anubis left
Anubis - Analysis Report
anubis right

Analysis Report for ahpub.exe

 Comment on this report

Summary:

Description Risk
Changes security settings of Internet Explorer: This system alteration could seriously affect safety surfing the World Wide Web. medium
Performs File Modification and Destruction: The executable modifies and destructs files which are not temporary. high
Spawns Processes: The executable produces processes during the execution. low
Performs Registry Activities: The executable reads and modifies registry values. It may also create and monitor registry keys. low


Table of Contents
expand all expand all   collapse all collapse all

1. General Information

  - Information about Anubis' invocation  
Time needed: 240 s 
Report created: 01/11/09, 12:09:10 UTC 
Termination reason: Timeout 
Program version: 1.67.0 


  - Popups  
Process Window Name Window Text Screenshot Number of Displayed Times
0  Windows Internet Explorer  0  screenshot 1 

2. sample.exe

  - General information about this executable  
Analysis Reason: Primary Analysis Subject 
Filename: sample.exe 
MD5: c492c46d621bbe72bb957a60f0b09e0c 
SHA-1: f846228c8cab72b9b27061c3ae60b8b836e40d86 
File Size: 57856 Bytes
Command Line: "C:\sample.exe" 
Process-status at analysis end: alive 
Exit Code: 0 

  - Load-time Dlls  
Module Name Base Address Size
C:\​WINDOWS\​system32\​ntdll.dll  0x7C900000  0x000AF000 
C:\​WINDOWS\​system32\​kernel32.dll  0x7C800000  0x000F6000 
C:\​WINDOWS\​system32\​USER32.DLL  0x7E410000  0x00091000 
C:\​WINDOWS\​system32\​GDI32.dll  0x77F10000  0x00049000 
C:\​WINDOWS\​system32\​IMM32.DLL  0x76390000  0x0001D000 
C:\​WINDOWS\​system32\​ADVAPI32.dll  0x77DD0000  0x0009B000 
C:\​WINDOWS\​system32\​RPCRT4.dll  0x77E70000  0x00092000 
C:\​WINDOWS\​system32\​Secur32.dll  0x77FE0000  0x00011000 

  - Run-time Dlls  
Module Name Base Address Size
C:\​WINDOWS\​system32\​Normaliz.dll  0x00920000  0x00009000 
C:\​WINDOWS\​system32\​iertutil.dll  0x42990000  0x00045000 
C:\​WINDOWS\​system32\​WININET.dll  0x42C10000  0x000CF000 
C:\​WINDOWS\​system32\​urlmon.dll  0x42CF0000  0x00127000 
C:\​WINDOWS\​system32\​ieframe.dll  0x42EF0000  0x005CD000 
C:\​WINDOWS\​system32\​UxTheme.dll  0x5AD70000  0x00038000 
C:\​WINDOWS\​system32\​netapi32.dll  0x5B860000  0x00055000 
C:\​WINDOWS\​system32\​comctl32.dll  0x5D090000  0x0009A000 
C:\​WINDOWS\​system32\​MSCTF.dll  0x74720000  0x0004C000 
C:\​WINDOWS\​system32\​msctfime.ime  0x755C0000  0x0002E000 
C:\​WINDOWS\​system32\​PSAPI.DLL  0x76BF0000  0x0000B000 
C:\​WINDOWS\​system32\​CLBCATQ.DLL  0x76FD0000  0x0007F000 
C:\​WINDOWS\​system32\​COMRes.dll  0x77050000  0x000C5000 
C:\​WINDOWS\​system32\​OLEAUT32.dll  0x77120000  0x0008B000 
C:\​WINDOWS\​WinSxS\​x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\​comctl32.dll  0x773D0000  0x00103000 
C:\​WINDOWS\​system32\​ole32.dll  0x774E0000  0x0013D000 
C:\​WINDOWS\​system32\​appHelp.dll  0x77B40000  0x00022000 
C:\​WINDOWS\​system32\​version.dll  0x77C00000  0x00008000 
C:\​WINDOWS\​system32\​msvcrt.dll  0x77C10000  0x00058000 
C:\​WINDOWS\​system32\​SHLWAPI.dll  0x77F60000  0x00076000 
C:\​WINDOWS\​system32\​SHELL32.dll  0x7C9C0000  0x00817000 

  - SigBuster Output  
tElock v0.80 SN:1

  - Popups  
Window Name Window Text Screenshot Number of Displayed Times
Load Complete  OK Press "ok" then start Counter-Strike: Source   screenshot 1 

