ouss

Salut En tapant control userpasswords2 ils n'apparaissaient pas!! Merci beaucoup à toi pour ton implication mais hier un peu énervé et bien bourré j'ai tout viré. Et aujourd'hui j'ai supprimé C , l'ai reformaté et réinstallé windows. Y a plus qu'à faire les mises a jours et réinstaller tout... Ensuite surf plus intelligent!!! Encore un grand merci à toi et à ce merveuilleux site qui m'en appris beaucoup et qui n'a pas fini de m'en apprendre @+++ :P :P

Salut je veux bien le lien mais po le bisou :P

Bon soit patient nouveaux Zébulonien (au fait bienvenu!!) Les gars de la sécu s'occuperons très bientot de toi Ouss

Salut! J'ai réussi à supprimer Windows defender en utilsant Windows Install Clean Up Reste à voir si la réinstallation marchera...

ah?! Dans ce cas je laisse faire les pros car le dossier bonjour est un élément Apple ajouté le plus souvent par iTunes PS: as tu fais ton scan en ligne?

Salut! Avant qu'un des pro du forum ne s'occupe de toi sache que tu peut désactiver norton juste avant de faire ton scan en ligne. D'ailleurs c'est impératif si tu ne veut pas qu'il y ait conflit entre les 2 anti virus! Pour ta ligne 10: tu as itunes (pour ipod)? car pour moi c'est seulement ça. Par contre je n'ai pas la prétention de savoir analyser un log Hijackthis...

Salut! Dans le panneau ajout/suppression il ne m'es rien proposé: ni réparer ni supprimer J'ai été dans le dossier windows defender pour en suprimer le contenu mais MpShHook.dll n'est pas supprimable. Merci pour ta réponse

Salut! Après plusieurs redémarrages je n'ai plus les lignes dont on avait parlé! Malgré tout persistent ces problèmes avec Windows defender mais je crois que ça ne concerne pas la sécurité Je me permet de poster un dernier log Hijackthis STP dis moi si tu y voit quelque chose (à virer ou montrant une infection) Merci d'avance Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:34:56, on 18/12/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\System32\dllhost.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Eraser\Eraser.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\telechargements\HiJackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.free.fr/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.free.fr R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [smcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe -hide O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - http://www.nanoscan.com/as/cabs/ascstubie.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe -- End of file - 5067 bytes

bon ben je vais essayer de fixer les lignes et je verrai si elles réapparraissent...

Génial!!! C'est toujours sympa de se retrouver mort de rire devant son PC :P :P Quoi que les voisins vont avoir confirmation que je ne suis pas très net :P Ce type à un talent certain

Salut! Ils n'apparraissent via compte d'utilisateurs (ce qui doit etre normal puisequ'ils sont caché n'est ce pas?)

no problem! bonne nuit!!

A part décocher "masquer les fichiers protégés du système d'exploitation" j'avais déja les fichiers cachés. Mais peut être que je regarde les contenus d'un autre oeil! il ne contiennent rien de particulier: les dossiers application Data, Bureau, Cookies, Documents du propriétaire, Favoris, Local settings, menu demarrer, mes documents recents, modèles, sent to, voisinage d'impression, voisinage reseau, windows et les fichiers ntuser.dat, ntuser.dat.LOG, ntuser.ini

On ne peut pas dire que c'est la forme! :P Window Defender ne peut toujours pas se lancer et j'ai remarqué des dossiers qui m'étaient inconnus dans documents and settings Particulièrement kZl, propriUtaire et les 2 dossiers avec un nom bizarre... De plus j'ai une abhération sur mon gestionnaire des taches: processus inactif vers 80% et UC utilisé à 70%... PS: j'ai réinstallé Hijackthis et j'ai toujours l'autre DNS en vu...

Je reviens sur l'adresse 208.67.220.220 En faisant une recherche Google on tombe en effet sur OpenDNS mais également sur pas de sujets de détournements (zlobdnschanger)...

voici le rapport: (pô cool il a viré Hijackthis ) -->- Recherche: C:\Qoobox: trouvé ! C:\Documents and Settings\moi\Bureau\DiagHelp.zip: trouvé ! C:\Documents and Settings\moi\Bureau\ComboFix.exe: trouvé ! C:\Documents and Settings\moi\Bureau\SmitFraudFix.exe: trouvé ! C:\Documents and Settings\moi\Bureau\DiagHelp: trouvé ! C:\Documents and Settings\moi\Bureau\SmitFraudfix: trouvé ! C:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp: trouvé ! C:\telechargements\HijackThis: trouvé ! C:\telechargements\HiJackThis\HijackThis.exe: trouvé ! C:\WINDOWS\Gmer.exe: trouvé ! --------------------------------- -->- Suppression: C:\Documents and Settings\moi\Bureau\DiagHelp.zip: supprimé ! C:\Documents and Settings\moi\Bureau\ComboFix.exe: supprimé ! C:\Documents and Settings\moi\Bureau\SmitFraudFix.exe: supprimé ! C:\telechargements\HiJackThis\HijackThis.exe: supprimé ! C:\WINDOWS\Gmer.exe: supprimé ! C:\Qoobox: supprimé ! C:\Documents and Settings\moi\Bureau\DiagHelp: supprimé ! C:\Documents and Settings\moi\Bureau\SmitFraudfix: supprimé ! C:\telechargements\HijackThis: supprimé ! Edit: as tu reçu mon MP?

