Regshot 2.1.0.20 unicode

Сводный отчёт
  Снимок A Снимок B
Дата снимка 06.11.2008 21:49:20 07.11.2008 0:00:55
Компьютер P4 P4
Пользователь Юра Юра
SID пользователя S-1-5-21-515967899-1085031214-1606980848-1003 S-1-5-21-515967899-1085031214-1606980848-1003
Тип снимка Реестр полностью Реестр полностью
Время снимка 15.41 15.38
Ошибки 6 6
Ключи 202831 202860
Удалённые / Новые ключи 2 7
Изменённые ключи (разрешения) 6 6
Параметры 424478 424724
Удалённые / Новые параметры 21 44
Изменённые параметры 224 224
Папки 0 0
Удалённые / Новые папки 0 0
Изменённые папки 0 0
Файлы 0 0
Удалённые / Новые файлы 0 0
Изменённые файлы 0 0
Альтернативные потоки 0 0
Удалённые / Новые альтернативные потоки 0 0
Изменённые альтернативные потоки 0 0
Всего изменений 253 281
Файл восстановления реестра .reg Report.5.Undo.reg Report.5.Redo.reg
Файл восстановления реестра .inf Report.5.Undo.inf Report.5.Redo.inf
Комментарий:Образец для сайта
 
Новые ключи: 7
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\WebProject]
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\WebProjects]
[HKEY_CURRENT_USER\Software\Microsoft\VSCommon\9.0\SQM\PIDs\208]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\m]
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012008110720081108]
 
Изменённые ключи (разрешения): 6
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WmiApRpl\Performance]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WmiApRpl]
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WmiApRpl\Performance]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmiApRpl]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WmiApRpl\Performance]
 
Удалённые ключи: 2
[HKEY_CURRENT_USER\Software\C"aaa"  <&ppro>]
[HKEY_CURRENT_USER\Software\Microsoft\VSCommon\9.0\SQM\PIDs\3596]
 
Новые параметры: 44
[HKEY_CURRENT_USER\Identities]
"Identity Login"=dword:00098053
[HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5604]
"015"="each"
"016"="CLSID_DOMDocument30"
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\Find]
"In Files Pane Display Options"=dword:00000100
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\General\ProjectLocationEntries]
"VenusProjectLocationEntry1"=hex(2):4d,00,3a,00,5c,00,21,04,30,04,39,04,42,04,\
  4b,04,5c,00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,72,00,75,00,00,\
  00
"VenusProjectLocationEntry2"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,\
  4f,00,46,00,49,00,4c,00,45,00,25,00,5c,00,1c,04,3e,04,38,04,20,00,34,04,3e,\
  04,3a,04,43,04,3c,04,35,04,3d,04,42,04,4b,04,5c,00,56,00,69,00,73,00,75,00,\
  61,00,6c,00,20,00,53,00,74,00,75,00,64,00,69,00,6f,00,20,00,32,00,30,00,30,\
  00,38,00,5c,00,57,00,65,00,62,00,53,00,69,00,74,00,65,00,73,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\ProjectMRUList]
"File5"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,74,00,72,00,79,00,5c,00,74,00,72,00,79,00,2e,00,73,00,6c,00,6e,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\WebProject]
"LinkFixup"=dword:00000000
"UseAnonymous"=dword:00000001
"UserName"=""
"LastServerName"=""
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\WebProjects]
"LastNewWebsiteLang"="vb"
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\WebProjects\FileSharePage]
"LastPath"="M:\\Сайты\\regshot.ru\\vs"
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\WebProjects\OpenWebDialog]
"LastActivePage"=dword:00000002
[HKEY_CURRENT_USER\Software\Microsoft\VSCommon\9.0\SQM\PIDs\208]
"PID"=dword:000000d0
"CTime"=hex(b):1a,29,bf,da,17,40,c9,01
"OptedIn"=dword:00000000
"OS"=dword:00000006
"OSServicePack"=dword:00000003
"ExeName"="devenv.exe"
"OSLocale"=dword:00000419
"VSBuildType"=dword:00000002
"VSBuildNumber"=dword:0000521e
"VSBuildRcNum"=dword:00000008
"ShutdownReason"=dword:00000003
"UserType"=dword:00000000
"VSSKU"=dword:000007d0
"VSIPLicense"=dword:00000000
"UserPriv"=dword:00000002
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\dat]
"c"="C:\\Documents and Settings\\Tester\\NTUSER.DAT"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.dat\OpenWithList]
"a"="Regshot.exe"
"MRUList"="a"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs]
"53"=hex:52,00,65,00,70,00,6f,00,72,00,74,00,2e,00,31,00,2e,00,68,00,74,00,6d,\
  00,6c,00,00,00,5a,00,32,00,00,00,00,00,00,00,00,00,00,00,52,65,70,6f,72,74,\
  2e,31,2e,68,74,6d,6c,2e,6c,6e,6b,00,3a,00,03,00,04,00,ef,be,00,00,00,00,00,\
  00,00,00,14,00,00,00,52,00,65,00,70,00,6f,00,72,00,74,00,2e,00,31,00,2e,00,\
  68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,20,00,00,00
"67"=hex:32,00,2e,00,31,00,2e,00,30,00,2e,00,32,00,30,00,00,00,4c,00,32,00,00,\
  00,00,00,00,00,00,00,00,00,32,2e,31,2e,30,2e,32,30,2e,6c,6e,6b,00,00,30,00,\
  03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,32,00,2e,00,31,00,2e,\
  00,30,00,2e,00,32,00,30,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.html]
"6"=hex:52,00,65,00,70,00,6f,00,72,00,74,00,2e,00,31,00,2e,00,68,00,74,00,6d,\
  00,6c,00,00,00,5a,00,32,00,00,00,00,00,00,00,00,00,00,00,52,65,70,6f,72,74,\
  2e,31,2e,68,74,6d,6c,2e,6c,6e,6b,00,3a,00,03,00,04,00,ef,be,00,00,00,00,00,\
  00,00,00,14,00,00,00,52,00,65,00,70,00,6f,00,72,00,74,00,2e,00,31,00,2e,00,\
  68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,20,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.js]
"1"=hex:6d,00,65,00,6e,00,75,00,2e,00,6a,00,73,00,00,00,48,00,32,00,00,00,00,\
  00,00,00,00,00,00,00,6d,65,6e,75,2e,6a,73,2e,6c,6e,6b,00,2e,00,03,00,04,00,\
  ef,be,00,00,00,00,00,00,00,00,14,00,00,00,6d,00,65,00,6e,00,75,00,2e,00,6a,\
  00,73,00,2e,00,6c,00,6e,00,6b,00,00,00,1a,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.php]
"4"=hex:70,00,61,00,67,00,65,00,73,00,2e,00,70,00,68,00,70,00,00,00,4e,00,32,\
  00,00,00,00,00,00,00,00,00,00,00,70,61,67,65,73,2e,70,68,70,2e,6c,6e,6b,00,\
  32,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,70,00,61,00,67,\
  00,65,00,73,00,2e,00,70,00,68,00,70,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,\
  00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.sln]
"4"=hex:76,00,73,00,2e,00,73,00,6c,00,6e,00,00,00,46,00,32,00,00,00,00,00,00,\
  00,00,00,00,00,76,73,2e,73,6c,6e,2e,6c,6e,6b,00,00,2c,00,03,00,04,00,ef,be,\
  00,00,00,00,00,00,00,00,14,00,00,00,76,00,73,00,2e,00,73,00,6c,00,6e,00,2e,\
  00,6c,00,6e,00,6b,00,00,00,1a,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\Folder]
"9"=hex:32,00,2e,00,31,00,2e,00,30,00,2e,00,32,00,30,00,00,00,4c,00,32,00,00,\
  00,00,00,00,00,00,00,00,00,32,2e,31,2e,30,2e,32,30,2e,6c,6e,6b,00,00,30,00,\
  03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,32,00,2e,00,31,00,2e,\
  00,30,00,2e,00,32,00,30,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012008110720081108]
"CachePath"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,4f,00,46,00,49,00,\
  4c,00,45,00,25,00,5c,00,4c,00,6f,00,63,00,61,00,6c,00,20,00,53,00,65,00,74,\
  00,74,00,69,00,6e,00,67,00,73,00,5c,00,48,00,69,00,73,00,74,00,6f,00,72,00,\
  79,00,5c,00,48,00,69,00,73,00,74,00,6f,00,72,00,79,00,2e,00,49,00,45,00,35,\
  00,5c,00,4d,00,53,00,48,00,69,00,73,00,74,00,30,00,31,00,32,00,30,00,30,00,\
  38,00,31,00,31,00,30,00,37,...
"CachePrefix"=":2008110720081108: "
"CacheLimit"=dword:00002000
"CacheOptions"=dword:0000000b
"CacheRepair"=dword:00000000
 