2.a) sample.exe - Registry Activities

  - Registry Values Read:  
Key Name Value Times
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{6F237DF9-9DDB-47AD-B218-400D54C286AD}\​INPROCSERVER32    C:\​WINDOWS\​system32\​urlmon.dll  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{6F237DF9-9DDB-47AD-B218-400D54C286AD}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{871C5380-42A0-1069-A2EA-08002B30309D}\​INPROCSERVER32    C:\​WINDOWS\​system32\​ieframe.dll  5 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{871C5380-42A0-1069-A2EA-08002B30309D}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{871C5380-42A0-1069-A2EA-08002B30309D}\​SHELLFOLDER  WantsParseDisplayName    3 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{A4741943-6C4B-4CF7-BF44-A0F4207D1330}\​INPROCSERVER32    C:\​WINDOWS\​system32\​urlmon.dll  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{A4741943-6C4B-4CF7-BF44-A0F4207D1330}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{AEB6717E-7E19-11D0-97EE-00C04FD91972}\​INPROCSERVER32    shell32.dll  1 
HKLM\​SOFTWARE\​CLASSES\​HTTP  URL Protocol    1 
HKLM\​SOFTWARE\​CLASSES\​HTTP\​SHELL    open  3 
HKLM\​SOFTWARE\​CLASSES\​HTTP\​SHELL\​OPEN\​COMMAND    "C:\​Program Files\​Internet Explorer\​IEXPLORE.EXE" -nohome  3 
HKLM\​SOFTWARE\​CLASSES\​HTTP\​SHELL\​OPEN\​DDEEXEC    "%1",,-1,0,,,,  1 
HKLM\​SOFTWARE\​CLASSES\​HTTP\​SHELL\​OPEN\​DDEEXEC  NoActivateHandler    1 
HKLM\​SOFTWARE\​CLASSES\​HTTP\​SHELL\​OPEN\​DDEEXEC\​APPLICATION    IExplore  1 
HKLM\​SOFTWARE\​CLASSES\​HTTP\​SHELL\​OPEN\​DDEEXEC\​TOPIC    WWW_OpenURL  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{000214E6-0000-0000-C000-000000000046}\​PROXYSTUBCLSID32    {bf50b68e-29b8-4386-ae9c-9734d5117cd5}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{79EAC9C4-BAF9-11CE-8C82-00AA004BA90B}\​PROXYSTUBCLSID32    {B8DA6310-E19B-11D0-933C-00A0C90DCAA9}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{93F2F68C-1D1B-11D3-A30E-00C04F79ABD1}\​PROXYSTUBCLSID32    {bf50b68e-29b8-4386-ae9c-9734d5117cd5}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{B722BCCB-4E68-101B-A2BC-00AA00404770}\​PROXYSTUBCLSID32    {B8DA6310-E19B-11D0-933C-00A0C90DCAA9}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{EAB22AC1-30C1-11CF-A7EB-0000C05BAE0B}\​TYPELIB    {EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}  1 
HKLM\​SOFTWARE\​Microsoft\​CTF\​SystemShared\​  CUAS  0  1 
HKLM\​SOFTWARE\​Microsoft\​Internet Explorer\​Setup  IExploreLastModifiedHigh  29887276  1 
HKLM\​SOFTWARE\​Microsoft\​Internet Explorer\​Setup  IExploreLastModifiedLow  2933474304  1 
HKLM\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​App Paths\​IEXPLORE.EXE    C:\​Program Files\​Internet Explorer\​IEXPLORE.EXE  1 
HKLM\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  EnablePunycode  1  1 
HKLM\​SYSTEM\​CurrentControlSet\​Control\​Session Manager  CriticalSectionTimeout  2592000  1 
HKLM\​SYSTEM\​Setup  SystemSetupInProgress  0  1 
HKLM\​SYSTEM\​WPA\​MediaCenter  Installed  0  2 
HKLM\​Software\​Classes\​CLSID\​{871c5380-42a0-1069-a2ea-08002b30309d}\​InProcServer32    C:\​WINDOWS\​system32\​ieframe.dll  4 
HKLM\​Software\​Classes\​CLSID\​{a4741943-6c4b-4cf7-bf44-a0f4207d1330}\​InProcServer32    C:\​WINDOWS\​system32\​urlmon.dll  1 
HKLM\​Software\​Microsoft\​COM3  Com+Enabled  1  2 
HKLM\​Software\​Microsoft\​COM3  REGDBVersion  0x0f00000000000000  6 
HKLM\​Software\​Microsoft\​CTF\​SystemShared  CUAS  0  1 
HKLM\​Software\​Microsoft\​Internet Explorer\​Main\​FeatureControl\​FEATURE_BEHAVIORS  *  1  1 
HKLM\​Software\​Microsoft\​Internet Explorer\​Main\​FeatureControl\​FEATURE_DISABLE_MK_PROTOCOL  *  1  1 
HKLM\​Software\​Microsoft\​Windows NT\​CurrentVersion\​IMM  Ime File  msctfime.ime  1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​App Paths\​IEXPLORE.EXE  PATH  C:\​Program Files\​Internet Explorer;  1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​ShellExecuteHooks  {AEB6717E-7E19-11d0-97EE-00C04FD91972}    1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​URL\​Prefixes  ftp  ftp://  2 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​URL\​Prefixes  gopher  gopher://  2 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​URL\​Prefixes  home  http://  2 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​URL\​Prefixes  mosaic  http://  2 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​URL\​Prefixes  www  http://  2 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers  AuthenticodeEnabled  0  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers  DefaultLevel  262144  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers  PolicyScope  0  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers  TransparentEnabled  1  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{349d35ab-37b5-462f-9b89-edd5fbde1328}  HashAlg  32771  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{349d35ab-37b5-462f-9b89-edd5fbde1328}  ItemData  0x5eab304f957a49896a006c1c31154015  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{349d35ab-37b5-462f-9b89-edd5fbde1328}  ItemSize  779  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{349d35ab-37b5-462f-9b89-edd5fbde1328}  SaferFlags  0  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}  HashAlg  32771  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}  ItemData  0x67b0d48b343a3fd3bce9dc646704f394  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}  ItemSize  517  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{7fb9cd2e-3076-4df9-a57b-b813f72dbb91}  SaferFlags  0  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}  HashAlg  32771  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}  ItemData  0x327802dcfef8c893dc8ab006dd847d1d  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}  ItemSize  918  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{81d1fe15-dd9d-4762-b16d-7c29ddecae3f}  SaferFlags  0  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{94e3e076-8f53-42a5-8411-085bcc18a68d}  HashAlg  32771  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{94e3e076-8f53-42a5-8411-085bcc18a68d}  ItemData  0xbd9a2adb42ebd8560e250e4df8162f67  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{94e3e076-8f53-42a5-8411-085bcc18a68d}  ItemSize  229  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{94e3e076-8f53-42a5-8411-085bcc18a68d}  SaferFlags  0  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}  HashAlg  32771  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}  ItemData  0x386b085f84ecf669d36b956a22c01e80  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}  ItemSize  370  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Hashes\​{dc971ee5-44eb-4fe4-ae2e-b91490411bfc}  SaferFlags  0  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Paths\​{dda3f824-d8cb-441b-834d-be2efd2c1a33}  ItemData  %HKEY_CURRENT_USER\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders\​Cache%OLK*  1 
HKLM\​Software\​Policies\​Microsoft\​Windows\​Safer\​CodeIdentifiers\​0\​Paths\​{dda3f824-d8cb-441b-834d-be2efd2c1a33}  SaferFlags  0  1 
HKLM\​System\​CurrentControlSet\​Control\​ComputerName\​ActiveComputerName  ComputerName  USER  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders  Cache  C:\​Documents and Settings\​user\​Local Settings\​Temporary Internet Files  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Shell Extensions\​Cached  {871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401  0x01000000310032003a893fef1312c801  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​ShellNoRoam\​MUICache  LangID  0x0904  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​ShellNoRoam\​MUICache\​  C:\Program Files\Internet Explorer\IEXPLORE.EXE  Internet Explorer  1 

  - Monitored Registry Keys:  
Key Name Watch subtree Notify Filter Count
HKLM\​Software\​Classes  1  Key Change,Value Change  3 
HKLM\​Software\​Classes\​CLSID  1  Key Change,Value Change  2 
HKLM\​Software\​Microsoft\​COM3  1  Key Change,Value Change  6 
HKU  1  Key Change,Value Change  3 

