Root Registry key Modified String value File/path reference
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\Folders 06/10/2007 10:40:04 AM C:\WINDOWS\PCHEALTH\ERRORREP\QHEADLES\ 1
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\Folders 06/10/2007 10:40:04 AM C:\WINDOWS\PCHEALTH\ERRORREP\QSIGNOFF\ 1
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\0E23E40C6140D434FA9B96967D309AFE\SourceList\Net 15/08/2007 8:10:15 AM 1 c:\bc0490a658d9bf6908d11f494b\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0E23E40C6140D434FA9B96967D309AFE\InstallProperties 15/08/2007 8:10:15 AM InstallSource c:\bc0490a658d9bf6908d11f494b\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{C04E32E0-0416-434D-AFB9-6969D703A9EF} 15/08/2007 8:10:15 AM InstallSource c:\bc0490a658d9bf6908d11f494b\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\56A968A049C8C7F45A7C79D2C3C8DEE9\SourceList\Net 15/08/2007 8:12:13 AM 1 c:\d5129816640dcd860e8d903c01d9\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\56A968A049C8C7F45A7C79D2C3C8DEE9\InstallProperties 15/08/2007 8:12:13 AM InstallSource c:\d5129816640dcd860e8d903c01d9\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E} 15/08/2007 8:12:13 AM InstallSource c:\d5129816640dcd860e8d903c01d9\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows Media\DECCHECK 27/04/2007 4:08:34 PM InstallDir C:\DECCHECK
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\0F007175D9BDA3B40BD3531AB45B39F9\SourceList\Net 28/03/2007 2:50:58 PM 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\2CE27694B1714B74C87E057D0836067D\SourceList\Net 28/03/2007 2:51:13 PM 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0F007175D9BDA3B40BD3531AB45B39F9\InstallProperties 28/03/2007 2:50:58 PM InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\2CE27694B1714B74C87E057D0836067D\InstallProperties 28/03/2007 2:51:13 PM InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{49672EC2-171B-47B4-8CE7-50D7806360D7} 28/03/2007 2:51:13 PM InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{571700F0-DB9D-4B3A-B03D-35A14BB5939F} 28/03/2007 2:50:58 PM InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC} 27/03/2007 2:59:46 AM InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\pft4~tmp\
HKEY_LOCAL_MACHINE Software\Classes\Software\Microsoft\Multimedia\Components\Informational\playback_DefaultPlaylist\Files\File3 08/06/2007 9:04:57 AM C:\DOCUME~1\ALLUSE~1\DOCUME~1\MYMUSI~1\SYNCPL~1\01_Music_auto_rated_at_5_stars.wpl
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\7FCDE114D557E4147AB4D3DC56385F98\SourceList\Net 05/02/2007 9:23:38 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\00095BFF74BECB5448A2FEBFAD36C549\SourceList\Net 05/02/2007 10:03:35 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\3140FD82B7F014C48A9DE92ED1568E15\SourceList\Net 06/02/2007 3:43:10 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\A63528B87F995184D9C970525CF643D5\SourceList\Net 05/02/2007 10:06:25 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\34053A86A55C7324889C73EEC136DE17\SourceList\Net 05/02/2007 10:23:54 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\57FA4D4407865F14191866E20A55701E\SourceList\Net 05/02/2007 10:09:09 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\D6461317C3DC4F04799BDCE9E42626FE\SourceList\Net 05/02/2007 9:26:30 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\D6C57B87C35EC424FB38B436DBA46628\SourceList\Net 05/02/2007 10:24:20 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\SourceList\Net 05/02/2007 9:21:47 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\34053A86A55C7324889C73EEC136DE17\InstallProperties 05/02/2007 10:23:54 AM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\57FA4D4407865F14191866E20A55701E\InstallProperties 05/02/2007 10:09:09 AM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D6461317C3DC4F04799BDCE9E42626FE\InstallProperties 11/07/2007 12:26:51 PM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D6C57B87C35EC424FB38B436DBA46628\InstallProperties 05/02/2007 10:24:20 