Изменённые параметры: 224
[HKEY_LOCAL_MACHINE\SECURITY\Policy\Secrets\L$_RasDefaultCredentials#0\CupdTime]
@=hex(0):00,fe,5e,91,fc,3f,c9,01
@=hex(0):16,e0,dc,e6,12,40,c9,01
[HKEY_LOCAL_MACHINE\SECURITY\Policy\Secrets\L$_RasDefaultCredentials#0\OupdTime]
@=hex(0):4a,18,bf,35,da,3f,c9,01
@=hex(0):00,fe,5e,91,fc,3f,c9,01
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed"=hex:72,48,85,4a,2a,6c,78,97,56,48,8c,0d,65,74,01,7f,3f,f7,a6,5c,aa,f2,\
  d0,85,f1,36,52,2c,fa,26,82,e6,e9,84,bb,55,4f,0b,0d,d3,a8,0b,5d,6f,e3,f3,e4,\
  ac,75,d7,15,5f,42,bd,ea,94,95,ff,43,51,ab,3f,a9,aa,31,55,f6,37,d3,5d,dc,a2,\
  ee,de,c3,a9,76,f4,ca,67
"Seed"=hex:dd,87,ce,ef,fb,db,18,ea,4c,f4,c4,d8,fe,62,33,ed,77,95,65,b1,dc,7f,\
  05,d1,15,08,be,eb,1d,06,27,d1,a3,41,ff,d4,5b,f5,58,57,60,96,0a,3f,e7,65,4b,\
  60,1e,2d,3a,39,79,07,bd,89,17,a6,67,4f,94,88,f0,2b,57,54,d4,de,ea,39,cd,91,\
  82,5a,10,93,65,a9,bf,98
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\Extension-List\{00000000-0000-0000-0000-000000000000}]
"StartTimeLo"=dword:33f8e148
"StartTimeLo"=dword:193eeeb0
"StartTimeHi"=dword:01c93ff9
"StartTimeHi"=dword:01c94017
"EndTimeLo"=dword:33fb43a2
"EndTimeLo"=dword:1941510a
"EndTimeHi"=dword:01c93ff9
"EndTimeHi"=dword:01c94017
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\S-1-5-21-515967899-1085031214-1606980848-1003\Extension-List\{00000000-0000-0000-0000-000000000000}]
"StartTimeLo"=dword:44e3f292
"StartTimeLo"=dword:ca2b32ec
"StartTimeHi"=dword:01c93ff7
"StartTimeHi"=dword:01c94012
"EndTimeLo"=dword:44e3f292
"EndTimeLo"=dword:ca2d9546
"EndTimeHi"=dword:01c93ff7
"EndTimeHi"=dword:01c94012
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9140710900063D11C8EF10054038389C\Usage]
"FPClientFiles"=dword:39660dc7
"FPClientFiles"=dword:39660dd4
"ProductNonBootFiles"=dword:39650070
"ProductNonBootFiles"=dword:39660072
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Dhcp\Parameters]
"{BA10512D-F9A9-4AEA-A518-806403F5D21B}"=hex:0f,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,6c,ca,12,49,f9,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  6c,ca,12,49,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,6c,ca,12,49,2b,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,6c,ca,12,49,2c,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,6c,ca,12,49,06,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,6c,ca,12,49
"{BA10512D-F9A9-4AEA-A518-806403F5D21B}"=hex:0f,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,e5,ef,12,49,f9,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  e5,ef,12,49,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,e5,ef,12,49,2b,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,e5,ef,12,49,2c,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,e5,ef,12,49,06,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,e5,ef,12,49
"{0EF6520A-5FF3-4FD5-9A40-5E16D57E19E3}"=hex:06,00,00,00,00,00,00,00,04,00,00,\
  00,00,00,00,00,53,e1,12,49,c0,a8,01,01,03,00,00,00,00,00,00,00,04,00,00,00,\
  00,00,00,00,53,e1,12,49,c0,a8,01,01,01,00,00,00,00,00,00,00,04,00,00,00,00,\
  00,00,00,53,e1,12,49,ff,ff,ff,00,0c,00,00,00,00,00,00,00,02,00,00,00,00,00,\
  00,00,53,e1,12,49,70,34,00,00,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,\
  00,53,e1,12,49,00,00,0e,10,36,00,00,00,00,00,00,00,04,...
"{0EF6520A-5FF3-4FD5-9A40-5E16D57E19E3}"=hex:06,00,00,00,00,00,00,00,04,00,00,\
  00,00,00,00,00,7b,04,13,49,c0,a8,01,01,03,00,00,00,00,00,00,00,04,00,00,00,\
  00,00,00,00,7b,04,13,49,c0,a8,01,01,01,00,00,00,00,00,00,00,04,00,00,00,00,\
  00,00,00,7b,04,13,49,ff,ff,ff,00,36,00,00,00,00,00,00,00,04,00,00,00,00,00,\
  00,00,7b,04,13,49,c0,a8,01,01,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,\
  00,7b,04,13,49,05,00,00,00,fc,00,00,00,00,00,00,00,00,...
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\kl1]
"StartDate"=hex:00,30,d9,ca,4e,3f,c9,01
"StartDate"=hex:00,f0,42,f5,17,40,c9,01
"InData"=hex:15,7f,56,01,00,00,00,00
"InData"=hex:46,00,00,00,00,00,00,00
"OutData"=hex:d1,6a,e3,00,00,00,00,00
"OutData"=hex:ba,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Epoch]
"Epoch"=dword:00002329
"Epoch"=dword:00002335
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Interfaces\{0EF6520A-5FF3-4FD5-9A40-5E16D57E19E3}]
"LeaseObtainedTime"=dword:4912d343
"LeaseObtainedTime"=dword:4912f66b
"T1"=dword:4912da4b
"T1"=dword:4912fd73
"T2"=dword:4912df91
"T2"=dword:491302b9
"LeaseTerminatesTime"=dword:4912e153
"LeaseTerminatesTime"=dword:4913047b
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\{0EF6520A-5FF3-4FD5-9A40-5E16D57E19E3}\Parameters\Tcpip]
"LeaseObtainedTime"=dword:4912d343
"LeaseObtainedTime"=dword:4912f66b
"T1"=dword:4912da4b
"T1"=dword:4912fd73
"T2"=dword:4912df91
"T2"=dword:491302b9
"LeaseTerminatesTime"=dword:4912e153
"LeaseTerminatesTime"=dword:4913047b
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp\Parameters]
"{BA10512D-F9A9-4AEA-A518-806403F5D21B}"=hex:0f,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,6c,ca,12,49,f9,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  6c,ca,12,49,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,6c,ca,12,49,2b,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,6c,ca,12,49,2c,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,6c,ca,12,49,06,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,6c,ca,12,49
"{BA10512D-F9A9-4AEA-A518-806403F5D21B}"=hex:0f,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,e5,ef,12,49,f9,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  e5,ef,12,49,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,e5,ef,12,49,2b,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,e5,ef,12,49,2c,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,e5,ef,12,49,06,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,e5,ef,12,49
"{0EF6520A-5FF3-4FD5-9A40-5E16D57E19E3}"=hex:06,00,00,00,00,00,00,00,04,00,00,\
  00,00,00,00,00,53,e1,12,49,c0,a8,01,01,03,00,00,00,00,00,00,00,04,00,00,00,\
  00,00,00,00,53,e1,12,49,c0,a8,01,01,01,00,00,00,00,00,00,00,04,00,00,00,00,\
  00,00,00,53,e1,12,49,ff,ff,ff,00,0c,00,00,00,00,00,00,00,02,00,00,00,00,00,\
  00,00,53,e1,12,49,70,34,00,00,33,00,00,00,00,00,00,00,04,00,00,00,00,00,00,\
  00,53,e1,12,49,00,00,0e,10,36,00,00,00,00,00,00,00,04,...
"{0EF6520A-5FF3-4FD5-9A40-5E16D57E19E3}"=hex:06,00,00,00,00,00,00,00,04,00,00,\
  00,00,00,00,00,7b,04,13,49,c0,a8,01,01,03,00,00,00,00,00,00,00,04,00,00,00,\
  00,00,00,00,7b,04,13,49,c0,a8,01,01,01,00,00,00,00,00,00,00,04,00,00,00,00,\
  00,00,00,7b,04,13,49,ff,ff,ff,00,36,00,00,00,00,00,00,00,04,00,00,00,00,00,\
  00,00,7b,04,13,49,c0,a8,01,01,35,00,00,00,00,00,00,00,01,00,00,00,00,00,00,\
  00,7b,04,13,49,05,00,00,00,fc,00,00,00,00,00,00,00,00,...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kl1]
"StartDate"=hex:00,30,d9,ca,4e,3f,c9,01
"StartDate"=hex:00,f0,42,f5,17,40,c9,01
"InData"=hex:15,7f,56,01,00,00,00,00
"InData"=hex:46,00,00,00,00,00,00,00
"OutData"=hex:d1,6a,e3,00,00,00,00,00
"OutData"=hex:ba,00,00,00,00,00,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch]
"Epoch"=dword:00002329
"Epoch"=dword:00002335
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{0EF6520A-5FF3-4FD5-9A40-5E16D57E19E3}]
"LeaseObtainedTime"=dword:4912d343
"LeaseObtainedTime"=dword:4912f66b
"T1"=dword:4912da4b
"T1"=dword:4912fd73
"T2"=dword:4912df91
"T2"=dword:491302b9
"LeaseTerminatesTime"=dword:4912e153
"LeaseTerminatesTime"=dword:4913047b
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{0EF6520A-5FF3-4FD5-9A40-5E16D57E19E3}\Parameters\Tcpip]
"LeaseObtainedTime"=dword:4912d343
"LeaseObtainedTime"=dword:4912f66b
"T1"=dword:4912da4b
"T1"=dword:4912fd73
"T2"=dword:4912df91
"T2"=dword:491302b9
"LeaseTerminatesTime"=dword:4912e153
"LeaseTerminatesTime"=dword:4913047b