2.b) sample.exe - File Activities

  - Files Read:  
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\Registration\R00000000000f.clb
PIPE\lsarpc
PIPE\wkssvc

  - Files Modified:  
PIPE\lsarpcinfo
PIPE\wkssvcinfo
WMIDataDeviceinfo

  - File System Control Communication:  
File Control Code Times
PIPE\wkssvc  0x0011C017  1 
PIPE\lsarpc  0x0011C017  3 

  - Device Control Communication:  
File Control Code Times
WMIDataDevice  0x0022414C  4 
WMIDataDevice  0x00228144  5 
\Device\KsecDD  0x00390008  8 
WMIDataDevice  0x0022415C  2 
WMIDataDevice  0x00228168  2 

  - Memory Mapped Files:  
File Name
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
C:\WINDOWS\WindowsShell.Manifest
C:\WINDOWS\system32\CLBCATQ.DLL
C:\WINDOWS\system32\COMRes.dll
C:\WINDOWS\system32\MSCTF.dll
C:\WINDOWS\system32\Msimtf.dll
C:\WINDOWS\system32\PSAPI.DLL
C:\WINDOWS\system32\SHELL32.dll
C:\WINDOWS\system32\UxTheme.dll
C:\WINDOWS\system32\comctl32.dll
C:\WINDOWS\system32\en-US\ieframe.dll.mui
C:\WINDOWS\system32\ieframe.dll
C:\WINDOWS\system32\msctfime.ime
C:\WINDOWS\system32\rpcss.dll
C:\Windows\AppPatch\sysmain.sdb

2.c) sample.exe - Process Activities

  - Processes Created:  
Executable Command Line
C:\Program Files\Internet Explorer\IEXPLORE.EXE   
C:\Program Files\Internet Explorer\IEXPLORE.EXE  "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome 

  - Remote Threads Created:  
Affected Process
C:\Program Files\Internet Explorer\IEXPLORE.EXE

  - Thread Overview:  
Time Number of threads
After 19 seconds 1 

  - Foreign Memory Regions Read:  
Process: C:\Program Files\Internet Explorer\IEXPLORE.EXE

  - Foreign Memory Regions Written:  
Process: C:\Program Files\Internet Explorer\IEXPLORE.EXE

2.d) sample.exe - Other Activities

  - Mutexes Created:  
CTF.Asm.MutexDefaultS-​1-​5-​21-​1229272821-​1004336348-​527237240-​1003
CTF.Compart.MutexDefaultS-​1-​5-​21-​1229272821-​1004336348-​527237240-​1003
CTF.LBES.MutexDefaultS-​1-​5-​21-​1229272821-​1004336348-​527237240-​1003
CTF.Layouts.MutexDefaultS-​1-​5-​21-​1229272821-​1004336348-​527237240-​1003
CTF.TMD.MutexDefaultS-​1-​5-​21-​1229272821-​1004336348-​527237240-​1003
CTF.TimListCache.FMPDefaultS-​1-​5-​21-​1229272821-​1004336348-​527237240-​1003MUTEX.DefaultS-​1-​5-​21-​1229272821-​1004336348-​527237240-​1003
Hack
Local\ZonesCacheCounterMutex
Local\ZonesCounterMutex
Local\ZonesLockedCacheCounterMutex
MSCTF.Shared.MUTEX.AGC
MSCTF.Shared.MUTEX.IGG

  - Windows SEH exceptions:  
Description Times
Exception 0x80000004 (STATUS_SINGLE_STEP) at 0x43b066  1 
Exception 0x80000004 (STATUS_SINGLE_STEP) at 0x43b0a4  1 
Exception 0xc0000094 (STATUS_INTEGER_DIVIDE_BY_ZERO) at 0x43a0e9  1 
Exception 0x80000003 (STATUS_BREAKPOINT) at 0x43a4d0  1 
Exception 0xc0000005 (STATUS_ACCESS_VIOLATION) at 0x43a509  1 
Exception 0x80000004 (STATUS_SINGLE_STEP) at 0x43a560  1 
Exception 0xc0000005 (STATUS_ACCESS_VIOLATION) at 0x43a58c  1 
Exception 0x80000003 (STATUS_BREAKPOINT) at 0x43a5d5  1 
Exception 0x80000004 (STATUS_SINGLE_STEP) at 0x43a7e0  1 
Exception 0x80000004 (STATUS_SINGLE_STEP) at 0x43a81c  1 

3. IEXPLORE.EXE

  - General information about this executable  
Analysis Reason: Started by sample.exe 
Filename: IEXPLORE.EXE 
MD5: e854d02e4231f704d9be782a424e6d8b 
SHA-1: 2c245f66b8c984ec5d8d65175fe5832e2cfb62f8 
File Size: 625152 Bytes
Command Line: "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -nohome 
Process-status at analysis end: alive 
Exit Code: 0 

  - Load-time Dlls  
Module Name Base Address Size
C:\​WINDOWS\​system32\​ntdll.dll  0x7C900000  0x000AF000 
C:\​WINDOWS\​system32\​kernel32.dll  0x7C800000  0x000F6000 
C:\​WINDOWS\​system32\​ADVAPI32.dll  0x77DD0000  0x0009B000 
C:\​WINDOWS\​system32\​RPCRT4.dll  0x77E70000  0x00092000 
C:\​WINDOWS\​system32\​Secur32.dll  0x77FE0000  0x00011000 
C:\​WINDOWS\​system32\​GDI32.dll  0x77F10000  0x00049000 
C:\​WINDOWS\​system32\​USER32.dll  0x7E410000  0x00091000 
C:\​WINDOWS\​system32\​msvcrt.dll  0x77C10000  0x00058000 
C:\​WINDOWS\​system32\​SHLWAPI.dll  0x77F60000  0x00076000 
C:\​WINDOWS\​system32\​SHELL32.dll  0x7C9C0000  0x00817000 
C:\​WINDOWS\​system32\​ole32.dll  0x774E0000  0x0013D000 
C:\​WINDOWS\​system32\​urlmon.dll  0x42CF0000  0x00127000 
C:\​WINDOWS\​system32\​OLEAUT32.dll  0x77120000  0x0008B000 
C:\​WINDOWS\​system32\​iertutil.dll  0x42990000  0x00045000 
C:\​WINDOWS\​system32\​VERSION.dll  0x77C00000  0x00008000 
C:\​WINDOWS\​system32\​IMM32.DLL  0x76390000  0x0001D000 
C:\​WINDOWS\​WinSxS\​x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\​comctl32.dll  0x773D0000  0x00103000 
C:\​WINDOWS\​system32\​comctl32.dll  0x5D090000  0x0009A000 