AM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\InstallProperties 11/07/2007 12:28:10 PM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{44D4AF75-6870-41F5-9181-662EA05507E1} 05/02/2007 10:09:09 AM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{68A35043-C55A-4237-88C9-37EE1C63ED71} 05/02/2007 10:23:54 AM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF} 11/07/2007 12:26:51 PM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{78B75C6D-E53C-424C-BF83-4B63BD4A6682} 05/02/2007 10:24:20 AM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} 11/07/2007 12:28:10 PM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\A890B769D2407634AB9CB81C614871F4\SourceList\Net 06/02/2007 2:24:03 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\ZNW266\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\24DD29E05F672FE43B189F1C7DB22ED3\SourceList\Net 06/02/2007 2:25:29 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\ZNW351\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\6E804929562D471408F5181D9D412E4A\SourceList\Net 06/02/2007 2:45:32 AM 1 C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\_is4DD\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E804929562D471408F5181D9D412E4A\InstallProperties 06/02/2007 2:45:32 AM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\_is4DD\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{929408E6-D265-4174-805F-81D1D914E2A4} 27/03/2007 2:59:46 AM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\_is4DD\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{929408E6-D265-4174-805F-81D1D914E2A4} 06/02/2007 2:45:32 AM InstallSource C:\DOCUME~1\INSTAL~1\LOCALS~1\Temp\_is4DD\
HKEY_CURRENT_USER Software\Autodesk\VIZ\R17.0\PLU\MiniDump 19/05/2007 5:46:46 AM DmpFilePath C:\DOCUME~1\p0713160\LOCALS~1\Temp\acminidump.dmp
HKEY_USERS S-1-5-21-776561741-1085031214-1801674531-224258\Software\Autodesk\VIZ\R17.0\PLU\MiniDump 19/05/2007 5:46:46 AM DmpFilePath C:\DOCUME~1\p0713160\LOCALS~1\Temp\acminidump.dmp
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{9869EFB4-18E9-11D3-A837-00104B9E30B5}\InprocServer32 09/05/2007 2:41:53 PM C:\DOCUME~1\p0713160\LOCALS~1\Temp\CmdLineExt02.dll
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{9869EFA6-18E9-11D3-A837-00104B9E30B5}\1.0\0\win32 09/05/2007 2:41:53 PM C:\DOCUME~1\p0713160\LOCALS~1\Temp\CmdLineExt02.dll
HKEY_CURRENT_USER Software\Microsoft\VisualStudio\8.0\FileMRUList 12/08/2007 5:39:54 AM File2 C:\DOCUME~1\p0713160\LOCALS~1\Temp\Rar$DI04.141\SETUP.LST
HKEY_USERS S-1-5-21-776561741-1085031214-1801674531-224258\Software\Microsoft\VisualStudio\8.0\FileMRUList 12/08/2007 5:39:54 AM File2 C:\DOCUME~1\p0713160\LOCALS~1\Temp\Rar$DI04.141\SETUP.LST
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\D5829E6CD77C26743AC15E0DE8590575\SourceList\Net 07/06/2007 3:47:06 AM 1 C:\DOCUME~1\p0713160\LOCALS~1\Temp\Rar$EX07.047\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D5829E6CD77C26743AC15E0DE8590575\InstallProperties 07/06/2007 3:47:06 AM InstallSource C:\DOCUME~1\p0713160\LOCALS~1\Temp\Rar$EX07.047\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{C6E9285D-C77D-4762-A31C-E5D08E955057} 07/06/2007 3:47:06 AM InstallSource C:\DOCUME~1\p0713160\LOCALS~1\Temp\Rar$EX07.047\
HKEY_LOCAL_MACHINE Software\Autodesk\VIZ\8.0\Minidump 19/05/2007 5:46:46 AM DmpFilePAth C:\DOCUME~1\p0713160\LOCALS~1\Temp\VIZminidump.dmp
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\E9CA65085C945734A9ED2B8F269CFD15\SourceList\Net 11/07/2007 12:26:54 PM 1 C:\DOCUME~1\p0713160\LOCALS~1\Temp\ZNWF\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\BBA5BAFFBAA82E2448F771345EE1109E\SourceList\Net 18/08/2007 2:17:44 PM 1 C:\DOCUME~1\p0713160\LOCALS~1\Temp\_is343\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BBA5BAFFBAA82E2448F771345EE1109E\InstallProperties 18/08/2007 2:17:43 PM InstallSource C:\DOCUME~1\p0713160\LOCALS~1\Temp\_is343\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{FFAB5ABB-8AAB-42E2-847F-1743E51E01E9} 18/08/2007 2:17:43 PM InstallSource C:\DOCUME~1\p0713160\LOCALS~1\Temp\_is343\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\C5D609CF9F194AD47A56D6BC6B963F71\SourceList\Net 18/08/2007 2:14:34 PM 1 C:\DOCUME~1\p0713160\LOCALS~1\Temp\_is3\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C5D609CF9F194AD47A56D6BC6B963F71\InstallProperties 18/08/2007 2:14:33 PM InstallSource C:\DOCUME~1\p0713160\LOCALS~1\Temp\_is3\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{FC906D5C-91F9-4DA4-A765-6DCBB669F317} 18/08/2007 2:14:33 PM InstallSource C:\DOCUME~1\p0713160\LOCALS~1\Temp\_is3\
