaplayHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Ravemp2300Handler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Ravemp2300Handler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Ravemp2300Handler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Rio600Handler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Rio600Handler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Rio600Handler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Rio800Handler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Rio800Handler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\Rio800Handler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\RioOneHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\RioOneHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\RioOneHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\VideoCameraDeviceHandler\
EventHandlers\DeviceArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\VideoCameraDeviceHandler\
EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers\VideoCameraDeviceHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\DeviceHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\AutorunINFLegacyArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\CompaqPA1Arrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\CreativeNomadIIArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\CreativeNomadIIcArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\CreativeNomadIIMGArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\CreativeNomadJukeboxArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\DigisetteDuo64Arrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\DLinkDMP110Arrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\GenericVolumeArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\HandleCDBurningOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\Intel3000Arrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\IntelPocketConcertArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\IomegaHipZipArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\MixedContentOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\NikepsaplayArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\PlayCDAudioOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\PlayDVDMovieOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\PlayMusicFilesOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\PlayVideoFilesOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\Ravemp2300Arrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\Rio600Arrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\Rio800Arrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\RioOneArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\ShowPicturesOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers\VideoCameraArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\EventHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSCDBurningOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSOpenFolder

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSPlayMediaOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSPrintPicturesOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSPromptEachTime

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSPromptEachTimeNoContent

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSShowPicturesOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSTakeNoAction

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSVideoCameraArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSWiaEventHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSWMDMHandler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers\Handlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
AutoplayHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
BitBucket\c

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
BitBucket

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
BrowseNewProcess

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
CD Burning\AudioBurnHandlers\{8dd448e6-c188-4aed-af92-44956194eb1f}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
CD Burning\AudioBurnHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
CD Burning\ExcludedFS

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
CD Burning

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\Flags

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\Accessibility_Options

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\Add-Remove_Programs

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\Date-Time

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\Dialing_Options

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\Display_Properties

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\Internet_Options

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\Printers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\{0DF44EAA-FF21-4412-828E-260A8728E7F1}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\{6DFD7C5C-2451-11d3-A299-00C04F8EF6AF}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\{7007ACC7-3202-11D1-AAD2-00805FC1270E}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\{D20EA4E1-3957-11d2-A40B-0C5020524152}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\{D20EA4E1-3957-11d2-A40B-0C5020524153}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\{D6277990-4C6A-11CF-8D87-00AA0060F5BF}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace\{E211B736-43FD-11D1-9EFB-0000F8757FCD}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel\NameSpace

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ControlPanel

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Desktop\NameSpace\{1f4de370-d627-11d1-ba4f-00a0c91eedba}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Desktop\NameSpace\{450D8FBA-AD25-11D0-98A8-0800361B1103}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Desktop\NameSpace\{645FF040-5081-101B-9F08-00AA002F954E}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Desktop\NameSpace\{e17d4fc0-5564-11d1-83f2-00a0c90dc849}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Desktop\NameSpace

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Desktop

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
DocFolderPaths

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FileAssociation

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\ShellFindInDirectory

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
0\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
0\HelpText

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
0\SearchGUID\UrlNavNew

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
0\SearchGUID

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
0

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
1\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
1\HelpText

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
1\SearchGUID\UrlNavNew

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
1\SearchGUID

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
1

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
2\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
2\HelpText

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
2\SearchGUID

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch\
2

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\ShellSearch

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\WabFind\
0\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\WabFind\
0

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\WabFind

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\WebSearch\
0\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\WebSearch\
0\HelpText

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\WebSearch\
0

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static\WebSearch

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions\Static

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
FindExtensions

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
HideDesktopIcons\ClassicStartMenu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
HideDesktopIcons\NewStartPanel

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
HideDesktopIcons

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
HideMyComputerIcons

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
MyComputer\BackupPath

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
MyComputer\cleanuppath

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
MyComputer\DefragPath

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
MyComputer\NameSpace\Controls