  - Run-time Dlls  
Module Name Base Address Size
C:\​WINDOWS\​system32\​xpsp2res.dll  0x00BC0000  0x002C5000 
C:\​WINDOWS\​system32\​Normaliz.dll  0x01470000  0x00009000 
C:\​Program Files\​Microsoft Office\​OFFICE11\​msohev.dll  0x325C0000  0x00012000 
C:\​WINDOWS\​system32\​WININET.dll  0x42C10000  0x000CF000 
C:\​WINDOWS\​system32\​IEFRAME.dll  0x42EF0000  0x005CD000 
C:\​WINDOWS\​system32\​xmllite.dll  0x47060000  0x00021000 
C:\​WINDOWS\​WinSxS\​x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\​gdiplus.dll  0x4EC50000  0x001A6000 
C:\​WINDOWS\​system32\​UxTheme.dll  0x5AD70000  0x00038000 
C:\​WINDOWS\​system32\​IEUI.dll  0x5DFF0000  0x0002F000 
C:\​Program Files\​Internet Explorer\​ieproxy.dll  0x61930000  0x0004A000 
C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll  0x6D7C0000  0x00079000 
C:\​WINDOWS\​system32\​WS2HELP.dll  0x71AA0000  0x00008000 
C:\​WINDOWS\​system32\​ws2_32.dll  0x71AB0000  0x00017000 
C:\​WINDOWS\​system32\​msimtf.dll  0x746F0000  0x0002A000 
C:\​WINDOWS\​system32\​MSCTF.dll  0x74720000  0x0004C000 
C:\​WINDOWS\​system32\​msctfime.ime  0x755C0000  0x0002E000 
C:\​WINDOWS\​system32\​MLANG.dll  0x75CF0000  0x00091000 
C:\​WINDOWS\​system32\​MSIMG32.dll  0x76380000  0x00005000 
C:\​WINDOWS\​System32\​CSCDLL.dll  0x76600000  0x0001D000 
C:\​WINDOWS\​system32\​PSAPI.DLL  0x76BF0000  0x0000B000 
C:\​Program Files\​Internet Explorer\​custsat.dll  0x76CC0000  0x0000B000 
C:\​WINDOWS\​system32\​CLBCATQ.DLL  0x76FD0000  0x0007F000 
C:\​WINDOWS\​system32\​COMRes.dll  0x77050000  0x000C5000 
C:\​WINDOWS\​system32\​SETUPAPI.dll  0x77920000  0x000F3000 
C:\​WINDOWS\​System32\​cscui.dll  0x77A20000  0x00054000 
C:\​WINDOWS\​system32\​apphelp.dll  0x77B40000  0x00022000 
C:\​Program Files\​Java\​jre1.6.0_03\​bin\​MSVCR71.dll  0x7C340000  0x00056000 
C:\​WINDOWS\​system32\​SXS.DLL  0x7E720000  0x000B0000 

3.a) IEXPLORE.EXE - Registry Activities

  - Registry Keys Created:  
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000\​{63800dac-e7ca-4df9-9a5c-20765055488d}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000\​{63800dac-e7ca-4df9-9a5c-20765055488d}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}\​InprocServer32

  - Registry Keys Deleted:  
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000\​{63800dac-e7ca-4df9-9a5c-20765055488d}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000\​{63800dac-e7ca-4df9-9a5c-20765055488d}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}\​InprocServer32
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}