HKEY_LOCAL_MACHINE Software\Network Associates\TVD\VirusScan Enterprise\CurrentVersion\DefaultTask 06/02/2007 3:50:52 AM szMoveToFolder C:\QUARANTINE\
HKEY_LOCAL_MACHINE Software\Network Associates\TVD\VirusScan Enterprise\CurrentVersion\Tasks\{818C7543-358A-4C84-899A-14334EMS4BGS} 06/02/2007 3:50:52 AM szMoveToFolder C:\QUARANTINE\
HKEY_CURRENT_USER Software\Gabest\vsfilter\DefTextPathes 15/06/2007 2:08:43 PM Path1 c:\subtitles
HKEY_USERS S-1-5-21-776561741-1085031214-1801674531-224258\Software\Gabest\vsfilter\DefTextPathes 15/06/2007 2:08:43 PM Path1 c:\subtitles
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\Help 06/02/2007 3:30:35 AM en.hlp C:\WINDOWS\ime\Shared\imepad
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\56A968A049C8C7F45A7C79D2C3C8DEE9 15/08/2007 8:12:13 AM ProductIcon c:\WINDOWS\Installer\{0A869A65-8C94-4F7C-A5C7-972D3C8CED9E}\ARPIco
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{6A47067D-74C5-4FE0-ACB8-A9F3CADE8687} 19/05/2007 7:27:05 AM DisplayIcon C:\WINDOWS\Installer\{6A47067D-74C5-4FE0-ACB8-A9F3CADE8687}\3dsmax_icon.exe
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\D76074A65C470EF4CA8B9A3FACED6878 19/05/2007 5:46:57 AM ProductIcon C:\WINDOWS\Installer\{6A47067D-74C5-4FE0-ACB8-A9F3CADE8687}\ico_3dsmax
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9AD75C6970AA8CF4089B95C6DC849917 06/02/2007 2:22:15 AM DDE7F2BCF1D91C3409CFF425AE1E271A C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders 07/06/2007 2:56:45 AM Folder C:\WINDOWS\msdownld.tmp|?:\msdownld.tmp
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ef752e68 27/03/2007 2:59:46 AM Codebase C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ef752e68\Codebases\U_KB923191 27/03/2007 2:59:46 AM URL C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03 27/03/2007 2:59:46 AM Codebase C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\Codebases\U_KB923191 27/03/2007 2:59:46 AM URL C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a 28/03/2007 3:57:24 PM Codebase C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_08a6620a\Codebases\U_KB924667 28/03/2007 3:57:24 PM URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_d7ea3c6f 28/03/2007 3:57:24 PM Codebase C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Tools.VisualCPlusPlus.Runtime-Libraries_6595b64144ccf1df_6.0.9792.0_x-ww_d7ea3c6f\Codebases\U_KB924667 28/03/2007 3:57:24 PM URL C:\WINDOWS\ServicePackFiles\i386/vcrtl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Setup 25/10/2007 6:06:29 AM ServicePackCachePath c:\windows\ServicePackFiles\ServicePackCache
HKEY_CURRENT_USER Software\Microsoft\Internet Explorer\Main 03/11/2007 5:13:00 AM Local Page C:\WINDOWS\system32\blank.htm
HKEY_USERS S-1-5-21-776561741-1085031214-1801674531-224258\Software\Microsoft\Internet Explorer\Main 03/11/2007 5:13:00 AM Local Page C:\WINDOWS\system32\blank.htm
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\App Paths\cmmgr32.exe 05/02/2007 7:31:03 AM C:\WINDOWS\system32\cmmgr32.exe
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Groups\Video\DVR-MS 09/06/2007 6:04:09 AM RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVD 15/08/2007 8:09:40 AM RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\WMPlayer\Groups\Video\DVR-MS 15/08/2007 8:09:40 AM RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{AACAB351-07F7-4D24-8C44-3FAB8EBED017}\InprocServer32 06/06/2007 2:52:00 PM C:\WINDOWS\system32\geeba.dll
HKEY_LOCAL_MACHINE Software\Intel\Display\igfxcui\igfxcfg\resources 27/03/2007 2:59:45 AM 2945 C:\WINDOWS\system32\igfxdiag.exe