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
MyComputer\NameSpace\DelegateFolders\
{59031a47-3f72-44a7-89c5-5595fe6b30ee}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
MyComputer\NameSpace\DelegateFolders

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
MyComputer\NameSpace

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
MyComputer

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkCrawler\Objects\WorkgroupCrawler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkCrawler\Objects

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkCrawler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkNeighborhood\NameSpace\DelegateFolders\
{9DB7A13C-F208-4981-8353-73CC61AE2783}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkNeighborhood\NameSpace\DelegateFolders

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkNeighborhood\NameSpace\{2728520d-1ec8-4c68-a551-316b684c4ea7}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkNeighborhood\NameSpace\{3c5c43a3-9ce9-4a9b-9699-2ac0cf6cc4bf}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkNeighborhood\NameSpace\{D4480A50-BA28-11d1-8E75-00C04FA31A86}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkNeighborhood\NameSpace

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NetworkNeighborhood

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
NewShortcutHandlers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
PublishingWizard\InternetPhotoPrinting

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
PublishingWizard

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
RecentDocs

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
RemoteComputer\NameSpace\{2227A280-3AEA-1069-A2DE-08002B30309D}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
RemoteComputer\NameSpace\{D6277990-4C6A-11CF-8D87-00AA0060F5BF}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
RemoteComputer\NameSpace

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
RemoteComputer

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
SharedTaskScheduler

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Shell Folders

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ShellExecuteHooks

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ShellIconOverlayIdentifiers\Offline Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
ShellIconOverlayIdentifiers

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\Policy\NoChangeStartMenu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\AdminTools

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeControlPanel\
Policy\NoControlPanel

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeControlPanel\
Policy\NoSetFolders

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeControlPanel\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeControlPanel

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeMyDocuments\
Policy\NoSMMyDocs

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeMyDocuments\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeMyDocuments

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeMyPictures\
Policy\NoSMMyPictures

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeMyPictures\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadeMyPictures

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadePrinters\
Policy\NoSetFolders

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadePrinters\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\CascadePrinters

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\IntelliMenus\
Policy\IntelliMenus

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\IntelliMenus\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\IntelliMenus

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\NetConnect\
Policy\NoNetworkConnections

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\NetConnect\
Policy\NoSetFolders

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\NetConnect\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\NetConnect

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\SmallIcons

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuChange\
Policy\NoChangeStartMenu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuChange\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuChange

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuFavorites\
Policy\NoFavoritesMenu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuFavorites\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuFavorites

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuLogoff\
Policy\ForceStartMenuLogoff

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuLogoff\
Policy\LogonType

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuLogoff\
Policy\StartMenuLogoff

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuLogoff\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuLogoff

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuRun\
Policy\NoRun

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuRun\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuRun

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu\StartMenuScrollPrograms

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartMenu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ControlPanel\
Hide

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ControlPanel\
Menu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ControlPanel\
Open

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ControlPanel\
Policy\NoControlPanel

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ControlPanel\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ControlPanel

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\EnableDragDrop\
Policy\NoChangeStartMenu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\EnableDragDrop\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\EnableDragDrop

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\Favorites\
Policy\NoFavoritesMenu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\Favorites\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\Favorites

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyComp\
Hide

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyComp\
Menu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyComp\
Open

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyComp\
Policy\{20D04FE0-3AEA-1069-A2D8-08002B30309D}

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyComp\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyComp

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyDocs\
Hide

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyDocs\
Menu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyDocs\
Open

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyDocs\
Policy\NoSMMyDocs

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyDocs\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyDocs

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyMusic\
Hide

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyMusic\
Menu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyMusic\
Open

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyMusic\
Policy\NoStartMenuMyMusic

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyMusic\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyMusic

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyPics\
Hide

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyPics\
Menu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyPics\
Open

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyPics\
Policy\NoSMMyPictures