[HKEY_CURRENT_USER\Identities\{B259AA26-F4DA-4BCA-A181-4F798DB5FE0F}\Software\Microsoft\Outlook Express\5.0]
"Running"=dword:00000000
"Running"=dword:00000001
"Preview Message"=hex:80,f3,85,f9,ac,3f,c9,01
"Preview Message"=hex:80,16,c7,05,91,3b,c9,01
[HKEY_CURRENT_USER\Identities\{B259AA26-F4DA-4BCA-A181-4F798DB5FE0F}\Software\Microsoft\Outlook Express\5.0\Rules\Filter\FFA]
"Version"=dword:00000377
"Version"=dword:00000378
[HKEY_CURRENT_USER\Identities\{B259AA26-F4DA-4BCA-A181-4F798DB5FE0F}\Software\Microsoft\Outlook Express\5.0\Rules\Filter\FFB]
"Version"=dword:00000377
"Version"=dword:00000378
[HKEY_CURRENT_USER\Identities\{B259AA26-F4DA-4BCA-A181-4F798DB5FE0F}\Software\Microsoft\Outlook Express\5.0\Rules\Filter\FFC]
"Version"=dword:00000377
"Version"=dword:00000378
[HKEY_CURRENT_USER\Identities\{B259AA26-F4DA-4BCA-A181-4F798DB5FE0F}\Software\Microsoft\Outlook Express\5.0\Rules\Filter\FFF]
"Version"=dword:00000377
"Version"=dword:00000378
[HKEY_CURRENT_USER\Software\Microsoft\FrontPage\Explorer\FindMRU]
"0"="007300630072006900700074"
"0"="00730068006F0074"
"1"="003C007300630072006900700074003E"
"1"="007300630072006900700074"
"2"="003C007300630072006900700074"
"2"="003C007300630072006900700074003E"
"3"="0040"
"3"="003C007300630072006900700074"
"4"="004D006F00760065004D0065006E0075"
"4"="0040"
"5"="0063006C006100730073003D002200620022"
"5"="004D006F00760065004D0065006E0075"
"6"="0064006500660050006F0073006900740069006F006E"
"6"="0063006C006100730073003D002200620022"
"7"="003C006C0069"
"7"="0064006500660050006F0073006900740069006F006E"
"8"="002000770069006400740068003D00220036003000250022"
"8"="003C006C0069"
"9"="002000770069006400740068003D00220032003000250022"
"9"="002000770069006400740068003D00220036003000250022"
"10"="003C002F0066006F006E0074003E"
"10"="002000770069006400740068003D00220032003000250022"
"11"="003C0066006F006E007400200066006100630065003D002200540069006D006500730020004E0065007700200052006F006D0061006E0022003E"
"11"="003C002F0066006F006E0074003E"
"12"="002E002E002F002E002E002F002E002E002F002E002E002F002E002E002F0048006900760065002F0032002E0030002E0032002E00310037002F"
"12"="003C0066006F006E007400200066006100630065003D002200540069006D006500730020004E0065007700200052006F006D0061006E0022003E"
"13"="0026006E006200730070003B"
"13"="002E002E002F002E002E002F002E002E002F002E002E002F002E002E002F0048006900760065002F0032002E0030002E0032002E00310037002F"
"14"="0068007400740070003A002F002F007700770077002E00730075006E0063006C006F00750064002E00720075002F0077006F0072006B00730068006F0070002F0061006C0067006F002F0068007500660066006D0061006E002F0068007500660066006D0061006E002E00680074006D"
"14"="0026006E006200730070003B"
[HKEY_CURRENT_USER\Software\Microsoft\FrontPage\Explorer\FrontPage Explorer\Settings]
"WindowPos"="2,3,-1,-1,-1,-1,27,27,1107,747"
"WindowPos"="2,3,-32000,-32000,-1,-1,54,54,1134,774"
"LastWebOpen"="file://,,/M:/Сайты/wgapatcher.ru/html,P4\\Юра,1,"
"LastWebOpen"="file://,,/M:/Сайты/regshot.ru/html,P4\\Юра,1,"
"FRDlgPos"="0,1,-1,-1,-1,-1,570,184,1175,536"
"FRDlgPos"="0,1,-1,-1,-1,-1,570,144,1175,496"
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Window_Placement"=hex:2c,00,00,00,02,00,00,00,03,00,00,00,ff,ff,ff,ff,ff,ff,\
  ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,71,01,00,00,47,00,00,00,46,05,00,00,10,03,00,\
  00
"Window_Placement"=hex:2c,00,00,00,02,00,00,00,03,00,00,00,ff,ff,ff,ff,ff,ff,\
  ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,8e,01,00,00,64,00,00,00,63,05,00,00,2d,03,00,\
  00
[HKEY_CURRENT_USER\Software\Microsoft\Search Assistant]
"UsageCount"=dword:00000044
"UsageCount"=dword:00000045
[HKEY_CURRENT_USER\Software\Microsoft\Search Assistant\ACMru\5604]
"000"="XML"
"000"="shot#"
"001"="xml"
"001"="shot"
"002"="diskinfo"
"002"="XML"
"003"="htaccess"
"003"="xml"
"004"=".tlb"
"004"="diskinfo"
"005"="TestOptions.tlb"
"005"="htaccess"
"006"="offset"
"006"=".tlb"
"007"="ofset"
"007"="TestOptions.tlb"
"008"="outlook"
"008"="offset"
"009"="регулярны"
"009"="ofset"
"010"="pack"
"010"="outlook"
"011"="vsver"
"011"="регулярны"
"012"="ver"
"012"="pack"
"013"="each"
"013"="vsver"
"014"="CLSID_DOMDocument30"
"014"="ver"
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0]
"DefaultOpenProjectLocation"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,\
  68,00,6f,00,74,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,\
  00,69,00,70,00,00,00
"DefaultOpenProjectLocation"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,\
  68,00,6f,00,74,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,00,00
"DefaultOpenProjItemLocation"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,\
  68,00,6f,00,74,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,\
  00,2e,00,30,00,00,00
"DefaultOpenProjItemLocation"=hex(2):4d,00,3a,00,5c,00,21,04,30,04,39,04,42,04,\
  4b,04,5c,00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,72,00,75,00,5c,\
  00,76,00,73,00,00,00
"DefaultProjectTreeSelection"="Visual C++|Win32"
"DefaultProjectTreeSelection"="Visual Basic"
"DefaultProjectListSelection"="Win32 Project"
"DefaultProjectListSelection"="Empty Web Site"
"DefaultProjItemTreeSelection"="Visual C++|C++"
"DefaultProjItemTreeSelection"="Visual Basic"
"DefaultProjItemListSelection"="C++ Class"
"DefaultProjItemListSelection"="HTML Page"
"LastLoadedSolution"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,\
  00,74,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,\
  70,00,5c,00,4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4d,00,61,\
  00,6b,00,65,00,53,00,68,00,6f,00,74,00,2e,00,73,00,6c,00,6e,00,00,00
"LastLoadedSolution"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,4f,00,46,\
  00,49,00,4c,00,45,00,25,00,5c,00,1c,04,3e,04,38,04,20,00,34,04,3e,04,3a,04,\
  43,04,3c,04,35,04,3d,04,42,04,4b,04,5c,00,56,00,69,00,73,00,75,00,61,00,6c,\
  00,20,00,53,00,74,00,75,00,64,00,69,00,6f,00,20,00,32,00,30,00,30,00,38,00,\
  5c,00,50,00,72,00,6f,00,6a,00,65,00,63,00,74,00,73,00,5c,00,76,00,73,00,5c,\
  00,76,00,73,00,2e,00,73,00,6c,00,6e,...
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\Debugger]
"Register Groups"=hex:44,00,65,00,76,00,69,00,63,00,65,00,20,00,52,00,65,00,67,\
  00,69,00,73,00,74,00,65,00,72,00,73,00,0a,00,43,00,50,00,55,00,0a,00,45,00,\
  66,00,66,00,65,00,63,00,74,00,69,00,76,00,65,00,20,00,41,00,64,00,64,00,72,\
  00,65,00,73,00,73,00,00,00
"Register Groups"=hex:00,00
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\FileMRUList]
"File1"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4d,00,61,00,6b,00,65,\
  00,53,00,68,00,6f,00,74,00,44,00,6c,00,67,00,2e,00,63,00,70,00,70,00,00,00
"File1"=hex(2):4d,00,3a,00,5c,00,21,04,30,04,39,04,42,04,4b,04,5c,00,72,00,65,\
  00,67,00,73,00,68,00,6f,00,74,00,2e,00,72,00,75,00,5c,00,76,00,73,00,5c,00,\
  76,00,69,00,65,00,77,00,2e,00,70,00,68,00,70,00,00,00
"File2"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,72,00,63,00,00,00
"File2"=hex(2):4d,00,3a,00,5c,00,21,04,30,04,39,04,42,04,4b,04,5c,00,72,00,65,\
  00,67,00,73,00,68,00,6f,00,74,00,2e,00,72,00,75,00,5c,00,76,00,73,00,5c,00,\
  73,00,69,00,74,00,65,00,6d,00,61,00,70,00,2e,00,70,00,68,00,70,00,00,00
"File3"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,70,00,6f,00,72,00,74,00,2e,00,63,00,70,00,70,00,00,00
"File3"=hex(2):4d,00,3a,00,5c,00,21,04,30,04,39,04,42,04,4b,04,5c,00,72,00,65,\
  00,67,00,73,00,68,00,6f,00,74,00,2e,00,72,00,75,00,5c,00,76,00,73,00,5c,00,\
  69,00,6e,00,64,00,65,00,78,00,2e,00,70,00,68,00,70,00,00,00
"File4"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4c,00,69,00,63,00,65,\
  00,6e,00,63,00,65,00,2e,00,63,00,70,00,70,00,00,00
"File4"=hex(2):4d,00,3a,00,5c,00,21,04,30,04,39,04,42,04,4b,04,5c,00,72,00,65,\
  00,67,00,73,00,68,00,6f,00,74,00,2e,00,72,00,75,00,5c,00,76,00,73,00,5c,00,\