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\InprocServer32 05/02/2007 7:35:00 AM C:\WINDOWS\system32\plugin.ocx
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{06DD38D0-D187-11CF-A80D-00C04FD74AD8}\1.0\0\win32 05/02/2007 7:35:00 AM C:\WINDOWS\system32\plugin.ocx
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{238D0F23-5DC9-45A6-9BE2-666160C324DD}\InprocServer32 20/08/2007 5:28:54 AM C:\WINDOWS\system32\RealMediaSplitter.ax
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{765035B3-5944-4A94-806B-20EE3415F26F}\InprocServer32 20/08/2007 5:28:54 AM C:\WINDOWS\system32\RealMediaSplitter.ax
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{941A4793-A705-4312-8DFC-C11CA05F397E}\InprocServer32 20/08/2007 5:28:54 AM C:\WINDOWS\system32\RealMediaSplitter.ax
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{E21BE468-5C18-43EB-B0CC-DB93A847D769}\InprocServer32 20/08/2007 5:28:54 AM C:\WINDOWS\system32\RealMediaSplitter.ax
HKEY_LOCAL_MACHINE Software\Classes\Software\RealNetworks\RealPlayer\6.0\Preferences\SystemCookiesPath 15/06/2007 2:40:25 PM C:\WINDOWS\system32\syscookies.txt
HKEY_LOCAL_MACHINE Software\Microsoft\Windows Media Device Manager 08/06/2007 9:39:57 AM Log.Filename C:\WINDOWS\system32\Wmdm.log
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\569CE4F3FE823C540B36402BD5E46997\SourceList\Net 05/02/2007 8:58:27 AM 1 c:\windows\temp\BTW\Win32\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\569CE4F3FE823C540B36402BD5E46997\InstallProperties 05/02/2007 8:58:27 AM InstallSource C:\windows\temp\BTW\Win32\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{3F4EC965-28EF-45C3-B063-04B25D4E9679} 05/02/2007 8:58:27 AM InstallSource C:\windows\temp\BTW\Win32\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\568774731F3A2774DA34AACFB6FC9FF9\SourceList\Net 06/02/2007 4:26:30 AM 1 d:\50704cb25ed4d9534a\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\568774731F3A2774DA34AACFB6FC9FF9\InstallProperties 06/02/2007 4:26:30 AM InstallSource d:\50704cb25ed4d9534a\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{37477865-A3F1-4772-AD43-AAFC6BCFF99F} 06/02/2007 4:26:30 AM InstallSource d:\50704cb25ed4d9534a\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\B50A775126EECBB4D97BEF47F84AE42C\SourceList\Net 07/02/2007 5:17:28 AM 1 D:\autorun\App\CDMaker\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B50A775126EECBB4D97BEF47F84AE42C\InstallProperties 07/02/2007 5:17:28 AM InstallSource D:\autorun\App\CDMaker\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} 27/03/2007 2:59:46 AM InstallSource D:\autorun\App\CDMaker\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2} 07/02/2007 5:17:31 AM InstallSource D:\autorun\App\CDMaker\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\BE9FC6B7B2BCA1A4189AEBA1094496A0\SourceList\Net 05/02/2007 7:48:55 AM 1 D:\autorun\Drivers\CardRdr\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\BE9FC6B7B2BCA1A4189AEBA1094496A0\InstallProperties 05/02/2007 7:48:55 AM InstallSource D:\autorun\Drivers\CardRdr\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A} 27/03/2007 2:59:46 AM InstallSource D:\autorun\Drivers\CardRdr\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{7B6CF9EB-CB2B-4A1A-81A9-BE1A9044690A} 05/02/2007 7:48:55 AM InstallSource D:\autorun\Drivers\CardRdr\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{AB6097D9-D722-4987-BD9E-A076E2848EE2} 27/03/2007 2:59:46 AM InstallSource D:\autorun\Drivers\eFrame\Setup.exe
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{BF839132-BD43-4056-ACBF-4377F4A88E2A} 27/03/2007 2:59:46 AM InstallSource D:\autorun\Drivers\ePresent\setup.exe
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{1F2C8256-2773-46C7-9ABA-3E39C24ABB51
issit safe if i clear them all?
After you uninstall the program. Otherwise, the program can't find the reference.
ermm..but i dunno which programs is linked with which registry..i guess nvm, this thing is too complicated for my brain >.< thanks anyway