  - Registry Values Modified:  
Key Name New Value
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000\​{63800dac-e7ca-4df9-9a5c-20765055488d}  Enable  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Ext\​Stats\​{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\​iexplore  Count  25 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Ext\​Stats\​{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\​iexplore  Time  0xd8070500010013000b0035002800e401 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Ext\​Stats\​{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\​iexplore  Type  3 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}    Java Plug-in 1.3.0_03 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0003-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}    Java Plug-in 1.3.0_04 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0004-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}    Java Plug-in 1.3.0_05 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0000-0005-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}    Java Plug-in 1.3.1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0000-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}    Java Plug-in 1.3.1_01 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}    Java Plug-in 1.3.1_01 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0001-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}    Java Plug-in 1.3.1_02 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}    Java Plug-in 1.3.1_02 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0002-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}    Java Plug-in 1.3.1_03 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}    Java Plug-in 1.3.1_03 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0003-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}    Java Plug-in 1.3.1_04 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}    Java Plug-in 1.3.1_04 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0004-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}    Java Plug-in 1.3.1_05 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}    Java Plug-in 1.3.1_05 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0005-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}    Java Plug-in 1.3.1_06 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}    Java Plug-in 1.3.1_06 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0006-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}    Java Plug-in 1.3.1_07 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}    Java Plug-in 1.3.1_07 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0007-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}    Java Plug-in 1.3.1_08 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}    Java Plug-in 1.3.1_08 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0008-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}    Java Plug-in 1.3.1_09 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}    Java Plug-in 1.3.1_09 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0009-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}    Java Plug-in 1.3.1_10 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}    Java Plug-in 1.3.1_10 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0010-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}    Java Plug-in 1.3.1_11 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}    Java Plug-in 1.3.1_11 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0011-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}    Java Plug-in 1.3.1_12 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}    Java Plug-in 1.3.1_12 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}    Java Plug-in 1.3.1_13 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}    Java Plug-in 1.3.1_13 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0013-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}    Java Plug-in 1.3.1_14 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}    Java Plug-in 1.3.1_14 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0014-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}    Java Plug-in 1.3.1_15 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}    Java Plug-in 1.3.1_15 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0015-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}    Java Plug-in 1.3.1_16 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}    Java Plug-in 1.3.1_16 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0016-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}    Java Plug-in 1.3.1_17 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}    Java Plug-in 1.3.1_17 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0017-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}    Java Plug-in 1.3.1_18 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}    Java Plug-in 1.3.1_18 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0018-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}    Java Plug-in 1.3.1_19 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}    Java Plug-in 1.3.1_19 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0019-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}    Java Plug-in 1.3.1_20 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}    Java Plug-in 1.3.1_20 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0020-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}    Java Plug-in 1.3.1_21 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}    Java Plug-in 1.3.1_21 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0021-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}    Java Plug-in 1.3.1_22 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}    Java Plug-in 1.3.1_22 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0022-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}    Java Plug-in 1.3.1_23 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}    Java Plug-in 1.3.1_23 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0023-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}    Java Plug-in 1.3.1_24 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}    Java Plug-in 1.3.1_24 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0024-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}    Java Plug-in 1.3.1_25 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}    Java Plug-in 1.3.1_25 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0025-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}    Java Plug-in 1.3.1_26 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}    Java Plug-in 1.3.1_26 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0026-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}    Java Plug-in 1.3.1_27 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}    Java Plug-in 1.3.1_27 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0027-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}    Java Plug-in 1.3.1_28 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}    Java Plug-in 1.3.1_28 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0028-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}    Java Plug-in 1.3.1_29 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}    Java Plug-in 1.3.1_29 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0029-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}    Java Plug-in 1.3.1_30 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}    Java Plug-in 1.3.1_30 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0013-0001-0030-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}    Java Plug-in 1.4.0 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}    Java Plug-in 1.4.0 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0000-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}    Java Plug-in 1.4.0_01 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}    Java Plug-in 1.4.0_01 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0001-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}    Java Plug-in 1.4.0_02 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}    Java Plug-in 1.4.0_02 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0002-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}    Java Plug-in 1.4.0_03 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}    Java Plug-in 1.4.0_03 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0003-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}    Java Plug-in 1.4.0_04 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}    Java Plug-in 1.4.0_04 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0000-0004-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}    Java Plug-in 1.4.1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}    Java Plug-in 1.4.1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0000-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}    Java Plug-in 1.4.1_01 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}    Java Plug-in 1.4.1_01 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0001-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}    Java Plug-in 1.4.1_02 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}    Java Plug-in 1.4.1_02 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}    Java Plug-in 1.4.1_03 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}    Java Plug-in 1.4.1_03 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0003-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}    Java Plug-in 1.4.1_04 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}    Java Plug-in 1.4.1_04 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0004-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}    Java Plug-in 1.4.1_05 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}    Java Plug-in 1.4.1_05 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0005-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}    Java Plug-in 1.4.1_06 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}    Java Plug-in 1.4.1_06 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0006-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}    Java Plug-in 1.4.1_07 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}    Java Plug-in 1.4.1_07 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0001-0007-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}    Java Plug-in 1.4.2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}    Java Plug-in 1.4.2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0000-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}    Java Plug-in 1.4.2_01 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}    Java Plug-in 1.4.2_01 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0001-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}    Java Plug-in 1.4.2_02 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}    Java Plug-in 1.4.2_02 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0002-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}    Java Plug-in 1.4.2_03 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}    Java Plug-in 1.4.2_03 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0003-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}    Java Plug-in 1.4.2_04 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}    Java Plug-in 1.4.2_04 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0004-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}    Java Plug-in 1.4.2_05 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}    Java Plug-in 1.4.2_05 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{CAFEEFAC-0014-0002-0005-ABCDEFFEDCBB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}    Java Plug-in 1.3.0_02 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}\​InprocServer32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Classes\​CLSID\​{E19F9331-3110-11D4-991C-005004D3B3DB}\​InprocServer32  ThreadingModel  Apartment 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Main  info CompatibilityFlags  0 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Main  info FullScreen  no 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Main  info Window_Placement  0x2c0000000000000001000000ffffffffffffffffffffffffffffffff0000 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Toolbar  info Locked  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​MountPoints2\​{d14d83ce-7d74-11dc-97e2-806d6172696f}\​  BaseClass  Drive 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​MountPoints2\​{d14d83cf-7d74-11dc-97e2-806d6172696f}\​  BaseClass  Drive 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders  Cache  C:\​Documents and Settings\​user\​Local Settings\​Temporary Internet Files 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders  Cookies  C:\​Documents and Settings\​user\​Cookies 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders  Desktop  C:\​Documents and Settings\​user\​Desktop 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders  Favorites  C:\​Documents and Settings\​user\​Favorites 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Shell Folders  History  C:\​Documents and Settings\​user\​Local Settings\​History 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​ZoneMap\​  info AutoDetect  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​ZoneMap\​  info IntranetName  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​ZoneMap\​  info ProxyBypass  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​ZoneMap\​  info UNCAsIntranet  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003_CLASSES\​CLSID\​{CAFEEFAC-0013-0001-0012-ABCDEFFEDCBA}\​INPROCSERVER32  ThreadingModel  Apartment 