  70,00,61,00,67,00,65,00,73,00,5c,00,6d,00,65,00,6e,00,75,00,2e,00,68,00,74,\
  00,6d,00,6c,00,00,00
"File5"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4c,00,69,00,63,00,65,\
  00,6e,00,63,00,65,00,2e,00,68,00,00,00
"File5"=hex(2):4d,00,3a,00,5c,00,21,04,30,04,39,04,42,04,4b,04,5c,00,72,00,65,\
  00,67,00,73,00,68,00,6f,00,74,00,2e,00,72,00,75,00,5c,00,76,00,73,00,5c,00,\
  70,00,61,00,67,00,65,00,73,00,2e,00,70,00,68,00,70,00,00,00
"File6"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  41,00,72,00,63,00,68,00,69,00,76,00,65,00,2e,00,63,00,70,00,70,00,00,00
"File6"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4d,00,61,00,6b,00,65,\
  00,53,00,68,00,6f,00,74,00,44,00,6c,00,67,00,2e,00,63,00,70,00,70,00,00,00
"File7"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  53,00,68,00,6f,00,74,00,2e,00,68,00,00,00
"File7"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,72,00,63,00,00,00
"File8"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  4f,00,70,00,74,00,69,00,6f,00,6e,00,53,00,68,00,65,00,65,00,74,00,2e,00,63,\
  00,70,00,70,00,00,00
"File8"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,70,00,6f,00,72,00,74,00,2e,00,63,00,70,00,70,00,00,00
"File9"=hex(2):65,00,3a,00,5c,00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  4c,00,5a,00,53,00,53,00,2e,00,63,00,70,00,70,00,00,00
"File9"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4c,00,69,00,63,00,65,\
  00,6e,00,63,00,65,00,2e,00,63,00,70,00,70,00,00,00
"File10"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,67,00,73,00,68,00,6f,00,74,00,44,00,6c,00,67,00,2e,00,63,00,70,\
  00,70,00,00,00
"File10"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4c,00,69,00,63,00,65,\
  00,6e,00,63,00,65,00,2e,00,68,00,00,00
"File11"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  53,00,68,00,6f,00,74,00,43,00,6c,00,61,00,73,00,73,00,65,00,73,00,2e,00,68,\
  00,00,00
"File11"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  41,00,72,00,63,00,68,00,69,00,76,00,65,00,2e,00,63,00,70,00,70,00,00,00
"File12"=hex(2):65,00,3a,00,5c,00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  4c,00,5a,00,53,00,53,00,2e,00,68,00,00,00
"File12"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  53,00,68,00,6f,00,74,00,2e,00,68,00,00,00
"File13"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  53,00,68,00,6f,00,74,00,43,00,6c,00,61,00,73,00,73,00,65,00,73,00,2e,00,63,\
  00,70,00,70,00,00,00
"File13"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  4f,00,70,00,74,00,69,00,6f,00,6e,00,53,00,68,00,65,00,65,00,74,00,2e,00,63,\
  00,70,00,70,00,00,00
"File14"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4d,00,61,00,6b,00,65,\
  00,53,00,68,00,6f,00,74,00,2e,00,72,00,63,00,00,00
"File14"=hex(2):65,00,3a,00,5c,00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  4c,00,5a,00,53,00,53,00,2e,00,63,00,70,00,70,00,00,00
"File15"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,72,00,65,00,73,00,6f,\
  00,75,00,72,00,63,00,65,00,2e,00,68,00,00,00
"File15"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,67,00,73,00,68,00,6f,00,74,00,44,00,6c,00,67,00,2e,00,63,00,70,\
  00,70,00,00,00
"File16"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4c,00,69,00,63,00,65,\
  00,6e,00,63,00,65,00,44,00,69,00,61,00,6c,00,6f,00,67,00,2e,00,68,00,00,00
"File16"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  53,00,68,00,6f,00,74,00,43,00,6c,00,61,00,73,00,73,00,65,00,73,00,2e,00,68,\
  00,00,00
"File17"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4c,00,69,00,63,00,65,\
  00,6e,00,63,00,65,00,44,00,69,00,61,00,6c,00,6f,00,67,00,2e,00,63,00,70,00,\
  70,00,00,00
"File17"=hex(2):65,00,3a,00,5c,00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,72,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  4c,00,5a,00,53,00,53,00,2e,00,68,00,00,00
"File18"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,54,00,65,00,73,00,74,00,4d,00,65,00,74,00,68,00,6f,00,64,00,5c,00,54,00,\
  65,00,73,00,74,00,4d,00,65,00,74,00,68,00,6f,00,64,00,44,00,6c,00,67,00,2e,\
  00,63,00,70,00,70,00,00,00
"File18"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  53,00,68,00,6f,00,74,00,43,00,6c,00,61,00,73,00,73,00,65,00,73,00,2e,00,63,\
  00,70,00,70,00,00,00
"File19"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,63,00,70,00,70,00,00,00
"File19"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4d,00,61,00,6b,00,65,\
  00,53,00,68,00,6f,00,74,00,2e,00,72,00,63,00,00,00
"File20"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,70,00,6f,00,72,00,74,00,49,00,6e,00,66,00,2e,00,63,00,70,00,70,\
  00,00,00
"File20"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,72,00,65,00,73,00,6f,\
  00,75,00,72,00,63,00,65,00,2e,00,68,00,00,00
"File21"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  47,00,6c,00,6f,00,62,00,61,00,6c,00,73,00,2e,00,63,00,70,00,70,00,00,00
"File21"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4c,00,69,00,63,00,65,\
  00,6e,00,63,00,65,00,44,00,69,00,61,00,6c,00,6f,00,67,00,2e,00,68,00,00,00
"File22"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,70,00,6f,00,72,00,74,00,52,00,65,00,67,00,2e,00,63,00,70,00,70,\
  00,00,00
"File22"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4c,00,69,00,63,00,65,\
  00,6e,00,63,00,65,00,44,00,69,00,61,00,6c,00,6f,00,67,00,2e,00,63,00,70,00,\
  70,00,00,00
"File23"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  72,00,65,00,73,00,6f,00,75,00,72,00,63,00,65,00,2e,00,68,00,00,00
"File23"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,54,00,65,00,73,00,74,00,4d,00,65,00,74,00,68,00,6f,00,64,00,5c,00,54,00,\
  65,00,73,00,74,00,4d,00,65,00,74,00,68,00,6f,00,64,00,44,00,6c,00,67,00,2e,\
  00,63,00,70,00,70,00,00,00
"File24"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  53,00,68,00,6f,00,74,00,2e,00,63,00,70,00,70,00,00,00
"File24"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,63,00,70,00,70,00,00,00
"File25"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,67,00,73,00,68,00,6f,00,74,00,44,00,6c,00,67,00,2e,00,68,00,00,\
  00
"File25"=hex(2):65,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,00,39,00,2e,00,30,00,5c,00,\
  52,00,65,00,70,00,6f,00,72,00,74,00,49,00,6e,00,66,00,2e,00,63,00,70,00,70,\
  00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\Find]
"Options"="MatchCase=1 WholeWord=0 Hidden=0 Up=0 Selection=0 Block=0 KeepCase=0 SubFolders=1 KeepOpen=0 NameOnly=0 Plain Document ReplaceAll"
"Options"="MatchCase=1 WholeWord=1 Hidden=1 Up=0 Selection=0 Block=0 KeepCase=0 SubFolders=1 KeepOpen=0 NameOnly=0 Plain Files FindAll"
"Current Mode"="1"
"Current Mode"="2"
"Find"="\\x"
"Find"="shot"
"Find 0"="\\x"
"Find 0"="shot"
"Find 1"="m_dwBoxNumber"
"Find 1"="shot#"
"Find 2"="_PACKED_SHOT"
"Find 2"="\\x"
"Find 3"="QueryHivePath"
"Find 3"="m_dwBoxNumber"
"Find 4"="m_lpListFmt"
"Find 4"="_PACKED_SHOT"
"Find 5"="A["
"Find 5"="QueryHivePath"
"Find 6"="a["
"Find 6"="m_lpListFmt"
"Find 7"="FormatKeyTree"
"Find 7"="A["
"Find 8"="FormatList"
"Find 8"="a["
"Find 9"="FormatSidList"
"Find 9"="FormatKeyTree"
"Find 10"="pShotA"
"Find 10"="FormatList"
"Find 11"="pShotB"
"Find 11"="FormatSidList"
"Find 12"="Options"
"Find 12"="pShotA"
"Find 13"="WriteSummary"
"Find 13"="pShotB"
"Find 14"=";"
"Find 14"="Options"
"Find 15"="IDS_HTML_ACL_KEY"
"Find 15"="WriteSummary"
"Find 16"="IDS_HTML_ACL_BLOCK"
"Find 16"=";"
"Find 17"="IDS_HTML_SID_BLOCK"
"Find 17"="IDS_HTML_ACL_KEY"
"Find 18"="IDS_SID_BLOCK     "
"Find 18"="IDS_HTML_ACL_BLOCK"
"Find 19"="d"
"Find 19"="IDS_HTML_SID_BLOCK"
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\General]
"DefaultMDIChildState"=dword:00000002
"DefaultMDIChildState"=dword:00000000
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\Profile]