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyPics\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\MyPics

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\NetConn\
Hide

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\NetConn\
Menu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\NetConn\
Open

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\NetConn\
Policy\NoNetworkConnections

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\NetConn\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\NetConn

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowAdminTools\
Both

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowAdminTools\
Hide

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowAdminTools\
Menu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowAdminTools

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowHelp\
Policy\NoSMHelp

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowHelp\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowHelp

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowNetPlaces\
Policy\NoStartMenuNetworkPlaces

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowNetPlaces\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowNetPlaces

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowOEMLink\
Policy\NoOEMLinkInstalled

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowOEMLink\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowOEMLink

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowPrinters\
Policy\NoSetFolders

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowPrinters\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowPrinters

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowRun\
Policy\NoRun

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowRun\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowRun

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowSearch\
Policy\NoFind

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowSearch\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowSearch

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowSetProgramAccessAndDefaults\
Policy\NoSMConfigurePrograms

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowSetProgramAccessAndDefaults\
Policy

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\ShowSetProgramAccessAndDefaults

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel\StartMenuScrollPrograms

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu\StartPanel

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
StartMenu

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Streams\Desktop

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Streams

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
TemplateRegistry

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
Tips

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
User Shell Folders

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\AnimateMinMax

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\ComboBoxAnimation

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\CursorShadow

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\DragFullWindows

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\DropShadow

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\FontSmoothing

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\ListBoxSmoothScrolling

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\ListviewAlphaSelect

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\ListviewShadow

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\ListviewWatermark

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\MenuAnimation

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\SelectionFade

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\TaskbarAnimations

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\Themes

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\TooltipAnimation

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects\WebView

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VisualEffects

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Active Setup Temp Folders

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Compress old files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Content Indexer Cleaner

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Downloaded Program Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Internet Cache Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Memory Dump Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Offline Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Offline Pages Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Old ChkDsk Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Recycle Bin

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Remote Desktop Cache Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Setup Log Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\System Restore

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Temporary Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Temporary Offline Files

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\Uninstall Backup Image

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches\WebClient and WebPublisher Cache

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
VolumeCaches

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
WebView\TemplateMacros\BACKGROUNDIMAGE

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
WebView\TemplateMacros\LOGOLINE

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
WebView\TemplateMacros

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
WebView

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
WindowsUpdate

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
WMPInfo\FileExts

HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\
WMPInfo

Dropping Routine

This Trojan drops the following files:

%System%\9fd8db.drv

Other Details

This Trojan deletes itself after execution.

This report is generated via an automated analysis system.

SOLUTION

Minimum Scan Engine:

9.200

Step 1

For Windows XP and Windows Server 2003 users, before doing any scans, please make sure you disable System Restore to allow full scanning of your computer.

Step 2

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

In HKEY_CLASSES_ROOT\CLsID\{B3721C07-62B3-411A-9DC7-F5F27E3E21FF}
- InprocServer32

In HKEY_LOCAL_MACHINE\SOFTWARE
- {9184057B-D51B-4C2A-B779-EB4F548E9FDA}

Step 3

Delete this registry value

[ Learn More ]

In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B3721C07-62B3-411A-9DC7-F5F27E3E21FF}\InprocServer32
- ThreadingModel = "Apartment"

Step 4

Search and delete this file

[ Learn More ]

There may be some component files that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the More advanced options option to include all hidden files and folders in the search result.

%System%\9fd8db.drv

Step 5

Scan your computer with your Trend Micro product to delete files detected as RTKT_AGENT.MAQ. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.

Step 6

Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.

%System%\B3721C07.cfg
%System%\B3721C07.dll
%User Temp%\liv1.tmp

Step 7

Restore these deleted registry keys/values from backup

*Note: Only Microsoft-related keys/values will be restored. If the malware/grayware also deleted registry keys/values related to programs that are not from Microsoft, please reinstall those programs on your computer.