  - Registry Values Read:  
Key Name Value Times
HKLM\​SOFTWARE\​CLASSES\​.HTM    htmlfile  6 
HKLM\​SOFTWARE\​CLASSES\​.HTM  PerceivedType  text  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{00020420-0000-0000-C000-000000000046}\​INPROCSERVER32    oleaut32.dll  3 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{00020420-0000-0000-C000-000000000046}\​INPROCSERVER32  ThreadingModel  Both  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{00020424-0000-0000-C000-000000000046}\​INPROCSERVER32    oleaut32.dll  2 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{00020424-0000-0000-C000-000000000046}\​INPROCSERVER32  ThreadingModel  Both  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{0002DF01-0000-0000-C000-000000000046}\​LOCALSERVER32    "C:\​Program Files\​Internet Explorer\​IEXPLORE.EXE"  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{1C1EDB47-CE22-4BBB-B608-77B48F83C823}\​INPROCSERVER32    C:\​WINDOWS\​system32\​ieframe.dll  2 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{1C1EDB47-CE22-4BBB-B608-77B48F83C823}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{20D04FE0-3AEA-1069-A2D8-08002B30309D}\​INPROCSERVER32    %SystemRoot%\​system32\​SHELL32.dll  2 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\​INPROCSERVER32    C:\​WINDOWS\​system32\​msctf.dll  2 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{3CE74DE4-53D3-4D74-8B83-431B3828BA53}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{42042206-2D85-11D3-8CFF-005004838597}\​INPROCSERVER32    C:\​Program Files\​Microsoft Office\​OFFICE11\​msohev.dll  5 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{42042206-2D85-11D3-8CFF-005004838597}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{42042206-2D85-11D3-8CFF-005004838597}\​OLD ICON\​HTMLFILE\​DEFAULTICON    C:\​Program Files\​Internet Explorer\​IEXPLORE.EXE,-17  2 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{50D5107A-D278-4871-8989-F4CEAAF59CFC}\​INPROCSERVER32    C:\​WINDOWS\​system32\​msimtf.dll  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{50D5107A-D278-4871-8989-F4CEAAF59CFC}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{750FDF0E-2A26-11D1-A3EA-080036587F03}\​INPROCSERVER32    %SystemRoot%\​System32\​cscui.dll  3 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{750FDF0E-2A26-11D1-A3EA-080036587F03}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\​INPROCSERVER32    C:\​Program Files\​Java\​jre1.6.0_03\​bin\​ssv.dll  3 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{871C5380-42A0-1069-A2EA-08002B30309D}\​INPROCSERVER32    C:\​WINDOWS\​system32\​ieframe.dll  8 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{871C5380-42A0-1069-A2EA-08002B30309D}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{871C5380-42A0-1069-A2EA-08002B30309D}\​SHELLFOLDER  WantsParseDisplayName    1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{9BA05972-F6A8-11CF-A442-00A0C90A8F39}  AppID  {9BA05972-F6A8-11CF-A442-00A0C90A8F39}  4 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{9BA05972-F6A8-11CF-A442-00A0C90A8F39}\​INPROCSERVER32    C:\​WINDOWS\​system32\​ieframe.dll  4 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{9BA05972-F6A8-11CF-A442-00A0C90A8F39}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{A4B544A1-438D-4B41-9325-869523E2D6C7}\​INPROCSERVER32    C:\​WINDOWS\​system32\​msctf.dll  2 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{A4B544A1-438D-4B41-9325-869523E2D6C7}\​INPROCSERVER32  ThreadingModel  Apartment  1 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\​INPROCSERVER32    C:\​Program Files\​Internet Explorer\​ieproxy.dll  3 
HKLM\​SOFTWARE\​CLASSES\​CLSID\​{C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}\​INPROCSERVER32  ThreadingModel  Both  1 
HKLM\​SOFTWARE\​CLASSES\​DRIVE\​SHELLEX\​FOLDEREXTENSIONS\​{FBEB8A05-BEEE-4442-804E-409D6C4515E9}  DriveMask  32  2 
HKLM\​SOFTWARE\​CLASSES\​HTMLFILE\​CLSID    {25336920-03F9-11cf-8FD0-00AA00686F13}  1 
HKLM\​SOFTWARE\​CLASSES\​HTMLFILE\​SHELLEX\​ICONHANDLER    {42042206-2D85-11D3-8CFF-005004838597}  3 
HKLM\​SOFTWARE\​CLASSES\​HTTP  URL Protocol    1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{00020400-0000-0000-C000-000000000046}\​PROXYSTUBCLSID32    {00020420-0000-0000-C000-000000000046}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{000214E6-0000-0000-C000-000000000046}\​PROXYSTUBCLSID32    {bf50b68e-29b8-4386-ae9c-9734d5117cd5}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{79EAC9C4-BAF9-11CE-8C82-00AA004BA90B}\​PROXYSTUBCLSID32    {B8DA6310-E19B-11D0-933C-00A0C90DCAA9}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{85CB6900-4D95-11CF-960C-0080C7F4EE85}\​PROXYSTUBCLSID32    {00020424-0000-0000-C000-000000000046}  3 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{85CB6900-4D95-11CF-960C-0080C7F4EE85}\​TYPELIB    {EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}  2 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{85CB6900-4D95-11CF-960C-0080C7F4EE85}\​TYPELIB  Version  1.1  2 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{93F2F68C-1D1B-11D3-A30E-00C04F79ABD1}\​PROXYSTUBCLSID32    {bf50b68e-29b8-4386-ae9c-9734d5117cd5}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{9BAB3405-EE3F-4040-8836-25AA9C2D408E}\​PROXYSTUBCLSID32    {C90250F3-4D7D-4991-9B69-A5C5BC1C2AE6}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{B722BCCB-4E68-101B-A2BC-00AA00404770}\​PROXYSTUBCLSID32    {B8DA6310-E19B-11D0-933C-00A0C90DCAA9}  1 
HKLM\​SOFTWARE\​CLASSES\​INTERFACE\​{EAB22AC1-30C1-11CF-A7EB-0000C05BAE0B}\​TYPELIB    {EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}  1 
HKLM\​SOFTWARE\​CLASSES\​TYPELIB\​{00020430-0000-0000-C000-000000000046}\​2.0\​0\​WIN32    C:\​WINDOWS\​system32\​stdole2.tlb  1 
HKLM\​SOFTWARE\​CLASSES\​TYPELIB\​{EAB22AC0-30C1-11CF-A7EB-0000C05BAE0B}\​1.1\​0\​WIN32    C:\​WINDOWS\​system32\​ieframe.dll  2 
HKLM\​SOFTWARE\​Microsoft\​CTF\​SystemShared  CUAS  0  1 
HKLM\​SOFTWARE\​Microsoft\​CTF\​SystemShared\​  CUAS  0  1 
HKLM\​SOFTWARE\​Microsoft\​CTF\​TIP\​\​{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\​Category\​Item\​{5130A009-5540-4FCF-97EB-AAD33FC0EE09}  Description  Proofing  2 
HKLM\​SOFTWARE\​Microsoft\​CTF\​TIP\​\​{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\​Category\​Item\​{7AE86BB7-262C-431E-9111-C974B6B7CAC3}  Description  Smart Tag  2 
HKLM\​SOFTWARE\​Microsoft\​CTF\​TIP\​\​{78CB5B0E-26ED-4FCC-854C-77E8F3D1AA80}\​Category\​Item\​{C6DEBC0A-F2B2-4F17-930E-CA9FAFF4CD04}  Description  Reference  2 
HKLM\​SOFTWARE\​Microsoft\​CTF\​TIP\​\​{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\​LanguageProfile\​\​0x0000ffff\​{09EA4E4B-46CE-4469-B450-0DE76A435BBB}  Display Description  @C:\​WINDOWS\​ime\​sptip.dll,-600  1 
HKLM\​SOFTWARE\​Microsoft\​Internet Explorer\​Setup  IExploreLastModifiedHigh  29887276  1 
HKLM\​SOFTWARE\​Microsoft\​Internet Explorer\​Setup  IExploreLastModifiedLow  2933474304  1 
HKLM\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​App Paths\​IEXPLORE.EXE    C:\​Program Files\​Internet Explorer\​IEXPLORE.EXE  1 
HKLM\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  EnablePunycode  1  1 
HKLM\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  UrlEncoding  0x00000000  2 
HKLM\​SYSTEM\​Setup  OsLoaderPath  \​  2 
HKLM\​SYSTEM\​Setup  SystemPartition  \​Device\​HarddiskVolume1  2 
HKLM\​SYSTEM\​WPA\​MediaCenter  Installed  0  1 
HKLM\​Software\​Classes\​CLSID\​{42042206-2d85-11d3-8cff-005004838597}\​InProcServer32    C:\​Program Files\​Microsoft Office\​OFFICE11\​msohev.dll  2 
HKLM\​Software\​Classes\​CLSID\​{50d5107a-d278-4871-8989-f4ceaaf59cfc}\​InProcServer32    C:\​WINDOWS\​system32\​msimtf.dll  1 
HKLM\​Software\​Classes\​CLSID\​{750fdf0e-2a26-11d1-a3ea-080036587f03}\​InProcServer32    %SystemRoot%\​System32\​cscui.dll  1 
HKLM\​Software\​Classes\​CLSID\​{871c5380-42a0-1069-a2ea-08002b30309d}\​InProcServer32    C:\​WINDOWS\​system32\​ieframe.dll  4 
HKLM\​Software\​Classes\​CLSID\​{9ba05972-f6a8-11cf-a442-00a0c90a8f39}\​InProcServer32    C:\​WINDOWS\​system32\​ieframe.dll  1 
HKLM\​Software\​Microsoft\​COM3  Com+Enabled  1  2 
HKLM\​Software\​Microsoft\​COM3  REGDBVersion  0x0f00000000000000  72 
HKLM\​Software\​Microsoft\​CTF\​SystemShared  CUAS  0  6 