"DefaultSettingsDirectory"="%vsspv_visualstudio_dir%\\Settings\\"
"DefaultSettingsDirectory"="C:\\Documents and Settings\\Юра\\Мои документы\\Visual Studio 2008\\Settings\\"
"AutoSaveFile"="%vsspv_visualstudio_dir%\\Settings\\CurrentSettings.vssettings"
"AutoSaveFile"="C:\\Documents and Settings\\Юра\\Мои документы\\Visual Studio 2008\\Settings\\CurrentSettings.vssettings"
"AutoSaveFILETIMELow"=dword:dc264892
"AutoSaveFILETIMELow"=dword:b88dd104
"AutoSaveFILETIMEHigh"=dword:01c93f18
"AutoSaveFILETIMEHigh"=dword:01c94015
"SettingsCacheFILETIMELow"=dword:dc264892
"SettingsCacheFILETIMELow"=dword:b88dd104
"SettingsCacheFILETIMEHigh"=dword:01c93f18
"SettingsCacheFILETIMEHigh"=dword:01c94015
"AutoSaveFileCRC"=dword:0000c52d
"AutoSaveFileCRC"=dword:00008426
[HKEY_CURRENT_USER\Software\Microsoft\VisualStudio\9.0\ProjectMRUList]
"File2"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4d,00,61,00,6b,00,65,\
  00,53,00,68,00,6f,00,74,00,2e,00,73,00,6c,00,6e,00,00,00
"File2"=hex(2):25,00,55,00,53,00,45,00,52,00,50,00,52,00,4f,00,46,00,49,00,4c,\
  00,45,00,25,00,5c,00,1c,04,3e,04,38,04,20,00,34,04,3e,04,3a,04,43,04,3c,04,\
  35,04,3d,04,42,04,4b,04,5c,00,56,00,69,00,73,00,75,00,61,00,6c,00,20,00,53,\
  00,74,00,75,00,64,00,69,00,6f,00,20,00,32,00,30,00,30,00,38,00,5c,00,50,00,\
  72,00,6f,00,6a,00,65,00,63,00,74,00,73,00,5c,00,76,00,73,00,5c,00,76,00,73,\
  00,2e,00,73,00,6c,00,6e,...
"File3"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,54,00,65,00,73,00,74,00,4d,00,65,00,74,00,68,00,6f,00,64,00,5c,00,54,00,\
  65,00,73,00,74,00,4d,00,65,00,74,00,68,00,6f,00,64,00,2e,00,73,00,6c,00,6e,\
  00,00,00
"File3"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,7a,00,69,00,70,00,5c,00,\
  4d,00,61,00,6b,00,65,00,53,00,68,00,6f,00,74,00,5c,00,4d,00,61,00,6b,00,65,\
  00,53,00,68,00,6f,00,74,00,2e,00,73,00,6c,00,6e,00,00,00
"File4"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,74,00,72,00,79,00,5c,00,74,00,72,00,79,00,2e,00,73,00,6c,00,6e,00,00,00
"File4"=hex(2):45,00,3a,00,5c,00,52,00,65,00,67,00,73,00,68,00,6f,00,74,00,5c,\
  00,54,00,65,00,73,00,74,00,4d,00,65,00,74,00,68,00,6f,00,64,00,5c,00,54,00,\
  65,00,73,00,74,00,4d,00,65,00,74,00,68,00,6f,00,64,00,2e,00,73,00,6c,00,6e,\
  00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Applets\Regedit]
"View"=hex:2c,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
  ff,ff,ff,ff,ff,ff,ed,00,00,00,7a,00,00,00,5a,05,00,00,24,03,00,00,83,01,00,\
  00,c7,01,00,00,78,00,00,00,da,01,00,00,01,00,00,00
"View"=hex:2c,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff,ff,ff,ff,ff,ff,ff,\
  ff,ff,ff,ff,ff,ff,93,00,00,00,9a,00,00,00,00,05,00,00,44,03,00,00,83,01,00,\
  00,c7,01,00,00,78,00,00,00,da,01,00,00,01,00,00,00
"LastKey"="Мой компьютер\\HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Winlogon\\Notify\\wlballoon"
"LastKey"="Мой компьютер\\HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Services\\wuauserv"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon]
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,33,00,31,00,00,\
  00
@=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,00,74,00,25,\
  00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,00,68,00,\
  65,00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,33,00,32,00,00,\
  00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\LastVisitedMRU]
"MRUList"="flbdkspwrxunqvgohitmjecya"
"MRUList"="sflbdkpwrxunqvgohitmjecya"
"s"=hex:52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,65,00,78,00,65,00,00,\
  00,43,00,3a,00,5c,00,48,00,69,00,76,00,65,00,5c,00,32,00,2e,00,31,00,2e,00,\
  30,00,2e,00,31,00,37,00,00,00
"s"=hex:52,00,65,00,67,00,73,00,68,00,6f,00,74,00,2e,00,65,00,78,00,65,00,00,\
  00,43,00,3a,00,5c,00,44,00,6f,00,63,00,75,00,6d,00,65,00,6e,00,74,00,73,00,\
  20,00,61,00,6e,00,64,00,20,00,53,00,65,00,74,00,74,00,69,00,6e,00,67,00,73,\
  00,5c,00,54,00,65,00,73,00,74,00,65,00,72,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU]
"MRUList"="ihagfedcb"
"MRUList"="hiagfedcb"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
"MRUList"="iedahbfgjc"
"MRUList"="fgjciedahb"
"c"="G:\\VHD\\Копия XP.SP3.pro.ru.vhd"
"c"="C:\\Hive\\2.1.0.20\\1.hive"
"f"="F:\\Downloads\\Opera\\CRK-NGC-Genuine-2.6.rar"
"f"="C:\\Documents and Settings\\Tester\\NTUSER.DAT"
"g"="F:\\Downloads\\Opera\\php-5.2.6-Win32.zip"
"g"="C:\\Hive\\software"
"j"="M:\\Web Tools\\apache 2.2.10.win32\\apache_2.2.10-win32-x86-no_ssl.msi"
"j"="C:\\Hive\\packed.hive"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\dat]
"MRUList"="ba"
"MRUList"="cba"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\hive]
"MRUList"="bcheiafgjd"
"MRUList"="fdbcheiagj"
"d"="C:\\Hive\\packed3.hive"
"d"="C:\\Hive\\2.1.0.20\\1.hive"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Discardable\PostSetup\ShellNew]
"~reserved~"=hex:18,00,00,00,01,00,01,00,d8,07,0b,00,04,00,06,00,15,00,0b,00,\
  0a,00,09,01
"~reserved~"=hex:18,00,00,00,01,00,01,00,d8,07,0b,00,04,00,06,00,15,00,31,00,\
  2e,00,ea,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.html\OpenWithList]
"MRUList"="acghfebd"
"MRUList"="caghfebd"
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs]
"MRUListEx"=hex:42,00,00,00,34,00,00,00,14,00,00,00,0c,00,00,00,24,00,00,00,87,\
  00,00,00,13,00,00,00,3b,00,00,00,16,00,00,00,63,00,00,00,37,00,00,00,38,00,\
  00,00,6f,00,00,00,49,00,00,00,66,00,00,00,18,00,00,00,2c,00,00,00,6e,00,00,\
  00,25,00,00,00,6c,00,00,00,65,00,00,00,00,00,00,00,64,00,00,00,17,00,00,00,\
  7c,00,00,00,5e,00,00,00,60,00,00,00,3d,00,00,00,32,00,00,00,59,00,00,00,53,\
  00,00,00,8a,00,00,00,0e,...
"MRUListEx"=hex:3b,00,00,00,16,00,00,00,18,00,00,00,8b,00,00,00,8c,00,00,00,14,\
  00,00,00,46,00,00,00,44,00,00,00,91,00,00,00,33,00,00,00,5f,00,00,00,24,00,\
  00,00,71,00,00,00,47,00,00,00,53,00,00,00,30,00,00,00,21,00,00,00,62,00,00,\
  00,43,00,00,00,35,00,00,00,42,00,00,00,34,00,00,00,0c,00,00,00,87,00,00,00,\
  13,00,00,00,63,00,00,00,37,00,00,00,38,00,00,00,6f,00,00,00,49,00,00,00,66,\
  00,00,00,2c,00,00,00,6e,...
"71"=hex:65,00,78,00,63,00,6c,00,75,00,64,00,65,00,2e,00,68,00,74,00,6d,00,6c,\
  00,00,00,58,00,32,00,00,00,00,00,00,00,00,00,00,00,65,78,63,6c,75,64,65,2e,\
  68,74,6d,6c,2e,6c,6e,6b,00,00,38,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,\
  00,14,00,00,00,65,00,78,00,63,00,6c,00,75,00,64,00,65,00,2e,00,68,00,74,00,\
  6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,20,00,00,00
"71"=hex:76,00,73,00,00,00,3a,00,32,00,00,00,00,00,00,00,00,00,00,00,76,73,2e,\
  6c,6e,6b,00,00,24,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,\
  76,00,73,00,2e,00,6c,00,6e,00,6b,00,00,00,16,00,00,00
"48"=hex:69,00,6e,00,64,00,65,00,78,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,52,\
  00,32,00,00,00,00,00,00,00,00,00,00,00,69,6e,64,65,78,2e,68,74,6d,6c,2e,6c,\
  6e,6b,00,00,34,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,69,\
  00,6e,00,64,00,65,00,78,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,\
  6b,00,00,00,1e,00,00,00
"48"=hex:76,00,73,00,2e,00,73,00,6c,00,6e,00,00,00,46,00,32,00,00,00,00,00,00,\
  00,00,00,00,00,76,73,2e,73,6c,6e,2e,6c,6e,6b,00,00,2c,00,03,00,04,00,ef,be,\
  00,00,00,00,00,00,00,00,14,00,00,00,76,00,73,00,2e,00,73,00,6c,00,6e,00,2e,\
  00,6c,00,6e,00,6b,00,00,00,1a,00,00,00
"51"=hex:61,00,63,00,63,00,65,00,73,00,73,00,2e,00,70,00,68,00,70,00,00,00,52,\
  00,32,00,00,00,00,00,00,00,00,00,00,00,61,63,63,65,73,73,2e,70,68,70,2e,6c,\
  6e,6b,00,00,34,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,61,\
  00,63,00,63,00,65,00,73,00,73,00,2e,00,70,00,68,00,70,00,2e,00,6c,00,6e,00,\
  6b,00,00,00,1e,00,00,00
"51"=hex:73,00,68,00,6f,00,74,00,73,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,52,\
  00,32,00,00,00,00,00,00,00,00,00,00,00,73,68,6f,74,73,2e,68,74,6d,6c,2e,6c,\