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- ClassicViewState

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- ControlPanelInMyComputer

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder\DesktopProcess\Policy
- SeparateProcess

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder\DesktopProcess
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- DesktopProcess

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- DisableThumbCache

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- FolderSizeTip

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- FriendlyTree

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder\Hidden
- NOHIDDEN

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder\Hidden
- SHOWALL

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- Hidden

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- HideFileExt

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder\NetCrawler\Policy
- NoNetCrawling

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder\NetCrawler
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- NetCrawler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- PersistBrowsers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- ShowCompColor

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- ShowFullPath

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- ShowFullPathAddress

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- ShowInfoTip

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- SimpleSharing

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder\SuperHidden\Policy
- DontShowSuperHidden

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder\SuperHidden
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- SuperHidden

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced\Folder
- WebViewBarricade

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Advanced
- Folder

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- Advanced

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AppKey
- 15

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AppKey
- 16

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AppKey
- 17

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AppKey
- 18

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AppKey
- 7

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- AppKey

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- Associations

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\CancelAutoplay
- CLSID

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\CancelAutoplay
- Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers
- CancelAutoplay

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\MusicFilesContentHandler\EventHandlers
- MediaArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\MusicFilesContentHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\MusicFilesContentHandler
- FriendlyName

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers
- MusicFilesContentHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\PicturesContentHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\PicturesContentHandler\EventHandlers
- MediaArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\PicturesContentHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\PicturesContentHandler
- FriendlyName

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers
- PicturesContentHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\VideoFilesContentHandler\EventHandlers
- MediaArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\VideoFilesContentHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers\VideoFilesContentHandler
- FriendlyName

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeHandlers
- VideoFilesContentHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers
- ContentTypeHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeSniffers
- MusicFilesContentSniffer

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeSniffers
- PicturesContentSniffer

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\ContentTypeSniffers
- VideoFilesContentSniffer

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers
- ContentTypeSniffers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceClasses
- {53f5630d-b6bf-11d0-94f2-00a0c91efb8b}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceClasses
- {CC7BFB41-F175-11D1-A392-00E0291F3959}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers
- DeviceClasses

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- Camera

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- CellPhone

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- CFStorage

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- ClikDrive

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- FaxDevice

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- ImageMate

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- JazDrive

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- MemoryStick

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- MemoryStick-MG

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- OpticalDrive

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- PCMCIAStorage

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- PocketPC

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- PortableAudioPlayer

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- Printer

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- Scanner

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- SMStorage

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- TapeDrive

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- VideoCamera

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- ZipDrive100

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceGroups
- ZipDrive250

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers
- DeviceGroups

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CompaqPA1Handler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CompaqPA1Handler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- CompaqPA1Handler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CreativeNomadIIcHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CreativeNomadIIcHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- CreativeNomadIIcHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CreativeNomadIIHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CreativeNomadIIHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- CreativeNomadIIHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CreativeNomadIIMGHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CreativeNomadIIMGHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- CreativeNomadIIMGHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CreativeNomadJukeboxHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\CreativeNomadJukeboxHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- CreativeNomadJukeboxHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\DigisetteDuo64Handler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\DigisetteDuo64Handler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- DigisetteDuo64Handler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\DLinkDMP110Handler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\DLinkDMP110Handler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- DLinkDMP110Handler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\GenericVolumeHandler
- ContentTypes