HKLM\​Software\​Microsoft\​Internet Explorer\​AutoComplete\​Client\​    {807C1E6C-1D00-453f-B920-B61BB7CDD997}  2 
HKLM\​Software\​Microsoft\​Internet Explorer\​Main\​FeatureControl\​FEATURE_INTERNET_SHELL_FOLDERS  IEXPLORE.EXE  0  1 
HKLM\​Software\​Microsoft\​Windows NT\​CurrentVersion\​IMM  Ime File  msctfime.ime  1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion  DevicePath  %SystemRoot%\​inf  1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​ShellIconOverlayIdentifiers\​Offline Files    {750fdf0e-2a26-11d1-a3ea-080036587f03}  1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Content  PerUserItem  1  1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Cookies  PerUserItem  1  1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​History  PerUserItem  1  1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Url History  DaysToKeep  20  1 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Setup  DriverCachePath  %SystemRoot%\​Driver Cache  2 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Setup  LogLevel  0  2 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Setup  ServicePackCachePath  c:\​windows\​ServicePackFiles\​ServicePackCache  2 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Setup  ServicePackSourcePath  c:\​windows\​ServicePackFiles  2 
HKLM\​Software\​Microsoft\​Windows\​CurrentVersion\​Setup  SourcePath  D:\​  2 
HKLM\​System\​CurrentControlSet\​Control\​ComputerName\​ActiveComputerName  ComputerName  USER  3 
HKLM\​System\​CurrentControlSet\​Services\​Tcpip\​Parameters  Domain    1 
HKLM\​System\​CurrentControlSet\​Services\​Tcpip\​Parameters  Hostname  user  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters  WinSock_Registry_Version  2.0  2 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5  Num_Catalog_Entries  3  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5  Serial_Access_Num  4  2 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000001  DisplayString  Tcpip  4 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000001  Enabled  1  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000001  LibraryPath  %SystemRoot%\​System32\​mswsock.dll  2 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000001  ProviderId  0x409d05229e7ecf11ae5a00aa00a7112b  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000001  StoresServiceClassInfo  0  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000001  SupportedNameSpace  12  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000001  Version  0  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000002  DisplayString  NTDS  4 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000002  Enabled  1  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000002  LibraryPath  %SystemRoot%\​System32\​winrnr.dll  2 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000002  ProviderId  0xee37263b80e5cf11a55500c04fd8d4ac  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000002  StoresServiceClassInfo  0  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000002  SupportedNameSpace  32  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000002  Version  0  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000003  DisplayString  Network Location Awareness (NLA) Namespace  4 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000003  Enabled  1  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000003  LibraryPath  %SystemRoot%\​System32\​mswsock.dll  2 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000003  ProviderId  0x3a244266a83ba64abaa52e0bd71fdd83  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000003  StoresServiceClassInfo  0  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000003  SupportedNameSpace  15  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5\​Catalog_Entries\​000000000003  Version  0  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9  Next_Catalog_Entry_ID  1012  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9  Num_Catalog_Entries  11  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9  Serial_Access_Num  4  2 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000001  PackedCatalogItem  %SystemRoot%\​system32\​mswsock.  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000002  PackedCatalogItem  %SystemRoot%\​system32\​mswsock.  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000003  PackedCatalogItem  %SystemRoot%\​system32\​mswsock.  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000004  PackedCatalogItem  %SystemRoot%\​system32\​rsvpsp.d  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000005  PackedCatalogItem  %SystemRoot%\​system32\​rsvpsp.d  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000006  PackedCatalogItem  %SystemRoot%\​system32\​mswsock.  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000007  PackedCatalogItem  %SystemRoot%\​system32\​mswsock.  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000008  PackedCatalogItem  %SystemRoot%\​system32\​mswsock.  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000009  PackedCatalogItem  %SystemRoot%\​system32\​mswsock.  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000010  PackedCatalogItem  %SystemRoot%\​system32\​mswsock.  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9\​Catalog_Entries\​000000000011  PackedCatalogItem  %SystemRoot%\​system32\​mswsock.  1 
HKLM\​System\​Setup  SystemSetupInProgress  0  2 
HKLM\​System\​WPA\​PnP  seed  1374283966  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Control Panel\​Desktop\​WindowMetrics  Shell Icon Bpp  16  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Control Panel\​Desktop\​WindowMetrics  Shell Icon Size  32  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Keyboard Layout\​Preload  1  00000409  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{1188450c-fdab-47ae-80d8-c9633f71be64}\​LanguageProfile\​0x00000000\​{63800dac-e7ca-4df9-9a5c-20765055488d}  Enable  1  3 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​CTF\​TIP\​{DCBD6FA8-032F-11D3-B5B1-00C04FC324A1}\​LanguageProfile\​0x00000409\​{09EA4E4B-46CE-4469-B450-0DE76A435BBB}  Enable  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Ext\​Stats\​{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\​iexplore  Count  25  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  CertificateRevocation  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  DisableCachingOfSSLPages  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  EnableHttp1_1  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  EnableNegotiate  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  MimeExclusionListForCache  multipart/mixed multipart/x-mixed-replace multipart/x-byteranges   4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  SecureProtocols  160  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  WarnOnPost  0x01000000  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​SOFTWARE\​Microsoft\​Windows\​CurrentVersion\​Internet Settings  WarnOnZoneCrossing  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​LinksExplorer  Docked  0  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Main  AlwaysShowMenus  1  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Main  CompatibilityFlags  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Main  Enable Browser Extensions  yes  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Main  FullScreen  no  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Main  SearchMigrated  1  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Main  Window_Placement  0x2c0000000000000001000000ffffffffffffffffffffffffffffffff0000  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​SearchScopes  DefaultScope  {0633EE93-D776-472f-A0FF-E1416B8B2E3A}  6 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​SearchScopes  Version  1  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​SearchScopes\​{0633EE93-D776-472f-A0FF-E1416B8B2E3A}  DisplayName  @ieframe.dll,-12512  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​SearchScopes\​{0633EE93-D776-472f-A0FF-E1416B8B2E3A}  URL  http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Security\​P3Global  Enabled  1  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Toolbar  Locked  1  