  6e,6b,00,00,34,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,73,\
  00,68,00,6f,00,74,00,73,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,\
  6b,00,00,00,1e,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.html]
"MRUListEx"=hex:04,00,00,00,09,00,00,00,07,00,00,00,00,00,00,00,03,00,00,00,05,\
  00,00,00,02,00,00,00,01,00,00,00,08,00,00,00,ff,ff,ff,ff
"MRUListEx"=hex:08,00,00,00,03,00,00,00,07,00,00,00,05,00,00,00,01,00,00,00,00,\
  00,00,00,02,00,00,00,06,00,00,00,04,00,00,00,ff,ff,ff,ff
"8"=hex:65,00,78,00,63,00,6c,00,75,00,64,00,65,00,2e,00,68,00,74,00,6d,00,6c,\
  00,00,00,58,00,32,00,00,00,00,00,00,00,00,00,00,00,65,78,63,6c,75,64,65,2e,\
  68,74,6d,6c,2e,6c,6e,6b,00,00,38,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,\
  00,14,00,00,00,65,00,78,00,63,00,6c,00,75,00,64,00,65,00,2e,00,68,00,74,00,\
  6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,20,00,00,00
"8"=hex:73,00,61,00,76,00,65,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,4e,00,32,\
  00,00,00,00,00,00,00,00,00,00,00,73,61,76,65,2e,68,74,6d,6c,2e,6c,6e,6b,00,\
  32,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,73,00,61,00,76,\
  00,65,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,\
  00,00
"1"=hex:69,00,6e,00,64,00,65,00,78,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,52,\
  00,32,00,00,00,00,00,00,00,00,00,00,00,69,6e,64,65,78,2e,68,74,6d,6c,2e,6c,\
  6e,6b,00,00,34,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,69,\
  00,6e,00,64,00,65,00,78,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,\
  6b,00,00,00,1e,00,00,00
"1"=hex:6d,00,65,00,6e,00,75,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,4e,00,32,\
  00,00,00,00,00,00,00,00,00,00,00,6d,65,6e,75,2e,68,74,6d,6c,2e,6c,6e,6b,00,\
  32,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,6d,00,65,00,6e,\
  00,75,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,\
  00,00
"2"=hex:73,00,61,00,76,00,65,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,4e,00,32,\
  00,00,00,00,00,00,00,00,00,00,00,73,61,76,65,2e,68,74,6d,6c,2e,6c,6e,6b,00,\
  32,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,73,00,61,00,76,\
  00,65,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,\
  00,00
"2"=hex:53,00,49,00,44,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,4c,00,32,00,00,\
  00,00,00,00,00,00,00,00,00,53,49,44,2e,68,74,6d,6c,2e,6c,6e,6b,00,00,30,00,\
  03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,53,00,49,00,44,00,2e,\
  00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,00,00
"5"=hex:73,00,68,00,6f,00,74,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,4e,00,32,\
  00,00,00,00,00,00,00,00,00,00,00,73,68,6f,74,2e,68,74,6d,6c,2e,6c,6e,6b,00,\
  32,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,73,00,68,00,6f,\
  00,74,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,\
  00,00
"5"=hex:73,00,68,00,6f,00,74,00,73,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,52,\
  00,32,00,00,00,00,00,00,00,00,00,00,00,73,68,6f,74,73,2e,68,74,6d,6c,2e,6c,\
  6e,6b,00,00,34,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,73,\
  00,68,00,6f,00,74,00,73,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,\
  6b,00,00,00,1e,00,00,00
"3"=hex:72,00,65,00,70,00,6f,00,72,00,74,00,73,00,2e,00,68,00,74,00,6d,00,6c,\
  00,00,00,58,00,32,00,00,00,00,00,00,00,00,00,00,00,72,65,70,6f,72,74,73,2e,\
  68,74,6d,6c,2e,6c,6e,6b,00,00,38,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,\
  00,14,00,00,00,72,00,65,00,70,00,6f,00,72,00,74,00,73,00,2e,00,68,00,74,00,\
  6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,20,00,00,00
"3"=hex:73,00,65,00,74,00,74,00,69,00,6e,00,67,00,73,00,2e,00,68,00,74,00,6d,\
  00,6c,00,00,00,5a,00,32,00,00,00,00,00,00,00,00,00,00,00,73,65,74,74,69,6e,\
  67,73,2e,68,74,6d,6c,2e,6c,6e,6b,00,3a,00,03,00,04,00,ef,be,00,00,00,00,00,\
  00,00,00,14,00,00,00,73,00,65,00,74,00,74,00,69,00,6e,00,67,00,73,00,2e,00,\
  68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,20,00,00,00
"7"=hex:6b,00,65,00,79,00,63,00,68,00,65,00,63,00,6b,00,2e,00,68,00,74,00,6d,\
  00,6c,00,00,00,5a,00,32,00,00,00,00,00,00,00,00,00,00,00,6b,65,79,63,68,65,\
  63,6b,2e,68,74,6d,6c,2e,6c,6e,6b,00,3a,00,03,00,04,00,ef,be,00,00,00,00,00,\
  00,00,00,14,00,00,00,6b,00,65,00,79,00,63,00,68,00,65,00,63,00,6b,00,2e,00,\
  68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,20,00,00,00
"7"=hex:63,00,6f,00,6d,00,6d,00,6f,00,6e,00,2e,00,68,00,74,00,6d,00,6c,00,00,\
  00,54,00,32,00,00,00,00,00,00,00,00,00,00,00,63,6f,6d,6d,6f,6e,2e,68,74,6d,\
  6c,2e,6c,6e,6b,00,36,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,\
  00,63,00,6f,00,6d,00,6d,00,6f,00,6e,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,\
  6c,00,6e,00,6b,00,00,00,1e,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.js]
"MRUListEx"=hex:05,00,00,00,04,00,00,00,03,00,00,00,02,00,00,00,00,00,00,00,ff,\
  ff,ff,ff
"MRUListEx"=hex:01,00,00,00,04,00,00,00,03,00,00,00,02,00,00,00,00,00,00,00,ff,\
  ff,ff,ff
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.php]
"MRUListEx"=hex:03,00,00,00,00,00,00,00,05,00,00,00,08,00,00,00,07,00,00,00,06,\
  00,00,00,02,00,00,00,01,00,00,00,09,00,00,00,ff,ff,ff,ff
"MRUListEx"=hex:09,00,00,00,02,00,00,00,00,00,00,00,04,00,00,00,03,00,00,00,05,\
  00,00,00,08,00,00,00,07,00,00,00,06,00,00,00,ff,ff,ff,ff
"9"=hex:76,00,69,00,65,00,77,00,2e,00,70,00,68,00,70,00,00,00,4c,00,32,00,00,\
  00,00,00,00,00,00,00,00,00,76,69,65,77,2e,70,68,70,2e,6c,6e,6b,00,00,30,00,\
  03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,76,00,69,00,65,00,77,\
  00,2e,00,70,00,68,00,70,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,00,00
"9"=hex:73,00,69,00,74,00,65,00,6d,00,61,00,70,00,2e,00,70,00,68,00,70,00,00,\
  00,54,00,32,00,00,00,00,00,00,00,00,00,00,00,73,69,74,65,6d,61,70,2e,70,68,\
  70,2e,6c,6e,6b,00,36,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,\
  00,73,00,69,00,74,00,65,00,6d,00,61,00,70,00,2e,00,70,00,68,00,70,00,2e,00,\
  6c,00,6e,00,6b,00,00,00,1e,00,00,00
"2"=hex:73,00,74,00,61,00,74,00,69,00,73,00,74,00,69,00,63,00,2e,00,70,00,68,\
  00,70,00,00,00,5a,00,32,00,00,00,00,00,00,00,00,00,00,00,73,74,61,74,69,73,\
  74,69,63,2e,70,68,70,2e,6c,6e,6b,00,3a,00,03,00,04,00,ef,be,00,00,00,00,00,\
  00,00,00,14,00,00,00,73,00,74,00,61,00,74,00,69,00,73,00,74,00,69,00,63,00,\
  2e,00,70,00,68,00,70,00,2e,00,6c,00,6e,00,6b,00,00,00,20,00,00,00
"2"=hex:76,00,69,00,65,00,77,00,2e,00,70,00,68,00,70,00,00,00,4c,00,32,00,00,\
  00,00,00,00,00,00,00,00,00,76,69,65,77,2e,70,68,70,2e,6c,6e,6b,00,00,30,00,\
  03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,76,00,69,00,65,00,77,\
  00,2e,00,70,00,68,00,70,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.sln]
"MRUListEx"=hex:00,00,00,00,08,00,00,00,01,00,00,00,02,00,00,00,09,00,00,00,05,\
  00,00,00,03,00,00,00,07,00,00,00,06,00,00,00,ff,ff,ff,ff
"MRUListEx"=hex:00,00,00,00,04,00,00,00,08,00,00,00,01,00,00,00,02,00,00,00,09,\
  00,00,00,05,00,00,00,03,00,00,00,07,00,00,00,06,00,00,00,ff,ff,ff,ff
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\Folder]
"MRUListEx"=hex:05,00,00,00,02,00,00,00,03,00,00,00,06,00,00,00,07,00,00,00,01,\
  00,00,00,04,00,00,00,00,00,00,00,08,00,00,00,ff,ff,ff,ff
"MRUListEx"=hex:08,00,00,00,00,00,00,00,02,00,00,00,04,00,00,00,09,00,00,00,05,\
  00,00,00,03,00,00,00,07,00,00,00,01,00,00,00,ff,ff,ff,ff
"8"=hex:69,00,6e,00,63,00,6c,00,75,00,64,00,65,00,00,00,48,00,32,00,00,00,00,\
  00,00,00,00,00,00,00,69,6e,63,6c,75,64,65,2e,6c,6e,6b,00,2e,00,03,00,04,00,\
  ef,be,00,00,00,00,00,00,00,00,14,00,00,00,69,00,6e,00,63,00,6c,00,75,00,64,\
  00,65,00,2e,00,6c,00,6e,00,6b,00,00,00,1a,00,00,00
"8"=hex:39,00,2e,00,30,00,00,00,3c,00,32,00,00,00,00,00,00,00,00,00,00,00,39,\