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\GenericVolumeHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\GenericVolumeHandler\EventHandlers
- MediaArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\GenericVolumeHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- GenericVolumeHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\Intel3000Handler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\Intel3000Handler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- Intel3000Handler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\IntelPocketConcertHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\IntelPocketConcertHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- IntelPocketConcertHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\IomegaHipZipHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\IomegaHipZipHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- IomegaHipZipHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\NikepsaplayHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\NikepsaplayHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- NikepsaplayHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\Ravemp2300Handler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\Ravemp2300Handler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- Ravemp2300Handler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\Rio600Handler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\Rio600Handler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- Rio600Handler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\Rio800Handler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\Rio800Handler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- Rio800Handler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\RioOneHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\RioOneHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- RioOneHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\VideoCameraDeviceHandler\EventHandlers
- DeviceArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers\VideoCameraDeviceHandler
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\DeviceHandlers
- VideoCameraDeviceHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers
- DeviceHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- AutorunINFLegacyArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- CompaqPA1Arrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- CreativeNomadIIArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- CreativeNomadIIcArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- CreativeNomadIIMGArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- CreativeNomadJukeboxArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- DigisetteDuo64Arrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- DLinkDMP110Arrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- GenericVolumeArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- HandleCDBurningOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- Intel3000Arrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- IntelPocketConcertArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- IomegaHipZipArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- MixedContentOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- NikepsaplayArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- PlayCDAudioOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- PlayDVDMovieOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- PlayMusicFilesOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- PlayVideoFilesOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- Ravemp2300Arrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- Rio600Arrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- Rio800Arrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- RioOneArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- ShowPicturesOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\EventHandlers
- VideoCameraArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers
- EventHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSCDBurningOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSOpenFolder

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSPlayCDAudioOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSPlayDVDMovieOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSPlayMediaOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSPrintPicturesOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSPromptEachTime

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSPromptEachTimeNoContent

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSRipCDAudioOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSShowPicturesOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSTakeNoAction

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSVideoCameraArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSWiaEventHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSWMDMHandler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers\Handlers
- MSWMPBurnCDOnArrival

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\AutoplayHandlers
- Handlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- AutoplayHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\BitBucket
- c

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- BitBucket

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- BrowseNewProcess

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\CD Burning\AudioBurnHandlers
- {8dd448e6-c188-4aed-af92-44956194eb1f}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\CD Burning
- AudioBurnHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\CD Burning
- ExcludedFS

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- CD Burning

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel
- Flags

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- Accessibility_Options

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- Add-Remove_Programs

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- Date-Time

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- Dialing_Options

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- Display_Properties

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- Internet_Options

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- Printers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- {0DF44EAA-FF21-4412-828E-260A8728E7F1}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- {6DFD7C5C-2451-11d3-A299-00C04F8EF6AF}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- {7007ACC7-3202-11D1-AAD2-00805FC1270E}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- {D20EA4E1-3957-11d2-A40B-0C5020524152}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- {D20EA4E1-3957-11d2-A40B-0C5020524153}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- {D6277990-4C6A-11CF-8D87-00AA0060F5BF}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel\NameSpace
- {E211B736-43FD-11D1-9EFB-0000F8757FCD}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ControlPanel
- NameSpace

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- ControlPanel

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Desktop\NameSpace
- {1f4de370-d627-11d1-ba4f-00a0c91eedba}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Desktop\NameSpace
- {450D8FBA-AD25-11D0-98A8-0800361B1103}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Desktop\NameSpace
- {645FF040-5081-101B-9F08-00AA002F954E}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Desktop\NameSpace
- {e17d4fc0-5564-11d1-83f2-00a0c90dc849}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Desktop
- NameSpace

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- Desktop

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- DocFolderPaths

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- FileAssociation

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions
- ShellFindInDirectory

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\0
- DefaultIcon

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\0
- HelpText

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\0\SearchGUID
- UrlNavNew

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\0
- SearchGUID

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch
- 0

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\1
- DefaultIcon

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\1
- HelpText

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\1\SearchGUID
- UrlNavNew

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\1
- SearchGUID

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch
- 1

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\2
- DefaultIcon

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\2
- HelpText

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch\2
- SearchGUID

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\ShellSearch
- 2

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static
- ShellSearch

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\WabFind\0
- DefaultIcon

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\WabFind
- 0

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static
- WabFind

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\WebSearch\0
- DefaultIcon

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\WebSearch\0
- HelpText

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static\WebSearch
- 0

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions\Static
- WebSearch

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\FindExtensions
- Static

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- FindExtensions

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\HideDesktopIcons
- ClassicStartMenu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\HideDesktopIcons
- NewStartPanel