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Internet Explorer\​Toolbar\​WebBrowser  ITBar7Layout  0x130000000000000000000000300000001000000013000000010000000007  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​  ShellState  0x2400000033880000000000000000000000000000010000000d0000000000  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  DontPrettyPath  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  Filter  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  Hidden  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  HideFileExt  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  HideIcons  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  MapNetDrvBtn  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  NoNetCrawling  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  SeparateProcess  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  ShowCompColor  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  ShowInfoTip  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  ShowSuperHidden  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  WebView  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​MountPoints2\​CPC\​Volume\​{d14d83ce-7d74-11dc-97e2-806d6172696f}\​  Data  0x000000005c005c003f005c0049004400450023004300640052006f006d00  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​MountPoints2\​CPC\​Volume\​{d14d83ce-7d74-11dc-97e2-806d6172696f}\​  Generation  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​MountPoints2\​CPC\​Volume\​{d14d83cf-7d74-11dc-97e2-806d6172696f}\​  Data  0x000000005c005c003f005c00530054004f00520041004700450023005600  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​MountPoints2\​CPC\​Volume\​{d14d83cf-7d74-11dc-97e2-806d6172696f}\​  Generation  1  7 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​RunMRU  MRUList  badc  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​RunMRU  a  cmd\​1  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​RunMRU  b  taskmgr\​1  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​RunMRU  c  sfc /purgecache\​1  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​RunMRU  d  regedit\​1  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​User Shell Folders  Cache  %USERPROFILE%\​Local Settings\​Temporary Internet Files  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​User Shell Folders  Cookies  %USERPROFILE%\​Cookies  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​User Shell Folders  Desktop  %USERPROFILE%\​Desktop  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​User Shell Folders  Favorites  %USERPROFILE%\​Favorites  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​User Shell Folders  History  %USERPROFILE%\​Local Settings\​History  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache  Signature  Client UrlCache MMF Ver 5.2  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Content  CacheLimit  163410  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Content  CachePrefix    2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Cookies  CacheLimit  8192  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Cookies  CachePrefix  Cookie:  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​MSHist012008051620080517  CacheLimit  8192  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​MSHist012008051620080517  CacheOptions  11  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​MSHist012008051620080517  CachePath  %USERPROFILE%\​Local Settings\​History\​History.IE5\​MSHist012008051620080517  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​MSHist012008051620080517  CachePrefix  :2008051620080517:   2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​MSHist012008051620080517  CacheRepair  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​UserData  CacheLimit  1000  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​UserData  CacheOptions  8  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​UserData  CachePath  %USERPROFILE%\​UserData  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​UserData  CachePrefix  UserData  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​UserData  CacheRepair  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​feedplat  CacheLimit  8192  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​feedplat  CacheOptions  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​feedplat  CachePath  %USERPROFILE%\​Local Settings\​Application Data\​Microsoft\​Feeds Cache  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​feedplat  CachePrefix  feedplat:  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​Extensible Cache\​feedplat  CacheRepair  0  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​History  CacheLimit  8192  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​5.0\​Cache\​History  CachePrefix  Visited:  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​0  Flags  33  3 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​1  Flags  475  3 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​2  Flags  71  3 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​3  1001  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​3  1004  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​3  1201  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​3  1800  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​3  1804  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​3  1806  1  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​3  1E05  131072  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​3  Flags  1  3 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1001  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1004  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1200  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1201  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1405  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1800  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1803  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1804  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1806  3  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  1E05  65536  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Internet Settings\​Zones\​4  Flags  3  3 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Shell Extensions\​Cached  {42042206-2D85-11D3-8CFF-005004838597} {0000010B-0000-0000-C000-000000000046} 0x401  0x01000000446b9c7c94948af52012c801  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​CurrentVersion\​Shell Extensions\​Cached  {871C5380-42A0-1069-A2EA-08002B30309D} {000214E6-0000-0000-C000-000000000046} 0x401  0x01000000310032003a893fef1312c801  4 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​ShellNoRoam\​MUICache  LangID  0x0904  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​Software\​Microsoft\​Windows\​ShellNoRoam\​MUICache\​  @C:\WINDOWS\ime\sptip.dll,-600  Speech Recognition  1 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  ListviewAlphaSelect  0  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  ListviewShadow  0  2 
HKU\​S-1-5-21-1229272821-1004336348-527237240-1003\​software\​Microsoft\​Windows\​CurrentVersion\​Explorer\​Advanced  ListviewWatermark  0  2 

  - Monitored Registry Keys:  
Key Name Watch subtree Notify Filter Count
HKLM\​Software\​Classes  1  Key Change,Value Change  3 
HKLM\​Software\​Classes\​CLSID  1  Key Change,Value Change  2 
HKLM\​Software\​Microsoft\​COM3  1  Key Change,Value Change  6 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​NameSpace_Catalog5  0  Key Change  1 
HKLM\​System\​CurrentControlSet\​Services\​WinSock2\​Parameters\​Protocol_Catalog9  0  Key Change  1 
HKU  1  Key Change,Value Change  15 

3.b) IEXPLORE.EXE - File Activities

  - Files Read:  
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\Registration\R00000000000f.clb
C:\WINDOWS\system32\MSHTML.DLL
C:\WINDOWS\system32\ieframe.dll
C:\WINDOWS\system32\shell32.dll
C:\WINDOWS\system32\stdole2.tlb
PIPE\lsarpc

  - Files Modified:  
MountPointManagerinfo
PIPE\lsarpcinfo
WMIDataDeviceinfo

  - File System Control Communication:  
File Control Code Times
PIPE\lsarpc  0x0011C017  20 

  - Device Control Communication:  
File Control Code