  2e,30,2e,6c,6e,6b,00,26,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,\
  00,00,39,00,2e,00,30,00,2e,00,6c,00,6e,00,6b,00,00,00,16,00,00,00
"4"=hex:54,00,65,00,6d,00,70,00,00,00,40,00,32,00,00,00,00,00,00,00,00,00,00,\
  00,54,65,6d,70,2e,6c,6e,6b,00,00,28,00,03,00,04,00,ef,be,00,00,00,00,00,00,\
  00,00,14,00,00,00,54,00,65,00,6d,00,70,00,2e,00,6c,00,6e,00,6b,00,00,00,18,\
  00,00,00
"4"=hex:76,00,73,00,00,00,3a,00,32,00,00,00,00,00,00,00,00,00,00,00,76,73,2e,\
  6c,6e,6b,00,00,24,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,\
  76,00,73,00,2e,00,6c,00,6e,00,6b,00,00,00,16,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{0D6D4F41-2994-4BA0-8FEF-620E43CD2812}\Count]
"HRZR_PGYFRFFVBA"=hex:69,fd,49,0e,87,00,00,00
"HRZR_PGYFRFFVBA"=hex:7b,00,4a,0e,88,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count]
"HRZR_HVGBBYONE"=hex:b0,00,00,00,03,08,00,00,20,32,7c,cf,c5,3f,c9,01
"HRZR_HVGBBYONE"=hex:b1,00,00,00,1c,08,00,00,f0,cc,bb,71,0f,40,c9,01
"HRZR_HVGBBYONE:0k1,130"=hex:b0,00,00,00,bd,00,00,00,20,32,7c,cf,c5,3f,c9,01
"HRZR_HVGBBYONE:0k1,130"=hex:b1,00,00,00,c6,00,00,00,c0,01,ac,68,0f,40,c9,01
"HRZR_HVGBBYONE:0k1,7011"=hex:af,00,00,00,bb,02,00,00,10,a8,36,d8,1a,3f,c9,01
"HRZR_HVGBBYONE:0k1,7011"=hex:b1,00,00,00,c2,02,00,00,f0,cc,bb,71,0f,40,c9,01
"HRZR_HVGBBYONE:0k4,7011"=hex:af,00,00,00,bb,02,00,00,10,a8,36,d8,1a,3f,c9,01
"HRZR_HVGBBYONE:0k4,7011"=hex:b1,00,00,00,c2,02,00,00,f0,cc,bb,71,0f,40,c9,01
"HRZR_HVGBBYONE:0k1,701o"=hex:ae,00,00,00,08,00,00,00,90,4e,35,92,f0,3e,c9,01
"HRZR_HVGBBYONE:0k1,701o"=hex:b1,00,00,00,08,00,00,00,00,2e,c0,4c,0f,40,c9,01
"HRZR_HVGBBYONE:0k4,701o"=hex:ae,00,00,00,08,00,00,00,90,4e,35,92,f0,3e,c9,01
"HRZR_HVGBBYONE:0k4,701o"=hex:b1,00,00,00,08,00,00,00,00,2e,c0,4c,0f,40,c9,01
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count]
"HRZR_HVDPHG"=hex:95,00,00,00,2e,09,00,00,50,2d,bd,bd,fc,3f,c9,01
"HRZR_HVDPHG"=hex:96,00,00,00,2f,09,00,00,10,e3,35,e6,12,40,c9,01
"HRZR_EHAPCY"=hex:95,00,00,00,4f,00,00,00,f0,99,eb,d4,55,3f,c9,01
"HRZR_EHAPCY"=hex:96,00,00,00,50,00,00,00,a0,1c,8d,63,0b,40,c9,01
"HRZR_EHACNGU"=hex:96,00,00,00,63,1b,00,00,40,94,29,fc,04,40,c9,01
"HRZR_EHACNGU"=hex:96,00,00,00,69,1b,00,00,b0,81,c1,da,17,40,c9,01
"HRZR_EHACNGU:P:\\Cebtenz Svyrf\\Vagrearg Rkcybere\\vrkcyber.rkr"=hex:95,00,00,\
  00,d0,00,00,00,20,6e,bf,29,e2,3f,c9,01
"HRZR_EHACNGU:P:\\Cebtenz Svyrf\\Vagrearg Rkcybere\\vrkcyber.rkr"=hex:96,00,00,\
  00,d1,00,00,00,70,dc,c0,6e,0f,40,c9,01
"HRZR_EHACNGU:P:\\JVAQBJF\\ertrqvg.rkr"=hex:95,00,00,00,51,00,00,00,e0,36,96,\
  bd,58,3f,c9,01
"HRZR_EHACNGU:P:\\JVAQBJF\\ertrqvg.rkr"=hex:96,00,00,00,52,00,00,00,70,86,08,\
  4f,06,40,c9,01
"HRZR_EHACNGU:P:\\Cebtenz Svyrf\\Bhgybbx Rkcerff\\zfvza.rkr"=hex:96,00,00,00,\
  ab,03,00,00,a0,8e,aa,8b,03,40,c9,01
"HRZR_EHACNGU:P:\\Cebtenz Svyrf\\Bhgybbx Rkcerff\\zfvza.rkr"=hex:96,00,00,00,\
  ac,03,00,00,f0,c2,3e,64,17,40,c9,01
"HRZR_EHACVQY"=hex:96,00,00,00,35,0a,00,00,40,94,29,fc,04,40,c9,01
"HRZR_EHACVQY"=hex:96,00,00,00,38,0a,00,00,b0,81,c1,da,17,40,c9,01
"HRZR_EHACVQY:::{2559N1S5-21Q7-11Q4-OQNS-00P04S60O9S0}"=hex:96,00,00,00,ab,03,\
  00,00,a0,8e,aa,8b,03,40,c9,01
"HRZR_EHACVQY:::{2559N1S5-21Q7-11Q4-OQNS-00P04S60O9S0}"=hex:96,00,00,00,ac,03,\
  00,00,f0,c2,3e,64,17,40,c9,01
"HRZR_EHAPCY:gvzrqngr.pcy"=hex:92,00,00,00,09,00,00,00,a0,f4,d4,66,9a,3d,c9,01
"HRZR_EHAPCY:gvzrqngr.pcy"=hex:96,00,00,00,09,00,00,00,a0,1c,8d,63,0b,40,c9,01
"HRZR_EHACNGU:P:\\Cebtenz Svyrf\\Zvpebfbsg Ivfhny Fghqvb 9.0\\Pbzzba7\\VQR\\qrirai.rkr"=hex:95,\
  00,00,00,ed,00,00,00,50,69,38,fe,ff,3f,c9,01
"HRZR_EHACNGU:P:\\Cebtenz Svyrf\\Zvpebfbsg Ivfhny Fghqvb 9.0\\Pbzzba7\\VQR\\qrirai.rkr"=hex:96,\
  00,00,00,ef,00,00,00,b0,81,c1,da,17,40,c9,01
"HRZR_EHACVQY:%pfvqy2%\\Zvpebfbsg Ivfhny Fghqvb 2008\\Zvpebfbsg Ivfhny Fghqvb 2008.yax"=hex:95,\
  00,00,00,67,01,00,00,50,69,38,fe,ff,3f,c9,01
"HRZR_EHACVQY:%pfvqy2%\\Zvpebfbsg Ivfhny Fghqvb 2008\\Zvpebfbsg Ivfhny Fghqvb 2008.yax"=hex:96,\
  00,00,00,69,01,00,00,b0,81,c1,da,17,40,c9,01
"HRZR_EHACNGU:P:\\Cebtenz Svyrf\\Zvpebfbsg Bssvpr\\BSSVPR11\\zfbugzrq.rkr"=hex:95,\
  00,00,00,0e,01,00,00,30,76,60,92,01,40,c9,01
"HRZR_EHACNGU:P:\\Cebtenz Svyrf\\Zvpebfbsg Bssvpr\\BSSVPR11\\zfbugzrq.rkr"=hex:96,\
  00,00,00,0f,01,00,00,90,a6,90,56,0e,40,c9,01
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}\iexplore]
"Count"=dword:00000944
"Count"=dword:0000094f
"Time"=hex:d8,07,0b,00,04,00,06,00,0b,00,0a,00,03,00,d4,01
"Time"=hex:d8,07,0b,00,04,00,06,00,0e,00,00,00,09,00,4e,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1F460357-8A94-4D71-9CA3-AA4ACF32ED8E}\iexplore]
"Count"=dword:0000072f
"Count"=dword:00000739
"Time"=hex:d8,07,0b,00,04,00,06,00,0b,00,0a,00,03,00,f4,01
"Time"=hex:d8,07,0b,00,04,00,06,00,0e,00,00,00,09,00,5d,00
"Blocked"=dword:000006d3
"Blocked"=dword:000006dd
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{8DAE90AD-4583-4977-9DD4-4360F7A45C74}\iexplore]
"Count"=dword:00000735
"Count"=dword:0000073f
"Time"=hex:d8,07,0b,00,04,00,06,00,0b,00,0a,00,03,00,f4,01
"Time"=hex:d8,07,0b,00,04,00,06,00,0e,00,00,00,09,00,5d,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9961627E-4059-41B4-8E0E-A7D6B3854ADF}\iexplore]
"Count"=dword:00000912
"Count"=dword:0000091d
"Time"=hex:d8,07,0b,00,04,00,06,00,0b,00,0a,00,03,00,e4,01
"Time"=hex:d8,07,0b,00,04,00,06,00,0e,00,00,00,09,00,4e,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5C181DB-CF6E-441C-A6AC-482700A98CFD}\iexplore]
"Count"=dword:00000748
"Count"=dword:00000752
"Time"=hex:d8,07,0b,00,04,00,06,00,0b,00,0a,00,03,00,f4,01
"Time"=hex:d8,07,0b,00,04,00,06,00,0e,00,00,00,09,00,6d,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E2E2DD38-D088-4134-82B7-F2BA38496583}\iexplore]
"Count"=dword:00000767
"Count"=dword:00000771
"Time"=hex:d8,07,0b,00,04,00,06,00,0b,00,0a,00,03,00,f4,01
"Time"=hex:d8,07,0b,00,04,00,06,00,0e,00,00,00,09,00,6d,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EF326744-4CBB-4579-83B0-040BE095A9F4}\iexplore]
"Count"=dword:00000748
"Count"=dword:00000752
"Time"=hex:d8,07,0b,00,04,00,06,00,0b,00,0a,00,03,00,f4,01
"Time"=hex:d8,07,0b,00,04,00,06,00,0e,00,00,00,09,00,6d,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings"=hex:46,00,00,00,5b,07,00,00,01,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00
"SavedLegacySettings"=hex:46,00,00,00,64,07,00,00,01,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\
  00,00,00,00,00,00,00,00,00,00,00,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Cached]
"{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} {000214E6-0000-0000-C000-000000000046} 0x401"=hex:00,\
  00,00,00,35,00,31,00,e4,7f,9e,fc,04,40,c9,01
"{2559A1F4-21D7-11D4-BDAF-00C04F60B9F0} {000214E6-0000-0000-C000-000000000046} 0x401"=hex:00,\
  00,00,00,35,00,31,00,f2,b9,81,33,11,40,c9,01
"{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} {000214E6-0000-0000-C000-000000000046} 0x401"=hex:00,\
  00,00,00,35,00,31,00,38,6a,c9,fc,04,40,c9,01
"{2559A1F5-21D7-11D4-BDAF-00C04F60B9F0} {000214E6-0000-0000-C000-000000000046} 0x401"=hex:00,\
  00,00,00,35,00,31,00,38,7d,a5,33,11,40,c9,01
"{E88DCCE0-B7B3-11D1-A9F0-00AA0060FA31} {0000013A-0000-0000-C000-000000000046} 0x401"=hex:00,\
  00,00,00,35,00,31,00,92,a0,6d,d4,26,3f,c9,01
"{E88DCCE0-B7B3-11D1-A9F0-00AA0060FA31} {0000013A-0000-0000-C000-000000000046} 0x401"=hex:00,\
  00,00,00,35,00,31,00,26,f7,3f,6b,0e,40,c9,01
"{E88DCCE0-B7B3-11D1-A9F0-00AA0060FA31} {89BCB740-6119-101A-BCB7-00DD010655AF} 0x401"=hex:00,\
  00,00,00,35,00,31,00,ee,90,c4,58,e5,3a,c9,01
"{E88DCCE0-B7B3-11D1-A9F0-00AA0060FA31} {89BCB740-6119-101A-BCB7-00DD010655AF} 0x401"=hex:00,\
  00,00,00,35,00,31,00,18,d0,38,6b,0e,40,c9,01
[HKEY_CURRENT_USER\SessionInformation]
"ProgramCount"=dword:00000007
"ProgramCount"=dword:00000009
 