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- HideDesktopIcons

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- HideMyComputerIcons

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\MyComputer
- BackupPath

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\MyComputer
- cleanuppath

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\MyComputer
- DefragPath

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\MyComputer\NameSpace
- Controls

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\MyComputer\NameSpace\DelegateFolders
- {59031a47-3f72-44a7-89c5-5595fe6b30ee}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\MyComputer\NameSpace
- DelegateFolders

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\MyComputer
- NameSpace

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- MyComputer

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\NetworkCrawler\Objects
- WorkgroupCrawler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\NetworkCrawler
- Objects

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- NetworkCrawler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\NetworkNeighborhood\NameSpace\DelegateFolders
- {9DB7A13C-F208-4981-8353-73CC61AE2783}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\NetworkNeighborhood\NameSpace
- DelegateFolders

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\NetworkNeighborhood\NameSpace
- {2728520d-1ec8-4c68-a551-316b684c4ea7}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\NetworkNeighborhood\NameSpace
- {3c5c43a3-9ce9-4a9b-9699-2ac0cf6cc4bf}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\NetworkNeighborhood\NameSpace
- {D4480A50-BA28-11d1-8E75-00C04FA31A86}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\NetworkNeighborhood
- NameSpace

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- NetworkNeighborhood

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- NewShortcutHandlers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\PublishingWizard
- InternetPhotoPrinting

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- PublishingWizard

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- RecentDocs

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\RemoteComputer\NameSpace
- {2227A280-3AEA-1069-A2DE-08002B30309D}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\RemoteComputer\NameSpace
- {D6277990-4C6A-11CF-8D87-00AA0060F5BF}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\RemoteComputer
- NameSpace

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- RemoteComputer

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- SharedTaskScheduler

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- Shell Folders

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- ShellExecuteHooks

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\ShellIconOverlayIdentifiers
- Offline Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- ShellIconOverlayIdentifiers

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\Policy
- NoChangeStartMenu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- AdminTools

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\CascadeControlPanel\Policy
- NoControlPanel

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\CascadeControlPanel\Policy
- NoSetFolders

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\CascadeControlPanel
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- CascadeControlPanel

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\CascadeMyDocuments\Policy
- NoSMMyDocs

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\CascadeMyDocuments
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- CascadeMyDocuments

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\CascadeMyPictures\Policy
- NoSMMyPictures

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\CascadeMyPictures
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- CascadeMyPictures

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\CascadePrinters\Policy
- NoSetFolders

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\CascadePrinters
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- CascadePrinters

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\Policy
- IntelliMenus

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\IntelliMenus
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- IntelliMenus

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\NetConnect\Policy
- NoNetworkConnections

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\NetConnect\Policy
- NoSetFolders

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\NetConnect
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- NetConnect

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- SmallIcons

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\StartMenuChange\Policy
- NoChangeStartMenu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\StartMenuChange
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- StartMenuChange

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\StartMenuFavorites\Policy
- NoFavoritesMenu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\StartMenuFavorites
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- StartMenuFavorites

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\StartMenuLogoff\Policy
- ForceStartMenuLogoff

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\StartMenuLogoff\Policy
- LogonType

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\Policy
- StartMenuLogoff

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\StartMenuLogoff
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- StartMenuLogoff

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\StartMenuRun\Policy
- NoRun

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu\StartMenuRun
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- StartMenuRun

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartMenu
- StartMenuScrollPrograms

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- StartMenu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ControlPanel
- Hide

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ControlPanel
- Menu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ControlPanel
- Open

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ControlPanel\Policy
- NoControlPanel

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ControlPanel
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- ControlPanel

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\EnableDragDrop\Policy
- NoChangeStartMenu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\EnableDragDrop
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- EnableDragDrop

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\Favorites\Policy
- NoFavoritesMenu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\Favorites
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- Favorites

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyComp
- Hide

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyComp
- Menu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyComp
- Open

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyComp\Policy
- {20D04FE0-3AEA-1069-A2D8-08002B30309D}

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyComp
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- MyComp

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyDocs
- Hide

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyDocs
- Menu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyDocs
- Open

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyDocs\Policy
- NoSMMyDocs

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyDocs
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- MyDocs

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyMusic
- Hide

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyMusic
- Menu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyMusic
- Open

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyMusic\Policy
- NoStartMenuMyMusic

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyMusic
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- MyMusic

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyPics
- Hide

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyPics
- Menu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyPics
- Open

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyPics\Policy
- NoSMMyPictures

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\MyPics
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- MyPics

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\NetConn
- Hide

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\NetConn
- Menu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\NetConn
- Open

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\NetConn\Policy
- NoNetworkConnections

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\NetConn
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- NetConn

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowAdminTools
- Both

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowAdminTools
- Hide

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowAdminTools
- Menu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- ShowAdminTools

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowHelp\Policy
- NoSMHelp

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowHelp
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- ShowHelp

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowNetPlaces\Policy
- NoStartMenuNetworkPlaces

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowNetPlaces
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- ShowNetPlaces

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowOEMLink\Policy
- NoOEMLinkInstalled

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowOEMLink
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- ShowOEMLink

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowPrinters\Policy
- NoSetFolders

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowPrinters
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- ShowPrinters

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowRun\Policy
- NoRun

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowRun
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- ShowRun

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowSearch\Policy
- NoFind

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowSearch
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- ShowSearch

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowSetProgramAccessAndDefaults\Policy
- NoSMConfigurePrograms

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel\ShowSetProgramAccessAndDefaults
- Policy

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- ShowSetProgramAccessAndDefaults

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu\StartPanel
- StartMenuScrollPrograms

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\StartMenu
- StartPanel

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- StartMenu

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\Streams
- Desktop

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- Streams

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- TemplateRegistry

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- Tips

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- User Shell Folders

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- AnimateMinMax

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- ComboBoxAnimation

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- CursorShadow

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- DragFullWindows

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- DropShadow

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- FontSmoothing

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- ListBoxSmoothScrolling

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- ListviewAlphaSelect

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- ListviewShadow

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- ListviewWatermark

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- MenuAnimation

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- SelectionFade

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- TaskbarAnimations

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- Themes

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- TooltipAnimation

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VisualEffects
- WebView

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- VisualEffects

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Active Setup Temp Folders

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Compress old files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Content Indexer Cleaner

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Downloaded Program Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Internet Cache Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Memory Dump Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Offline Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Offline Pages Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Old ChkDsk Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Recycle Bin

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Remote Desktop Cache Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Setup Log Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- System Restore

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Temporary Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Temporary Offline Files

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- Uninstall Backup Image

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\VolumeCaches
- WebClient and WebPublisher Cache

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- VolumeCaches

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\WebView\TemplateMacros
- BACKGROUNDIMAGE

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\WebView\TemplateMacros
- LOGOLINE

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\WebView
- TemplateMacros

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- WebView

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- WindowsUpdate

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}\WMPInfo
- FileExts

In HKEY_LOCAL_MACHINE\SOFTWARE\{9184057B-D51B-4C2A-B779-EB4F548E9FDA}
- WMPInfo

Did this description help? Tell us how we did.

RTKT_AGENT.MAQ

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

RTKT_AGENT.MAQ

OVERVIEW

TECHNICAL DETAILS

SOLUTION

Resources

Support

About Trend

Country Headquarters

The Americas

Middle East & Africa

Europe

Asia & Pacific