Удалённые параметры: 21
[HKEY_CURRENT_USER\Software\C"aaa"  <&ppro>]
"Новый параметр #1"=dword:ffffffff
[HKEY_CURRENT_USER\Software\Microsoft\VSCommon\9.0\SQM\PIDs\3596]
"PID"=dword:00000e0c
"CTime"=hex(b):42,b3,33,fe,ff,3f,c9,01
"OptedIn"=dword:00000000
"OS"=dword:00000006
"OSServicePack"=dword:00000003
"ExeName"="devenv.exe"
"OSLocale"=dword:00000419
"VSBuildType"=dword:00000002
"VSBuildNumber"=dword:0000521e
"VSBuildRcNum"=dword:00000008
"ShutdownReason"=dword:00000003
"UserType"=dword:00000000
"VSSKU"=dword:000007d0
"VSIPLicense"=dword:00000000
"UserPriv"=dword:00000002
"StillAlive"=hex(b):a0,8c,cd,95,05,40,c9,01
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.html]
"9"=hex:6d,00,61,00,69,00,6e,00,2e,00,68,00,74,00,6d,00,6c,00,00,00,4e,00,32,\
  00,00,00,00,00,00,00,00,00,00,00,6d,61,69,6e,2e,68,74,6d,6c,2e,6c,6e,6b,00,\
  32,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,6d,00,61,00,69,\
  00,6e,00,2e,00,68,00,74,00,6d,00,6c,00,2e,00,6c,00,6e,00,6b,00,00,00,1c,00,\
  00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.js]
"5"=hex:6d,00,65,00,6e,00,75,00,2e,00,6a,00,73,00,00,00,48,00,32,00,00,00,00,\
  00,00,00,00,00,00,00,6d,65,6e,75,2e,6a,73,2e,6c,6e,6b,00,2e,00,03,00,04,00,\
  ef,be,00,00,00,00,00,00,00,00,14,00,00,00,6d,00,65,00,6e,00,75,00,2e,00,6a,\
  00,73,00,2e,00,6c,00,6e,00,6b,00,00,00,1a,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\.php]
"1"=hex:61,00,63,00,63,00,65,00,73,00,73,00,2e,00,70,00,68,00,70,00,00,00,52,\
  00,32,00,00,00,00,00,00,00,00,00,00,00,61,63,63,65,73,73,2e,70,68,70,2e,6c,\
  6e,6b,00,00,34,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,00,00,61,\
  00,63,00,63,00,65,00,73,00,73,00,2e,00,70,00,68,00,70,00,2e,00,6c,00,6e,00,\
  6b,00,00,00,1e,00,00,00
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\RecentDocs\Folder]
"6"=hex:39,00,2e,00,30,00,00,00,3c,00,32,00,00,00,00,00,00,00,00,00,00,00,39,\
  2e,30,2e,6c,6e,6b,00,26,00,03,00,04,00,ef,be,00,00,00,00,00,00,00,00,14,00,\
  00,00,39,00,2e,00,30,00,2e,00,6c,00,6e,00,6b,00,00,00,16,00,00,00
 
Новые папки: 0
 
Изменённые папки: 0
 
Удалённые папки: 0
 
Новые файлы: 0
 
Изменённые файлы: 0
 
Удалённые файлы: 0
 
Новые альтернативные потоки: 0
 
Изменённые альтернативные потоки: 0
 
Удалённые альтернативные потоки: 0
 
Идентификаторы
 
Дескрипторы безопасности