Mon FAI est free j'uploade les fichier et t'envoi un MP

Bon courage c'est super long! :P :P :P

OK! Et voila le rapport! DiagHelp version v1.4 - http://www.malekal.com excute le 16/12/2007 à 22:17:25,39 Liste des derniers fichies modifies/crees dans windir\system32 et prefetch C:\WINDOWS\prefetch\layout.ini -->16/12/2007 03:17:30 C:\WINDOWS\System32\drivers\avipbb.sys -->16/12/2007 13:09:00 C:\WINDOWS\System32\drivers\gmer.sys -->16/12/2007 01:40:31 C:\WINDOWS\System32\drivers\secdrv.sys -->13/11/2007 11:25:54 C:\WINDOWS\System32\drivers\avgntdd.sys -->09/08/2007 13:04:11 C:\WINDOWS\System32\drivers\avgntmgr.sys -->18/07/2007 14:22:19 C:\WINDOWS\System32\drivers\update.sys -->23/04/2007 11:32:54 C:\WINDOWS\System32\drivers\sptd.sys -->18/03/2007 10:48:31 C:\WINDOWS\System32\wpa.dbl -->16/12/2007 13:40:18 C:\WINDOWS\System32\tmp.txt -->16/12/2007 00:31:47 C:\WINDOWS\System32\tmp.reg -->16/12/2007 00:31:47 C:\WINDOWS\System32\1197632033.(null) -->14/12/2007 12:37:38 C:\WINDOWS\System32\TZLog.log -->12/12/2007 09:53:37 C:\WINDOWS\System32\MRT.exe -->03/12/2007 00:00:05 C:\WINDOWS\System32\FNTCACHE.DAT -->30/11/2007 17:52:23 C:\WINDOWS\System32\1196382804.(null) -->30/11/2007 01:33:25 C:\WINDOWS\System32\FFASTLOG.TXT -->28/11/2007 13:02:49 C:\WINDOWS\System32\tzchange.exe -->13/11/2007 12:31:11 C:\WINDOWS\System32\jupdate-1.6.0_03-b05.log -->02/11/2007 17:52:10 C:\WINDOWS\System32\mshtml.dll -->31/10/2007 00:23:48 C:\WINDOWS\System32\perfh00C.dat -->30/10/2007 09:05:42 C:\WINDOWS\System32\perfh009.dat -->30/10/2007 09:05:41 C:\WINDOWS\System32\perfc00C.dat -->30/10/2007 09:05:41 C:\WINDOWS\System32\perfc009.dat -->30/10/2007 09:05:41 C:\WINDOWS\System32\PerfStringBackup.INI -->30/10/2007 09:05:32 C:\WINDOWS\System32\quartz.dll -->29/10/2007 23:43:32 C:\WINDOWS\System32\xpsp3res.dll -->29/10/2007 16:07:16 C:\WINDOWS\System32\shell32.dll -->25/10/2007 17:43:25 C:\WINDOWS\System32\wmasf.dll -->25/10/2007 09:28:30 C:\WINDOWS\System32\1192613084.(null) -->17/10/2007 10:24:44 C:\WINDOWS\System32\LegitCheckControl.dll -->11/10/2007 14:12:48 C:\WINDOWS\System32\wininet.dll -->11/10/2007 00:49:45 C:\WINDOWS\System32\webcheck.dll -->11/10/2007 00:49:45 C:\WINDOWS\wiadebug.log -->16/12/2007 21:39:59 C:\WINDOWS\wiaservc.log -->16/12/2007 21:39:50 C:\WINDOWS.log -->16/12/2007 17:41:44 C:\WINDOWS\WindowsUpdate.log -->16/12/2007 17:41:23 C:\WINDOWS\bootstat.dat -->16/12/2007 17:38:40 C:\WINDOWS\ntbtlog.txt -->16/12/2007 15:16:08 C:\WINDOWS\Sti_Trace.log -->16/12/2007 14:00:37 C:\WINDOWS\SchedLgU.Txt -->16/12/2007 13:36:33 C:\WINDOWS\gmer.ini -->16/12/2007 02:19:32 C:\WINDOWS\gmer_uninstall.cmd -->16/12/2007 01:40:31 C:\WINDOWS\gmer.dll -->16/12/2007 01:40:31 C:\WINDOWS\outlook.pst -->15/12/2007 18:18:05 C:\WINDOWS\system.ini -->15/12/2007 17:11:23 C:\WINDOWS\catchme.exe -->09/12/2007 19:04:27 C:\WINDOWS\tsc.ini -->09/12/2007 00:56:46 winlogon.exe Verified: Signed svchost.exe Verified: Signed ws2_32.dll Verified: Signed user32.dll Verified: Signed tcpip.sys Verified: Signed ndis.sys Verified: Signed null.sys Verified: Signed ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ explorer.exe pid: 1604 Command line: C:\WINDOWS\Explorer.EXE Base Size Version Path 0x44080000 0xcf000 7.00.6000.16574 C:\WINDOWS\system32\WININET.dll 0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll 0x43e00000 0x45000 7.00.6000.16574 C:\WINDOWS\system32\iertutil.dll 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL 0x10000000 0x1c000 7.00.0000.0000 C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll 0x44360000 0x5cd000 7.00.6000.16574 C:\WINDOWS\system32\ieframe.dll 0x7d200000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll 0x44160000 0x127000 7.00.6000.16574 C:\WINDOWS\system32\urlmon.dll 0x442b0000 0x3c000 7.00.6000.16574 C:\WINDOWS\system32\webcheck.dll 0x5f800000 0x16000 1.01.1593.0000 C:\PROGRA~1\WIFD1F~1\MpShHook.dll 0x78130000 0x9b000 8.00.50727.0762 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCR80.dll 0x7c420000 0x87000 8.00.50727.0762 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\MSVCP80.dll 0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll 0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll 0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll 0x061f0000 0x15000 5.05.0000.0005 C:\WINDOWS\system32\SSSensor.dll 0x033b0000 0x3000 6.81.0046.0001 C:\PROGRA~1\Nokia\NOKIAP~1\Lang\ConnectionManager_fre.nlr 0x63380000 0x78000 5.07.0000.5730 C:\WINDOWS\system32\jscript.dll 0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x03e40000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x039a0000 0x35000 8.00.0000.3501 C:\Program Files\Microsoft Office\Office\soa800.dll 0x02960000 0x49000 5.08.0004.0000 C:\WINDOWS\system32\erasext.dll 0x03240000 0x9f000 5.08.0004.0000 C:\WINDOWS\system32\ERASER.dll 0x64000000 0x30000 2005.01.0001.0004 C:\PROGRA~1\Yahoo!\Common\ymmapi.dll 0x01500000 0x2b000 C:\Program Files\WinRAR\rarext.dll 0x00f20000 0x11000 7.00.0000.0010 C:\Program Files\Avira\AntiVir PersonalEdition Classic\shlext.dll 0x7c250000 0x102000 7.10.3077.0000 C:\Program Files\Avira\AntiVir PersonalEdition Classic\MFC71U.DLL 0x01530000 0x56000 7.10.3052.0004 C:\Program Files\Avira\AntiVir PersonalEdition Classic\MSVCR71.dll 0x1c000000 0x6000 1.00.0000.0001 C:\WINDOWS\system32\Layout.dll 0x01440000 0x15000 1.01.1593.0000 C:\PROGRA~1\WIFD1F~1\MpOAv.dll ListDLLs v2.25 - DLL lister for Win9x/NT Copyright © 1997-2004 Mark Russinovich Sysinternals - www.sysinternals.com ------------------------------------------------------------------------------ winlogon.exe pid: 768 Command line: winlogon.exe Base Size Version Path 0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe 0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll 0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll 0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll 0x01e10000 0xae000 1.05.0540.0000 C:\WINDOWS\system32\WgaLogon.dll 0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL 0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll 0x061f0000 0x15000 5.05.0000.0005 C:\WINDOWS\system32\SSSensor.dll Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 201C-54BA Répertoire de C:\WINDOWS\system32 20/08/2004 00:09 6 144 csrss.exe 1 fichier(s) 6 144 octets 0 Rép(s) 23 897 661 440 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 201C-54BA Répertoire de C:\WINDOWS\system32 28/07/2003 14:19 1 323 008 dmcpl.exe 1 fichier(s) 1 323 008 octets 0 Rép(s) 23 897 661 440 octets libres Contenu de Downloaded Program Files Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 201C-54BA Répertoire de C:\WINDOWS\Downloaded Program Files 16/12/2007 02:21 <REP> . 16/12/2007 02:21 <REP> .. 21/08/2007 14:37 124 208 ascstubie.dll 21/08/2007 14:25 395 ascstubie.inf 07/12/2004 17:07 32 bdcore.dll 25/05/2006 01:21 118 784 bdupd.dll 16/09/2005 12:18 65 desktop.ini 25/05/2006 01:21 53 248 ipsupd.dll 19/11/2003 23:22 740 jinstall-1_4_2_03.inf 03/05/2006 02:57 876 jinstall-1_5_0_07.inf 07/01/2007 12:55 2 305 kavwebscan.inf 16/03/2005 12:34 7 407 lang.ini 15/05/2006 17:48 367 LegitCheckControl.inf 18/07/2007 14:49 12 592 libcomm.dll 07/12/2004 17:07 32 libfn.dll 14/03/2005 14:38 126 live.ini 20/01/2000 14:25 1 162 Microsoft XML Parser for Java.osd 01/06/2006 02:57 1 331 oscan8.inf 01/06/2006 02:54 471 040 oscan8.ocx 31/05/2006 04:15 10 oscan81.ocx_x 14/03/2005 14:58 7 073 scanoptions.tsi 26/07/2006 14:44 300 SkanerOnline.inf 09/11/2006 14:36 5 019 swflash.inf 03/08/2004 13:51 293 wuweb.inf 02/11/2005 18:01 1 777 xscan.inf 02/11/2005 18:07 435 712 xscan53.ocx 24 fichier(s) 1 244 894 octets Total des fichiers listés : 24 fichier(s) 1 244 894 octets 2 Rép(s) 23 897 657 344 octets libres Recherche de rootkit! (Merci S!Ri) Recherche d'infections connues Export des clefs sensibles.. Liste des fichiers en exception sur le pare-feu XP SP2 Export de la clef SharedTaskScheduler [sharedTaskScheduler] "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui" "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant" exports des policies REGEDIT4 [system] "dontdisplaylastusername"=dword:00000000 "legalnoticecaption"="" "legalnoticetext"="" "shutdownwithoutlogon"=dword:00000001 "undockwithoutlogon"=dword:00000001 Export des clefs sensibles.. Rechercher adresses sensibles dans le fichier HOSTS... 127.0.0.1 activexupdate.com 127.0.0.1 www.activexupdate.com 127.0.0.1 avpcheckupdate.com 127.0.0.1 www.avpcheckupdate.com 127.0.0.1 client.exeupdate.com 127.0.0.1 eupdatepage.com 127.0.0.1 www.eupdatepage.com 127.0.0.1 .exeupdate.com 127.0.0.1 /exeupdate.com 127.0.0.1 www.exeupdate.com 127.0.0.1 hotwinupdates.com 127.0.0.1 www.hotwinupdates.com 127.0.0.1 lavasoftupdate.com 127.0.0.1 www.lavasoftupdate.com 127.0.0.1 .malwarewipeupdate.com 127.0.0.1 /malwarewipeupdate.com 127.0.0.1 www.malwarewipeupdate.com 127.0.0.1 msupdate.net 127.0.0.1 www.msupdate.net 127.0.0.1 msupdater.net 127.0.0.1 www.msupdater.net 127.0.0.1 necessaryupdates.com 127.0.0.1 www.necessaryupdates.com 127.0.0.1 newupdates.lzio.com 127.0.0.1 redirect.msupdate.net 127.0.0.1 search.keyword.exeupdate.com 127.0.0.1 securityupdatesite.com 127.0.0.1 www.securityupdatesite.com 127.0.0.1 settings.updatemysettings.com 127.0.0.1 spyaxeupdate.com 127.0.0.1 www.spyaxeupdate.com 127.0.0.1 spyfalconupdate.com 127.0.0.1 www.spyfalconupdate.com 127.0.0.1 systemupdates.net 127.0.0.1 www.systemupdates.net 127.0.0.1 trial.updates.winsoftware.com 127.0.0.1 updatemysettings.com 127.0.0.1 www.updatemysettings.com 127.0.0.1 updates.spywarequake.com 127.0.0.1 urgentsystemupdate.biz 127.0.0.1 www.urgentsystemupdate.biz 127.0.0.1 urgentsystemupdate.com 127.0.0.1 www.urgentsystemupdate.com 127.0.0.1 windupdates.com 127.0.0.1 update.680180.net 127.0.0.1 pandaantivirus-2007.com 127.0.0.1 www.pandaantivirus-2007.com 127.0.0.1 pandadownload-now.com 127.0.0.1 www.pandadownload-now.com 127.0.0.1 panda-hq.com 127.0.0.1 www.panda-hq.com catchme 0.3.1319 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-16 22:20:06 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden services & system hive ... [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\Application Compatibility Update] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\Intels51] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\ctxS51.sys" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\NtServicePack] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\nv] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\nv4_mini.sys" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\Q308677] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\Q312368] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\Q312370] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\System\Q315000] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg] "s1"=dword:707b1cdb "s2"=dword:852eae5d "h0"=dword:00000001 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:b1,39,97,35,c4,58,9b,a6,b7,39,fb,11,ca,89,8d,a3,aa,31,44,38,2b,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4000001] "a0"=hex:20,01,00,00,2d,81,d5,d2,aa,e0,92,ac,b5,16,57,3a,bb,c4,48,21,53,.. "khjeh"=hex:c5,a0,ed,09,ad,fb,bb,48,da,bf,48,fe,99,4e,88,07,8f,db,d9,e9,14,.. [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4000001Jf40] "khjeh"=hex:01,0d,ca,11,9a,6f,aa,fd,1a,56,6b,99,28,5f,ac,ae,d6,b9,cb,c3,ce,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\Application Compatibility Update] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\Intels51] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\ctxS51.sys" [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\NtServicePack] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\nv] "EventMessageFile"=str(2):"%SystemRoot%\System32\IoLogMsg.dll;%SystemRoot%\System32\drivers\nv4_mini.sys" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\Q308677] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\Q312368] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\Q312370] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\Eventlog\System\Q315000] "EventMessageFile"=str(2):"%SystemRoot%\System32\spmsg.dll" "TypesSupported"=dword:00000007 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4] "p0"="C:\Program Files\DAEMON Tools\" "h0"=dword:00000000 "khjeh"=hex:b1,39,97,35,c4,58,9b,a6,b7,39,fb,11,ca,89,8d,a3,aa,31,44,38,2b,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4000001] "a0"=hex:20,01,00,00,2d,81,d5,d2,aa,e0,92,ac,b5,16,57,3a,bb,c4,48,21,53,.. "khjeh"=hex:c5,a0,ed,09,ad,fb,bb,48,da,bf,48,fe,99,4e,88,07,8f,db,d9,e9,14,.. [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4000001Jf40] "khjeh"=hex:01,0d,ca,11,9a,6f,aa,fd,1a,56,6b,99,28,5f,ac,ae,d6,b9,cb,c3,ce,.. scanning hidden registry entries ... [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.1_x-ww_8d353f14\Codebases\U_Q318966] "Prompt"="Fichiers source du Q318966 pour Windows XP" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.1_x-ww_8d353f14\Files] @="GdiPlus.dll" "SHA1"=hex:d3,3a,7e,36,bf,9c,88,1e,5a,94,88,ac,e3,ee,57,de,1b,46,e4,da [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.1_x-ww_8d353f14\References] "U_Q318966"="" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.1_x-ww_9afcd574\Codebases\U_Q318966] "Prompt"="Fichiers source du Q318966 pour Windows XP" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.0.1_x-ww_9afcd574\References] "U_Q318966"="" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop] "Upgrade"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\DefaultVisualStyleOff] "InstallVisualStyle"=str(2):"" "InstallVisualStyleColor"="Windows Standard" "InstallVisualStyleSize"="Normal" [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\DefaultVisualStyleOn] "InstallVisualStyle"=str(2):"%ResourceDir%\themes\Luna\Luna.msstyles" "InstallVisualStyleColor"="NormalColor" "InstallVisualStyleSize"="NormalSize" [HKEY_CURRENT_USER\Software\Microsoft\Windows\Shell\Bags\1\Desktop] "Mode"=dword:00000001 "ScrollPos640x480(1).x"=dword:00000000 "ScrollPos640x480(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "ItemPos640x480(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,3f,02,00,00,79,.. "FFlags"=dword:00000224 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "ItemPos1024x768(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,1a,00,00,00,02,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU] "NodeSlot"=dword:00000002 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\] "NodeSlot"=dword:000000b1 "MRUListEx"=hex:06,00,00,00,0f,00,00,00,08,00,00,00,02,00,00,00,01,00,00,00,03,.. "1"=hex:42,00,31,00,00,00,00,00,67,33,13,9f,10,00,30,37,4e,4f,56,32,7e,.. "4"=hex:3a,00,31,00,00,00,00,00,b6,34,6d,3a,10,00,73,61,6e,64,72,61,00,.. "3"=hex:34,00,31,00,00,00,00,00,9f,33,4c,ba,10,00,74,65,65,6e,00,00,20,.. "0"=hex:46,00,31,00,00,00,00,00,bd,34,31,22,10,00,46,41,52,41,48,4d,7e,.. "2"=hex:36,00,31,00,00,00,00,00,84,33,f3,80,10,00,66,69,6c,6d,73,00,22,.. "5"=hex:3c,00,31,00,00,00,00,00,7b,33,5a,69,10,00,6d,75,73,69,71,75,65,.. "6"=hex:4c,00,31,00,00,00,00,00,7b,33,bc,72,10,00,44,45,53,53,49,4e,7e,.. "7"=hex:18,01,32,00,35,74,a9,01,05,33,91,85,20,00,28,35,32,39,50,49,7e,.. "8"=hex:3a,00,31,00,00,00,00,00,12,35,f1,5d,10,00,6d,65,6e,61,67,65,00,.. "9"=hex:48,00,31,00,00,00,00,00,6e,35,29,a3,10,00,32,34,35,59,4f,55,7e,.. "10"=hex:34,00,31,00,00,00,00,00,d4,34,36,64,10,00,61,62,62,79,00,00,20,.. "11"=hex:90,00,32,00,ad,be,2a,01,19,33,fb,a3,20,00,4a,45,4e,4e,59,28,7e,.. "12"=hex:06,01,32,00,e4,ec,2a,01,2f,34,2c,36,20,00,53,45,58,41,4e,44,7e,.. "13"=hex:54,01,32,00,0d,7d,67,03,6e,33,fc,8a,20,00,58,58,58,4c,41,43,7e,.. "14"=hex:48,01,31,00,00,00,00,00,86,35,20,4a,10,00,58,58,58,4c,41,43,7e,.. "15"=hex:34,00,31,00,00,00,00,00,35,33,73,97,10,00,44,43,49,4d,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\] "NodeSlot"=dword:000001bd "MRUListEx"=hex:04,00,00,00,05,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,09,.. "0"=hex:2e,00,31,00,00,00,00,00,bd,32,04,84,10,00,30,31,00,00,1c,00,03,.. "1"=hex:2e,00,31,00,00,00,00,00,d1,34,0a,ab,10,00,30,35,00,00,1c,00,03,.. "2"=hex:2e,00,31,00,00,00,00,00,d1,34,10,ab,10,00,30,36,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,d1,34,12,ab,10,00,30,37,00,00,1c,00,03,.. "4"=hex:48,00,31,00,00,00,00,00,50,35,2c,88,10,00,46,41,52,52,41,48,7e,.. "5"=hex:4e,00,31,00,00,00,00,00,50,35,29,88,10,00,46,41,52,52,41,48,7e,.. "6"=hex:30,00,31,00,00,00,00,00,bd,32,06,8c,10,00,73,31,30,00,1e,00,03,.. "7"=hex:30,00,31,00,00,00,00,00,bd,32,04,8c,10,00,73,32,30,00,1e,00,03,.. "8"=hex:30,00,31,00,00,00,00,00,bd,32,32,8c,10,00,73,32,32,00,1e,00,03,.. "9"=hex:30,00,31,00,00,00,00,00,bd,32,08,8c,10,00,73,32,34,00,1e,00,03,.. "10"=hex:30,00,31,00,00,00,00,00,bd,32,07,8c,10,00,73,32,39,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\] "NodeSlot"=dword:000001be "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1] "NodeSlot"=dword:000002bf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\10] "NodeSlot"=dword:000002d2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\2] "NodeSlot"=dword:000002c0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\3] "NodeSlot"=dword:000002c1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4] "NodeSlot"=dword:000002c2 "MRUListEx"=hex:04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,.. "0"=hex:2a,00,31,00,00,00,00,00,c9,32,67,04,10,00,31,00,1a,00,03,00,04,.. "1"=hex:2a,00,31,00,00,00,00,00,c9,32,41,05,10,00,36,00,1a,00,03,00,04,.. "2"=hex:2e,00,31,00,00,00,00,00,c9,32,72,04,10,00,31,33,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,c9,32,78,04,10,00,31,35,00,00,1c,00,03,.. "4"=hex:2e,00,31,00,00,00,00,00,c9,32,81,04,10,00,32,38,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4] "NodeSlot"=dword:000002c3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\1] "NodeSlot"=dword:000002c4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\2] "NodeSlot"=dword:000002c5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\3] "NodeSlot"=dword:000002c6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\4] "NodeSlot"=dword:000002c7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\5] "NodeSlot"=dword:000002c8 "MRUListEx"=hex:04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,.. "0"=hex:2e,00,31,00,00,00,00,00,bd,32,04,8c,10,00,30,31,00,00,1c,00,03,.. "1"=hex:2e,00,31,00,00,00,00,00,bd,32,06,8c,10,00,30,32,00,00,1c,00,03,.. "2"=hex:2e,00,31,00,00,00,00,00,bd,32,07,8c,10,00,30,33,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,bd,32,08,8c,10,00,30,34,00,00,1c,00,03,.. "4"=hex:2e,00,31,00,00,00,00,00,bd,32,32,8c,10,00,31,32,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\5] "NodeSlot"=dword:000002c9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\5\1] "NodeSlot"=dword:000002ca "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\5\2] "NodeSlot"=dword:000002cb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\5\3] "NodeSlot"=dword:000002cc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\5\4] "NodeSlot"=dword:000002cd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\6] "NodeSlot"=dword:000002ce "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\7] "NodeSlot"=dword:000002cf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8] "NodeSlot"=dword:000002d0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\9] "NodeSlot"=dword:000002d1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1] "NodeSlot"=dword:00000084 "MRUListEx"=hex:02,00,00,00,04,00,00,00,01,00,00,00,ff,ff,ff,ff "1"=hex:3a,00,31,00,00,00,00,00,67,33,30,a0,10,00,69,6d,61,67,65,73,00,.. "2"=hex:3c,00,31,00,00,00,00,00,67,33,39,a2,10,00,6f,75,73,73,61,6d,61,.. "4"=hex:56,00,35,00,00,00,00,00,67,33,c0,9c,10,00,74,00,e9,00,6c,00,e9,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\1] "NodeSlot"=dword:000000bd "MRUListEx"=hex:00,00,00,00,02,00,00,00,01,00,00,00,04,00,00,00,03,00,00,00,ff,.. "0"=hex:48,00,31,00,00,00,00,00,67,33,6a,a0,10,00,41,4e,54,41,4c,59,7e,.. "3"=hex:3a,00,31,00,00,00,00,00,8e,33,da,48,10,00,6d,6f,75,6e,69,61,00,.. "4"=hex:40,00,31,00,00,00,00,00,9b,33,79,b3,10,00,64,61,6e,69,65,6c,6c,.. "1"=hex:4c,00,31,00,00,00,00,00,11,35,44,44,10,00,4c,41,47,52,49,45,7e,.. "2"=hex:48,00,31,00,00,00,00,00,67,33,4c,a0,10,00,41,4e,54,41,4c,59,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\1] "NodeSlot"=dword:00000020 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,67,33,a0,a0,10,00,44,45,4c,56,41,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\1\] "NodeSlot"=dword:0000001a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\1\1] "NodeSlot"=dword:00000092 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\1\2] "NodeSlot"=dword:0000034b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\1\3] "NodeSlot"=dword:0000000b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\1\4] "NodeSlot"=dword:000000ed "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2] "NodeSlot"=dword:000000e5 "MRUListEx"=hex:00,00,00,00,06,00,00,00,05,00,00,00,01,00,00,00,02,00,00,00,04,.. "0"=hex:36,00,31,00,00,00,00,00,67,33,48,a2,10,00,70,65,72,73,6f,00,22,.. "1"=hex:4e,00,31,00,00,00,00,00,67,33,4c,a4,10,00,4e,4f,55,56,45,41,7e,.. "2"=hex:46,00,31,00,00,00,00,00,67,33,71,a4,10,00,4d,59,50,49,43,54,7e,.. "3"=hex:3a,00,31,00,00,00,00,00,67,33,80,a4,10,00,68,75,6d,6f,75,72,00,.. "4"=hex:4c,00,31,00,00,00,00,00,67,33,4f,a4,10,00,4e,4f,54,45,53,44,7e,.. "5"=hex:52,00,31,00,00,00,00,00,67,33,4f,9c,10,00,4d,59,52,45,43,45,7e,.. "6"=hex:3a,00,31,00,00,00,00,00,67,33,78,9c,10,00,6d,6f,76,69,65,73,00,.. "7"=hex:4a,00,31,00,00,00,00,00,67,33,85,a4,10,00,41,56,41,54,41,52,7e,.. "8"=hex:4c,00,31,00,00,00,00,00,67,33,85,a4,10,00,43,41,52,4e,45,54,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2] "NodeSlot"=dword:00000062 "MRUListEx"=hex:07,00,00,00,03,00,00,00,0d,00,00,00,12,00,00,00,16,00,00,00,11,.. "0"=hex:3a,00,31,00,00,00,00,00,67,33,dd,a2,10,00,70,68,6f,74,6f,73,00,.. "1"=hex:3a,00,31,00,00,00,00,00,67,33,65,a2,10,00,70,6f,73,74,65,64,00,.. "2"=hex:36,00,31,00,00,00,00,00,67,33,63,a2,10,00,74,6f,6f,6e,73,00,22,.. "3"=hex:36,00,31,00,00,00,00,00,67,33,38,a4,10,00,61,73,69,61,6e,00,22,.. "4"=hex:3c,00,31,00,00,00,00,00,67,33,10,a4,10,00,63,61,72,74,6f,6f,6e,.. "5"=hex:4e,00,31,00,00,00,00,00,67,33,14,a3,10,00,4e,4f,55,56,45,41,7e,.. "6"=hex:2e,00,31,00,00,00,00,00,67,33,65,a2,10,00,73,70,00,00,1c,00,03,.. "7"=hex:3a,00,31,00,00,00,00,00,67,33,51,a2,10,00,76,6f,79,65,75,72,00,.. "9"=hex:3a,00,31,00,00,00,00,00,67,33,0d,a3,10,00,6e,75,64,69,73,74,00,.. "10"=hex:3a,00,31,00,00,00,00,00,67,33,1a,a3,10,00,68,65,6e,74,61,69,00,.. "11"=hex:52,00,31,00,00,00,00,00,2e,34,9b,79,10,00,41,44,52,45,41,4d,7e,.. "12"=hex:48,00,31,00,00,00,00,00,4c,34,02,7f,10,00,53,41,4e,44,52,41,7e,.. "13"=hex:3a,00,31,00,00,00,00,00,67,33,1a,a3,10,00,67,72,61,6e,6e,79,00,.. "14"=hex:46,00,31,00,00,00,00,00,67,33,4c,a4,10,00,41,44,55,4c,54,54,7e,.. "15"=hex:3c,00,31,00,00,00,00,00,67,33,5c,a2,10,00,76,69,6e,74,61,67,65,.. "16"=hex:30,00,31,00,00,00,00,00,69,34,da,31,10,00,70,65,65,00,1e,00,03,.. "17"=hex:34,00,31,00,00,00,00,00,81,34,02,48,10,00,61,72,61,62,00,00,20,.. "18"=hex:30,00,31,00,00,00,00,00,8c,34,80,4e,10,00,70,61,6d,00,1e,00,03,.. "8"=hex:48,00,31,00,00,00,00,00,67,33,0f,9c,10,00,43,41,54,48,49,45,7e,.. "19"=hex:36,00,31,00,00,00,00,00,67,33,17,9b,10,00,6c,69,62,33,35,00,22,.. "20"=hex:36,00,31,00,00,00,00,00,67,33,1d,9b,10,00,63,65,6c,65,62,00,22,.. "21"=hex:36,00,31,00,00,00,00,00,39,35,fc,69,10,00,65,78,68,69,62,00,22,.. "22"=hex:44,00,35,00,00,00,00,00,42,35,5b,5d,10,00,6d,00,75,00,73,00,63,.. "23"=hex:34,00,31,00,00,00,00,00,67,33,61,a2,10,00,74,72,61,6e,00,00,20,.. "24"=hex:30,00,31,00,00,00,00,00,67,33,38,a4,10,00,62,6f,62,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\] "NodeSlot"=dword:00000015 "MRUListEx"=hex:05,00,00,00,04,00,00,00,03,00,00,00,02,00,00,00,00,00,00,00,01,.. "0"=hex:30,00,31,00,00,00,00,00,67,33,f7,a2,10,00,4d,53,4e,00,1e,00,03,.. "1"=hex:3c,00,31,00,00,00,00,00,67,33,f6,9a,10,00,6d,75,73,63,6c,65,73,.. "2"=hex:44,00,31,00,00,00,00,00,67,33,e7,a2,10,00,53,48,45,49,4c,41,7e,.. "3"=hex:36,00,31,00,00,00,00,00,67,33,e5,a2,10,00,7a,61,69,6c,61,00,22,.. "4"=hex:3c,00,31,00,00,00,00,00,67,33,f6,a2,10,00,6f,75,74,64,6f,6f,72,.. "5"=hex:42,00,31,00,00,00,00,00,67,33,e7,a2,10,00,50,49,53,53,41,57,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\] "NodeSlot"=dword:0000001c "MRUListEx"=hex:10,00,00,00,0f,00,00,00,0e,00,00,00,00,00,00,00,0d,00,00,00,0c,.. "0"=hex:46,00,31,00,00,00,00,00,67,33,fa,a2,10,00,53,49,4e,44,59,4c,7e,.. "1"=hex:4c,00,31,00,00,00,00,00,67,33,fb,a2,10,00,4c,41,42,41,52,42,7e,.. "2"=hex:42,00,31,00,00,00,00,00,67,33,fb,a2,10,00,4b,4a,53,4d,41,4d,7e,.. "3"=hex:4e,00,31,00,00,00,00,00,67,33,fd,a2,10,00,43,48,41,54,4f,4e,7e,.. "4"=hex:52,00,31,00,00,00,00,00,67,33,fc,a2,10,00,44,41,44,41,47,49,7e,.. "5"=hex:36,00,31,00,00,00,00,00,67,33,fc,a2,10,00,68,6f,6f,70,61,00,22,.. "6"=hex:58,00,31,00,00,00,00,00,67,33,fc,a2,10,00,4b,41,54,48,59,44,7e,.. "7"=hex:46,00,31,00,00,00,00,00,67,33,fb,a2,10,00,4b,43,37,37,31,28,7e,.. "8"=hex:44,00,31,00,00,00,00,00,67,33,fb,a2,10,00,4b,49,53,53,45,56,7e,.. "9"=hex:36,00,31,00,00,00,00,00,67,33,fb,a2,10,00,6c,61,75,72,65,00,22,.. "10"=hex:40,00,31,00,00,00,00,00,67,33,fa,a2,10,00,6d,69,63,68,65,6c,6c,.. "11"=hex:34,00,31,00,00,00,00,00,67,33,fa,a2,10,00,6d,69,6d,69,00,00,20,.. "12"=hex:34,00,31,00,00,00,00,00,67,33,fa,a2,10,00,6e,69,63,68,00,00,20,.. "13"=hex:58,00,31,00,00,00,00,00,67,33,fa,a2,10,00,53,49,4c,56,45,52,7e,.. "14"=hex:34,00,31,00,00,00,00,00,67,33,fa,a2,10,00,54,49,4d,49,00,00,20,.. "15"=hex:36,00,31,00,00,00,00,00,67,33,fa,a2,10,00,75,6c,69,37,32,00,22,.. "16"=hex:54,00,31,00,00,00,00,00,67,33,f8,a2,10,00,56,45,54,44,49,44,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\] "NodeSlot"=dword:000000e1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\1] "NodeSlot"=dword:00000352 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\10] "NodeSlot"=dword:0000040b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\11] "NodeSlot"=dword:0000040c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\12] "NodeSlot"=dword:0000040d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\13] "NodeSlot"=dword:0000040e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\14] "NodeSlot"=dword:0000040f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\15] "NodeSlot"=dword:00000410 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\16] "NodeSlot"=dword:00000411 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\2] "NodeSlot"=dword:00000403 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\3] "NodeSlot"=dword:00000404 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\4] "NodeSlot"=dword:00000405 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\5] "NodeSlot"=dword:00000406 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\6] "NodeSlot"=dword:00000407 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\7] "NodeSlot"=dword:00000408 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\8] "NodeSlot"=dword:00000409 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\9] "NodeSlot"=dword:0000040a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\1] "NodeSlot"=dword:00000146 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\2] "NodeSlot"=dword:00000412 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\3] "NodeSlot"=dword:00000413 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\4] "NodeSlot"=dword:0000042e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\\5] "NodeSlot"=dword:0000042f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1] "NodeSlot"=dword:00000038 "MRUListEx"=hex:11,00,00,00,10,00,00,00,0f,00,00,00,0e,00,00,00,05,00,00,00,06,.. "0"=hex:34,00,31,00,00,00,00,00,67,33,cd,a2,10,00,61,6e,6e,65,00,00,20,.. "1"=hex:40,00,31,00,00,00,00,00,67,33,dc,9a,10,00,31,74,6f,65,6a,65,66,.. "2"=hex:40,00,31,00,00,00,00,00,67,33,db,9a,10,00,32,33,6a,75,6e,6b,69,.. "3"=hex:3a,00,31,00,00,00,00,00,67,33,db,9a,10,00,41,4c,49,43,45,53,00,.. "4"=hex:42,00,31,00,00,00,00,00,67,33,da,9a,10,00,41,4d,59,26,42,4f,7e,.. "5"=hex:42,00,31,00,00,00,00,00,67,33,c7,9a,10,00,43,4f,55,50,4c,45,7e,.. "6"=hex:4a,00,31,00,00,00,00,00,67,33,c7,9a,10,00,43,4f,4c,4c,45,47,7e,.. "7"=hex:40,00,31,00,00,00,00,00,67,33,cc,9a,10,00,61,72,74,69,73,74,32,.. "8"=hex:42,00,31,00,00,00,00,00,67,33,cb,9a,10,00,41,53,53,42,41,4e,7e,.. "9"=hex:44,00,31,00,00,00,00,00,67,33,c9,9a,10,00,42,41,42,59,44,4f,7e,.. "10"=hex:36,00,31,00,00,00,00,00,67,33,c9,9a,10,00,62,61,63,6f,6e,00,22,.. "11"=hex:3c,00,31,00,00,00,00,00,67,33,c9,9a,10,00,62,62,77,73,79,6e,73,.. "12"=hex:48,00,31,00,00,00,00,00,67,33,c8,9a,10,00,42,55,58,4f,4d,47,7e,.. "13"=hex:44,00,31,00,00,00,00,00,67,33,c8,9a,10,00,43,41,4e,44,41,43,7e,.. "14"=hex:5c,00,31,00,00,00,00,00,67,33,c4,9a,10,00,44,41,52,4b,53,54,7e,.. "15"=hex:40,00,31,00,00,00,00,00,67,33,c3,9a,10,00,64,63,6e,6f,66,61,63,.. "16"=hex:5a,00,31,00,00,00,00,00,67,33,b6,9a,10,00,44,45,43,41,44,45,7e,.. "17"=hex:3c,00,31,00,00,00,00,00,67,33,b2,9a,10,00,64,69,7a,7a,34,39,6b,.. "18"=hex:4a,00,31,00,00,00,00,00,67,33,ac,9a,10,00,45,52,4d,41,41,4c,7e,.. "19"=hex:40,00,31,00,00,00,00,00,67,33,ab,9a,10,00,66,61,6e,74,61,73,79,.. "20"=hex:36,00,31,00,00,00,00,00,67,33,aa,9a,10,00,67,61,72,79,70,00,22,.. "21"=hex:46,00,31,00,00,00,00,00,67,33,a4,9a,10,00,49,4d,50,41,52,41,7e,.. "22"=hex:48,00,31,00,00,00,00,00,67,33,86,9a,10,00,4e,59,4c,41,54,49,7e,.. "23"=hex:3c,00,31,00,00,00,00,00,67,33,8e,9a,10,00,6d,61,69,2d,6c,69,6e,.. "24"=hex:3a,00,31,00,00,00,00,00,67,33,8e,9a,10,00,6c,6f,75,6c,6f,75,00,.. "25"=hex:48,00,31,00,00,00,00,00,67,33,96,9a,10,00,4a,41,43,4b,49,45,7e,.. "26"=hex:4a,00,31,00,00,00,00,00,67,33,8f,9a,10,00,4c,49,53,41,4c,55,7e,.. "27"=hex:40,00,31,00,00,00,00,00,67,33,90,9a,10,00,4c,49,4c,59,4c,45,7e,.. "28"=hex:4a,00,31,00,00,00,00,00,67,33,87,9a,10,00,4d,45,4c,5f,4c,49,7e,.. "29"=hex:5c,00,31,00,00,00,00,00,67,33,94,9a,10,00,4a,55,44,59,27,53,7e,.. "30"=hex:44,00,31,00,00,00,00,00,67,33,a7,9a,10,00,48,41,49,52,59,50,7e,.. "31"=hex:3a,00,31,00,00,00,00,00,67,33,95,9a,10,00,6a,61,71,37,39,32,00,.. "32"=hex:3a,00,31,00,00,00,00,00,67,33,a7,9a,10,00,67,6c,75,62,62,79,00,.. "33"=hex:42,00,31,00,00,00,00,00,67,33,a5,9a,10,00,48,4f,55,53,45,57,7e,.. "34"=hex:30,00,31,00,00,00,00,00,67,33,95,9a,10,00,6a,61,7a,00,1e,00,03,.. "35"=hex:44,00,31,00,00,00,00,00,67,33,94,9a,10,00,4a,43,57,49,4c,4c,7e,.. "36"=hex:40,00,31,00,00,00,00,00,67,33,93,9a,10,00,6b,61,6e,64,79,6d,61,.. "37"=hex:40,00,31,00,00,00,00,00,67,33,93,9a,10,00,6b,72,69,73,74,79,78,.. "38"=hex:42,00,31,00,00,00,00,00,67,33,92,9a,10,00,4c,41,4e,43,45,45,7e,.. "39"=hex:3a,00,31,00,00,00,00,00,67,33,92,9a,10,00,6c,61,70,75,73,73,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1] "NodeSlot"=dword:0000005d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\1] "NodeSlot"=dword:0000007a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\10] "NodeSlot"=dword:00000129 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\11] "NodeSlot"=dword:0000011e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\12] "NodeSlot"=dword:0000006f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\13] "NodeSlot"=dword:0000012e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\14] "NodeSlot"=dword:0000006a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\15] "NodeSlot"=dword:000000fe "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\16] "NodeSlot"=dword:00000126 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\17] "NodeSlot"=dword:00000063 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\18] "NodeSlot"=dword:000000e3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\19] "NodeSlot"=dword:00000095 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\2] "NodeSlot"=dword:00000031 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\20] "NodeSlot"=dword:00000109 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\21] "NodeSlot"=dword:00000061 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\22] "NodeSlot"=dword:00000008 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\23] "NodeSlot"=dword:0000014d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\24] "NodeSlot"=dword:00000164 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\25] "NodeSlot"=dword:0000001d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\26] "NodeSlot"=dword:000000a7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\27] "NodeSlot"=dword:00000105 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\28] "NodeSlot"=dword:00000135 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\29] "NodeSlot"=dword:000000f1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\3] "NodeSlot"=dword:000000f8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\30] "NodeSlot"=dword:00000125 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\31] "NodeSlot"=dword:00000012 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\32] "NodeSlot"=dword:00000137 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\33] "NodeSlot"=dword:00000016 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\34] "NodeSlot"=dword:0000018d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\35] "NodeSlot"=dword:00000117 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\36] "NodeSlot"=dword:0000003e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\37] "NodeSlot"=dword:00000019 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\38] "NodeSlot"=dword:000000fa "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\39] "NodeSlot"=dword:000000fd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\4] "NodeSlot"=dword:00000133 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\5] "NodeSlot"=dword:00000128 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\6] "NodeSlot"=dword:000000ef "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\7] "NodeSlot"=dword:0000005e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\8] "NodeSlot"=dword:00000030 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,67,33,cb,9a,10,00,54,45,45,4e,41,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\8] "NodeSlot"=dword:00000148 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1\9] "NodeSlot"=dword:00000188 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\10] "NodeSlot"=dword:000000ee "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:2e,00,31,00,00,00,00,00,19,35,3c,73,10,00,30,31,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\10] "NodeSlot"=dword:00000003 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\11] "NodeSlot"=dword:00000034 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:2e,00,31,00,00,00,00,00,38,35,79,6a,10,00,56,45,00,00,1c,00,03,.. "1"=hex:2e,00,31,00,00,00,00,00,38,35,25,6d,10,00,56,4f,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\11] "NodeSlot"=dword:00000209 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\11\1] "NodeSlot"=dword:0000020a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\12] "NodeSlot"=dword:0000010f "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,4c,34,60,82,10,00,76,69,72,67,69,6e,69,.. "1"=hex:34,00,31,00,00,00,00,00,4c,34,6d,83,10,00,65,6c,6c,61,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\12] "NodeSlot"=dword:000000e6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\12\1] "NodeSlot"=dword:000000d6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13] "NodeSlot"=dword:00000147 "MRUListEx"=hex:01,00,00,00,0b,00,00,00,0a,00,00,00,09,00,00,00,08,00,00,00,07,.. "0"=hex:30,00,31,00,00,00,00,00,67,33,1c,a3,10,00,30,30,31,00,1e,00,03,.. "1"=hex:34,00,31,00,00,00,00,00,68,34,45,3b,10,00,73,65,78,79,00,00,20,.. "2"=hex:2e,00,31,00,00,00,00,00,68,34,8d,42,10,00,30,31,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,69,34,84,2e,10,00,30,32,00,00,1c,00,03,.. "4"=hex:2e,00,31,00,00,00,00,00,69,34,13,30,10,00,30,33,00,00,1c,00,03,.. "5"=hex:2e,00,31,00,00,00,00,00,71,34,b5,3b,10,00,30,34,00,00,1c,00,03,.. "6"=hex:2e,00,31,00,00,00,00,00,71,34,37,3c,10,00,30,35,00,00,1c,00,03,.. "7"=hex:2e,00,31,00,00,00,00,00,71,34,6c,3d,10,00,30,36,00,00,1c,00,03,.. "8"=hex:2e,00,31,00,00,00,00,00,71,34,2e,3e,10,00,30,37,00,00,1c,00,03,.. "9"=hex:2e,00,31,00,00,00,00,00,71,34,28,40,10,00,30,38,00,00,1c,00,03,.. "10"=hex:2e,00,31,00,00,00,00,00,71,34,52,42,10,00,30,39,00,00,1c,00,03,.. "11"=hex:2e,00,31,00,00,00,00,00,71,34,d1,43,10,00,31,30,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13] "NodeSlot"=dword:0000013e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\1] "NodeSlot"=dword:0000013f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\10] "NodeSlot"=dword:0000009f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\11] "NodeSlot"=dword:00000100 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\2] "NodeSlot"=dword:0000014b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\3] "NodeSlot"=dword:000000d4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\4] "NodeSlot"=dword:000000dc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\5] "NodeSlot"=dword:000000aa "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\6] "NodeSlot"=dword:000000b6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\7] "NodeSlot"=dword:000000ce "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\8] "NodeSlot"=dword:00000050 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\13\9] "NodeSlot"=dword:00000049 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14] "NodeSlot"=dword:000000d5 "MRUListEx"=hex:0d,00,00,00,02,00,00,00,06,00,00,00,0c,00,00,00,0b,00,00,00,0a,.. "0"=hex:40,00,31,00,00,00,00,00,2e,34,fc,74,10,00,73,69,6d,70,73,6f,6e,.. "1"=hex:3a,00,31,00,00,00,00,00,6e,34,95,48,10,00,74,61,72,7a,61,6e,00,.. "2"=hex:4a,00,31,00,00,00,00,00,82,34,db,03,10,00,42,4c,41,4e,43,48,7e,.. "3"=hex:48,00,31,00,00,00,00,00,30,34,58,3a,10,00,4b,49,4d,50,4f,53,7e,.. "4"=hex:68,00,31,00,00,00,00,00,3b,34,75,3f,10,00,41,4c,49,43,45,41,7e,.. "5"=hex:3a,00,31,00,00,00,00,00,0d,35,7c,82,10,00,74,69,6e,74,69,6e,00,.. "6"=hex:56,00,31,00,00,00,00,00,11,35,1a,69,10,00,4c,45,53,49,4e,44,7e,.. "7"=hex:54,00,31,00,00,00,00,00,1b,35,2f,92,10,00,46,41,4d,49,4c,4c,7e,.. "8"=hex:3a,00,31,00,00,00,00,00,45,35,50,43,10,00,70,6f,70,65,79,65,00,.. "9"=hex:44,00,31,00,00,00,00,00,45,35,57,4c,10,00,46,55,43,4b,45,52,7e,.. "10"=hex:44,00,31,00,00,00,00,00,45,35,e8,50,10,00,4c,41,43,41,50,54,7e,.. "11"=hex:50,00,31,00,00,00,00,00,30,34,ce,33,10,00,4c,41,50,45,54,49,7e,.. "12"=hex:54,00,31,00,00,00,00,00,45,35,35,54,10,00,4e,4f,55,56,45,41,7e,.. "13"=hex:3a,00,31,00,00,00,00,00,30,34,48,3c,10,00,61,6c,61,64,69,6e,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14] "NodeSlot"=dword:00000070 "MRUListEx"=hex:02,00,00,00,04,00,00,00,06,00,00,00,05,00,00,00,03,00,00,00,00,.. "0"=hex:36,00,31,00,00,00,00,00,2f,34,dd,9b,10,00,62,64,30,30,30,00,22,.. "1"=hex:36,00,31,00,00,00,00,00,2f,34,84,99,10,00,62,64,30,30,31,00,22,.. "2"=hex:34,00,31,00,00,00,00,00,4e,34,2b,a0,10,00,62,61,72,74,00,00,20,.. "3"=hex:36,00,31,00,00,00,00,00,4e,34,00,a0,10,00,6d,61,72,67,65,00,22,.. "4"=hex:34,00,31,00,00,00,00,00,4e,34,78,9f,10,00,6c,69,73,61,00,00,20,.. "5"=hex:48,00,31,00,00,00,00,00,4e,34,09,a0,10,00,42,41,52,54,45,54,7e,.. "6"=hex:44,00,31,00,00,00,00,00,4e,34,d9,a0,10,00,4c,45,53,41,55,54,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\] "NodeSlot"=dword:000000b0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\1] "NodeSlot"=dword:000000f7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\2] "NodeSlot"=dword:000000ac "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\3] "NodeSlot"=dword:0000014a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\4] "NodeSlot"=dword:000000e7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\5] "NodeSlot"=dword:00000131 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\6] "NodeSlot"=dword:00000045 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\1] "NodeSlot"=dword:0000014c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\10] "NodeSlot"=dword:00000225 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\11] "NodeSlot"=dword:0000042b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\12] "NodeSlot"=dword:0000042c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\13] "NodeSlot"=dword:0000042d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\2] "NodeSlot"=dword:00000152 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\3] "NodeSlot"=dword:0000001b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\4] "NodeSlot"=dword:00000078 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\5] "NodeSlot"=dword:0000016a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\6] "NodeSlot"=dword:0000007f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\7] "NodeSlot"=dword:00000072 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\8] "NodeSlot"=dword:00000223 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\14\9] "NodeSlot"=dword:00000224 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\15] "NodeSlot"=dword:000000a2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\16] "0"=hex:2e,00,31,00,00,00,00,00,69,34,e0,31,10,00,30,31,00,00,1c,00,03,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000098 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\16] "NodeSlot"=dword:0000005f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\17] "NodeSlot"=dword:000000cf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\18] "NodeSlot"=dword:00000048 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,8c,34,89,4e,10,00,74,6f,72,69,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\18] "NodeSlot"=dword:000000b7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\19] "NodeSlot"=dword:00000151 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2] "NodeSlot"=dword:00000065 "MRUListEx"=hex:04,00,00,00,09,00,00,00,08,00,00,00,06,00,00,00,05,00,00,00,03,.. "0"=hex:50,00,31,00,00,00,00,00,b0,34,02,3d,10,00,53,49,5a,5a,4c,49,7e,.. "1"=hex:36,00,31,00,00,00,00,00,b0,34,51,44,10,00,6a,69,6d,6d,79,00,22,.. "2"=hex:4c,00,31,00,00,00,00,00,b2,34,ed,4c,10,00,50,4c,41,59,49,4e,7e,.. "3"=hex:3c,00,31,00,00,00,00,00,b2,34,b6,52,10,00,76,69,76,69,61,6e,61,.. "4"=hex:48,00,31,00,00,00,00,00,b2,34,ca,58,10,00,33,44,50,4f,52,4e,7e,.. "5"=hex:3a,00,31,00,00,00,00,00,b2,34,6e,5c,10,00,67,72,61,6d,6d,79,00,.. "6"=hex:3e,00,31,00,00,00,00,00,dd,34,87,5d,10,00,41,59,50,41,50,49,7e,.. "7"=hex:4c,00,31,00,00,00,00,00,0e,35,30,68,10,00,42,49,4f,4c,4f,47,7e,.. "8"=hex:58,00,31,00,00,00,00,00,38,35,55,62,10,00,42,52,4f,41,4e,44,7e,.. "9"=hex:46,00,31,00,00,00,00,00,39,35,85,32,10,00,50,41,4e,44,4f,52,7e,.. "10"=hex:4e,00,31,00,00,00,00,00,3d,35,6b,40,10,00,53,55,4d,4d,45,52,7e,.. "11"=hex:3a,00,31,00,00,00,00,00,69,36,73,4d,10,00,66,65,6d,62,6f,79,00,.. "12"=hex:34,00,31,00,00,00,00,00,6e,36,34,51,10,00,6c,69,66,65,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2] "NodeSlot"=dword:000000ec "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\1] "NodeSlot"=dword:00000136 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\10] "NodeSlot"=dword:00000212 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\11] "NodeSlot"=dword:00000448 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\12] "NodeSlot"=dword:00000474 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\2] "NodeSlot"=dword:00000064 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\3] "NodeSlot"=dword:0000002a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\4] "NodeSlot"=dword:00000004 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\5] "NodeSlot"=dword:00000037 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\6] "0"=hex:2a,00,31,00,00,00,00,00,dd,34,91,5d,10,00,36,00,1a,00,03,00,04,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000480 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\6] "NodeSlot"=dword:0000002f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\7] "NodeSlot"=dword:000000b5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\8] "NodeSlot"=dword:00000208 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2\9] "NodeSlot"=dword:0000020b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\20] "NodeSlot"=dword:000001ee "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\21] "0"=hex:4c,00,31,00,00,00,00,00,39,35,02,6a,10,00,53,41,4e,44,52,41,7e,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000216 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\21] "NodeSlot"=dword:0000020d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\22] "NodeSlot"=dword:00000217 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\23] "NodeSlot"=dword:000003ff "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\24] "NodeSlot"=dword:00000400 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,67,33,38,a4,10,00,6d,61,75,72,69,6e,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\24] "NodeSlot"=dword:00000401 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3] "NodeSlot"=dword:00000047 "MRUListEx"=hex:05,00,00,00,04,00,00,00,03,00,00,00,0a,00,00,00,01,00,00,00,00,.. "0"=hex:3c,00,31,00,00,00,00,00,67,33,47,a4,10,00,70,68,6f,74,6f,31,31,.. "1"=hex:3c,00,31,00,00,00,00,00,67,33,48,a4,10,00,70,68,6f,74,6f,31,30,.. "3"=hex:3a,00,31,00,00,00,00,00,67,33,49,a4,10,00,70,68,6f,74,6f,31,00,.. "4"=hex:3a,00,31,00,00,00,00,00,67,33,46,a4,10,00,70,68,6f,74,6f,32,00,.. "5"=hex:3a,00,31,00,00,00,00,00,67,33,43,a4,10,00,70,68,6f,74,6f,33,00,.. "6"=hex:3a,00,31,00,00,00,00,00,67,33,41,a4,10,00,70,68,6f,74,6f,34,00,.. "7"=hex:3a,00,31,00,00,00,00,00,67,33,3d,a4,10,00,70,68,6f,74,6f,35,00,.. "8"=hex:3a,00,31,00,00,00,00,00,67,33,3b,a4,10,00,70,68,6f,74,6f,36,00,.. "9"=hex:3a,00,31,00,00,00,00,00,67,33,3a,a4,10,00,70,68,6f,74,6f,37,00,.. "10"=hex:2a,00,31,00,00,00,00,00,67,33,4a,a4,10,00,6c,00,1a,00,03,00,04,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3] "NodeSlot"=dword:00000044 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3\1] "NodeSlot"=dword:00000110 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3\10] "NodeSlot"=dword:00000075 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3\3] "NodeSlot"=dword:00000071 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3\4] "NodeSlot"=dword:000000ba "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3\5] "NodeSlot"=dword:00000040 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3\6] "NodeSlot"=dword:0000008d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3\7] "NodeSlot"=dword:00000096 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3\8] "NodeSlot"=dword:00000099 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3\9] "NodeSlot"=dword:0000009b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4] "NodeSlot"=dword:00000046 "MRUListEx"=hex:25,00,00,00,24,00,00,00,23,00,00,00,22,00,00,00,21,00,00,00,20,.. "0"=hex:4c,00,31,00,00,00,00,00,88,33,73,52,10,00,54,48,45,43,48,41,7e,.. "1"=hex:2e,00,31,00,00,00,00,00,88,33,c3,55,10,00,73,7a,00,00,1c,00,03,.. "2"=hex:2e,00,31,00,00,00,00,00,2c,34,13,60,10,00,67,6a,00,00,1c,00,03,.. "3"=hex:34,00,31,00,00,00,00,00,2c,34,f9,62,10,00,6a,67,66,64,00,00,20,.. "4"=hex:30,00,31,00,00,00,00,00,2c,34,98,64,10,00,64,66,6a,00,1e,00,03,.. "5"=hex:52,00,31,00,00,00,00,00,67,33,14,a4,10,00,54,48,45,52,41,59,7e,.. "6"=hex:34,00,31,00,00,00,00,00,2c,34,d8,66,10,00,64,67,68,6a,00,00,20,.. "7"=hex:2e,00,31,00,00,00,00,00,67,33,32,a4,10,00,64,31,00,00,1c,00,03,.. "8"=hex:30,00,31,00,00,00,00,00,30,34,b8,30,10,00,64,67,6b,00,1e,00,03,.. "9"=hex:2a,00,31,00,00,00,00,00,67,33,37,a4,10,00,61,00,1a,00,03,00,04,.. "10"=hex:2e,00,31,00,00,00,00,00,67,33,37,9c,10,00,61,31,00,00,1c,00,03,.. "11"=hex:4e,00,31,00,00,00,00,00,b0,34,71,4a,10,00,53,49,58,47,55,4e,7e,.. "12"=hex:2a,00,31,00,00,00,00,00,67,33,35,a4,10,00,62,00,1a,00,03,00,04,.. "13"=hex:2e,00,31,00,00,00,00,00,67,33,35,a4,10,00,62,31,00,00,1c,00,03,.. "14"=hex:2a,00,31,00,00,00,00,00,67,33,33,a4,10,00,63,00,1a,00,03,00,04,.. "15"=hex:2e,00,31,00,00,00,00,00,67,33,33,a4,10,00,63,31,00,00,1c,00,03,.. "16"=hex:2a,00,31,00,00,00,00,00,67,33,32,a4,10,00,64,00,1a,00,03,00,04,.. "17"=hex:2a,00,31,00,00,00,00,00,67,33,31,a4,10,00,65,00,1a,00,03,00,04,.. "18"=hex:2e,00,31,00,00,00,00,00,67,33,30,a4,10,00,65,31,00,00,1c,00,03,.. "19"=hex:2a,00,31,00,00,00,00,00,67,33,2f,a4,10,00,66,00,1a,00,03,00,04,.. "20"=hex:2e,00,31,00,00,00,00,00,67,33,2f,a4,10,00,66,31,00,00,1c,00,03,.. "21"=hex:2a,00,31,00,00,00,00,00,67,33,2e,a4,10,00,67,00,1a,00,03,00,04,.. "22"=hex:2e,00,31,00,00,00,00,00,67,33,2e,a4,10,00,67,31,00,00,1c,00,03,.. "23"=hex:2a,00,31,00,00,00,00,00,67,33,2d,a4,10,00,68,00,1a,00,03,00,04,.. "24"=hex:2a,00,31,00,00,00,00,00,67,33,2c,a4,10,00,69,00,1a,00,03,00,04,.. "25"=hex:2e,00,31,00,00,00,00,00,67,33,2b,a4,10,00,69,31,00,00,1c,00,03,.. "26"=hex:2a,00,31,00,00,00,00,00,67,33,2a,a4,10,00,6a,00,1a,00,03,00,04,.. "27"=hex:2e,00,31,00,00,00,00,00,67,33,29,a4,10,00,6a,27,00,00,1c,00,03,.. "28"=hex:2e,00,31,00,00,00,00,00,67,33,28,a4,10,00,6a,6a,00,00,1c,00,03,.. "29"=hex:2a,00,31,00,00,00,00,00,67,33,27,a4,10,00,6b,00,1a,00,03,00,04,.. "30"=hex:2e,00,31,00,00,00,00,00,67,33,27,a4,10,00,6b,6b,00,00,1c,00,03,.. "31"=hex:2a,00,31,00,00,00,00,00,67,33,26,a4,10,00,6c,00,1a,00,03,00,04,.. "32"=hex:2a,00,31,00,00,00,00,00,67,33,25,a4,10,00,6d,00,1a,00,03,00,04,.. "33"=hex:2e,00,31,00,00,00,00,00,67,33,24,a4,10,00,6d,6d,00,00,1c,00,03,.. "34"=hex:2a,00,31,00,00,00,00,00,67,33,23,a4,10,00,6e,00,1a,00,03,00,04,.. "35"=hex:2a,00,31,00,00,00,00,00,67,33,22,a4,10,00,6f,00,1a,00,03,00,04,.. "36"=hex:2e,00,31,00,00,00,00,00,67,33,20,a4,10,00,6f,6f,00,00,1c,00,03,.. "37"=hex:2a,00,31,00,00,00,00,00,67,33,1d,a4,10,00,70,00,1a,00,03,00,04,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4] "NodeSlot"=dword:000000e0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\1] "NodeSlot"=dword:000000e4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\10] "NodeSlot"=dword:0000001e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\11] "NodeSlot"=dword:00000145 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:2a,00,31,00,00,00,00,00,b0,34,7b,4a,10,00,31,00,1a,00,03,00,04,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\11] "NodeSlot"=dword:0000000d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\12] "NodeSlot"=dword:0000042a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\13] "NodeSlot"=dword:0000044a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\14] "NodeSlot"=dword:0000044b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\15] "NodeSlot"=dword:0000044c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\16] "NodeSlot"=dword:0000044d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\17] "NodeSlot"=dword:0000044e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\18] "NodeSlot"=dword:0000044f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\19] "NodeSlot"=dword:00000450 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\2] "NodeSlot"=dword:0000005b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\20] "NodeSlot"=dword:00000451 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\21] "NodeSlot"=dword:00000452 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\22] "NodeSlot"=dword:00000453 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\23] "NodeSlot"=dword:00000454 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\24] "NodeSlot"=dword:00000455 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\25] "NodeSlot"=dword:00000456 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\26] "NodeSlot"=dword:00000457 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\27] "NodeSlot"=dword:00000458 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\28] "NodeSlot"=dword:00000459 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\29] "NodeSlot"=dword:0000045a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\3] "NodeSlot"=dword:00000089 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\30] "NodeSlot"=dword:0000045b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\31] "NodeSlot"=dword:0000045c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\32] "NodeSlot"=dword:0000045d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\33] "NodeSlot"=dword:0000045e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\34] "NodeSlot"=dword:0000045f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\35] "NodeSlot"=dword:00000460 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\36] "NodeSlot"=dword:00000461 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\37] "NodeSlot"=dword:00000462 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\4] "NodeSlot"=dword:000000a0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\5] "NodeSlot"=dword:000000a1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\6] "NodeSlot"=dword:00000033 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:2a,00,31,00,00,00,00,00,2c,34,30,68,10,00,61,00,1a,00,03,00,04,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\6] "NodeSlot"=dword:00000140 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\7] "NodeSlot"=dword:00000186 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\8] "NodeSlot"=dword:0000014f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4\9] "NodeSlot"=dword:000000a8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\5] "NodeSlot"=dword:0000003c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\6] "NodeSlot"=dword:000000bc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7] "NodeSlot"=dword:00000018 "MRUListEx"=hex:03,00,00,00,00,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,31,00,00,00,00,00,67,33,57,a2,10,00,4e,4f,55,56,45,41,7e,.. "1"=hex:56,00,31,00,00,00,00,00,67,33,56,a2,10,00,4e,4f,55,56,45,41,7e,.. "2"=hex:56,00,31,00,00,00,00,00,67,33,55,a2,10,00,4e,4f,55,56,45,41,7e,.. "3"=hex:36,00,31,00,00,00,00,00,7c,34,e4,20,10,00,70,6c,61,67,65,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7] "NodeSlot"=dword:00000161 "MRUListEx"=hex:04,00,00,00,01,00,00,00,00,00,00,00,03,00,00,00,02,00,00,00,ff,.. "0"=hex:30,00,31,00,00,00,00,00,67,33,58,a2,10,00,69,73,61,00,1e,00,03,.. "1"=hex:40,00,31,00,00,00,00,00,45,34,16,9f,10,00,64,65,6c,70,68,69,6e,.. "2"=hex:40,00,35,00,00,00,00,00,4c,34,d9,59,10,00,63,00,e9,00,6c,00,69,.. "3"=hex:40,00,31,00,00,00,00,00,8b,34,fd,85,10,00,63,6c,61,75,64,69,6e,.. "4"=hex:3c,00,31,00,00,00,00,00,c8,34,16,4b,10,00,76,6f,69,73,69,6e,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7\] "NodeSlot"=dword:0000004f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7\1] "NodeSlot"=dword:000000f6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7\2] "NodeSlot"=dword:000000f4 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:ec,00,31,00,00,00,00,00,4c,34,e5,59,10,00,4d,41,4c,49,4b,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7\2] "NodeSlot"=dword:000000d3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7\3] "NodeSlot"=dword:00000027 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7\4] "NodeSlot"=dword:0000012b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7\1] "NodeSlot"=dword:0000007c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7\2] "NodeSlot"=dword:00000142 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7\3] "NodeSlot"=dword:0000000e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\8] "NodeSlot"=dword:00000108 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\9] "NodeSlot"=dword:00000097 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\1] "NodeSlot"=dword:00000153 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2] "NodeSlot"=dword:000000e9 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:2e,00,31,00,00,00,00,00,67,33,78,a4,10,00,69,73,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\2] "NodeSlot"=dword:00000370 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\3] "NodeSlot"=dword:000000d0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\4] "NodeSlot"=dword:00000051 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\5] "NodeSlot"=dword:0000018f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,67,33,70,a4,10,00,4b,41,54,59,4d,49,4d,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\5] "NodeSlot"=dword:00000430 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\6] "NodeSlot"=dword:00000090 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7] "NodeSlot"=dword:00000350 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:5a,00,31,00,00,00,00,00,67,33,87,a4,10,00,43,4f,52,49,4e,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\7] "NodeSlot"=dword:00000351 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\2\8] "NodeSlot"=dword:00000392 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4] "NodeSlot"=dword:00000119 "MRUListEx"=hex:04,00,00,00,03,00,00,00,01,00,00,00,02,00,00,00,00,00,00,00,ff,.. "0"=hex:42,00,31,00,00,00,00,00,67,33,c6,9c,10,00,45,4d,4f,54,49,43,7e,.. "1"=hex:3c,00,31,00,00,00,00,00,67,33,cf,9c,10,00,61,76,61,74,61,72,73,.. "2"=hex:4a,00,31,00,00,00,00,00,67,33,ca,9c,10,00,43,4c,49,4e,53,44,7e,.. "3"=hex:42,00,31,00,00,00,00,00,cc,34,e2,5e,10,00,50,48,4f,54,4f,53,7e,.. "4"=hex:84,00,31,00,00,00,00,00,d1,34,d2,4b,10,00,41,2d,50,41,54,43,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4] "NodeSlot"=dword:0000009d "MRUListEx"=hex:00,00,00,00,02,00,00,00,04,00,00,00,01,00,00,00,03,00,00,00,ff,.. "0"=hex:3a,00,31,00,00,00,00,00,67,33,c9,9c,10,00,66,6c,65,75,72,73,00,.. "1"=hex:34,00,31,00,00,00,00,00,67,33,c6,9c,10,00,6c,6f,76,65,00,00,20,.. "2"=hex:36,00,31,00,00,00,00,00,67,33,c9,9c,10,00,63,6f,72,70,73,00,22,.. "3"=hex:30,00,31,00,00,00,00,00,67,33,c7,9c,10,00,68,6f,74,00,1e,00,03,.. "4"=hex:3c,00,31,00,00,00,00,00,67,33,c6,9c,10,00,73,69,6d,70,73,6f,6e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\] "NodeSlot"=dword:000000de "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\1] "NodeSlot"=dword:00000138 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\2] "NodeSlot"=dword:00000091 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\3] "NodeSlot"=dword:000000ea "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\4] "NodeSlot"=dword:00000154 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\1] "NodeSlot"=dword:00000088 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,67,33,cf,9c,10,00,73,69,6d,70,73,6f,6e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\1] "NodeSlot"=dword:0000000a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\2] "NodeSlot"=dword:00000073 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\3] "NodeSlot"=dword:0000011a "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,31,00,00,00,00,00,04,33,ae,29,10,00,43,52,41,43,4b,45,7e,.. "1"=hex:6c,00,31,00,00,00,00,00,f3,32,82,12,10,00,41,44,4f,42,45,50,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\3] "NodeSlot"=dword:00000189 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\3\1] "NodeSlot"=dword:0000015c "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,31,00,00,00,00,00,f2,32,a7,a5,30,00,41,44,4f,42,45,28,7e,.. "1"=hex:34,00,31,00,00,00,00,00,f2,32,94,a5,30,00,41,49,44,45,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\3\1] "NodeSlot"=dword:0000015e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\3\1\1] "NodeSlot"=dword:0000017d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\1\4\4] "NodeSlot"=dword:00000103 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\10] "NodeSlot"=dword:000002ac "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:44,00,31,00,00,00,00,00,d2,32,9a,ba,10,00,41,42,42,59,4d,4f,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\10] "NodeSlot"=dword:000002ad "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:5a,00,31,00,00,00,00,00,d3,32,4c,4f,10,00,38,31,54,4f,31,32,7e,.. "1"=hex:5a,00,31,00,00,00,00,00,d3,32,57,4f,10,00,31,36,31,54,4f,31,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\10\] "NodeSlot"=dword:000002ae "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\10\1] "NodeSlot"=dword:000002be "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\11] "NodeSlot"=dword:000002af "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,a8,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. "1"=hex:54,00,b5,01,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\11] "NodeSlot"=dword:000002b0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\11\1] "NodeSlot"=dword:000002b1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\12] "NodeSlot"=dword:000002b2 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,17,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\12] "NodeSlot"=dword:000002b3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\13] "NodeSlot"=dword:000002dc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\14] "NodeSlot"=dword:000002dd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\15] "0"=hex:40,00,31,00,00,00,00,00,35,33,73,97,10,00,31,30,30,5f,46,55,4a,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\15] "NodeSlot"=dword:00000572 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\2] "NodeSlot"=dword:000001df "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,70,35,af,53,10,00,50,52,49,53,4f,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\2] "NodeSlot"=dword:00000299 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,87,36,12,3d,10,00,53,41,49,53,4f,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\2\] "NodeSlot"=dword:0000048a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\3] "0"=hex:34,00,31,00,00,00,00,00,39,34,e0,35,10,00,68,61,72,64,00,00,20,.. "MRUListEx"=hex:00,00,00,00,02,00,00,00,03,00,00,00,05,00,00,00,01,00,00,00,04,.. "NodeSlot"=dword:00000155 "1"=hex:46,00,31,00,00,00,00,00,39,34,ce,35,10,00,53,50,59,45,54,53,7e,.. "2"=hex:34,00,31,00,00,00,00,00,ce,34,8b,33,10,00,70,74,68,63,00,00,20,.. "3"=hex:30,00,31,00,00,00,00,00,4b,33,c3,96,10,00,30,34,37,00,1e,00,03,.. "4"=hex:44,00,31,00,00,00,00,00,4b,33,c3,96,10,00,41,4d,45,4c,49,41,7e,.. "5"=hex:3a,00,31,00,00,00,00,00,14,35,99,71,10,00,68,65,6e,74,61,69,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\3] "NodeSlot"=dword:000000cc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\3\1] "NodeSlot"=dword:00000143 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\3\2] "NodeSlot"=dword:000000c3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\3\3] "NodeSlot"=dword:00000054 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\3\4] "NodeSlot"=dword:00000118 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\3\5] "NodeSlot"=dword:000000c2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4] "NodeSlot"=dword:00000144 "MRUListEx"=hex:02,00,00,00,01,00,00,00,23,00,00,00,22,00,00,00,21,00,00,00,1d,.. "9"=hex:48,00,31,00,00,00,00,00,d9,32,ea,40,10,00,53,41,4e,44,52,41,7e,.. "17"=hex:56,00,31,00,00,00,00,00,b6,34,e5,3a,10,00,54,4f,50,4c,45,53,7e,.. "29"=hex:3e,00,31,00,00,00,00,00,cc,34,f6,24,10,00,53,45,54,31,39,38,7e,.. "30"=hex:84,00,31,00,00,00,00,00,cc,34,93,b5,10,00,53,41,35,44,46,45,7e,.. "0"=hex:68,00,31,00,00,00,00,00,93,30,33,b4,10,00,53,41,4e,44,52,41,7e,.. "1"=hex:9e,00,31,00,00,00,00,00,68,34,a2,4a,10,00,28,48,55,53,53,59,7e,.. "4"=hex:3e,00,31,00,00,00,00,00,bc,34,f8,44,10,00,53,45,54,31,35,30,7e,.. "2"=hex:30,00,31,00,00,00,00,00,47,34,58,8c,10,00,31,38,30,00,1e,00,03,.. "3"=hex:48,00,31,00,00,00,00,00,67,31,75,4f,10,00,53,41,45,33,38,35,7e,.. "5"=hex:3e,00,31,00,00,00,00,00,cd,34,ed,89,10,00,53,45,54,30,37,37,7e,.. "6"=hex:c4,00,31,00,00,00,00,00,53,31,8a,44,10,00,53,41,45,31,34,43,7e,.. "7"=hex:98,00,31,00,00,00,00,00,bd,34,09,29,10,00,53,41,4e,44,52,41,7e,.. "8"=hex:44,00,31,00,00,00,00,00,2b,34,94,a5,10,00,53,41,4e,44,52,41,7e,.. "10"=hex:92,00,31,00,00,00,00,00,ce,32,ef,8b,10,00,53,41,4e,44,52,41,7e,.. "11"=hex:3e,00,31,00,00,00,00,00,c9,34,62,30,10,00,53,45,54,31,37,39,7e,.. "12"=hex:3e,00,31,00,00,00,00,00,ca,34,35,4d,10,00,53,45,54,31,38,32,7e,.. "13"=hex:86,00,31,00,00,00,00,00,d9,32,ea,48,10,00,53,41,4e,44,52,41,7e,.. "14"=hex:60,00,31,00,00,00,00,00,bc,34,bd,46,10,00,53,41,37,45,31,33,7e,.. "15"=hex:60,00,31,00,00,00,00,00,bc,34,84,46,10,00,53,41,43,45,33,31,7e,.. "16"=hex:60,00,31,00,00,00,00,00,bc,34,65,44,10,00,53,41,45,45,34,33,7e,.. "18"=hex:60,00,31,00,00,00,00,00,b7,34,b6,29,10,00,53,41,43,45,42,41,7e,.. "19"=hex:66,00,31,00,00,00,00,00,b7,34,c3,56,10,00,53,41,34,31,38,41,7e,.. "20"=hex:a6,00,31,00,00,00,00,00,b6,34,e5,42,10,00,53,41,4e,44,52,41,7e,.. "21"=hex:60,00,31,00,00,00,00,00,84,34,aa,39,10,00,53,41,31,44,42,31,7e,.. "22"=hex:60,00,31,00,00,00,00,00,84,34,95,36,10,00,53,41,32,44,42,31,7e,.. "23"=hex:60,00,31,00,00,00,00,00,84,34,67,2f,10,00,53,41,44,43,43,31,7e,.. "24"=hex:60,00,31,00,00,00,00,00,84,34,15,35,10,00,53,41,42,43,43,31,7e,.. "25"=hex:60,00,31,00,00,00,00,00,84,34,5b,38,10,00,53,41,43,43,43,31,7e,.. "26"=hex:60,00,31,00,00,00,00,00,84,34,ba,32,10,00,53,41,44,43,43,31,7e,.. "27"=hex:60,00,31,00,00,00,00,00,85,34,44,33,10,00,53,41,32,44,43,31,7e,.. "28"=hex:30,00,31,00,00,00,00,00,c7,34,1a,ab,10,00,53,45,54,00,1e,00,03,.. "31"=hex:3e,00,31,00,00,00,00,00,cd,34,1a,92,10,00,53,45,54,30,33,39,7e,.. "32"=hex:3e,00,31,00,00,00,00,00,cb,34,97,70,10,00,53,45,54,30,34,32,7e,.. "33"=hex:3e,00,31,00,00,00,00,00,cb,34,6f,70,10,00,53,45,54,32,30,38,7e,.. "34"=hex:3a,00,31,00,00,00,00,00,c7,34,c5,29,10,00,76,69,64,65,6f,73,00,.. "35"=hex:f0,00,31,00,00,00,00,00,67,31,75,57,10,00,28,28,45,55,52,4f,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4] "NodeSlot"=dword:00000168 "MRUListEx"=hex:14,00,00,00,13,00,00,00,12,00,00,00,11,00,00,00,10,00,00,00,0f,.. "0"=hex:2e,00,31,00,00,00,00,00,93,30,fc,63,30,00,30,31,00,00,1c,00,03,.. "1"=hex:2e,00,31,00,00,00,00,00,93,30,00,64,30,00,30,32,00,00,1c,00,03,.. "2"=hex:2e,00,31,00,00,00,00,00,93,30,03,64,30,00,30,33,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,93,30,04,64,30,00,30,34,00,00,1c,00,03,.. "4"=hex:2e,00,31,00,00,00,00,00,93,30,05,64,30,00,30,35,00,00,1c,00,03,.. "5"=hex:2e,00,31,00,00,00,00,00,93,30,08,64,30,00,30,36,00,00,1c,00,03,.. "6"=hex:2e,00,31,00,00,00,00,00,93,30,09,64,30,00,30,37,00,00,1c,00,03,.. "7"=hex:2e,00,31,00,00,00,00,00,93,30,0a,64,30,00,30,38,00,00,1c,00,03,.. "8"=hex:2e,00,31,00,00,00,00,00,93,30,0c,64,30,00,30,39,00,00,1c,00,03,.. "9"=hex:2e,00,31,00,00,00,00,00,93,30,0d,64,30,00,31,30,00,00,1c,00,03,.. "10"=hex:2e,00,31,00,00,00,00,00,93,30,5a,62,30,00,31,31,00,00,1c,00,03,.. "11"=hex:2e,00,31,00,00,00,00,00,93,30,5b,62,30,00,31,32,00,00,1c,00,03,.. "12"=hex:2e,00,31,00,00,00,00,00,93,30,5d,62,30,00,31,33,00,00,1c,00,03,.. "13"=hex:42,00,31,00,00,00,00,00,93,30,61,62,30,00,31,33,5f,42,4f,4e,7e,.. "14"=hex:2e,00,31,00,00,00,00,00,93,30,64,62,30,00,31,34,00,00,1c,00,03,.. "15"=hex:2e,00,31,00,00,00,00,00,93,30,6c,62,30,00,31,35,00,00,1c,00,03,.. "16"=hex:2e,00,31,00,00,00,00,00,93,30,6f,62,30,00,31,36,00,00,1c,00,03,.. "17"=hex:2e,00,31,00,00,00,00,00,93,30,73,62,30,00,31,37,00,00,1c,00,03,.. "18"=hex:2e,00,31,00,00,00,00,00,93,30,7a,62,30,00,31,38,00,00,1c,00,03,.. "19"=hex:2e,00,31,00,00,00,00,00,93,30,8c,62,30,00,31,39,00,00,1c,00,03,.. "20"=hex:2e,00,31,00,00,00,00,00,93,30,93,62,30,00,32,30,00,00,1c,00,03,.. "21"=hex:6c,00,31,00,00,00,00,00,09,2f,4f,b9,10,00,34,31,52,55,53,53,7e,.. "22"=hex:5e,00,31,00,00,00,00,00,93,30,bb,b3,10,00,49,44,47,45,4e,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\] "NodeSlot"=dword:00000167 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\1] "NodeSlot"=dword:00000166 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\10] "NodeSlot"=dword:0000011d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\11] "NodeSlot"=dword:000000ff "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\12] "NodeSlot"=dword:0000011c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\13] "NodeSlot"=dword:00000120 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\14] "NodeSlot"=dword:00000067 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\15] "NodeSlot"=dword:00000123 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\16] "NodeSlot"=dword:00000124 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\17] "NodeSlot"=dword:0000007b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\18] "NodeSlot"=dword:0000015b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\19] "NodeSlot"=dword:00000121 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\2] "NodeSlot"=dword:00000183 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\20] "NodeSlot"=dword:00000115 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21] "NodeSlot"=dword:000000a4 "MRUListEx"=hex:09,00,00,00,08,00,00,00,07,00,00,00,06,00,00,00,05,00,00,00,04,.. "2"=hex:4a,00,31,00,00,00,00,00,dd,2e,0e,00,10,00,47,41,4c,4c,45,52,7e,.. "3"=hex:4a,00,31,00,00,00,00,00,dc,2e,69,bf,10,00,47,41,4c,4c,45,52,7e,.. "4"=hex:4a,00,31,00,00,00,00,00,d6,2e,d0,12,10,00,47,41,38,45,44,31,7e,.. "5"=hex:4a,00,31,00,00,00,00,00,d8,2e,15,0e,10,00,47,41,38,45,45,31,7e,.. "6"=hex:4a,00,31,00,00,00,00,00,dc,2e,a1,bb,10,00,47,41,38,45,46,31,7e,.. "7"=hex:4a,00,31,00,00,00,00,00,dc,2e,d4,bb,10,00,47,41,38,45,30,32,7e,.. "8"=hex:4a,00,31,00,00,00,00,00,dc,2e,93,b6,10,00,47,41,42,36,32,32,7e,.. "9"=hex:4a,00,31,00,00,00,00,00,d8,2e,73,0b,10,00,47,41,42,36,33,32,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21\2] "NodeSlot"=dword:00000169 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21\3] "NodeSlot"=dword:00000157 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21\4] "NodeSlot"=dword:00000010 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21\5] "NodeSlot"=dword:00000013 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21\6] "NodeSlot"=dword:00000014 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21\7] "NodeSlot"=dword:000000c8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21\8] "NodeSlot"=dword:000000fb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21\9] "NodeSlot"=dword:00000024 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\22] "NodeSlot"=dword:000000a3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\3] "NodeSlot"=dword:00000182 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\4] "NodeSlot"=dword:00000181 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\5] "NodeSlot"=dword:0000013d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\6] "NodeSlot"=dword:00000106 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\7] "NodeSlot"=dword:00000060 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\8] "NodeSlot"=dword:00000139 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\9] "NodeSlot"=dword:0000013a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\1] "NodeSlot"=dword:00000149 "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:54,00,31,00,00,00,00,00,68,34,70,4a,10,00,56,45,52,53,43,48,7e,.. "1"=hex:68,00,31,00,00,00,00,00,68,34,06,4a,10,00,53,41,4e,44,52,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\1] "NodeSlot"=dword:000000e2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\1\1] "NodeSlot"=dword:0000004e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\10] "NodeSlot"=dword:00000356 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\11] "NodeSlot"=dword:00000357 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\12] "NodeSlot"=dword:00000358 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\13] "NodeSlot"=dword:00000359 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\14] "NodeSlot"=dword:0000035a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\15] "NodeSlot"=dword:000003e0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\16] "NodeSlot"=dword:000003e1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\17] "NodeSlot"=dword:0000012a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\18] "NodeSlot"=dword:000003e2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\19] "NodeSlot"=dword:000003e3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\2] "NodeSlot"=dword:000001ba "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\20] "NodeSlot"=dword:000003e4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\21] "NodeSlot"=dword:000003e5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\22] "NodeSlot"=dword:000003e6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\23] "NodeSlot"=dword:000003e7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\24] "NodeSlot"=dword:000003e8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\25] "NodeSlot"=dword:000003e9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\26] "NodeSlot"=dword:000003ea "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\27] "NodeSlot"=dword:000003eb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\28] "NodeSlot"=dword:000003ec "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\29] "NodeSlot"=dword:000000a5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\3] "NodeSlot"=dword:000001bb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\30] "NodeSlot"=dword:0000018a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\31] "NodeSlot"=dword:000003ed "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\32] "NodeSlot"=dword:000003ee "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\33] "NodeSlot"=dword:000003ef "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\34] "NodeSlot"=dword:000003f0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\35] "NodeSlot"=dword:000003f1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\4] "NodeSlot"=dword:000000eb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\5] "NodeSlot"=dword:000001bc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\6] "NodeSlot"=dword:00000353 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\7] "NodeSlot"=dword:00000354 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\8] "NodeSlot"=dword:00000355 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\4\9] "NodeSlot"=dword:0000008e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\5] "NodeSlot"=dword:000001e2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\6] "NodeSlot"=dword:000001ef "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\7] "NodeSlot"=dword:000002a0 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,8a,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. "1"=hex:4a,00,8b,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\7] "NodeSlot"=dword:000002a1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\7\1] "NodeSlot"=dword:000002a2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8] "NodeSlot"=dword:000002a3 "MRUListEx"=hex:01,00,00,00,05,00,00,00,0d,00,00,00,0c,00,00,00,02,00,00,00,0b,.. "0"=hex:36,00,31,00,00,00,00,00,6e,35,3c,a5,10,00,41,44,4f,42,45,00,22,.. "1"=hex:56,00,31,00,00,00,00,00,6e,35,c3,a3,11,00,4d,45,53,49,4d,41,7e,.. "2"=hex:3c,00,31,00,00,00,00,00,6e,35,49,a3,10,00,6e,69,63,65,6f,6c,64,.. "3"=hex:50,00,32,00,73,69,42,00,63,34,b1,46,20,00,30,46,37,46,38,37,7e,.. "4"=hex:36,00,31,00,00,00,00,00,6e,35,41,a5,10,00,64,61,69,73,79,00,22,.. "5"=hex:34,00,31,00,00,00,00,00,6e,35,a1,a3,10,00,63,75,74,65,00,00,20,.. "6"=hex:46,00,31,00,00,00,00,00,6e,35,89,a3,10,00,4d,59,50,49,43,54,7e,.. "7"=hex:3a,00,31,00,00,00,00,00,6e,35,45,a3,10,00,61,67,61,6c,61,68,00,.. "8"=hex:3c,00,31,00,00,00,00,00,6e,35,1a,a5,10,00,62,6c,6f,77,6a,6f,62,.. "9"=hex:36,00,31,00,00,00,00,00,6e,35,c3,a3,10,00,48,45,4c,4c,4f,00,22,.. "10"=hex:34,00,31,00,00,00,00,00,6e,35,64,a3,10,00,74,65,65,6e,00,00,20,.. "11"=hex:44,00,31,00,00,00,00,00,6e,35,46,a3,10,00,41,4e,44,59,53,45,7e,.. "12"=hex:36,00,31,00,00,00,00,00,6e,35,51,a3,10,00,61,6c,65,78,61,00,22,.. "13"=hex:42,00,31,00,00,00,00,00,6e,35,5c,a3,10,00,56,4f,59,45,55,52,7e,.. "14"=hex:30,00,31,00,00,00,00,00,6e,35,b6,a3,10,00,76,6f,79,00,1e,00,03,.. "15"=hex:46,00,31,00,00,00,00,00,6e,35,8f,a3,10,00,50,48,4f,54,4f,4d,7e,.. "16"=hex:5a,00,31,00,00,00,00,00,6e,35,19,a5,10,00,43,4c,41,55,44,49,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8] "NodeSlot"=dword:000002a4 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:78,00,31,00,00,00,00,00,6e,35,3c,a5,10,00,50,48,4f,54,4f,53,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\] "NodeSlot"=dword:000002a5 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,31,00,00,00,00,00,6e,35,3c,a5,10,00,32,30,30,36,2d,31,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\] "NodeSlot"=dword:000002a6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1] "NodeSlot"=dword:000002a7 "MRUListEx"=hex:03,00,00,00,06,00,00,00,07,00,00,00,00,00,00,00,04,00,00,00,05,.. "0"=hex:36,00,31,00,00,00,00,00,6e,35,e3,a3,10,00,48,45,4c,4c,4f,00,22,.. "1"=hex:46,00,31,00,00,00,00,00,6e,35,e1,a3,10,00,4c,49,54,54,4c,45,7e,.. "2"=hex:30,00,31,00,00,00,00,00,6e,35,e0,a3,10,00,6d,69,61,00,1e,00,03,.. "3"=hex:52,00,31,00,00,00,00,00,6e,35,5d,a4,10,00,45,58,50,4c,4f,52,7e,.. "4"=hex:3c,00,31,00,00,00,00,00,6e,35,ce,a3,10,00,77,68,69,74,6e,65,79,.. "5"=hex:48,00,31,00,00,00,00,00,6e,35,d8,a3,10,00,53,45,56,49,4e,41,7e,.. "6"=hex:3c,00,31,00,00,00,00,00,6e,35,60,a4,10,00,64,65,73,73,69,6e,73,.. "7"=hex:36,00,31,00,00,00,00,00,6e,35,61,9c,10,00,64,61,69,73,79,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1] "NodeSlot"=dword:000002ed "MRUListEx"=hex:00,00,00,00,0f,00,00,00,0e,00,00,00,0d,00,00,00,0c,00,00,00,0b,.. "0"=hex:3a,00,31,00,00,00,00,00,6e,35,51,a4,10,00,61,67,61,6c,61,68,00,.. "1"=hex:44,00,31,00,00,00,00,00,6e,35,4d,a4,10,00,41,4e,44,59,53,45,7e,.. "2"=hex:3c,00,31,00,00,00,00,00,6e,35,4b,a4,10,00,62,69,63,6f,6b,6c,65,.. "3"=hex:3c,00,31,00,00,00,00,00,6e,35,49,a4,10,00,43,48,41,4f,54,34,37,.. "4"=hex:3a,00,31,00,00,00,00,00,6e,35,49,a4,10,00,63,6c,65,6d,69,34,00,.. "5"=hex:3c,00,31,00,00,00,00,00,6e,35,40,a4,10,00,46,52,41,4e,5a,4c,31,.. "6"=hex:4a,00,31,00,00,00,00,00,6e,35,3c,a4,10,00,46,52,45,43,4b,4c,7e,.. "7"=hex:42,00,31,00,00,00,00,00,6e,35,39,a4,10,00,4a,45,4e,4e,33,30,7e,.. "8"=hex:4e,00,31,00,00,00,00,00,6e,35,38,a4,10,00,4a,55,4c,49,45,52,7e,.. "9"=hex:44,00,31,00,00,00,00,00,6e,35,33,a4,10,00,4b,4c,41,55,53,49,7e,.. "10"=hex:3a,00,31,00,00,00,00,00,6e,35,30,a4,10,00,6c,65,67,6c,6f,64,00,.. "11"=hex:4c,00,31,00,00,00,00,00,6e,35,22,a4,10,00,4d,41,47,45,53,50,7e,.. "12"=hex:3c,00,31,00,00,00,00,00,6e,35,08,a4,10,00,6f,6c,6c,69,73,32,38,.. "13"=hex:4a,00,31,00,00,00,00,00,6e,35,06,a4,10,00,52,41,54,44,52,41,7e,.. "14"=hex:40,00,31,00,00,00,00,00,6e,35,04,a4,10,00,74,62,30,35,32,30,34,.. "15"=hex:36,00,31,00,00,00,00,00,6e,35,e3,a3,10,00,74,6f,70,69,31,00,22,.. "16"=hex:44,00,31,00,00,00,00,00,6e,35,4f,a4,10,00,41,4d,49,4e,41,41,7e,.. "17"=hex:3c,00,31,00,00,00,00,00,6e,35,4a,a4,10,00,42,4c,4f,4e,44,45,32,.. "18"=hex:4a,00,31,00,00,00,00,00,6e,35,3c,a4,10,00,49,54,41,4c,49,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\] "NodeSlot"=dword:000002ee "MRUListEx"=hex:01,00,00,00,02,00,00,00,03,00,00,00,0b,00,00,00,0c,00,00,00,0d,.. "0"=hex:46,00,31,00,00,00,00,00,6e,35,55,a4,10,00,47,41,4c,4c,45,52,7e,.. "1"=hex:30,00,31,00,00,00,00,00,6e,35,55,a4,10,00,68,63,31,00,1e,00,03,.. "2"=hex:40,00,31,00,00,00,00,00,6e,35,55,a4,10,00,6a,65,6e,6e,79,31,31,.. "3"=hex:3c,00,31,00,00,00,00,00,6e,35,54,a4,10,00,6c,6f,6c,70,6f,6c,6f,.. "4"=hex:7a,00,31,00,00,00,00,00,6e,35,5b,a4,10,00,28,28,48,55,53,53,7e,.. "5"=hex:2a,00,31,00,00,00,00,00,6e,35,5b,a4,10,00,35,00,1a,00,03,00,04,.. "6"=hex:30,00,31,00,00,00,00,00,6e,35,5a,a4,10,00,38,79,6f,00,1e,00,03,.. "7"=hex:4c,00,31,00,00,00,00,00,6e,35,5a,a4,10,00,42,41,42,59,55,4b,7e,.. "8"=hex:4e,00,31,00,00,00,00,00,6e,35,59,a4,10,00,43,55,53,54,4f,4d,7e,.. "9"=hex:44,00,31,00,00,00,00,00,6e,35,59,a4,10,00,46,52,4f,4d,41,4a,7e,.. "10"=hex:44,00,31,00,00,00,00,00,6e,35,56,a4,10,00,46,52,4f,4d,4a,4f,7e,.. "11"=hex:40,00,31,00,00,00,00,00,6e,35,53,a4,10,00,50,52,49,56,41,54,7e,.. "12"=hex:4e,00,31,00,00,00,00,00,6e,35,52,a4,10,00,50,54,48,43,46,41,7e,.. "13"=hex:30,00,31,00,00,00,00,00,6e,35,52,a4,10,00,52,57,41,00,1e,00,03,.. "14"=hex:40,00,31,00,00,00,00,00,6e,35,52,a4,10,00,54,45,45,4e,50,52,7e,.. "15"=hex:36,00,31,00,00,00,00,00,6e,35,52,a4,10,00,54,45,45,4e,53,00,22,.. "16"=hex:36,00,31,00,00,00,00,00,6e,35,51,a4,10,00,79,6e,75,64,65,00,22,.. "17"=hex:2e,00,31,00,00,00,00,00,6e,35,51,a4,10,00,59,4f,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\] "NodeSlot"=dword:000002ef "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\1] "NodeSlot"=dword:000002f0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\10] "NodeSlot"=dword:000002f9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\11] "NodeSlot"=dword:000002fa "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\12] "NodeSlot"=dword:000002fb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\13] "NodeSlot"=dword:000002fc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\14] "NodeSlot"=dword:000002fd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\15] "NodeSlot"=dword:000002fe "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\16] "NodeSlot"=dword:000002ff "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\17] "NodeSlot"=dword:00000300 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\2] "NodeSlot"=dword:000002f1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\3] "NodeSlot"=dword:000002f2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\4] "NodeSlot"=dword:000002f3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\5] "NodeSlot"=dword:000002f4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\6] "NodeSlot"=dword:000002f5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\7] "NodeSlot"=dword:000002f6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\8] "NodeSlot"=dword:000002f7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\\9] "NodeSlot"=dword:000002f8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\1] "NodeSlot"=dword:00000301 "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,6e,35,4f,a4,10,00,44,45,53,4b,54,4f,50,.. "1"=hex:4e,00,31,00,00,00,00,00,6e,35,4e,a4,10,00,46,52,4f,4d,41,4e,7e,.. "2"=hex:4c,00,31,00,00,00,00,00,6e,35,4e,a4,10,00,46,52,4f,4d,4c,4f,7e,.. "3"=hex:58,00,31,00,00,00,00,00,6e,35,4d,a4,10,00,46,52,4f,4d,53,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\1] "NodeSlot"=dword:00000302 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\1\1] "NodeSlot"=dword:00000303 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\1\2] "NodeSlot"=dword:00000304 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\1\3] "NodeSlot"=dword:00000305 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\10] "NodeSlot"=dword:00000320 "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,6e,35,32,a4,10,00,41,4c,41,4d,41,49,7e,.. "1"=hex:42,00,31,00,00,00,00,00,6e,35,31,a4,10,00,43,41,48,59,4f,52,7e,.. "2"=hex:3e,00,31,00,00,00,00,00,6e,35,31,a4,10,00,46,52,4f,4d,44,49,7e,.. "3"=hex:46,00,31,00,00,00,00,00,6e,35,30,a4,10,00,46,52,4f,4d,4c,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\10] "NodeSlot"=dword:00000321 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\10\1] "NodeSlot"=dword:00000427 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\10\2] "NodeSlot"=dword:00000428 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\10\3] "NodeSlot"=dword:00000429 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\11] "NodeSlot"=dword:00000322 "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,6e,35,2f,a4,10,00,62,69,6c,64,65,72,00,.. "1"=hex:40,00,31,00,00,00,00,00,6e,35,28,a4,10,00,62,69,6c,64,65,72,32,.. "2"=hex:56,00,31,00,00,00,00,00,6e,35,28,a4,10,00,46,52,4f,4d,4d,41,7e,.. "3"=hex:4c,00,31,00,00,00,00,00,6e,35,22,a4,10,00,47,49,52,4c,53,55,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\11] "NodeSlot"=dword:00000323 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\11\1] "NodeSlot"=dword:00000324 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\11\2] "NodeSlot"=dword:00000325 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\11\3] "NodeSlot"=dword:00000326 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\12] "NodeSlot"=dword:00000327 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:50,00,31,00,00,00,00,00,6e,35,10,a4,10,00,4e,45,55,45,52,4f,7e,.. "1"=hex:50,00,31,00,00,00,00,00,6e,35,08,a4,10,00,4e,45,55,45,52,4f,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\12] "NodeSlot"=dword:00000328 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\12\1] "NodeSlot"=dword:00000329 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\13] "NodeSlot"=dword:0000032a "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,31,00,00,00,00,00,6e,35,06,a4,10,00,46,52,4f,4d,52,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\13] "NodeSlot"=dword:0000032b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\14] "NodeSlot"=dword:0000032c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4a,00,31,00,00,00,00,00,6e,35,04,a4,10,00,46,52,4f,4d,54,42,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\14] "NodeSlot"=dword:0000032d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15] "NodeSlot"=dword:0000032e "MRUListEx"=hex:04,00,00,00,03,00,00,00,05,00,00,00,06,00,00,00,07,00,00,00,08,.. "0"=hex:3c,00,31,00,00,00,00,00,6e,35,fd,a3,10,00,41,4e,4b,45,5f,38,36,.. "1"=hex:5a,00,31,00,00,00,00,00,6e,35,fd,a3,10,00,44,4a,55,53,43,48,7e,.. "2"=hex:56,00,31,00,00,00,00,00,6e,35,fc,a3,10,00,46,52,4f,4d,44,52,7e,.. "3"=hex:34,00,31,00,00,00,00,00,6e,35,ef,a3,10,00,72,65,61,6c,00,00,20,.. "4"=hex:3e,00,31,00,00,00,00,00,6e,35,e3,a3,10,00,58,58,46,49,4c,4d,7e,.. "5"=hex:42,00,31,00,00,00,00,00,6e,35,f1,a3,10,00,4d,49,4e,49,54,52,7e,.. "6"=hex:52,00,31,00,00,00,00,00,6e,35,f2,a3,10,00,48,45,4c,4c,53,49,7e,.. "7"=hex:62,00,31,00,00,00,00,00,6e,35,f3,a3,10,00,47,41,4c,4c,45,52,7e,.. "8"=hex:44,00,31,00,00,00,00,00,6e,35,fb,a3,10,00,46,52,4f,4d,54,4f,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15] "NodeSlot"=dword:0000032f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15\1] "NodeSlot"=dword:00000330 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15\2] "NodeSlot"=dword:00000331 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15\3] "NodeSlot"=dword:00000332 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15\4] "NodeSlot"=dword:00000395 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15\5] "NodeSlot"=dword:00000396 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15\6] "NodeSlot"=dword:00000397 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15\7] "NodeSlot"=dword:00000398 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\15\8] "NodeSlot"=dword:00000399 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\16] "NodeSlot"=dword:00000417 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,31,00,00,00,00,00,6e,35,50,a4,10,00,46,52,4f,4d,41,4d,7e,.. "1"=hex:42,00,31,00,00,00,00,00,6e,35,50,a4,10,00,4e,45,57,46,4c,41,7e,.. "2"=hex:34,00,31,00,00,00,00,00,6e,35,4f,a4,10,00,53,48,49,50,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\16] "NodeSlot"=dword:00000418 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\16\1] "NodeSlot"=dword:00000419 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\16\2] "NodeSlot"=dword:0000041a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\17] "NodeSlot"=dword:0000041b "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,6e,35,4a,a4,10,00,63,69,6e,64,79,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\17] "NodeSlot"=dword:0000041c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\18] "NodeSlot"=dword:0000041e "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,31,00,00,00,00,00,6e,35,3c,a4,10,00,46,52,4f,4d,49,54,7e,.. "1"=hex:30,00,31,00,00,00,00,00,6e,35,3c,a4,10,00,6e,5f,63,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\18] "NodeSlot"=dword:0000041f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\18\1] "NodeSlot"=dword:00000420 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\2] "NodeSlot"=dword:00000306 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,6e,35,4d,a4,10,00,62,26,77,00,1e,00,03,.. "1"=hex:48,00,31,00,00,00,00,00,6e,35,4c,a4,10,00,46,52,4f,4d,42,49,7e,.. "2"=hex:3a,00,31,00,00,00,00,00,6e,35,4b,a4,10,00,73,61,6e,64,72,61,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\2] "NodeSlot"=dword:00000307 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\2\1] "NodeSlot"=dword:00000308 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\2\2] "NodeSlot"=dword:00000309 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\3] "NodeSlot"=dword:0000030a "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,6e,35,49,a4,10,00,46,52,4f,4d,43,48,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\3] "NodeSlot"=dword:0000030b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\4] "NodeSlot"=dword:0000030c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,6e,35,49,a4,10,00,46,52,4f,4d,43,4c,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\4] "NodeSlot"=dword:0000030d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\5] "NodeSlot"=dword:0000030e "MRUListEx"=hex:05,00,00,00,04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,.. "0"=hex:34,00,31,00,00,00,00,00,6e,35,47,a4,10,00,61,6c,66,32,00,00,20,.. "1"=hex:54,00,31,00,00,00,00,00,6e,35,46,a4,10,00,46,52,4f,4d,42,4c,7e,.. "2"=hex:48,00,31,00,00,00,00,00,6e,35,45,a4,10,00,46,52,4f,4d,46,52,7e,.. "3"=hex:48,00,31,00,00,00,00,00,6e,35,43,a4,10,00,4e,45,55,45,52,4f,7e,.. "4"=hex:4e,00,31,00,00,00,00,00,6e,35,42,a4,10,00,4e,45,57,53,54,41,7e,.. "5"=hex:34,00,31,00,00,00,00,00,6e,35,40,a4,10,00,76,69,6b,61,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\5] "NodeSlot"=dword:0000030f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\5\1] "NodeSlot"=dword:00000310 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\5\2] "NodeSlot"=dword:00000311 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\5\3] "NodeSlot"=dword:00000312 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\5\4] "NodeSlot"=dword:00000313 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\5\5] "NodeSlot"=dword:00000314 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\6] "NodeSlot"=dword:00000315 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,31,00,00,00,00,00,6e,35,3d,a4,10,00,46,52,4f,4d,46,52,7e,.. "1"=hex:34,00,31,00,00,00,00,00,6e,35,3c,a4,10,00,4f,59,46,46,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\6] "NodeSlot"=dword:00000316 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\6\1] "NodeSlot"=dword:0000041d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7] "NodeSlot"=dword:00000317 "MRUListEx"=hex:07,00,00,00,06,00,00,00,05,00,00,00,04,00,00,00,03,00,00,00,02,.. "0"=hex:54,00,31,00,00,00,00,00,6e,35,3b,a4,10,00,30,46,52,4f,4d,52,7e,.. "1"=hex:30,00,31,00,00,00,00,00,6e,35,3b,a4,10,00,31,66,64,00,1e,00,03,.. "2"=hex:2a,00,31,00,00,00,00,00,6e,35,3b,a4,10,00,41,00,1a,00,03,00,04,.. "3"=hex:3a,00,31,00,00,00,00,00,6e,35,3b,a4,10,00,41,4c,49,53,53,41,00,.. "4"=hex:46,00,31,00,00,00,00,00,6e,35,3a,a4,10,00,43,4f,55,50,4c,45,7e,.. "5"=hex:30,00,31,00,00,00,00,00,6e,35,3a,a4,10,00,6a,65,6e,00,1e,00,03,.. "6"=hex:40,00,31,00,00,00,00,00,6e,35,39,a4,10,00,4c,49,4e,47,45,52,49,.. "7"=hex:48,00,31,00,00,00,00,00,6e,35,39,a4,10,00,4e,45,57,30,37,2d,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7] "NodeSlot"=dword:00000318 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7\1] "NodeSlot"=dword:00000319 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7\2] "NodeSlot"=dword:00000421 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7\3] "NodeSlot"=dword:00000422 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7\4] "NodeSlot"=dword:00000423 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7\5] "NodeSlot"=dword:00000424 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7\6] "NodeSlot"=dword:00000425 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7\7] "NodeSlot"=dword:00000426 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\8] "NodeSlot"=dword:0000031a "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:58,00,31,00,00,00,00,00,6e,35,38,a4,10,00,46,52,4f,4d,4a,55,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\8] "NodeSlot"=dword:0000031b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\9] "NodeSlot"=dword:0000031c "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,6e,35,38,a4,10,00,41,58,58,58,00,00,20,.. "1"=hex:36,00,31,00,00,00,00,00,6e,35,37,a4,10,00,62,75,6e,6e,79,00,22,.. "2"=hex:34,00,31,00,00,00,00,00,6e,35,33,a4,10,00,4a,42,55,7e,31,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\9] "NodeSlot"=dword:0000031d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\9\1] "NodeSlot"=dword:0000031e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\9\2] "NodeSlot"=dword:0000031f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\1] "NodeSlot"=dword:00000333 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\2] "NodeSlot"=dword:00000334 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\3] "NodeSlot"=dword:00000335 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\4] "NodeSlot"=dword:00000393 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\5] "NodeSlot"=dword:00000394 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\6] "NodeSlot"=dword:0000039a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\1\7] "NodeSlot"=dword:0000048b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10] "NodeSlot"=dword:000002e6 "MRUListEx"=hex:09,00,00,00,03,00,00,00,02,00,00,00,08,00,00,00,07,00,00,00,06,.. "0"=hex:2e,00,31,00,00,00,00,00,6e,35,84,a3,10,00,30,31,00,00,1c,00,03,.. "1"=hex:44,00,31,00,00,00,00,00,6e,35,67,a3,10,00,53,50,4f,4e,47,45,7e,.. "2"=hex:2e,00,31,00,00,00,00,00,6e,35,6b,a3,10,00,31,35,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,6e,35,6d,a3,10,00,31,34,00,00,1c,00,03,.. "4"=hex:2e,00,31,00,00,00,00,00,6e,35,84,a3,10,00,30,32,00,00,1c,00,03,.. "5"=hex:2e,00,31,00,00,00,00,00,6e,35,81,a3,10,00,30,33,00,00,1c,00,03,.. "6"=hex:2e,00,31,00,00,00,00,00,6e,35,80,a3,10,00,30,34,00,00,1c,00,03,.. "7"=hex:2e,00,31,00,00,00,00,00,6e,35,7c,a3,10,00,30,35,00,00,1c,00,03,.. "8"=hex:2e,00,31,00,00,00,00,00,6e,35,79,a3,10,00,30,36,00,00,1c,00,03,.. "9"=hex:2e,00,31,00,00,00,00,00,6e,35,78,a3,10,00,30,37,00,00,1c,00,03,.. "10"=hex:2e,00,31,00,00,00,00,00,6e,35,76,a3,10,00,30,38,00,00,1c,00,03,.. "11"=hex:2e,00,31,00,00,00,00,00,6e,35,75,a3,10,00,30,39,00,00,1c,00,03,.. "12"=hex:2e,00,31,00,00,00,00,00,6e,35,74,a3,10,00,31,31,00,00,1c,00,03,.. "13"=hex:2e,00,31,00,00,00,00,00,6e,35,72,a3,10,00,31,32,00,00,1c,00,03,.. "14"=hex:2e,00,31,00,00,00,00,00,6e,35,6f,a3,10,00,31,33,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10] "NodeSlot"=dword:000002e7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\1] "NodeSlot"=dword:000002e8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\10] "NodeSlot"=dword:0000038b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\11] "NodeSlot"=dword:0000038c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\12] "NodeSlot"=dword:0000038d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\13] "NodeSlot"=dword:0000038e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\14] "NodeSlot"=dword:0000038f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\2] "NodeSlot"=dword:000002e9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\3] "NodeSlot"=dword:000002ea "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\4] "NodeSlot"=dword:00000385 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\5] "NodeSlot"=dword:00000386 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\6] "NodeSlot"=dword:00000387 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\7] "NodeSlot"=dword:00000388 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\8] "NodeSlot"=dword:00000389 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\10\9] "NodeSlot"=dword:0000038a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\11] "NodeSlot"=dword:0000039c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\12] "NodeSlot"=dword:0000039d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\13] "NodeSlot"=dword:0000039e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\14] "NodeSlot"=dword:0000039f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:98,00,31,00,00,00,00,00,6e,35,32,a4,10,00,4d,41,53,54,45,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\14] "NodeSlot"=dword:000003a0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\15] "NodeSlot"=dword:000003c5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\16] "NodeSlot"=dword:0000047f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\2] "NodeSlot"=dword:000002a8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\3] "NodeSlot"=dword:000002a9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\4] "NodeSlot"=dword:000002d3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5] "NodeSlot"=dword:000002d4 "MRUListEx"=hex:01,00,00,00,00,00,00,00,17,00,00,00,16,00,00,00,15,00,00,00,14,.. "0"=hex:2e,00,31,00,00,00,00,00,6e,35,b3,a3,10,00,30,31,00,00,1c,00,03,.. "1"=hex:34,00,31,00,00,00,00,00,6e,35,b3,a3,10,00,30,31,2d,32,00,00,20,.. "2"=hex:34,00,31,00,00,00,00,00,6e,35,b2,a3,10,00,30,31,2d,33,00,00,20,.. "3"=hex:34,00,31,00,00,00,00,00,6e,35,b2,a3,10,00,30,31,2d,34,00,00,20,.. "4"=hex:36,00,31,00,00,00,00,00,6e,35,b0,a3,10,00,30,32,2d,30,31,00,22,.. "5"=hex:36,00,31,00,00,00,00,00,6e,35,ab,a3,10,00,30,34,2d,30,31,00,22,.. "6"=hex:36,00,31,00,00,00,00,00,6e,35,a8,a3,10,00,30,35,2d,30,31,00,22,.. "7"=hex:36,00,31,00,00,00,00,00,6e,35,a8,a3,10,00,30,35,2d,30,32,00,22,.. "8"=hex:36,00,31,00,00,00,00,00,6e,35,af,a3,10,00,30,32,2d,30,32,00,22,.. "9"=hex:36,00,31,00,00,00,00,00,6e,35,ae,a3,10,00,30,32,2d,30,33,00,22,.. "10"=hex:36,00,31,00,00,00,00,00,6e,35,ac,a3,10,00,30,33,2d,30,31,00,22,.. "11"=hex:36,00,31,00,00,00,00,00,6e,35,ac,a3,10,00,30,33,2d,30,32,00,22,.. "12"=hex:36,00,31,00,00,00,00,00,6e,35,ab,a3,10,00,30,33,2d,30,33,00,22,.. "13"=hex:36,00,31,00,00,00,00,00,6e,35,aa,a3,10,00,30,34,2d,30,32,00,22,.. "14"=hex:36,00,31,00,00,00,00,00,6e,35,a9,a3,10,00,30,34,2d,30,33,00,22,.. "15"=hex:36,00,31,00,00,00,00,00,6e,35,a7,a3,10,00,30,35,2d,30,33,00,22,.. "16"=hex:36,00,31,00,00,00,00,00,6e,35,a6,a3,10,00,30,36,2d,30,31,00,22,.. "17"=hex:36,00,31,00,00,00,00,00,6e,35,a5,a3,10,00,30,36,2d,30,32,00,22,.. "18"=hex:36,00,31,00,00,00,00,00,6e,35,a5,a3,10,00,30,36,2d,30,33,00,22,.. "19"=hex:36,00,31,00,00,00,00,00,6e,35,a4,a3,10,00,30,37,2d,30,31,00,22,.. "20"=hex:36,00,31,00,00,00,00,00,6e,35,a3,a3,10,00,30,37,2d,30,32,00,22,.. "21"=hex:36,00,31,00,00,00,00,00,6e,35,a2,a3,10,00,30,37,2d,30,33,00,22,.. "22"=hex:36,00,31,00,00,00,00,00,6e,35,a1,a3,10,00,30,37,2d,30,34,00,22,.. "23"=hex:36,00,31,00,00,00,00,00,6e,35,a1,a3,10,00,30,37,2d,30,35,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5] "NodeSlot"=dword:000002d5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\1] "NodeSlot"=dword:000002d6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\10] "NodeSlot"=dword:00000464 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\11] "NodeSlot"=dword:00000465 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\12] "NodeSlot"=dword:00000466 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\13] "NodeSlot"=dword:00000467 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\14] "NodeSlot"=dword:00000468 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\15] "NodeSlot"=dword:00000469 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\16] "NodeSlot"=dword:0000046a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\17] "NodeSlot"=dword:0000046b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\18] "NodeSlot"=dword:0000046c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\19] "NodeSlot"=dword:0000046d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\2] "NodeSlot"=dword:000002d7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\20] "NodeSlot"=dword:0000046e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\21] "NodeSlot"=dword:0000046f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\22] "NodeSlot"=dword:00000470 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\23] "NodeSlot"=dword:00000471 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\3] "NodeSlot"=dword:000002d8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\4] "NodeSlot"=dword:000002d9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\5] "NodeSlot"=dword:000002da "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\6] "NodeSlot"=dword:000002db "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\7] "NodeSlot"=dword:0000039b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\8] "NodeSlot"=dword:000003cc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\5\9] "NodeSlot"=dword:00000463 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\6] "NodeSlot"=dword:000002de "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,6e,35,8a,a3,10,00,6a,65,6e,6e,79,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\6] "NodeSlot"=dword:000002e5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\7] "NodeSlot"=dword:000002df "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\8] "NodeSlot"=dword:000002e0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\8\9] "NodeSlot"=dword:000002e4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\9] "NodeSlot"=dword:000002aa "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,6e,35,29,a3,10,00,32,34,35,59,4f,55,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\\9] "NodeSlot"=dword:000002ab "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\1] "0"=hex:14,00,70,00,c7,ac,07,70,02,32,d1,11,aa,d2,00,80,5f,c1,27,0e,00,.. "MRUListEx"=hex:02,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:000002e1 "1"=hex:1e,00,71,2d,00,00,00,00,00,00,00,00,00,00,80,a2,27,22,ea,3a,69,.. "2"=hex:1e,00,71,80,00,00,00,00,00,00,00,00,00,00,e1,a4,0e,d2,57,39,d2,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\1] "NodeSlot"=dword:00000076 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\1\1] "NodeSlot"=dword:000002e2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\1\2] "NodeSlot"=dword:00000384 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10] "NodeSlot"=dword:000004b1 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:85,00,50,42,33,30,02,00,00,00,07,00,00,00,00,00,00,00,20,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10] "NodeSlot"=dword:000004b2 "MRUListEx"=hex:00,00,00,00,03,00,00,00,01,00,00,00,02,00,00,00,ff,ff,ff,ff "0"=hex:71,00,50,42,33,30,03,00,00,00,06,00,00,00,00,00,00,00,08,00,00,.. "1"=hex:f9,00,50,42,33,30,06,00,00,00,06,00,00,00,00,00,00,00,14,00,00,.. "2"=hex:8d,00,50,42,33,30,03,00,00,00,06,00,00,00,00,00,00,00,08,00,00,.. "3"=hex:f9,00,50,42,33,30,08,00,00,00,06,00,00,00,00,00,00,00,14,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\] "NodeSlot"=dword:000004b3 "MRUListEx"=hex:01,00,00,00,05,00,00,00,06,00,00,00,00,00,00,00,04,00,00,00,03,.. "0"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "1"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "2"=hex:59,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "3"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "4"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "5"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "6"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\] "NodeSlot"=dword:000004b4 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "1"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "2"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\] "NodeSlot"=dword:000004b5 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\] "NodeSlot"=dword:00000567 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\1] "NodeSlot"=dword:00000564 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\1] "NodeSlot"=dword:00000565 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:51,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\1\] "NodeSlot"=dword:00000566 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\2] "NodeSlot"=dword:000006ba "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\2] "NodeSlot"=dword:000006bb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\1] "NodeSlot"=dword:000004b6 "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "1"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\1] "NodeSlot"=dword:000004b7 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\1\] "NodeSlot"=dword:00000568 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\1\1] "NodeSlot"=dword:00000569 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\1\1] "NodeSlot"=dword:0000056a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\2] "NodeSlot"=dword:0000069f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:55,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\2] "NodeSlot"=dword:000006a0 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:55,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\2\] "NodeSlot"=dword:000006a1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\3] "NodeSlot"=dword:000006a2 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "1"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\3] "NodeSlot"=dword:000006a3 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:6d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\3\] "NodeSlot"=dword:000006a4 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:8d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\3\] "NodeSlot"=dword:000006a5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\3\1] "NodeSlot"=dword:000006a6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\4] "NodeSlot"=dword:000006c9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\5] "NodeSlot"=dword:000006ca "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\6] "NodeSlot"=dword:000006ce "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\\6] "NodeSlot"=dword:000006cf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\1] "NodeSlot"=dword:0000066b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2] "NodeSlot"=dword:000006a7 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:59,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2] "NodeSlot"=dword:000006a8 "MRUListEx"=hex:02,00,00,00,05,00,00,00,07,00,00,00,06,00,00,00,00,00,00,00,01,.. "0"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "1"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "2"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "3"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "4"=hex:59,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "5"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "6"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "7"=hex:55,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\] "NodeSlot"=dword:000006a9 "MRUListEx"=hex:00,00,00,00,07,00,00,00,06,00,00,00,05,00,00,00,04,00,00,00,03,.. "0"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "1"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "2"=hex:65,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "3"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "4"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "5"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "6"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "7"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\] "NodeSlot"=dword:000006aa "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\] "NodeSlot"=dword:000006ab "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\1] "NodeSlot"=dword:000006ac "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\2] "NodeSlot"=dword:000006bc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\3] "NodeSlot"=dword:000006be "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\4] "NodeSlot"=dword:000006bf "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\4] "NodeSlot"=dword:000006c0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\5] "NodeSlot"=dword:000006c1 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\5] "NodeSlot"=dword:000006c2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\6] "NodeSlot"=dword:000006c3 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\6] "NodeSlot"=dword:000006c4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\7] "NodeSlot"=dword:000006c5 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\\7] "NodeSlot"=dword:000006c6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\1] "NodeSlot"=dword:000006ad "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "1"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "2"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "3"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\1] "NodeSlot"=dword:000006ae "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\1\1] "NodeSlot"=dword:000006af "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:61,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\1\1] "NodeSlot"=dword:000006b0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\1\2] "NodeSlot"=dword:000006b1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\1\3] "NodeSlot"=dword:000006b2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\2] "NodeSlot"=dword:000006b3 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. "1"=hex:5d,00,50,42,33,30,05,00,00,00,08,00,00,00,00,00,00,00,00,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\2] "NodeSlot"=dword:000006b4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\2\1] "NodeSlot"=dword:000006b5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\3] "NodeSlot"=dword:000006b6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\4] "NodeSlot"=dword:000006b7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\5] "NodeSlot"=dword:000006bd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\6] "NodeSlot"=dword:000006c7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\2\7] "NodeSlot"=dword:000006c8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\3] "0"=hex:89,00,50,42,33,30,09,00,00,00,0c,00,00,00,00,00,00,00,00,00,00,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:000006b9 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\10\3] "NodeSlot"=dword:000006b8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\2] "NodeSlot"=dword:0000025b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3] "NodeSlot"=dword:00000026 "MRUListEx"=hex:08,00,00,00,04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,07,.. "2"=hex:4a,00,31,00,00,00,00,00,26,27,93,73,11,00,50,52,4f,47,52,41,7e,.. "3"=hex:5c,00,31,00,00,00,00,00,26,27,29,73,10,00,44,4f,43,55,4d,45,7e,.. "4"=hex:3c,00,31,00,00,00,00,00,12,35,04,2d,10,00,57,49,4e,44,4f,57,53,.. "0"=hex:44,00,31,00,00,00,00,00,ea,34,cf,1e,10,00,4d,4f,44,53,45,4d,7e,.. "1"=hex:34,00,31,00,00,00,00,00,35,35,3b,6e,10,00,6a,65,75,78,00,00,20,.. "5"=hex:44,00,31,00,00,00,00,00,49,35,98,66,10,00,41,53,50,49,52,41,7e,.. "6"=hex:98,00,31,00,00,00,00,00,33,35,a5,ae,10,00,53,59,4d,41,4e,54,7e,.. "7"=hex:40,00,31,00,00,00,00,00,00,00,00,00,10,00,44,4f,43,55,4d,45,7e,.. "8"=hex:54,00,31,00,00,00,00,00,00,00,00,00,10,00,74,65,6c,65,63,68,61,.. "9"=hex:42,00,31,00,00,00,00,00,28,34,8d,15,10,00,57,45,42,53,45,52,7e,.. "10"=hex:34,00,31,00,00,00,00,00,5c,36,da,8c,10,00,47,54,39,37,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3] "0"=hex:40,00,31,00,00,00,00,00,ea,34,f8,1e,10,00,65,4d,75,6c,65,31,2e,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000215 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\] "0"=hex:40,00,31,00,00,00,00,00,ec,34,6e,87,10,00,49,6e,63,6f,6d,69,6e,.. "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000213 "1"=hex:34,00,31,00,00,00,00,00,41,35,4c,6a,10,00,54,65,6d,70,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\] "NodeSlot"=dword:000001e6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\\1] "NodeSlot"=dword:00000214 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1] "NodeSlot"=dword:000001fa "MRUListEx"=hex:04,00,00,00,0a,00,00,00,0b,00,00,00,07,00,00,00,08,00,00,00,09,.. "0"=hex:42,00,32,00,eb,e0,d3,00,35,35,88,6e,20,00,66,6c,61,73,68,2e,7a,.. "1"=hex:36,00,31,00,00,00,00,00,35,35,f6,6e,10,00,66,6c,61,73,68,00,22,.. "2"=hex:44,00,31,00,00,00,00,00,76,35,83,40,10,00,56,49,52,54,55,41,7e,.. "3"=hex:5a,00,31,00,00,00,00,00,76,35,5a,b2,10,00,5f,45,4e,47,5f,4c,7e,.. "4"=hex:40,00,31,00,00,00,00,00,72,36,5c,51,10,00,56,4d,4c,61,75,6e,63,.. "5"=hex:3c,00,31,00,00,00,00,00,58,37,2b,3f,10,00,74,68,72,69,58,58,58,.. "6"=hex:42,00,31,00,00,00,00,00,67,37,29,61,10,00,44,52,54,41,4e,4e,7e,.. "7"=hex:34,00,31,00,00,00,00,00,67,37,e5,66,10,00,79,6f,6b,6f,00,00,20,.. "8"=hex:46,00,31,00,00,00,00,00,68,37,e7,43,10,00,43,48,41,52,4d,50,7e,.. "9"=hex:30,00,31,00,00,00,00,00,68,37,cb,4b,10,00,72,6f,62,00,1e,00,03,.. "10"=hex:30,00,31,00,00,00,00,00,68,37,bc,91,10,00,73,77,63,00,1e,00,03,.. "11"=hex:52,00,31,00,00,00,00,00,6a,37,69,60,10,00,48,45,4e,54,41,49,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1] "NodeSlot"=dword:000001fb "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,30,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\] "NodeSlot"=dword:000001fc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1] "NodeSlot"=dword:000001fd "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,35,35,3b,6f,10,00,42,4c,55,46,46,33,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1] "NodeSlot"=dword:000001fe "MRUListEx"=hex:01,00,00,00,00,00,00,00,02,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,35,35,0f,6f,10,00,6f,70,68,65,6c,69,65,.. "1"=hex:36,00,31,00,00,00,00,00,35,35,53,6f,10,00,6b,61,72,65,6e,00,22,.. "2"=hex:36,00,31,00,00,00,00,00,35,35,32,6f,10,00,73,6f,6e,69,61,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\] "NodeSlot"=dword:000001ff "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,35,35,05,6f,10,00,53,54,52,50,00,00,20,.. "1"=hex:34,00,31,00,00,00,00,00,35,35,1c,6f,10,00,41,4e,49,4d,00,00,20,.. "2"=hex:34,00,31,00,00,00,00,00,35,35,0f,6f,10,00,50,45,52,53,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\] "NodeSlot"=dword:00000200 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\\1] "NodeSlot"=dword:00000201 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\\2] "NodeSlot"=dword:00000202 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\1] "NodeSlot"=dword:0000029b "MRUListEx"=hex:02,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,35,35,58,6f,10,00,53,54,52,50,00,00,20,.. "1"=hex:34,00,31,00,00,00,00,00,35,35,4a,6f,10,00,41,4e,49,4d,00,00,20,.. "2"=hex:34,00,31,00,00,00,00,00,35,35,53,6f,10,00,50,45,52,53,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\1] "NodeSlot"=dword:0000029c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\1\1] "NodeSlot"=dword:00000431 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\1\2] "NodeSlot"=dword:00000432 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\2] "NodeSlot"=dword:000004e7 "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,35,35,32,6f,10,00,53,54,52,50,00,00,20,.. "1"=hex:34,00,31,00,00,00,00,00,35,35,3a,6f,10,00,50,45,52,53,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\2] "NodeSlot"=dword:000004e8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\1\2\1] "NodeSlot"=dword:00000661 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\10] "NodeSlot"=dword:0000077c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,6a,37,30,5d,10,00,53,57,43,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\10] "NodeSlot"=dword:00000787 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\11] "NodeSlot"=dword:0000077f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\2] "NodeSlot"=dword:0000029a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\3] "NodeSlot"=dword:00000475 "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:5a,00,31,00,00,00,00,00,42,35,8e,56,10,00,5f,45,4e,47,5f,4c,7e,.. "1"=hex:44,00,31,00,00,00,00,00,76,35,d2,b1,10,00,56,4d,41,54,45,43,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\3] "NodeSlot"=dword:00000476 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\3\1] "NodeSlot"=dword:00000477 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\4] "NodeSlot"=dword:00000482 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\5] "NodeSlot"=dword:00000718 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,31,00,00,00,00,00,58,37,2e,3f,10,00,56,49,52,54,55,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\5] "NodeSlot"=dword:00000719 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,58,37,2b,3f,10,00,41,72,63,68,69,76,65,.. "1"=hex:40,00,31,00,00,00,00,00,58,37,2e,3f,10,00,42,69,6e,61,72,69,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\5\] "NodeSlot"=dword:0000071a "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:44,00,31,00,00,00,00,00,58,37,09,41,10,00,32,30,33,33,7e,31,2e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\5\] "NodeSlot"=dword:0000071b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\5\1] "NodeSlot"=dword:0000071c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\6] "NodeSlot"=dword:0000076c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,67,37,19,61,10,00,6e,67,2d,47,4f,4c,44,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\6] "NodeSlot"=dword:0000076d "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:2e,00,31,00,00,00,00,00,67,37,22,61,10,00,6d,6d,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\6\] "NodeSlot"=dword:0000076e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\7] "NodeSlot"=dword:00000770 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,67,37,e4,66,10,00,66,6c,61,00,1e,00,03,.. "1"=hex:30,00,31,00,00,00,00,00,67,37,ea,66,10,00,6a,70,67,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\7] "NodeSlot"=dword:00000771 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\7\1] "NodeSlot"=dword:00000772 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\8] "NodeSlot"=dword:00000773 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\9] "NodeSlot"=dword:00000777 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,68,37,cc,4b,10,00,52,6f,62,6f,7a,6f,75,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\1\9] "NodeSlot"=dword:00000778 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\10] "NodeSlot"=dword:000003f4 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,5c,36,d7,8e,10,00,56,49,44,45,4f,00,22,.. "1"=hex:34,00,31,00,00,00,00,00,5c,36,d9,8c,10,00,44,41,54,41,00,00,20,.. "2"=hex:36,00,31,00,00,00,00,00,5c,36,63,8d,10,00,43,48,41,4d,50,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\10] "NodeSlot"=dword:0000054d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\10\1] "NodeSlot"=dword:0000054e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\10\2] "NodeSlot"=dword:0000054f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2] "NodeSlot"=dword:0000002b "MRUListEx"=hex:3f,00,00,00,3e,00,00,00,24,00,00,00,3b,00,00,00,06,00,00,00,0b,.. "2"=hex:42,00,31,00,00,00,00,00,26,27,32,73,10,00,4d,45,53,53,45,4e,7e,.. "6"=hex:36,00,31,00,00,00,00,00,c3,32,0e,70,10,00,65,4d,75,6c,65,00,22,.. "12"=hex:34,00,31,00,00,00,00,00,cf,32,bd,86,10,00,44,69,76,58,00,00,20,.. "34"=hex:dd,00,31,00,00,00,00,00,01,33,5d,82,10,00,4d,53,4e,4d,45,53,7e,.. "36"=hex:50,00,31,00,00,00,00,00,3d,33,11,85,10,00,4e,4f,52,54,4f,4e,7e,.. "38"=hex:40,00,31,00,00,00,00,00,74,33,69,7e,10,00,56,69,64,65,6f,4c,41,.. "39"=hex:50,00,31,00,00,00,00,00,bc,32,bb,54,10,00,4d,45,53,53,45,4e,7e,.. "40"=hex:3c,00,31,00,00,00,00,00,78,33,f8,85,10,00,55,6e,53,70,79,50,43,.. "3"=hex:5a,00,31,00,00,00,00,00,00,00,00,00,10,00,53,65,72,76,69,63,65,.. "4"=hex:36,00,31,00,00,00,00,00,cc,34,6b,65,10,00,41,64,6f,62,65,00,22,.. "5"=hex:30,00,31,00,00,00,00,00,26,27,dc,71,10,00,4d,53,4e,00,1e,00,03,.. "7"=hex:36,00,31,00,00,00,00,00,d9,34,a1,6d,10,00,48,65,6c,6c,6f,00,22,.. "0"=hex:48,00,31,00,00,00,00,00,fd,34,dc,be,10,00,4b,49,4c,4c,41,4e,7e,.. "1"=hex:5a,00,31,00,00,00,00,00,12,35,31,2d,10,00,4d,49,43,52,4f,53,7e,.. "8"=hex:46,00,31,00,00,00,00,00,ce,34,00,39,10,00,49,4e,43,52,45,44,7e,.. "9"=hex:58,00,31,00,00,00,00,00,1e,35,0c,53,10,00,57,49,4e,44,4f,57,7e,.. "10"=hex:4e,00,31,00,00,00,00,00,3a,35,b4,54,10,00,4d,4f,5a,49,4c,4c,7e,.. "11"=hex:50,00,31,00,00,00,00,00,1e,35,fd,5e,10,00,57,49,46,44,31,46,7e,.. "13"=hex:4a,00,31,00,00,00,00,00,49,35,ae,66,10,00,49,4e,54,45,4c,4c,7e,.. "14"=hex:7c,00,31,00,00,00,00,00,cc,34,27,75,12,00,49,4e,53,54,41,4c,7e,.. "15"=hex:3a,00,31,00,00,00,00,00,4d,35,eb,5c,10,00,57,69,6e,61,6d,70,00,.. "16"=hex:40,00,31,00,00,00,00,00,13,33,a2,46,10,00,53,79,6d,61,6e,74,65,.. "17"=hex:30,00,31,00,00,00,00,00,51,35,07,4a,10,00,53,44,50,00,1e,00,03,.. "18"=hex:42,00,31,00,00,00,00,00,55,35,83,40,10,00,46,4c,56,50,4c,41,7e,.. "19"=hex:2e,00,31,00,00,00,00,00,76,35,5c,41,10,00,76,67,00,00,1c,00,03,.. "20"=hex:46,00,31,00,00,00,00,00,8c,35,d8,3b,10,00,50,48,4f,54,4f,46,7e,.. "21"=hex:46,00,31,00,00,00,00,00,92,35,38,42,10,00,4d,41,43,52,4f,47,7e,.. "22"=hex:3a,00,31,00,00,00,00,00,42,34,38,58,10,00,53,49,4e,54,45,43,00,.. "23"=hex:36,00,31,00,00,00,00,00,26,27,62,72,10,00,78,65,72,6f,78,00,22,.. "24"=hex:4a,00,31,00,00,00,00,00,ea,32,0c,55,10,00,41,56,49,53,59,4e,7e,.. "25"=hex:42,00,31,00,00,00,00,00,15,35,1a,51,10,00,41,4e,59,57,45,42,7e,.. "26"=hex:40,00,31,00,00,00,00,00,71,36,b4,4d,10,00,59,41,4d,49,4b,55,4d,.. "27"=hex:48,00,31,00,00,00,00,00,72,36,60,4f,10,00,44,41,45,4d,4f,4e,7e,.. "28"=hex:3a,00,31,00,00,00,00,00,b6,32,6f,7b,10,00,53,79,67,61,74,65,00,.. "29"=hex:3c,00,31,00,00,00,00,00,b6,32,a9,8c,10,00,53,61,6d,73,75,6e,67,.. "30"=hex:30,00,31,00,00,00,00,00,4a,36,51,58,10,00,41,4f,4c,00,1e,00,03,.. "31"=hex:42,00,31,00,00,00,00,00,09,33,d1,6a,10,00,43,41,4d,53,54,55,7e,.. "32"=hex:48,00,31,00,00,00,00,00,d2,32,35,50,10,00,43,4f,4d,4d,4f,4e,7e,.. "33"=hex:34,00,31,00,00,00,00,00,f5,36,19,49,10,00,44,49,46,58,00,00,20,.. "35"=hex:40,00,31,00,00,00,00,00,26,27,94,73,10,00,45,75,72,6f,54,6f,6f,.. "37"=hex:3c,00,31,00,00,00,00,00,ea,32,c6,54,10,00,66,66,64,73,68,6f,77,.. "41"=hex:3c,00,31,00,00,00,00,00,e5,32,95,9a,10,00,46,72,65,65,2e,66,72,.. "42"=hex:3a,00,31,00,00,00,00,00,3b,35,00,6e,10,00,50,65,65,72,54,56,00,.. "43"=hex:3c,00,31,00,00,00,00,00,b6,32,2e,8c,10,00,41,72,63,53,6f,66,74,.. "44"=hex:3a,00,31,00,00,00,00,00,15,35,9a,4e,10,00,47,6f,6f,67,6c,65,00,.. "45"=hex:2e,00,31,00,00,00,00,00,34,36,38,48,10,00,48,50,00,00,1c,00,03,.. "46"=hex:58,00,31,00,00,00,00,00,34,36,80,48,10,00,4d,49,43,52,4f,53,7e,.. "47"=hex:40,00,31,00,00,00,00,00,e5,32,36,84,10,00,52,45,47,53,48,41,56,.. "48"=hex:34,00,31,00,00,00,00,00,d7,34,f0,3d,10,00,4a,61,76,61,00,00,20,.. "49"=hex:30,00,31,00,00,00,00,00,5b,37,12,3c,10,00,44,41,5a,00,1e,00,03,.. "50"=hex:3c,00,31,00,00,00,00,00,5d,37,52,46,10,00,74,68,72,69,58,58,58,.. "51"=hex:5a,00,31,00,00,00,00,00,b8,32,93,4c,12,00,55,4e,49,4e,53,54,7e,.. "52"=hex:3c,00,31,00,00,00,00,00,5a,33,d5,84,10,00,57,61,6e,61,64,6f,6f,.. "53"=hex:44,00,31,00,00,00,00,00,1e,35,53,52,10,00,4e,45,54,4d,45,45,7e,.. "54"=hex:52,00,31,00,00,00,00,00,b6,32,d5,7c,10,00,57,49,4e,44,4f,57,7e,.. "55"=hex:4e,00,31,00,00,00,00,00,26,27,d5,71,10,00,4d,53,4e,47,41,4d,7e,.. "56"=hex:58,00,31,00,00,00,00,00,59,37,6d,75,10,00,4d,45,53,53,45,4e,7e,.. "57"=hex:64,00,31,00,00,00,00,00,49,37,94,0a,10,00,4d,49,43,52,4f,53,7e,.. "58"=hex:3c,00,31,00,00,00,00,00,67,37,66,61,10,00,6e,67,2d,67,6f,6c,64,.. "59"=hex:34,00,31,00,00,00,00,00,f0,32,59,3d,10,00,52,65,61,6c,00,00,20,.. "60"=hex:48,00,31,00,00,00,00,00,26,2d,66,7a,10,00,50,4f,57,45,52,43,7e,.. "61"=hex:4a,00,31,00,00,00,00,00,dd,32,18,61,10,00,46,49,4e,45,50,49,7e,.. "62"=hex:4e,00,31,00,00,00,00,00,49,37,85,0a,10,00,4f,55,54,4c,4f,4f,7e,.. "63"=hex:3a,00,31,00,00,00,00,00,51,37,dd,41,10,00,45,72,61,73,65,72,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2] "NodeSlot"=dword:0000015d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\1] "NodeSlot"=dword:000000b8 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,e5,34,b5,85,10,00,54,45,4d,50,55,50,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\1] "NodeSlot"=dword:0000009c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\10] "NodeSlot"=dword:00000210 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\11] "NodeSlot"=dword:0000021c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\12] "0"=hex:3a,00,31,00,00,00,00,00,cf,32,bd,86,10,00,4d,6f,76,69,65,73,00,.. "MRUListEx"=hex:00,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:0000010c "1"=hex:3c,00,31,00,00,00,00,00,cf,32,63,87,10,00,41,72,74,77,6f,72,6b,.. "2"=hex:34,00,31,00,00,00,00,00,cf,32,bd,86,10,00,44,69,76,58,00,00,20,.. "3"=hex:46,00,31,00,00,00,00,00,d1,32,05,24,10,00,44,49,56,58,50,4c,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\12] "NodeSlot"=dword:0000010b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\12\1] "NodeSlot"=dword:0000010d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\12\2] "NodeSlot"=dword:0000010e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\12\3] "NodeSlot"=dword:00000132 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\13] "NodeSlot"=dword:00000232 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\14] "NodeSlot"=dword:00000234 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\15] "NodeSlot"=dword:0000023c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\16] "NodeSlot"=dword:0000023f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\17] "0"=hex:4c,00,31,00,00,00,00,00,51,35,09,4a,10,00,53,44,50,44,4f,57,7e,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:0000025a [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\17] "NodeSlot"=dword:00000259 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\18] "NodeSlot"=dword:0000025f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\19] "NodeSlot"=dword:0000029d "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,76,35,92,41,10,00,48,65,6c,70,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\19] "NodeSlot"=dword:0000029e "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,76,35,92,41,10,00,46,72,61,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\19\] "NodeSlot"=dword:0000029f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\2] "NodeSlot"=dword:0000005c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\20] "NodeSlot"=dword:000002eb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\21] "0"=hex:27,01,31,00,00,00,00,00,92,35,38,42,10,00,53,57,45,45,54,49,7e,.. "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:0000034d "1"=hex:3c,00,31,00,00,00,00,00,92,35,25,42,10,00,53,77,65,65,74,49,4d,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\21] "NodeSlot"=dword:0000034c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,92,35,50,42,10,00,43,61,63,68,65,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\21\] "NodeSlot"=dword:0000034f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\21\1] "NodeSlot"=dword:0000034e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\22] "NodeSlot"=dword:0000043b "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,31,00,00,00,00,00,42,34,45,58,10,00,45,5a,57,45,42,43,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\22] "NodeSlot"=dword:0000043c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,42,34,45,58,10,00,69,6d,61,67,65,73,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\22\] "NodeSlot"=dword:0000043d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\23] "NodeSlot"=dword:0000043e "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,26,27,62,72,10,00,6e,77,77,69,61,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\23] "NodeSlot"=dword:0000043f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\24] "NodeSlot"=dword:00000440 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,ea,32,0c,55,10,00,44,6f,63,73,00,00,20,.. "1"=hex:3c,00,31,00,00,00,00,00,ea,32,c6,54,10,00,70,6c,75,67,69,6e,73,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\24] "NodeSlot"=dword:00000441 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,ea,32,0c,55,10,00,65,6e,67,6c,69,73,68,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\24\] "NodeSlot"=dword:00000442 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,ea,32,0c,55,10,00,70,69,63,74,75,72,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\24\] "NodeSlot"=dword:00000443 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\24\1] "NodeSlot"=dword:00000555 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\25] "NodeSlot"=dword:00000444 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,84,34,54,5c,10,00,44,65,73,69,67,6e,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\25] "NodeSlot"=dword:00000551 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,84,34,54,5c,10,00,42,41,43,4b,47,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\25\] "NodeSlot"=dword:00000552 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\26] "NodeSlot"=dword:00000478 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,71,36,cc,4d,10,00,4d,49,4e,59,41,4e,4d,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\26] "NodeSlot"=dword:00000479 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\27] "NodeSlot"=dword:00000481 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,72,36,60,4f,10,00,4c,61,6e,67,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\27] "NodeSlot"=dword:00000550 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\28] "NodeSlot"=dword:00000486 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,b6,32,5c,7f,10,00,53,50,46,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\28] "NodeSlot"=dword:00000487 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,b6,32,70,7b,10,00,4e,65,74,70,6f,72,74,.. "1"=hex:3c,00,31,00,00,00,00,00,b6,32,70,7b,10,00,49,6e,73,74,61,6c,6c,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\28\] "NodeSlot"=dword:00000488 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\28\1] "NodeSlot"=dword:00000489 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\29] "0"=hex:58,00,31,00,00,00,00,00,b6,32,ad,8c,10,00,53,41,4d,53,55,4e,7e,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\29] "0"=hex:34,00,31,00,00,00,00,00,b6,32,ad,8c,10,00,48,65,6c,70,00,00,20,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\29\] "0"=hex:40,00,31,00,00,00,00,00,b6,32,ac,8c,10,00,4d,41,47,49,43,4d,41,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\29\] "0"=hex:36,00,31,00,00,00,00,00,b6,32,ac,8c,10,00,49,4d,41,47,45,00,22,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\29\\] "NodeSlot"=dword:000004a0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\3] "NodeSlot"=dword:00000085 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\30] "NodeSlot"=dword:00000553 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:56,00,31,00,00,00,00,00,4a,36,5b,58,10,00,41,43,54,49,56,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\30] "NodeSlot"=dword:00000554 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\31] "NodeSlot"=dword:00000556 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\32] "NodeSlot"=dword:00000557 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,d2,32,35,50,12,00,49,4e,54,45,52,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\32] "NodeSlot"=dword:00000558 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\33] "NodeSlot"=dword:00000559 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:80,00,31,00,00,00,00,00,f5,36,19,49,10,00,44,36,41,43,43,34,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\33] "NodeSlot"=dword:0000055a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\34] "NodeSlot"=dword:0000002c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\35] "NodeSlot"=dword:0000055b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\36] "NodeSlot"=dword:00000032 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,b6,32,72,85,10,00,49,57,50,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\36] "NodeSlot"=dword:00000190 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\37] "NodeSlot"=dword:0000055c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\38] "NodeSlot"=dword:0000004c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,74,33,72,7e,10,00,56,4c,43,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\38] "NodeSlot"=dword:000000c4 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,74,33,6f,7e,10,00,73,6b,69,6e,73,00,22,.. "1"=hex:34,00,31,00,00,00,00,00,bf,34,4f,82,10,00,68,74,74,70,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\38\] "NodeSlot"=dword:00000087 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,74,33,6f,7e,10,00,66,6f,6e,74,73,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\38\] "NodeSlot"=dword:0000004b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\38\1] "NodeSlot"=dword:00000156 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,bf,34,4f,82,10,00,69,6d,61,67,65,73,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\38\1] "NodeSlot"=dword:00000005 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\39] "NodeSlot"=dword:000000a6 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,15,35,e1,84,10,00,50,6c,75,67,69,6e,73,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\39] "NodeSlot"=dword:0000075a "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,c3,32,75,53,10,00,53,54,55,46,46,50,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\39\] "NodeSlot"=dword:0000075b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\4] "NodeSlot"=dword:0000017c "MRUListEx"=hex:02,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:56,00,31,00,00,00,00,00,cc,34,8d,64,10,00,41,44,4f,42,45,50,7e,.. "1"=hex:52,00,31,00,00,00,00,00,cc,34,76,65,10,00,41,44,4f,42,45,48,7e,.. "2"=hex:4e,00,31,00,00,00,00,00,cc,34,af,64,10,00,41,44,4f,42,45,55,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\4] "NodeSlot"=dword:00000112 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\4\1] "NodeSlot"=dword:00000185 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\4\2] "NodeSlot"=dword:00000782 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:58,00,31,00,00,00,00,00,cc,34,b0,64,10,00,45,58,54,45,4e,44,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\4\2] "NodeSlot"=dword:00000783 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,cc,34,b5,64,10,00,52,65,71,75,69,72,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\4\2\] "NodeSlot"=dword:00000784 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\40] "NodeSlot"=dword:0000000c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\41] "NodeSlot"=dword:0000055d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\42] "NodeSlot"=dword:000006e0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\43] "NodeSlot"=dword:000006e1 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,b6,32,2e,8c,10,00,43,41,4d,45,52,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\43] "NodeSlot"=dword:000006e2 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,31,00,00,00,00,00,51,33,a3,33,10,00,50,48,4f,54,4f,49,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\43\] "NodeSlot"=dword:000006e3 "MRUListEx"=hex:00,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,51,33,a5,33,10,00,61,6c,62,75,6d,73,00,.. "1"=hex:3c,00,31,00,00,00,00,00,b6,32,43,8c,10,00,46,61,6e,74,61,73,79,.. "2"=hex:3a,00,31,00,00,00,00,00,51,33,a3,33,10,00,63,6f,6e,66,69,67,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\43\] "NodeSlot"=dword:00000789 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\43\\1] "NodeSlot"=dword:0000078a "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,b6,32,42,8c,10,00,52,4f,4c,45,50,4c,41,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\43\\1] "NodeSlot"=dword:0000078b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\43\\2] "NodeSlot"=dword:0000078c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\44] "NodeSlot"=dword:000006e4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\45] "NodeSlot"=dword:000006e5 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,34,36,38,48,10,00,69,50,41,51,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\45] "NodeSlot"=dword:000006e6 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4a,00,31,00,00,00,00,00,34,36,38,48,10,00,48,57,36,39,30,30,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\45\] "NodeSlot"=dword:000006e7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\46] "NodeSlot"=dword:000006e8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\47] "NodeSlot"=dword:00000716 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\48] "NodeSlot"=dword:00000717 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49] "NodeSlot"=dword:0000071d "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,5b,37,00,3e,10,00,53,74,75,64,69,6f,00,.. "1"=hex:44,00,31,00,00,00,00,00,5b,37,2b,5b,10,00,54,4f,54,41,4c,48,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49] "NodeSlot"=dword:0000071e "MRUListEx"=hex:00,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,5b,37,1b,3c,30,00,63,6f,6e,74,65,6e,74,.. "1"=hex:34,00,31,00,00,00,00,00,5b,37,19,3c,10,00,64,6f,63,73,00,00,20,.. "2"=hex:3c,00,31,00,00,00,00,00,5b,37,15,3c,10,00,70,6c,75,67,69,6e,73,.. "3"=hex:42,00,31,00,00,00,00,00,5b,37,0d,3e,10,00,52,45,53,4f,55,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\] "NodeSlot"=dword:0000071f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,5b,37,1b,3c,30,00,53,63,72,69,70,74,73,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\] "NodeSlot"=dword:00000720 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:42,00,31,00,00,00,00,00,5b,37,1b,3c,30,00,55,54,49,4c,49,54,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\\] "NodeSlot"=dword:00000721 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1] "NodeSlot"=dword:00000722 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,5b,37,19,3c,10,00,70,69,63,73,00,00,20,.. "1"=hex:42,00,31,00,00,00,00,00,5b,37,19,3c,10,00,44,41,5a,53,54,55,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1] "NodeSlot"=dword:00000723 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\1] "NodeSlot"=dword:00000724 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,5b,37,19,3c,10,00,69,6d,61,67,65,73,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\1] "NodeSlot"=dword:00000725 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\2] "NodeSlot"=dword:00000726 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:42,00,31,00,00,00,00,00,5b,37,13,3c,10,00,50,4f,57,45,52,50,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\2] "NodeSlot"=dword:00000727 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\3] "NodeSlot"=dword:00000728 "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,5b,37,19,3c,10,00,69,6d,61,67,65,73,00,.. "1"=hex:36,00,31,00,00,00,00,00,5b,37,1a,3c,10,00,73,74,79,6c,65,00,22,.. "2"=hex:36,00,31,00,00,00,00,00,5b,37,b3,40,10,00,63,61,63,68,65,00,22,.. "3"=hex:3c,00,31,00,00,00,00,00,5b,37,30,46,10,00,6c,61,79,6f,75,74,73,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\3] "NodeSlot"=dword:00000729 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,5b,37,19,3c,10,00,42,41,43,4b,47,52,7e,.. "1"=hex:36,00,31,00,00,00,00,00,5b,37,19,3c,10,00,69,63,6f,6e,73,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\3\] "NodeSlot"=dword:0000072a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\3\1] "NodeSlot"=dword:0000072b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\3\1] "NodeSlot"=dword:0000072c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\3\2] "NodeSlot"=dword:0000072d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\3\3] "NodeSlot"=dword:00000742 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1] "NodeSlot"=dword:00000738 "MRUListEx"=hex:00,00,00,00,03,00,00,00,02,00,00,00,05,00,00,00,04,00,00,00,01,.. "0"=hex:44,00,31,00,00,00,00,00,5b,37,ee,5a,10,00,54,4f,54,41,4c,48,7e,.. "1"=hex:52,00,31,00,00,00,00,00,5b,37,ef,5a,10,00,54,4f,54,41,4c,48,7e,.. "2"=hex:56,00,31,00,00,00,00,00,5b,37,f2,5a,10,00,54,4f,54,41,4c,48,7e,.. "3"=hex:58,00,31,00,00,00,00,00,5b,37,e7,5a,10,00,54,4f,39,39,31,30,7e,.. "4"=hex:52,00,31,00,00,00,00,00,5b,37,f4,5a,10,00,54,4f,54,41,4c,48,7e,.. "5"=hex:4e,00,31,00,00,00,00,00,5b,37,ef,5a,10,00,4e,4f,54,45,53,46,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1] "NodeSlot"=dword:00000739 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\1] "NodeSlot"=dword:0000073a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\2] "NodeSlot"=dword:0000073b "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,5b,37,f2,5a,10,00,44,69,61,6c,73,00,22,.. "1"=hex:4e,00,31,00,00,00,00,00,5b,37,f4,5a,10,00,54,4f,54,41,4c,48,7e,.. "2"=hex:36,00,31,00,00,00,00,00,5b,37,f2,5a,10,00,54,72,61,6e,73,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\2] "NodeSlot"=dword:0000073c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\2\1] "NodeSlot"=dword:0000073d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\2\2] "NodeSlot"=dword:0000073e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\3] "NodeSlot"=dword:0000073f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,5b,37,e8,5a,10,00,44,69,61,6c,73,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\3] "NodeSlot"=dword:00000743 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\4] "NodeSlot"=dword:00000740 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,5b,37,f4,5a,10,00,54,72,61,6e,73,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\4] "NodeSlot"=dword:00000741 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\49\1\5] "NodeSlot"=dword:00000744 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\5] "NodeSlot"=dword:00000150 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\50] "NodeSlot"=dword:00000749 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,31,00,00,00,00,00,5d,37,55,46,10,00,56,49,52,54,55,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\50] "NodeSlot"=dword:0000074a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\51] "NodeSlot"=dword:00000750 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\52] "NodeSlot"=dword:00000751 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,b6,32,f8,75,10,00,41,75,64,69,65,6e,63,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\52] "NodeSlot"=dword:00000752 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,b6,32,f8,75,10,00,49,63,6f,6e,65,73,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\52\] "NodeSlot"=dword:00000753 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\53] "NodeSlot"=dword:00000754 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,31,00,00,00,00,00,be,32,63,6a,10,00,46,49,43,48,49,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\53] "NodeSlot"=dword:00000755 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\54] "NodeSlot"=dword:00000756 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\55] "NodeSlot"=dword:00000757 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,26,27,d7,71,10,00,57,69,6e,64,6f,77,73,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\55] "NodeSlot"=dword:00000758 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\56] "NodeSlot"=dword:00000759 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\57] "NodeSlot"=dword:0000075c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,49,37,94,0a,10,00,4c,69,63,65,6e,73,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\57] "NodeSlot"=dword:0000075d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\58] "NodeSlot"=dword:0000076f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\59] "NodeSlot"=dword:00000780 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:44,00,31,00,00,00,00,00,5a,35,23,a1,10,00,52,45,41,4c,50,4c,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\59] "NodeSlot"=dword:00000781 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:42,00,31,00,00,00,00,00,f0,32,6a,3d,10,00,44,41,54,41,43,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\59\] "0"=hex:40,00,31,00,00,00,00,00,f0,32,6a,3d,10,00,47,65,74,4d,65,64,69,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\59\] "0"=hex:30,00,31,00,00,00,00,00,f0,32,6a,3d,10,00,6c,6f,63,00,1e,00,03,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\59\\] "0"=hex:2e,00,31,00,00,00,00,00,f0,32,6b,3d,10,00,66,72,00,00,1c,00,03,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\59\\] "0"=hex:36,00,31,00,00,00,00,00,f0,32,6a,3d,10,00,47,75,69,64,65,00,22,.. "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:000007c9 "1"=hex:30,00,31,00,00,00,00,00,f0,32,6b,3d,10,00,57,65,62,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\59\\\] "NodeSlot"=dword:000007c8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\59\\\1] "NodeSlot"=dword:000007ca "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6] "NodeSlot"=dword:000000d9 "MRUListEx"=hex:03,00,00,00,00,00,00,00,04,00,00,00,02,00,00,00,01,00,00,00,ff,.. "0"=hex:40,00,31,00,00,00,00,00,c3,32,0e,70,10,00,49,6e,63,6f,6d,69,6e,.. "3"=hex:34,00,31,00,00,00,00,00,c6,32,d4,6e,10,00,54,65,6d,70,00,00,20,.. "1"=hex:82,00,32,00,00,00,00,00,00,00,00,00,20,00,4d,65,64,69,61,49,6e,.. "2"=hex:42,00,31,00,00,00,00,00,48,37,20,b4,10,00,57,45,42,53,45,52,7e,.. "4"=hex:3a,00,31,00,00,00,00,00,48,37,bc,b4,10,00,63,6f,6e,66,69,67,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6] "NodeSlot"=dword:000000da "MRUListEx"=hex:05,00,00,00,04,00,00,00,00,00,00,00,03,00,00,00,02,00,00,00,01,.. "45"=hex:76,00,31,00,00,00,00,00,2a,33,23,5c,10,00,50,49,43,53,4f,46,7e,.. "47"=hex:0a,01,32,00,53,a3,0b,45,30,33,47,9b,20,00,54,52,55,53,54,5f,7e,.. "48"=hex:06,01,32,00,00,00,00,00,00,00,00,00,20,00,4d,61,6c,69,6b,61,20,.. "49"=hex:a0,00,32,00,00,00,00,00,00,00,00,00,20,00,4a,61,6d,65,73,20,42,.. "50"=hex:36,00,31,00,00,00,00,00,67,33,13,39,10,00,46,61,6b,65,73,00,22,.. "51"=hex:54,01,32,00,0d,7d,67,03,6e,33,fc,8a,20,00,58,58,58,4c,41,43,7e,.. "52"=hex:48,01,31,00,00,00,00,00,6e,33,6d,91,10,00,58,58,58,4c,41,43,7e,.. "53"=hex:74,00,31,00,00,00,00,00,6e,33,6e,94,10,00,50,49,52,45,4c,4c,7e,.. "0"=hex:34,00,31,00,00,00,00,00,47,35,c7,36,10,00,66,61,6b,65,00,00,20,.. "1"=hex:aa,00,32,00,b8,49,00,00,4b,35,bb,4b,20,00,53,45,52,49,41,4c,7e,.. "2"=hex:9e,00,31,00,00,00,00,00,4b,35,81,50,10,00,4e,4f,52,54,4f,4e,7e,.. "3"=hex:90,00,32,00,b0,6d,00,00,50,35,38,46,20,00,4e,4f,52,54,4f,4e,7e,.. "4"=hex:9c,00,32,00,ee,c5,ca,03,53,37,4a,23,20,00,42,45,52,4e,41,52,7e,.. "5"=hex:78,00,32,00,92,66,f0,00,5b,37,28,57,20,00,44,41,5a,33,44,54,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\] "NodeSlot"=dword:00000229 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:90,00,32,00,b0,6d,00,00,50,35,38,46,20,00,4e,4f,52,54,4f,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\] "NodeSlot"=dword:0000066c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\1] "NodeSlot"=dword:00000235 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\2] "NodeSlot"=dword:00000237 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:a6,00,31,00,00,00,00,00,4b,35,81,50,10,00,4e,4f,52,54,4f,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\2] "NodeSlot"=dword:00000238 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:68,00,31,00,00,00,00,00,63,33,59,97,30,00,43,4f,4d,4d,45,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\2\] "NodeSlot"=dword:00000239 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\3] "NodeSlot"=dword:00000241 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\4] "NodeSlot"=dword:0000070e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\45] "NodeSlot"=dword:000000c5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\47] "NodeSlot"=dword:000000c6 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:52,00,0b,03,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\47] "NodeSlot"=dword:00000083 "MRUListEx"=hex:0c,00,00,00,ff,ff,ff,ff "12"=hex:86,00,9e,05,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\47\12] "NodeSlot"=dword:000000dd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\48] "NodeSlot"=dword:00000001 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:04,01,a5,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\48] "NodeSlot"=dword:00000074 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\49] "NodeSlot"=dword:00000006 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\5] "NodeSlot"=dword:0000072f "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:66,00,0c,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. "1"=hex:5c,00,bb,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. "2"=hex:6a,00,dd,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. "3"=hex:6e,00,ca,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\5] "NodeSlot"=dword:00000730 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\5\1] "NodeSlot"=dword:00000746 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\5\2] "NodeSlot"=dword:00000747 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\5\3] "NodeSlot"=dword:00000748 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\50] "NodeSlot"=dword:00000039 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\51] "NodeSlot"=dword:00000093 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\52] "NodeSlot"=dword:00000028 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\53] "NodeSlot"=dword:00000029 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\1] "NodeSlot"=dword:0000027f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\2] "NodeSlot"=dword:000006d1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\3] "NodeSlot"=dword:000000e8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\6\4] "NodeSlot"=dword:000006d2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\60] "NodeSlot"=dword:0000078d "MRUListEx"=hex:00,00,00,00,02,00,00,00,01,00,00,00,03,00,00,00,ff,ff,ff,ff "0"=hex:42,00,31,00,00,00,00,00,2c,2d,e6,71,10,00,4d,45,44,49,41,53,7e,.. "1"=hex:4a,00,31,00,00,00,00,00,26,2d,56,7a,10,00,50,4f,57,45,52,44,7e,.. "2"=hex:40,00,31,00,00,00,00,00,21,34,82,66,10,00,50,6f,77,65,72,44,56,.. "3"=hex:46,00,31,00,00,00,00,00,26,2d,68,7a,10,00,50,4f,57,45,52,56,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\60] "NodeSlot"=dword:0000078e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\60\1] "NodeSlot"=dword:0000078f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\60\2] "NodeSlot"=dword:00000790 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\60\3] "NodeSlot"=dword:00000791 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\61] "NodeSlot"=dword:00000792 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\62] "NodeSlot"=dword:000007e4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\63] "NodeSlot"=dword:000007e8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\7] "NodeSlot"=dword:00000086 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,d9,34,a9,6d,10,00,72,75,6e,74,69,6d,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\7] "NodeSlot"=dword:0000011b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\8] "NodeSlot"=dword:00000009 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\2\9] "NodeSlot"=dword:000001de "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3] "NodeSlot"=dword:00000036 "MRUListEx"=hex:05,00,00,00,02,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff "5"=hex:30,00,31,00,00,00,00,00,b6,32,75,75,10,00,6d,6f,69,00,1e,00,03,.. "0"=hex:42,00,31,00,00,00,00,00,b6,32,68,75,10,00,41,4c,4c,55,53,45,7e,.. "1"=hex:48,00,31,00,00,00,00,00,b6,32,66,75,12,00,44,45,46,41,55,4c,7e,.. "2"=hex:48,00,31,00,00,00,00,00,25,35,04,59,10,00,50,52,4f,50,52,49,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3] "NodeSlot"=dword:0000010a "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:64,00,31,00,00,00,00,00,15,35,e1,84,13,00,41,50,50,4c,49,43,7e,.. "1"=hex:5e,00,31,00,00,00,00,00,1e,35,53,53,11,00,4d,45,4e,55,44,4d,7e,.. "2"=hex:56,00,31,00,00,00,00,00,5f,37,ae,b0,11,00,44,4f,43,55,4d,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\] "NodeSlot"=dword:000000b2 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:42,00,31,00,00,00,00,00,84,33,4c,9f,14,00,4d,49,43,52,4f,53,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\] "NodeSlot"=dword:0000013b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1] "NodeSlot"=dword:00000192 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:58,00,31,00,00,00,00,00,1e,35,01,5f,11,00,50,52,4f,47,52,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1] "NodeSlot"=dword:00000193 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:56,00,31,00,00,00,00,00,15,35,0e,38,11,00,44,4d,41,52,52,41,7e,.. "1"=hex:30,00,31,00,00,00,00,00,51,35,09,4a,10,00,53,44,50,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\] "NodeSlot"=dword:00000194 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\1] "NodeSlot"=dword:00000258 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\2] "NodeSlot"=dword:0000075e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1] "NodeSlot"=dword:0000012d "MRUListEx"=hex:00,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,31,00,00,00,00,00,26,27,3c,79,12,00,4c,4f,43,41,4c,53,7e,.. "1"=hex:3c,00,31,00,00,00,00,00,26,2d,cc,75,10,00,57,49,4e,44,4f,57,53,.. "2"=hex:4e,00,31,00,00,00,00,00,2c,2d,50,73,13,00,52,65,63,65,6e,74,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1] "NodeSlot"=dword:0000006e "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:50,00,31,00,00,00,00,00,26,2d,27,7b,12,00,41,50,50,4c,49,43,7e,.. "1"=hex:7a,00,b1,00,00,00,00,00,26,27,2c,73,14,00,54,45,4d,50,4f,52,7e,.. "2"=hex:34,00,31,00,00,00,00,00,2c,2d,ae,74,10,00,54,65,6d,70,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\] "NodeSlot"=dword:0000009a "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:42,00,31,00,00,00,00,00,26,2d,60,77,10,00,4d,49,43,52,4f,53,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\] "NodeSlot"=dword:0000012f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\1] "NodeSlot"=dword:0000018c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,b1,00,00,00,00,00,2c,2d,89,74,14,00,43,6f,6e,74,65,6e,74,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\1] "NodeSlot"=dword:00000035 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\2] "NodeSlot"=dword:00000043 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\1] "NodeSlot"=dword:000000d1 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,26,2d,cc,75,10,00,73,79,73,74,65,6d,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\1] "NodeSlot"=dword:000000b9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\1\2] "NodeSlot"=dword:0000048e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\2] "NodeSlot"=dword:0000075f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,31,00,00,00,00,00,26,27,3c,79,12,00,4c,4f,43,41,4c,53,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\2] "NodeSlot"=dword:00000760 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,53,37,c8,7d,10,00,54,65,6d,70,00,00,20,.. "1"=hex:7a,00,b1,00,00,00,00,00,26,27,2c,73,14,00,54,45,4d,50,4f,52,7e,.. "2"=hex:5e,00,b1,00,00,00,00,00,26,27,31,73,14,00,48,49,53,54,4f,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\2\] "NodeSlot"=dword:00000761 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\2\1] "NodeSlot"=dword:00000762 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,b1,00,00,00,00,00,2c,2d,89,74,14,00,43,6f,6e,74,65,6e,74,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\2\1] "NodeSlot"=dword:00000763 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\2\2] "NodeSlot"=dword:00000764 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,b1,00,00,00,00,00,2c,2d,af,71,14,00,48,69,73,74,6f,72,79,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\2\2] "NodeSlot"=dword:00000765 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5] "NodeSlot"=dword:00000055 "MRUListEx"=hex:04,00,00,00,08,00,00,00,06,00,00,00,0c,00,00,00,03,00,00,00,02,.. "0"=hex:6e,00,31,00,00,00,00,00,26,2d,16,79,11,00,4d,45,53,44,4f,43,7e,.. "2"=hex:3a,00,31,00,00,00,00,00,26,2d,dc,7d,10,00,42,75,72,65,61,75,00,.. "4"=hex:4c,00,31,00,00,00,00,00,26,27,3c,79,12,00,4c,4f,43,41,4c,53,7e,.. "5"=hex:5c,00,35,00,00,00,00,00,00,00,00,00,10,00,4d,00,65,00,6e,00,75,.. "6"=hex:50,00,31,00,00,00,00,00,18,33,70,4c,11,00,46,61,76,6f,72,69,73,.. "1"=hex:46,00,31,00,00,00,00,00,d3,34,51,b0,10,00,41,57,43,5f,4a,41,7e,.. "3"=hex:40,00,31,00,00,00,00,00,e9,34,22,4e,10,00,43,6f,6e,74,61,63,74,.. "7"=hex:40,00,31,00,00,00,00,00,d7,34,05,3f,10,00,6a,6d,65,65,74,69,6e,.. "8"=hex:64,00,31,00,00,00,00,00,12,35,f4,54,13,00,41,50,50,4c,49,43,7e,.. "9"=hex:4e,00,31,00,00,00,00,00,cf,36,4f,40,13,00,52,65,63,65,6e,74,00,.. "10"=hex:3e,00,31,00,00,00,00,00,b6,32,dc,7c,12,00,4d,4f,44,4c,45,53,7e,.. "11"=hex:3a,00,31,00,00,00,00,00,26,2d,9d,7d,13,00,53,65,6e,64,54,6f,00,.. "12"=hex:3c,00,31,00,00,00,00,00,26,2d,cc,75,10,00,57,49,4e,44,4f,57,53,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5] "NodeSlot"=dword:00000056 "MRUListEx"=hex:07,00,00,00,06,00,00,00,01,00,00,00,05,00,00,00,04,00,00,00,03,.. "0"=hex:3c,00,31,00,00,00,00,00,c3,32,2c,54,10,00,6f,75,73,73,61,6d,61,.. "1"=hex:68,00,31,00,00,00,00,00,cc,32,60,87,11,00,4d,41,4d,55,53,49,7e,.. "2"=hex:6a,00,31,00,00,00,00,00,fe,32,ce,b6,10,00,4d,45,53,41,52,43,7e,.. "3"=hex:9e,00,31,00,00,00,00,00,2e,34,8c,64,10,00,43,4f,4c,4f,52,49,7e,.. "4"=hex:6e,00,31,00,00,00,00,00,90,34,b8,7b,10,00,53,41,4e,44,59,52,7e,.. "5"=hex:36,00,31,00,00,00,00,00,dd,34,4d,6a,10,00,48,65,6c,6c,6f,00,22,.. "6"=hex:56,00,31,00,00,00,00,00,dd,34,63,6b,11,00,4d,45,53,49,4d,41,7e,.. "7"=hex:52,00,31,00,00,00,00,00,43,37,19,79,10,00,4e,4f,4b,49,41,4c,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\] "0"=hex:4a,00,31,00,00,00,00,00,c3,32,dc,54,10,00,41,56,41,54,41,52,7e,.. "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "1"=hex:36,00,31,00,00,00,00,00,ea,32,1a,69,10,00,70,65,72,73,6f,00,22,.. "NodeSlot"=dword:0000008a [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\] "NodeSlot"=dword:000000cd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\\1] "NodeSlot"=dword:0000015f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1] "0"=hex:8c,00,31,00,00,00,00,00,cc,32,6a,87,10,00,52,45,4e,41,55,44,7e,.. "MRUListEx"=hex:09,00,00,00,08,00,00,00,07,00,00,00,06,00,00,00,05,00,00,00,04,.. "1"=hex:74,00,31,00,00,00,00,00,d5,32,c9,8e,10,00,41,4c,44,45,42,45,7e,.. "NodeSlot"=dword:00000159 "2"=hex:52,00,31,00,00,00,00,00,e8,32,d6,2a,10,00,4c,41,50,45,54,49,7e,.. "3"=hex:44,00,31,00,00,00,00,00,d5,32,19,a2,10,00,56,49,44,45,4f,43,7e,.. "4"=hex:80,00,31,00,00,00,00,00,f4,32,1c,94,10,00,54,52,55,53,54,2d,7e,.. "5"=hex:96,00,31,00,00,00,00,00,84,33,00,95,10,00,44,41,48,4c,49,41,7e,.. "6"=hex:6c,00,31,00,00,00,00,00,87,33,e7,90,10,00,52,49,43,4b,49,45,7e,.. "7"=hex:8e,00,31,00,00,00,00,00,29,35,e0,44,10,00,4a,55,4c,49,45,54,7e,.. "8"=hex:78,00,31,00,00,00,00,00,29,35,76,45,10,00,4a,55,44,41,34,41,7e,.. "9"=hex:98,00,31,00,00,00,00,00,29,35,25,45,10,00,4a,55,4c,49,45,54,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1] "NodeSlot"=dword:00000104 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\1] "NodeSlot"=dword:0000011f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\2] "NodeSlot"=dword:0000015a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\3] "NodeSlot"=dword:0000017e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\4] "NodeSlot"=dword:0000017f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:58,00,31,00,00,00,00,00,f4,32,25,94,10,00,31,39,38,31,4d,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\4] "NodeSlot"=dword:00000180 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\5] "NodeSlot"=dword:0000004d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\6] "NodeSlot"=dword:0000003d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\7] "NodeSlot"=dword:000001e3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\8] "NodeSlot"=dword:000001e4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1\9] "NodeSlot"=dword:000001e5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\2] "NodeSlot"=dword:00000068 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3] "NodeSlot"=dword:000000f0 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:8e,00,31,00,00,00,00,00,2e,34,97,64,10,00,5f,44,45,35,30,30,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3] "NodeSlot"=dword:000000f2 "MRUListEx"=hex:05,00,00,00,06,00,00,00,04,00,00,00,03,00,00,00,02,00,00,00,01,.. "0"=hex:3a,00,31,00,00,00,00,00,2e,34,8e,64,10,00,42,61,74,6d,61,6e,00,.. "1"=hex:34,00,31,00,00,00,00,00,2e,34,8f,64,10,00,64,6f,72,61,00,00,20,.. "2"=hex:4c,00,31,00,00,00,00,00,2e,34,90,64,10,00,46,52,45,52,45,44,7e,.. "3"=hex:50,00,31,00,00,00,00,00,2e,34,91,64,10,00,4c,41,50,45,54,49,7e,.. "4"=hex:34,00,31,00,00,00,00,00,2e,34,94,64,10,00,6e,65,6d,6f,00,00,20,.. "5"=hex:42,00,31,00,00,00,00,00,2e,34,98,64,10,00,54,4f,59,53,54,4f,7e,.. "6"=hex:3c,00,31,00,00,00,00,00,2e,34,95,64,10,00,6f,75,69,2d,6f,75,69,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3\] "NodeSlot"=dword:000000f3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3\1] "NodeSlot"=dword:0000014e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3\2] "NodeSlot"=dword:0000007e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3\3] "NodeSlot"=dword:000000d7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3\4] "NodeSlot"=dword:000000bb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3\5] "NodeSlot"=dword:0000003b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3\6] "NodeSlot"=dword:000000be "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4] "NodeSlot"=dword:00000187 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\5] "0"=hex:44,00,31,00,00,00,00,00,dd,34,4d,6a,10,00,41,4e,44,59,53,45,7e,.. "MRUListEx"=hex:01,00,00,00,02,00,00,00,00,00,00,00,ff,ff,ff,ff "1"=hex:3c,00,31,00,00,00,00,00,1a,35,5a,8b,10,00,6e,69,63,65,6f,6c,64,.. "NodeSlot"=dword:0000018b "2"=hex:3a,00,31,00,00,00,00,00,1b,35,a7,6b,10,00,61,67,61,6c,61,68,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\5] "NodeSlot"=dword:00000127 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\5\1] "NodeSlot"=dword:00000130 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\5\2] "NodeSlot"=dword:00000094 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6] "0"=hex:36,00,31,00,00,00,00,00,dd,34,05,74,10,00,48,65,6c,6c,6f,00,22,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:000000c9 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6] "0"=hex:4c,00,31,00,00,00,00,00,e4,34,52,76,10,00,4d,41,47,45,53,50,7e,.. "MRUListEx"=hex:04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,.. "NodeSlot"=dword:00000134 "1"=hex:44,00,31,00,00,00,00,00,1a,35,90,82,10,00,41,4e,44,59,53,45,7e,.. "2"=hex:3c,00,31,00,00,00,00,00,1b,35,a7,59,10,00,43,68,61,6f,74,34,37,.. "3"=hex:4e,00,31,00,00,00,00,00,1b,35,8c,79,10,00,4a,55,4c,49,45,52,7e,.. "4"=hex:40,00,31,00,00,00,00,00,58,36,da,49,10,00,43,61,70,74,75,72,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\] "0"=hex:3a,00,31,00,00,00,00,00,e4,34,57,76,10,00,62,69,6c,64,65,72,00,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\] "NodeSlot"=dword:000000fc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\1] "NodeSlot"=dword:000000c7 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,31,00,00,00,00,00,1a,35,22,82,10,00,46,52,4f,4d,41,4e,7e,.. "1"=hex:3c,00,31,00,00,00,00,00,1a,35,9d,82,10,00,44,65,73,6b,74,6f,70,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\1] "NodeSlot"=dword:00000052 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\1\1] "NodeSlot"=dword:0000003a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\2] "NodeSlot"=dword:000000ab "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,1b,35,63,60,10,00,46,52,4f,4d,43,48,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\2] "NodeSlot"=dword:00000058 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\3] "NodeSlot"=dword:00000057 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:58,00,31,00,00,00,00,00,1b,35,15,7a,10,00,46,52,4f,4d,4a,55,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\3] "NodeSlot"=dword:0000012c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\4] "NodeSlot"=dword:0000049f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7] "0"=hex:42,00,31,00,00,00,00,00,43,37,1c,79,10,00,44,41,54,41,53,54,7e,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7] "0"=hex:36,00,31,00,00,00,00,00,43,37,ac,79,10,00,46,69,6c,65,73,00,22,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7\] "0"=hex:3c,00,31,00,00,00,00,00,43,37,b1,79,10,00,32,30,30,37,2d,30,39,.. "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "1"=hex:3c,00,31,00,00,00,00,00,43,37,c5,79,10,00,32,30,30,37,2d,31,30,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7\] "0"=hex:30,00,31,00,00,00,00,00,43,37,b9,79,10,00,4d,4d,53,00,1e,00,03,.. "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "1"=hex:3a,00,31,00,00,00,00,00,43,37,b8,79,10,00,69,6d,61,67,65,73,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7\\] "0"=hex:2a,00,31,00,00,00,00,00,43,37,b1,79,10,00,31,00,1a,00,03,00,04,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7\\] "NodeSlot"=dword:000006cb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7\\1] "NodeSlot"=dword:000006cd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7\\1] "0"=hex:30,00,31,00,00,00,00,00,43,37,ef,79,10,00,53,4d,53,00,1e,00,03,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7\\1] "NodeSlot"=dword:000006cc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\1] "NodeSlot"=dword:0000002d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\10] "NodeSlot"=dword:0000048d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\11] "NodeSlot"=dword:0000049b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\12] "NodeSlot"=dword:0000049c "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,26,2d,cc,75,10,00,73,79,73,74,65,6d,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\12] "NodeSlot"=dword:0000049d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\2] "NodeSlot"=dword:00000059 "MRUListEx"=hex:04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,.. "0"=hex:74,00,31,00,00,00,00,00,4b,35,64,4c,10,00,4b,45,59,4d,41,4b,7e,.. "1"=hex:40,00,31,00,00,00,00,00,66,36,0d,60,10,00,47,65,4d,6f,61,6e,44,.. "2"=hex:48,00,31,00,00,00,00,00,53,37,ca,4c,10,00,4e,55,49,54,44,27,7e,.. "3"=hex:52,00,31,00,00,00,00,00,5b,37,ef,5a,10,00,54,4f,54,41,4c,48,7e,.. "4"=hex:44,00,31,00,00,00,00,00,5b,37,ee,5a,10,00,54,4f,54,41,4c,48,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\2] "NodeSlot"=dword:00000236 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\2\1] "NodeSlot"=dword:00000415 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\2\2] "NodeSlot"=dword:0000070f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\2\3] "NodeSlot"=dword:00000731 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\2\4] "NodeSlot"=dword:00000732 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3] "NodeSlot"=dword:00000079 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:58,00,31,00,00,00,00,00,fd,34,b1,3c,12,20,4a,41,49,4d,45,43,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3] "NodeSlot"=dword:00000022 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,e2,34,8e,4e,12,00,49,67,6e,6f,72,65,64,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\3\] "NodeSlot"=dword:00000011 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4] "NodeSlot"=dword:00000080 "MRUListEx"=hex:02,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,b7,32,65,92,10,00,54,65,6d,70,00,00,20,.. "1"=hex:7a,00,b1,00,00,00,00,00,12,35,f6,54,14,00,54,45,4d,50,4f,52,7e,.. "2"=hex:50,00,31,00,00,00,00,00,d9,34,a8,6d,12,00,41,50,50,4c,49,43,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4] "NodeSlot"=dword:00000081 "MRUListEx"=hex:05,00,00,00,1c,00,00,00,1b,00,00,00,1a,00,00,00,19,00,00,00,18,.. "1"=hex:50,00,31,00,00,00,00,00,d8,32,9a,2e,10,00,57,45,52,37,54,4d,7e,.. "2"=hex:7c,00,31,00,00,00,00,00,dd,32,67,61,10,00,7b,39,33,34,45,39,7e,.. "3"=hex:40,00,31,00,00,00,00,00,f0,32,d7,3d,10,00,7e,72,6e,73,65,74,75,.. "4"=hex:36,00,31,00,00,00,00,00,d8,32,d7,8b,10,00,41,64,6f,62,65,00,22,.. "5"=hex:3c,00,31,00,00,00,00,00,cf,32,62,87,10,00,44,65,66,61,75,6c,74,.. "6"=hex:40,00,31,00,00,00,00,00,d9,32,66,4d,10,00,49,43,44,31,2e,74,6d,.. "7"=hex:4c,00,31,00,00,00,00,00,f4,32,f9,35,10,00,52,61,72,24,44,49,31,.. "8"=hex:c4,00,31,00,00,00,00,00,cc,32,0b,55,12,00,52,50,45,52,54,4f,7e,.. "9"=hex:c4,00,31,00,00,00,00,00,cc,32,51,55,12,00,52,50,41,36,42,41,7e,.. "10"=hex:44,00,31,00,00,00,00,00,1a,33,17,71,14,00,48,49,53,54,4f,52,7e,.. "11"=hex:60,00,31,00,00,00,00,00,1a,33,16,71,14,00,54,45,4d,50,4f,52,7e,.. "12"=hex:50,00,31,00,00,00,00,00,14,33,2e,87,10,00,54,45,4d,50,46,4f,7e,.. "13"=hex:52,00,31,00,00,00,00,00,e5,32,76,9e,10,00,57,45,52,31,32,54,7e,.. "14"=hex:02,01,31,00,00,00,00,00,74,33,ca,ac,12,00,52,50,45,52,54,4f,7e,.. "15"=hex:78,00,31,00,00,00,00,00,c8,34,61,45,12,00,52,50,44,46,35,33,7e,.. "0"=hex:46,00,31,00,00,00,00,00,ce,34,a6,38,10,00,49,4d,49,4e,53,54,7e,.. "16"=hex:4c,00,31,00,00,00,00,00,14,35,4f,65,10,00,48,53,50,45,52,46,7e,.. "17"=hex:54,00,31,00,00,00,00,00,fe,34,c1,14,10,00,49,4d,41,47,45,55,7e,.. "18"=hex:54,00,31,00,00,00,00,00,2d,34,14,b6,10,00,57,45,52,39,45,33,7e,.. "19"=hex:3a,00,31,00,00,00,00,00,b7,34,e9,26,10,00,50,50,54,38,2e,30,00,.. "20"=hex:56,00,31,00,00,00,00,00,5c,33,18,3a,10,00,57,45,52,32,32,39,7e,.. "21"=hex:02,01,31,00,00,00,00,00,74,33,cd,ac,12,00,52,50,45,52,54,4f,7e,.. "22"=hex:54,00,31,00,00,00,00,00,7a,33,c3,93,10,00,57,45,52,44,38,43,7e,.. "23"=hex:04,01,31,00,00,00,00,00,74,33,17,ad,10,00,52,50,35,41,37,31,7e,.. "24"=hex:5e,00,31,00,00,00,00,00,74,33,ca,ac,10,00,52,50,45,52,54,4f,7e,.. "25"=hex:5e,00,31,00,00,00,00,00,74,33,d0,ac,10,00,52,50,45,52,54,4f,7e,.. "26"=hex:5e,00,31,00,00,00,00,00,74,33,d3,ac,10,00,52,50,30,43,35,46,7e,.. "27"=hex:4e,00,31,00,00,00,00,00,f5,36,c9,51,10,00,43,46,44,54,45,4d,7e,.. "28"=hex:48,00,31,00,00,00,00,00,fa,36,64,b6,10,00,43,4f,50,59,46,49,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\] "0"=hex:46,00,31,00,00,00,00,00,ce,34,eb,38,10,00,49,4e,43,52,45,44,7e,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:0000006c [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\] "NodeSlot"=dword:0000006b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\1] "NodeSlot"=dword:0000016d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\10] "NodeSlot"=dword:000000d2 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,b1,00,00,00,00,00,1a,33,17,71,14,00,48,69,73,74,6f,72,79,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\10] "NodeSlot"=dword:000000cb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\11] "NodeSlot"=dword:00000053 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,b1,00,00,00,00,00,1a,33,16,71,14,00,43,6f,6e,74,65,6e,74,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\11] "NodeSlot"=dword:000000ca "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:5a,00,b1,00,00,00,00,00,1a,33,16,71,14,00,36,56,43,50,57,37,41,.. "1"=hex:5a,00,b1,00,00,00,00,00,1a,33,16,71,14,00,43,44,4d,42,38,44,55,.. "2"=hex:5a,00,b1,00,00,00,00,00,1a,33,16,71,14,00,46,38,48,38,4e,50,35,.. "3"=hex:5a,00,b1,00,00,00,00,00,1a,33,16,71,14,00,4b,35,4b,58,32,58,34,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\11\] "NodeSlot"=dword:00000107 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\11\1] "NodeSlot"=dword:000000bf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\11\2] "NodeSlot"=dword:0000007d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\11\3] "NodeSlot"=dword:000000df "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\12] "NodeSlot"=dword:000000b3 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,14,33,39,87,10,00,78,74,72,61,73,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\12] "NodeSlot"=dword:000000a9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\13] "NodeSlot"=dword:000000d8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\14] "NodeSlot"=dword:00000163 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:ec,00,31,00,00,00,00,00,74,33,ca,ac,10,00,4d,41,4c,49,4b,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\14] "NodeSlot"=dword:00000162 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\15] "0"=hex:2a,00,31,00,00,00,00,00,c8,34,61,45,10,00,32,00,1a,00,03,00,04,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000113 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\15] "0"=hex:3c,00,32,00,d1,93,c3,04,c2,34,a3,45,21,00,32,32,32,2e,7a,69,70,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000111 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\15\] "NodeSlot"=dword:00000101 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,b5,02,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\15\] "NodeSlot"=dword:000000f9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\16] "NodeSlot"=dword:00000077 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\17] "NodeSlot"=dword:0000017a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\18] "NodeSlot"=dword:0000016c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\19] "NodeSlot"=dword:0000009e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2] "NodeSlot"=dword:0000016e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\20] "NodeSlot"=dword:00000497 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\21] "NodeSlot"=dword:00000498 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:ec,00,31,00,00,00,00,00,74,33,cd,ac,10,00,4d,41,4c,49,4b,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\21] "NodeSlot"=dword:00000499 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\22] "NodeSlot"=dword:0000049a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\23] "NodeSlot"=dword:000004a1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\24] "NodeSlot"=dword:000004a2 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:ec,00,31,00,00,00,00,00,74,33,ca,ac,10,00,4d,41,4c,49,4b,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\24] "NodeSlot"=dword:000004a3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\25] "NodeSlot"=dword:000004a4 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:ec,00,31,00,00,00,00,00,74,33,d0,ac,10,00,4d,41,4c,49,4b,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\25] "NodeSlot"=dword:000004a5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\26] "NodeSlot"=dword:000004a6 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:ec,00,31,00,00,00,00,00,74,33,d3,ac,10,00,4d,41,4c,49,4b,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\26] "NodeSlot"=dword:000004a7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\27] "0"=hex:4e,00,31,00,00,00,00,00,f5,36,cc,51,10,00,33,35,33,36,34,30,7e,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000563 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\27] "0"=hex:2a,00,31,00,00,00,00,00,f5,36,cd,51,10,00,45,00,1a,00,03,00,04,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000562 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\27\] "0"=hex:3a,00,31,00,00,00,00,00,f5,36,cf,51,10,00,56,69,64,65,6f,73,00,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000561 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\27\] "0"=hex:3a,00,31,00,00,00,00,00,f5,36,f0,51,10,00,32,30,30,37,30,37,00,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:00000560 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\27\\] "NodeSlot"=dword:0000055f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\28] "NodeSlot"=dword:000006db "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\3] "NodeSlot"=dword:0000016f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\4] "NodeSlot"=dword:00000170 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,d8,32,d7,8b,10,00,41,63,72,6f,62,61,74,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\4] "NodeSlot"=dword:00000171 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,d8,32,d7,8b,10,00,36,2e,30,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\4\] "NodeSlot"=dword:00000172 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\5] "NodeSlot"=dword:00000173 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\6] "NodeSlot"=dword:00000174 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\7] "NodeSlot"=dword:00000175 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\8] "NodeSlot"=dword:00000176 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,cc,32,0b,55,10,00,43,44,31,7e,31,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\8] "NodeSlot"=dword:00000177 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\9] "NodeSlot"=dword:00000178 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,cc,32,51,55,10,00,43,44,31,7e,31,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\9] "NodeSlot"=dword:00000179 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\1] "NodeSlot"=dword:000000c0 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,00,00,00,00,10,00,43,6f,6e,74,65,6e,74,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\1] "0"=hex:40,00,31,00,00,00,00,00,00,00,00,00,10,00,53,4c,36,56,30,39,59,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\1\] "0"=hex:6c,00,32,00,00,00,00,00,00,00,00,00,20,00,70,68,6f,74,6f,73,5f,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\1\] "NodeSlot"=dword:000001f6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2] "NodeSlot"=dword:00000184 "MRUListEx"=hex:02,00,00,00,04,00,00,00,01,00,00,00,03,00,00,00,00,00,00,00,ff,.. "0"=hex:44,00,31,00,00,00,00,00,16,33,34,3a,10,00,49,44,45,4e,54,49,7e,.. "1"=hex:42,00,31,00,00,00,00,00,96,35,26,0b,10,00,4d,49,43,52,4f,53,7e,.. "2"=hex:2e,00,31,00,00,00,00,00,d1,34,97,a2,10,00,49,4d,00,00,1c,00,03,.. "3"=hex:40,00,31,00,00,00,00,00,6c,36,4a,4a,10,00,50,43,48,65,61,6c,74,.. "4"=hex:3c,00,31,00,00,00,00,00,3a,35,01,4d,10,00,4d,6f,7a,69,6c,6c,61,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2] "NodeSlot"=dword:00000023 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:7c,00,31,00,00,00,00,00,16,33,34,3a,10,00,7b,33,35,45,44,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\] "NodeSlot"=dword:00000160 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:42,00,31,00,00,00,00,00,16,33,34,3a,10,00,4d,49,43,52,4f,53,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\] "NodeSlot"=dword:0000006d "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,31,00,00,00,00,00,69,36,20,90,10,00,4f,55,54,4c,4f,4f,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\\] "NodeSlot"=dword:0000074c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\1] "NodeSlot"=dword:00000375 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:50,00,31,00,00,00,00,00,1e,35,0f,5f,10,00,57,49,4e,44,4f,57,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\1] "NodeSlot"=dword:000007dd "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,7d,37,a8,8e,10,00,46,49,4c,45,54,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\1\] "NodeSlot"=dword:000007de "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\2] "NodeSlot"=dword:0000048f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:44,00,31,00,00,00,00,00,d1,34,a5,a2,10,00,49,44,45,4e,54,49,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\2] "NodeSlot"=dword:00000490 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:7c,00,31,00,00,00,00,00,d4,34,6d,7c,10,00,7b,37,30,35,44,30,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\2\] "NodeSlot"=dword:00000491 "MRUListEx"=hex:00,00,00,00,01,00,00,00,02,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,d1,34,a1,a2,10,00,6c,65,78,00,1e,00,03,.. "1"=hex:4c,00,31,00,00,00,00,00,d1,34,a4,a2,10,00,45,4d,4f,54,49,43,7e,.. "2"=hex:34,00,31,00,00,00,00,00,d4,34,6d,7c,10,00,4c,6f,67,73,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\2\] "NodeSlot"=dword:00000492 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\2\\1] "NodeSlot"=dword:00000493 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,d1,34,a4,a2,10,00,4d,59,45,4d,4f,54,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\2\\1] "NodeSlot"=dword:00000494 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,d1,34,a5,a2,10,00,51,75,69,63,6b,42,61,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\2\\1\] "NodeSlot"=dword:00000495 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\2\\2] "NodeSlot"=dword:00000496 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\3] "NodeSlot"=dword:0000074d "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,6c,36,4a,4a,10,00,45,72,72,6f,72,52,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\3] "NodeSlot"=dword:0000074e "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,19,37,a6,bc,10,00,51,53,69,67,6e,6f,66,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\3\] "NodeSlot"=dword:0000074f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\4] "NodeSlot"=dword:000007df "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,49,37,79,63,10,00,46,69,72,65,66,6f,78,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\4] "NodeSlot"=dword:000007e0 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,3a,35,02,4d,10,00,50,72,6f,66,69,6c,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\4\] "NodeSlot"=dword:000007e1 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,31,00,00,00,00,00,7e,37,8b,05,10,00,50,35,33,30,53,59,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\4\] "NodeSlot"=dword:000007e2 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,7e,37,8b,05,10,00,43,61,63,68,65,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\4\2\4\\] "NodeSlot"=dword:000007e3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\5] "0"=hex:46,00,31,00,00,00,00,00,00,00,00,00,10,00,50,72,6f,67,72,61,6d,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\5] "0"=hex:3a,00,31,00,00,00,00,00,00,00,00,00,10,00,57,69,6e,52,41,52,00,.. "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "1"=hex:56,00,31,00,00,00,00,00,b7,32,57,88,11,00,44,4d,41,52,52,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\5\] "NodeSlot"=dword:00000116 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\5\1] "NodeSlot"=dword:00000114 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6] "NodeSlot"=dword:000000f5 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,bc,32,f3,53,10,00,4c,69,6e,6b,73,00,22,.. "1"=hex:46,00,31,00,00,00,00,00,1b,33,71,39,10,00,53,49,54,45,53,41,7e,.. "2"=hex:3c,00,31,00,00,00,00,00,2d,35,73,76,10,00,6f,75,73,73,61,6d,61,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6] "NodeSlot"=dword:00000141 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\1] "NodeSlot"=dword:000000af "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\6\2] "NodeSlot"=dword:0000049e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7] "NodeSlot"=dword:000000c1 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,d7,34,51,40,10,00,72,65,67,69,73,74,72,.. "1"=hex:3c,00,31,00,00,00,00,00,d7,34,42,3e,10,00,72,65,6c,65,61,73,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7] "NodeSlot"=dword:0000001f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\7\1] "NodeSlot"=dword:0000005a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8] "NodeSlot"=dword:0000004a "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:44,00,31,00,00,00,00,00,26,27,5d,72,10,00,49,44,45,4e,54,49,7e,.. "1"=hex:34,00,31,00,00,00,00,00,f0,32,aa,3e,10,00,52,65,61,6c,00,00,20,.. "2"=hex:40,00,31,00,00,00,00,00,d1,32,9a,94,10,00,53,79,6d,61,6e,74,65,.. "3"=hex:30,00,31,00,00,00,00,00,84,34,5a,61,10,00,53,75,6e,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8] "NodeSlot"=dword:000000ad "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:7c,00,31,00,00,00,00,00,26,27,5d,72,10,00,7b,33,35,45,44,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\] "NodeSlot"=dword:000000ae "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\1] "NodeSlot"=dword:00000041 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\2] "NodeSlot"=dword:00000082 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,b6,32,a1,80,10,00,53,68,61,72,65,64,00,.. "1"=hex:50,00,31,00,00,00,00,00,d1,32,9a,94,10,00,4e,4f,52,54,4f,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\2] "NodeSlot"=dword:0000008b "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,b6,32,68,7f,10,00,53,65,73,73,69,6f,6e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\2\] "NodeSlot"=dword:0000000f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\2\1] "NodeSlot"=dword:0000018e "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,d1,32,9a,94,10,00,54,61,73,6b,73,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\2\1] "NodeSlot"=dword:000000db "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\3] "NodeSlot"=dword:000007d5 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,84,34,5a,61,10,00,4a,61,76,61,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\3] "NodeSlot"=dword:000007d6 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:44,00,31,00,00,00,00,00,6e,37,d3,86,10,00,44,45,50,4c,4f,59,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\3\] "NodeSlot"=dword:000007d7 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,68,37,cf,64,10,00,63,61,63,68,65,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\3\] "NodeSlot"=dword:000007d8 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,68,37,d8,64,10,00,36,2e,30,00,1e,00,03,.. "1"=hex:3a,00,31,00,00,00,00,00,84,34,6c,61,10,00,6a,61,76,61,70,69,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\3\\] "NodeSlot"=dword:000007d9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\3\\1] "NodeSlot"=dword:000007da "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,84,34,6c,61,10,00,76,31,2e,30,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\3\\1] "NodeSlot"=dword:000007db "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,4e,37,b5,65,10,00,6a,61,72,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\8\3\\1\] "NodeSlot"=dword:000007dc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\3\5\9] "NodeSlot"=dword:0000048c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4] "NodeSlot"=dword:00000042 "MRUListEx"=hex:0a,00,00,00,00,00,00,00,0d,00,00,00,06,00,00,00,13,00,00,00,1c,.. "0"=hex:34,00,31,00,00,00,00,00,12,35,30,2d,10,00,54,65,6d,70,00,00,20,.. "1"=hex:7a,00,b1,00,00,00,00,00,d9,34,84,6d,14,00,44,4f,57,4e,4c,4f,7e,.. "2"=hex:60,00,31,00,00,00,00,00,7b,33,dd,ac,10,00,44,4f,57,4e,4c,4f,7e,.. "3"=hex:36,00,31,00,00,00,00,00,3a,33,f6,44,10,00,65,68,6f,6d,65,00,22,.. "4"=hex:3c,00,31,00,00,00,00,00,3d,33,94,9b,10,00,50,65,65,72,4e,65,74,.. "5"=hex:3a,00,31,00,00,00,00,00,3a,33,ce,44,10,00,73,79,73,74,65,6d,00,.. "6"=hex:40,00,31,00,00,00,00,00,1c,35,ca,66,30,00,73,79,73,74,65,6d,33,.. "7"=hex:34,00,31,00,00,00,00,00,26,27,74,70,10,00,49,33,38,36,00,00,20,.. "8"=hex:30,00,31,00,00,00,00,00,1e,35,20,53,10,00,69,6d,65,00,1e,00,03,.. "9"=hex:48,00,31,00,00,00,00,00,1e,35,08,53,10,00,50,52,4f,56,49,53,7e,.. "10"=hex:40,00,31,00,00,00,00,00,58,35,ab,33,10,20,50,72,65,66,65,74,63,.. "11"=hex:40,00,31,00,00,00,00,00,26,27,08,72,10,00,50,43,48,45,41,4c,54,.. "12"=hex:6c,00,b1,00,00,00,00,00,26,27,21,72,11,00,4f,46,46,4c,49,4e,7e,.. "13"=hex:40,00,31,00,00,00,00,00,1c,35,27,8f,10,00,4d,69,6e,69,64,75,6d,.. "14"=hex:60,00,31,00,00,00,00,00,1e,35,85,51,12,08,24,4e,54,53,45,52,7e,.. "15"=hex:54,00,31,00,00,00,00,00,93,35,e4,4a,10,00,4e,45,54,57,4f,52,7e,.. "16"=hex:44,00,31,00,00,00,00,00,30,33,cf,58,10,00,48,49,53,54,4f,52,7e,.. "17"=hex:3a,00,31,00,00,00,00,00,26,27,d4,80,10,00,43,6f,6e,66,69,67,00,.. "18"=hex:36,00,31,00,00,00,00,00,49,37,29,0a,10,00,44,65,62,75,67,00,22,.. "19"=hex:50,00,b1,00,00,00,00,00,7c,37,e0,60,14,00,54,61,73,6b,73,00,22,.. "20"=hex:40,00,31,00,00,00,00,00,6e,37,b8,56,12,00,24,68,66,5f,6d,69,67,.. "21"=hex:30,00,31,00,00,00,00,00,93,35,4c,4b,12,08,69,65,37,00,1e,00,03,.. "22"=hex:3a,00,31,00,00,00,00,00,8d,35,ef,28,10,00,72,65,70,6f,72,74,00,.. "23"=hex:3c,00,31,00,00,00,00,00,8c,36,cb,09,10,00,6d,73,61,67,65,6e,74,.. "24"=hex:36,00,31,00,00,00,00,00,b6,32,a0,7e,10,00,43,61,63,68,65,00,22,.. "25"=hex:40,00,31,00,00,00,00,00,26,2d,17,79,10,00,50,72,6f,66,69,6c,65,.. "26"=hex:48,00,31,00,00,00,00,00,7d,37,6e,85,10,00,52,45,47,49,53,54,7e,.. "27"=hex:58,00,31,00,00,00,00,00,3a,33,62,41,10,00,53,4f,46,54,57,41,7e,.. "28"=hex:40,00,31,00,00,00,00,00,1e,35,57,52,10,00,73,72,63,68,61,73,73,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4] "NodeSlot"=dword:00000165 "MRUListEx"=hex:05,00,00,00,01,00,00,00,02,00,00,00,04,00,00,00,03,00,00,00,00,.. "1"=hex:44,00,31,00,00,00,00,00,b6,32,40,75,14,00,48,49,53,54,4f,52,7e,.. "0"=hex:48,00,31,00,00,00,00,00,96,35,e2,09,10,00,73,6c,75,33,64,37,32,.. "2"=hex:60,00,31,00,00,00,00,00,b6,32,40,75,14,00,54,45,4d,50,4f,52,7e,.. "3"=hex:52,00,31,00,00,00,00,00,1c,35,4a,90,10,00,57,45,52,32,45,54,7e,.. "4"=hex:52,00,31,00,00,00,00,00,4a,37,59,01,10,00,4d,50,54,45,4c,45,7e,.. "5"=hex:3c,00,31,00,00,00,00,00,b6,32,40,75,14,00,43,6f,6f,6b,69,65,73,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\] "NodeSlot"=dword:00000434 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\1] "NodeSlot"=dword:0000003f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,b1,00,00,00,00,00,b6,32,40,75,14,00,48,69,73,74,6f,72,79,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\1] "NodeSlot"=dword:000007be "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2] "NodeSlot"=dword:00000435 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,b1,00,00,00,00,00,b6,32,40,75,14,00,43,6f,6e,74,65,6e,74,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2] "NodeSlot"=dword:00000436 "MRUListEx"=hex:00,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:5a,00,b1,00,00,00,00,00,b6,32,40,75,14,00,31,49,56,30,30,33,55,.. "1"=hex:5a,00,b1,00,00,00,00,00,11,33,84,86,14,00,36,52,32,44,4b,48,55,.. "2"=hex:5a,00,b1,00,00,00,00,00,b6,32,40,75,14,00,4a,45,38,44,45,44,32,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2\] "NodeSlot"=dword:00000437 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2\1] "NodeSlot"=dword:00000438 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2\2] "NodeSlot"=dword:00000439 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\3] "NodeSlot"=dword:000007bc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\4] "NodeSlot"=dword:000007bd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\5] "NodeSlot"=dword:000007bf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\1] "NodeSlot"=dword:00000017 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\10] "NodeSlot"=dword:00000269 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\11] "0"=hex:3c,00,31,00,00,00,00,00,26,27,2e,72,10,00,48,45,4c,50,43,54,52,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\11] "0"=hex:40,00,31,00,00,00,00,00,93,35,25,95,10,00,44,61,74,61,43,6f,6c,.. "MRUListEx"=hex:04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,.. "NodeSlot"=dword:00000366 "1"=hex:40,00,31,00,00,00,00,00,26,27,30,72,10,00,44,61,74,61,62,61,73,.. "2"=hex:34,00,31,00,00,00,00,00,8c,33,30,4a,10,00,4c,6f,67,73,00,00,20,.. "3"=hex:48,00,31,00,00,00,00,00,1e,35,dc,53,10,00,4f,46,46,4c,49,4e,7e,.. "4"=hex:34,00,31,00,00,00,00,00,26,27,2e,72,10,00,54,65,6d,70,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\11\] "NodeSlot"=dword:00000365 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\11\1] "NodeSlot"=dword:00000367 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\11\2] "NodeSlot"=dword:00000368 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\11\3] "NodeSlot"=dword:00000369 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:50,00,31,00,00,00,00,00,1e,35,dc,53,10,00,50,45,52,53,4f,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\11\3] "NodeSlot"=dword:0000036a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\11\4] "NodeSlot"=dword:0000036b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\12] "NodeSlot"=dword:0000043a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\13] "NodeSlot"=dword:000006dc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\14] "NodeSlot"=dword:00000793 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\15] "NodeSlot"=dword:00000798 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\16] "NodeSlot"=dword:00000799 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\17] "NodeSlot"=dword:0000079a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\18] "NodeSlot"=dword:0000079b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\19] "NodeSlot"=dword:000007c0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2] "NodeSlot"=dword:00000021 "MRUListEx"=hex:04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,.. "0"=hex:7c,00,31,00,00,00,00,00,3d,33,ea,9b,10,00,7b,42,33,38,36,32,7e,.. "1"=hex:7c,00,31,00,00,00,00,00,7b,33,dd,ac,10,00,7b,43,30,46,41,37,7e,.. "2"=hex:7c,00,31,00,00,00,00,00,34,36,65,48,10,00,7b,46,46,37,39,32,7e,.. "3"=hex:7c,00,31,00,00,00,00,00,f5,36,95,49,10,00,7b,32,33,41,39,41,7e,.. "4"=hex:7c,00,31,00,00,00,00,00,f5,36,a2,49,10,00,7b,38,30,34,35,31,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2] "NodeSlot"=dword:0000002e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2\1] "NodeSlot"=dword:00000007 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2\2] "NodeSlot"=dword:0000079c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2\3] "NodeSlot"=dword:000007c2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\2\4] "NodeSlot"=dword:000007c3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\20] "NodeSlot"=dword:000007c1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\21] "NodeSlot"=dword:000007c4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\22] "NodeSlot"=dword:000007c5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\23] "NodeSlot"=dword:000007c6 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,f2,32,f6,5a,10,00,69,6e,74,6c,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\23] "NodeSlot"=dword:000007c7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\24] "NodeSlot"=dword:000007cb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\25] "NodeSlot"=dword:000007cc "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:42,00,31,00,00,00,00,00,26,2d,17,79,10,00,41,4c,4c,55,53,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\25] "NodeSlot"=dword:000007cd "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,26,2d,17,79,10,00,41,64,6f,62,65,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\25\] "NodeSlot"=dword:000007ce "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\26] "NodeSlot"=dword:000007cf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\27] "NodeSlot"=dword:000007d0 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,7c,37,e3,6d,10,00,57,65,62,53,65,74,75,.. "1"=hex:40,00,31,00,00,00,00,00,7d,37,35,45,10,00,41,75,74,68,43,61,62,.. "2"=hex:44,00,31,00,00,00,00,00,7d,37,a3,85,10,00,45,56,45,4e,54,43,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\27] "NodeSlot"=dword:000007d1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\27\1] "NodeSlot"=dword:000007d2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\27\2] "NodeSlot"=dword:000007d3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\28] "NodeSlot"=dword:000007d4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\3] "NodeSlot"=dword:00000066 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\4] "NodeSlot"=dword:0000016b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\5] "NodeSlot"=dword:00000069 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6] "NodeSlot"=dword:000000b4 "MRUListEx"=hex:05,00,00,00,04,00,00,00,0e,00,00,00,0d,00,00,00,0a,00,00,00,0c,.. "0"=hex:34,00,31,00,00,00,00,00,26,27,f0,80,10,00,31,30,33,33,00,00,20,.. "1"=hex:34,00,31,00,00,00,00,00,26,27,06,81,10,00,31,30,33,36,00,00,20,.. "2"=hex:34,00,31,00,00,00,00,00,b8,32,20,3c,10,00,62,69,74,73,00,00,20,.. "3"=hex:3c,00,31,00,00,00,00,00,1e,35,41,62,10,00,43,61,74,52,6f,6f,74,.. "4"=hex:30,00,31,00,00,00,00,00,1e,35,cd,58,10,00,43,6f,6d,00,1e,00,03,.. "5"=hex:3a,00,31,00,00,00,00,00,25,35,09,59,10,00,63,6f,6e,66,69,67,00,.. "6"=hex:3c,00,31,00,00,00,00,00,4f,35,2e,9b,10,00,64,72,69,76,65,72,73,.. "7"=hex:30,00,31,00,00,00,00,00,26,27,44,72,10,00,69,61,73,00,1e,00,03,.. "8"=hex:3a,00,31,00,00,00,00,00,26,27,fb,80,10,00,69,63,73,78,6d,6c,00,.. "9"=hex:50,00,31,00,00,00,00,00,1e,35,a1,51,10,00,52,45,49,4e,53,54,7e,.. "10"=hex:34,00,31,00,00,00,00,00,25,35,fd,58,10,00,77,62,65,6d,00,00,20,.. "11"=hex:30,00,31,00,00,00,00,00,1e,35,20,53,10,00,6d,75,69,00,1e,00,03,.. "12"=hex:30,00,31,00,00,00,00,00,26,27,d4,80,10,00,49,4d,45,00,1e,00,03,.. "13"=hex:58,00,31,00,00,00,00,00,e5,32,35,84,10,00,53,4f,46,54,57,41,7e,.. "14"=hex:30,00,31,00,00,00,00,00,26,27,01,81,10,00,72,61,73,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6] "NodeSlot"=dword:00000243 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\1] "NodeSlot"=dword:00000244 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\10] "NodeSlot"=dword:00000263 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\11] "NodeSlot"=dword:00000264 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,26,27,f1,80,10,00,30,30,30,43,00,00,20,.. "1"=hex:34,00,31,00,00,00,00,00,1e,35,21,53,10,00,30,34,31,65,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\11] "NodeSlot"=dword:00000265 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\11\1] "NodeSlot"=dword:00000266 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\12] "NodeSlot"=dword:00000267 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,1e,35,56,52,10,00,43,49,4e,54,4c,47,4e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\12] "NodeSlot"=dword:00000268 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\13] "NodeSlot"=dword:0000035f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,e5,32,35,84,10,00,53,65,74,75,70,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\13] "NodeSlot"=dword:00000360 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,31,00,00,00,00,00,e5,32,35,84,10,00,53,45,52,56,49,43,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\13\] "NodeSlot"=dword:00000361 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,e5,32,35,84,10,00,77,75,70,73,2e,64,6c,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\13\] "NodeSlot"=dword:00000362 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:44,00,31,00,00,00,00,00,e5,32,35,84,10,00,35,38,30,7e,31,2e,32,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\13\\] "NodeSlot"=dword:00000363 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\14] "NodeSlot"=dword:00000364 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\2] "NodeSlot"=dword:00000245 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\3] "NodeSlot"=dword:00000246 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:7c,00,31,00,00,00,00,00,d1,32,ea,49,10,00,7b,31,32,37,44,30,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\3] "NodeSlot"=dword:00000247 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,d1,32,ea,49,10,00,54,65,6d,70,44,69,72,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\3\] "NodeSlot"=dword:00000248 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\4] "NodeSlot"=dword:00000249 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\5] "NodeSlot"=dword:0000024a "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4a,00,31,00,00,00,00,00,25,35,03,59,10,00,53,59,53,54,45,4d,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\5] "NodeSlot"=dword:0000024b "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:50,00,31,00,00,00,00,00,7d,37,e1,9a,11,00,46,61,76,6f,72,69,73,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\5\] "NodeSlot"=dword:000007e5 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,26,27,5d,72,10,00,4c,69,65,6e,73,00,22,.. "1"=hex:36,00,31,00,00,00,00,00,ec,32,65,29,10,00,4c,69,6e,6b,73,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\5\] "NodeSlot"=dword:000007e6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\5\\1] "NodeSlot"=dword:000007e7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\6] "NodeSlot"=dword:0000024c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\7] "NodeSlot"=dword:0000024d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\8] "NodeSlot"=dword:0000024e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\9] "NodeSlot"=dword:0000024f "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,26,2d,d2,75,10,00,30,30,30,30,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\9] "NodeSlot"=dword:00000250 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,26,2d,d2,75,10,00,44,52,49,56,45,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\9\] "NodeSlot"=dword:00000251 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,26,2d,d2,75,10,00,69,33,38,36,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\6\9\] "NodeSlot"=dword:00000252 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\7] "NodeSlot"=dword:0000013c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\8] "NodeSlot"=dword:00000260 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\9] "NodeSlot"=dword:00000261 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,1e,35,09,53,10,00,73,63,68,65,6d,61,73,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\4\9] "NodeSlot"=dword:00000262 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\5] "NodeSlot"=dword:00000233 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\6] "NodeSlot"=dword:00000240 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7] "0"=hex:30,00,31,00,00,00,00,00,00,00,00,00,10,00,6d,6f,69,00,1e,00,03,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7] "0"=hex:40,00,31,00,00,00,00,00,00,00,00,00,10,00,4c,4f,43,41,4c,53,7e,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\] "0"=hex:34,00,31,00,00,00,00,00,00,00,00,00,10,00,54,65,6d,70,00,00,20,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\] "0"=hex:54,00,32,00,00,00,00,00,00,00,00,00,20,00,4c,61,66,65,75,69,6c,.. "MRUListEx"=hex:09,00,00,00,08,00,00,00,07,00,00,00,06,00,00,00,05,00,00,00,04,.. "1"=hex:4c,00,32,00,00,00,00,00,00,00,00,00,20,00,53,44,50,32,5f,30,5f,.. "2"=hex:4c,00,31,00,00,00,00,00,00,00,00,00,10,00,52,61,72,24,44,49,30,.. "3"=hex:4c,00,31,00,00,00,00,00,00,00,00,00,10,00,52,61,72,24,44,49,30,.. "4"=hex:4c,00,31,00,00,00,00,00,00,00,00,00,10,00,52,61,72,24,44,49,30,.. "5"=hex:4c,00,31,00,00,00,00,00,00,00,00,00,10,00,52,61,72,24,44,49,30,.. "6"=hex:4c,00,31,00,00,00,00,00,00,00,00,00,10,00,52,61,72,24,44,49,30,.. "7"=hex:40,00,32,00,00,00,00,00,00,00,00,00,20,00,54,30,32,35,2e,7a,69,.. "8"=hex:4c,00,32,00,00,00,00,00,00,00,00,00,20,00,69,70,66,69,6c,74,65,.. "9"=hex:4c,00,32,00,00,00,00,00,00,00,00,00,20,00,53,55,30,36,31,35,39,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\] "NodeSlot"=dword:00000253 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\1] "NodeSlot"=dword:00000254 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\2] "0"=hex:5a,00,32,00,00,00,00,00,00,00,00,00,20,00,6c,61,65,74,69,63,69,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\2] "NodeSlot"=dword:0000025c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\3] "0"=hex:4c,00,32,00,00,00,00,00,00,00,00,00,20,00,61,6c,65,78,6c,61,6d,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\3] "NodeSlot"=dword:0000025d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\4] "0"=hex:5a,00,32,00,00,00,00,00,00,00,00,00,20,00,6c,61,65,74,69,63,69,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\4] "NodeSlot"=dword:0000025e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\5] "0"=hex:5a,00,32,00,00,00,00,00,00,00,00,00,20,00,6c,61,65,74,69,63,69,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\5] "NodeSlot"=dword:00000275 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\6] "0"=hex:5a,00,32,00,00,00,00,00,00,00,00,00,20,00,6c,61,65,74,69,63,69,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\6] "NodeSlot"=dword:00000280 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\7] "NodeSlot"=dword:0000028a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\8] "NodeSlot"=dword:000006d3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\7\\9] "NodeSlot"=dword:0000074b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\8] "NodeSlot"=dword:00000255 "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,32,00,00,00,00,00,00,00,00,00,20,00,53,44,50,32,5f,30,5f,.. "1"=hex:40,00,31,00,00,00,00,00,51,35,ed,49,10,00,53,44,50,32,5f,30,5f,.. "2"=hex:8a,00,32,00,00,00,00,00,00,00,00,00,20,00,53,74,65,61,6c,44,50,.. "3"=hex:6e,00,31,00,00,00,00,00,96,35,36,87,10,00,53,54,45,41,4c,44,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\8] "NodeSlot"=dword:00000256 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\8\1] "NodeSlot"=dword:00000257 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\8\2] "NodeSlot"=dword:00000376 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\8\3] "NodeSlot"=dword:00000377 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\3\9] "NodeSlot"=dword:0000035e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4] "0"=hex:5a,00,00,00,41,75,67,4d,02,00,00,00,01,00,00,00,48,00,31,00,00,.. "MRUListEx"=hex:00,00,00,00,08,00,00,00,07,00,00,00,06,00,00,00,05,00,00,00,04,.. "1"=hex:64,00,00,00,41,75,67,4d,02,00,00,00,01,00,00,00,52,00,31,00,00,.. "2"=hex:98,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,42,00,31,00,00,.. "3"=hex:9c,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,44,00,31,00,00,.. "4"=hex:b0,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,4e,00,31,00,00,.. "5"=hex:a4,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,48,00,31,00,00,.. "6"=hex:a8,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,4a,00,31,00,00,.. "7"=hex:9c,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,44,00,31,00,00,.. "8"=hex:d2,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,5c,00,31,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4] "NodeSlot"=dword:00000296 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\1] "NodeSlot"=dword:00000379 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\2] "NodeSlot"=dword:000003f2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\3] "NodeSlot"=dword:000003f3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\4] "NodeSlot"=dword:000003f5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\5] "0"=hex:dc,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,60,00,31,00,00,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\5] "NodeSlot"=dword:000003f6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\6] "NodeSlot"=dword:000003f7 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:9c,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,44,00,31,00,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\6] "0"=hex:d2,00,00,00,41,75,67,4d,02,00,00,00,02,00,00,00,5c,00,31,00,00,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\6\] "NodeSlot"=dword:000003f8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\7] "NodeSlot"=dword:000003f9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\4\8] "NodeSlot"=dword:000003fa "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\5] "0"=hex:58,00,31,00,00,00,00,00,26,27,07,72,11,00,4d,45,53,49,4d,41,7e,.. "MRUListEx"=hex:00,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:0000035d "1"=hex:58,00,31,00,00,00,00,00,c6,32,bb,9e,11,00,4d,45,53,56,49,44,7e,.. "2"=hex:58,00,31,00,00,00,00,00,c7,32,34,29,11,00,4d,41,4d,55,53,49,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\5] "0"=hex:5a,00,31,00,00,00,00,00,1f,35,22,60,11,00,43,48,41,4e,54,49,7e,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:0000035c [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\5\] "NodeSlot"=dword:0000035b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\5\1] "NodeSlot"=dword:0000036c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\5\2] "NodeSlot"=dword:0000036d "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:72,00,31,00,00,00,00,00,c6,32,84,9e,11,00,53,41,4d,50,4c,45,7e,.. "1"=hex:5e,00,31,00,00,00,00,00,26,27,1b,72,11,00,43,48,41,4e,54,49,7e,.. "2"=hex:48,00,31,00,00,00,00,00,c5,32,32,46,10,00,4d,59,50,4c,41,59,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\5\2] "NodeSlot"=dword:0000036e "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,c6,32,84,9e,10,00,30,30,33,35,44,36,35,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\5\2\] "NodeSlot"=dword:0000036f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\5\2\1] "NodeSlot"=dword:0000037c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\5\2\2] "NodeSlot"=dword:0000037d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6] "NodeSlot"=dword:00000390 "MRUListEx"=hex:00,00,00,00,04,00,00,00,06,00,00,00,03,00,00,00,05,00,00,00,02,.. "0"=hex:20,00,09,00,00,ad,82,4c,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "1"=hex:20,00,90,02,00,ad,82,4c,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "2"=hex:28,00,8c,02,00,fb,89,9c,4a,39,c7,01,00,3a,3a,00,00,00,00,00,10,.. "3"=hex:1c,00,90,02,00,01,4f,c9,93,43,c7,01,00,3a,3a,00,00,00,00,00,10,.. "4"=hex:34,00,09,00,00,00,00,00,00,00,00,00,00,3a,3a,00,00,00,00,00,10,.. "5"=hex:2c,00,8e,02,00,9e,3f,89,70,3c,c7,01,00,3a,3a,00,00,00,00,00,10,.. "6"=hex:20,00,90,02,00,80,51,4b,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6] "NodeSlot"=dword:00000391 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\1] "NodeSlot"=dword:000003a1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\2] "NodeSlot"=dword:000003a2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\3] "NodeSlot"=dword:000003a3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4] "NodeSlot"=dword:000003a4 "MRUListEx"=hex:04,00,00,00,03,00,00,00,01,00,00,00,02,00,00,00,00,00,00,00,ff,.. "0"=hex:2c,00,8c,02,00,00,00,00,00,00,00,00,00,3a,3a,00,00,00,00,00,10,.. "1"=hex:28,00,8c,02,00,80,51,4b,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "2"=hex:2c,00,8c,02,00,8e,78,52,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "3"=hex:20,00,09,00,00,9c,9f,59,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "4"=hex:20,00,90,02,00,72,2a,44,bd,94,c6,01,00,3a,3a,00,00,00,00,00,14,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4] "NodeSlot"=dword:000003a5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\1] "NodeSlot"=dword:000003a6 "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:20,00,90,02,00,ce,29,ac,5d,35,c7,01,00,3a,3a,00,00,00,00,00,10,.. "1"=hex:24,00,8f,02,00,7f,32,c5,5d,35,c7,01,00,3a,3a,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\1] "NodeSlot"=dword:000003a7 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:20,00,8c,02,00,24,d2,c2,61,35,c7,01,00,3a,3a,00,00,00,00,00,12,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\1\] "NodeSlot"=dword:000003a8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\1\1] "NodeSlot"=dword:000003a9 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:1c,00,90,02,00,7f,32,c5,5d,35,c7,01,00,3a,3a,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\1\1] "NodeSlot"=dword:000003aa "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\2] "NodeSlot"=dword:000003ab "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:1c,00,90,02,00,35,62,5e,f1,3b,c7,01,00,3a,3a,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\2] "NodeSlot"=dword:000003ac "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\3] "NodeSlot"=dword:000003af "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4] "NodeSlot"=dword:000003b0 "MRUListEx"=hex:04,00,00,00,06,00,00,00,03,00,00,00,0a,00,00,00,09,00,00,00,00,.. "0"=hex:24,00,09,00,00,c9,d0,5a,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "1"=hex:1c,00,52,03,00,15,0c,56,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "2"=hex:24,00,91,02,00,c9,d0,5a,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "3"=hex:24,00,91,02,00,80,51,4b,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "4"=hex:20,00,8e,02,00,72,2a,44,bd,94,c6,01,00,3a,3a,00,00,00,00,00,14,.. "5"=hex:24,00,8e,02,00,80,51,4b,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "6"=hex:24,00,91,02,00,c9,d0,5a,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "7"=hex:20,00,91,02,00,80,51,4b,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "8"=hex:1c,00,92,02,00,ad,82,4c,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "9"=hex:24,00,52,03,00,ad,82,4c,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "10"=hex:20,00,91,02,00,80,51,4b,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4] "NodeSlot"=dword:000003b1 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:24,00,8f,02,00,c9,d0,5a,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\] "NodeSlot"=dword:000003b2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\1] "NodeSlot"=dword:000003b3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\10] "NodeSlot"=dword:000003c1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\2] "NodeSlot"=dword:000003b4 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:20,00,54,03,00,c9,d0,5a,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\2] "NodeSlot"=dword:000003b5 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:20,00,92,02,00,c9,d0,5a,bd,94,c6,01,00,3a,3a,00,00,00,00,00,14,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\2\] "NodeSlot"=dword:000003b6 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:24,00,91,02,00,c9,d0,5a,bd,94,c6,01,00,3a,3a,00,00,00,00,00,14,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\2\] "NodeSlot"=dword:000003b7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\3] "NodeSlot"=dword:000003b8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\4] "NodeSlot"=dword:000003b9 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:24,00,92,02,00,80,51,4b,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "1"=hex:24,00,56,03,00,80,51,4b,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. "2"=hex:24,00,91,02,00,80,51,4b,bd,94,c6,01,00,3a,3a,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\4] "NodeSlot"=dword:000003ba "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\4\1] "NodeSlot"=dword:000003c2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\4\2] "NodeSlot"=dword:000003c3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\5] "NodeSlot"=dword:000003bb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\6] "NodeSlot"=dword:000003bc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\7] "NodeSlot"=dword:000003bd "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,54,03,00,52,01,c4,5d,35,c7,01,00,3a,3a,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\7] "NodeSlot"=dword:000003be "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\8] "NodeSlot"=dword:000003bf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\4\4\9] "NodeSlot"=dword:000003c0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\5] "NodeSlot"=dword:000003ad "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\6\6] "NodeSlot"=dword:000003ae "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\7] "NodeSlot"=dword:000003cb "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,26,2d,d6,79,10,00,54,6f,6f,6c,73,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\7] "0"=hex:3c,00,31,00,00,00,00,00,2c,2d,f2,71,10,00,4d,61,6e,75,61,6c,73,.. "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\7\] "NodeSlot"=dword:00000788 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\8] "NodeSlot"=dword:00000445 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,68,36,a4,35,10,00,48,45,4e,54,41,49,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\8] "NodeSlot"=dword:00000446 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9] "0"=hex:42,00,31,00,00,00,00,00,67,33,13,97,10,00,30,37,4e,4f,56,32,7e,.. "MRUListEx"=hex:0d,00,00,00,0f,00,00,00,01,00,00,00,0e,00,00,00,00,00,00,00,04,.. "1"=hex:36,00,31,00,00,00,00,00,84,33,f3,78,10,00,66,69,6c,6d,73,00,22,.. "NodeSlot"=dword:000004b0 "2"=hex:3a,00,31,00,00,00,00,00,b6,34,6d,3a,10,00,73,61,6e,64,72,61,00,.. "3"=hex:34,00,31,00,00,00,00,00,9f,33,4c,ba,10,00,74,65,65,6e,00,00,20,.. "4"=hex:3a,00,31,00,00,00,00,00,12,35,f1,55,10,00,6d,65,6e,61,67,65,00,.. "5"=hex:78,00,32,00,c9,4e,08,01,e9,32,b2,a3,20,00,46,4b,4b,4e,41,54,7e,.. "6"=hex:06,01,32,00,e4,ec,2a,01,2f,34,2c,2e,20,00,53,45,58,41,4e,44,7e,.. "7"=hex:34,00,31,00,00,00,00,00,d4,34,36,5c,10,00,61,62,62,79,00,00,20,.. "8"=hex:46,00,31,00,00,00,00,00,bd,34,31,22,10,00,46,41,52,41,48,4d,7e,.. "9"=hex:6c,00,31,00,00,00,00,00,32,37,d9,46,10,00,46,4b,4b,4e,41,54,7e,.. "10"=hex:fa,00,31,00,00,00,00,00,32,37,cf,75,10,00,53,45,58,41,4e,44,7e,.. "11"=hex:44,00,31,00,00,00,00,00,49,37,23,42,10,00,4c,45,53,4d,49,4e,7e,.. "12"=hex:54,00,32,00,b7,89,98,0a,49,37,95,44,20,00,52,4f,53,43,4f,46,7e,.. "13"=hex:48,00,31,00,00,00,00,00,49,37,1c,4a,10,00,52,4f,53,43,4f,46,7e,.. "14"=hex:3a,00,31,00,00,00,00,00,7a,37,00,4d,10,00,44,41,5a,33,44,7e,31,.. "15"=hex:3a,00,31,00,00,00,00,00,49,37,7c,52,10,00,79,61,6e,6e,69,73,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9] "0"=hex:3c,00,31,00,00,00,00,00,67,33,39,9a,10,00,6f,75,73,73,61,6d,61,.. "MRUListEx"=hex:00,00,00,00,01,00,00,00,03,00,00,00,02,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:000004e1 "1"=hex:56,00,35,00,00,00,00,00,67,33,c0,9c,10,00,74,00,e9,00,6c,00,e9,.. "2"=hex:4e,00,31,00,00,00,00,00,67,33,d8,9a,10,00,4f,55,53,53,41,4d,7e,.. "3"=hex:3a,00,31,00,00,00,00,00,67,33,30,98,10,00,69,6d,61,67,65,73,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\] "0"=hex:36,00,31,00,00,00,00,00,67,33,48,9a,10,00,70,65,72,73,6f,00,22,.. "MRUListEx"=hex:00,00,00,00,05,00,00,00,02,00,00,00,01,00,00,00,03,00,00,00,06,.. "NodeSlot"=dword:000004e2 "1"=hex:4e,00,31,00,00,00,00,00,67,33,4c,9c,10,00,4e,4f,55,56,45,41,7e,.. "2"=hex:52,00,31,00,00,00,00,00,67,33,4f,9c,10,00,4d,59,52,45,43,45,7e,.. "3"=hex:3a,00,31,00,00,00,00,00,67,33,78,9c,10,00,6d,6f,76,69,65,73,00,.. "4"=hex:3a,00,31,00,00,00,00,00,67,33,80,9c,10,00,68,75,6d,6f,75,72,00,.. "5"=hex:46,00,31,00,00,00,00,00,67,33,71,9c,10,00,4d,59,50,49,43,54,7e,.. "6"=hex:4a,00,31,00,00,00,00,00,67,33,85,9c,10,00,41,56,41,54,41,52,7e,.. "7"=hex:46,00,31,00,00,00,00,00,67,33,43,9a,10,00,50,4f,57,45,52,50,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\] "0"=hex:3a,00,31,00,00,00,00,00,67,33,51,9a,10,00,76,6f,79,65,75,72,00,.. "MRUListEx"=hex:00,00,00,00,0c,00,00,00,03,00,00,00,04,00,00,00,14,00,00,00,13,.. "NodeSlot"=dword:000004e3 "1"=hex:36,00,31,00,00,00,00,00,67,33,38,9c,10,00,61,73,69,61,6e,00,22,.. "2"=hex:46,00,31,00,00,00,00,00,67,33,4c,9c,10,00,41,44,55,4c,54,54,7e,.. "3"=hex:36,00,31,00,00,00,00,00,39,35,fc,69,10,00,65,78,68,69,62,00,22,.. "4"=hex:3c,00,31,00,00,00,00,00,67,33,10,9c,10,00,63,61,72,74,6f,6f,6e,.. "5"=hex:3a,00,31,00,00,00,00,00,67,33,1a,9b,10,00,68,65,6e,74,61,69,00,.. "6"=hex:3c,00,31,00,00,00,00,00,67,33,5c,9a,10,00,76,69,6e,74,61,67,65,.. "7"=hex:34,00,31,00,00,00,00,00,67,33,61,9a,10,00,74,72,61,6e,00,00,20,.. "8"=hex:36,00,31,00,00,00,00,00,67,33,63,9a,10,00,74,6f,6f,6e,73,00,22,.. "9"=hex:2e,00,31,00,00,00,00,00,67,33,65,9a,10,00,73,70,00,00,1c,00,03,.. "10"=hex:52,00,31,00,00,00,00,00,2e,34,9b,71,10,00,41,44,52,45,41,4d,7e,.. "11"=hex:48,00,31,00,00,00,00,00,4c,34,02,77,10,00,53,41,4e,44,52,41,7e,.. "12"=hex:3a,00,31,00,00,00,00,00,67,33,1a,9b,10,00,67,72,61,6e,6e,79,00,.. "13"=hex:3a,00,31,00,00,00,00,00,67,33,dd,9a,10,00,70,68,6f,74,6f,73,00,.. "14"=hex:3a,00,31,00,00,00,00,00,67,33,65,9a,10,00,70,6f,73,74,65,64,00,.. "15"=hex:30,00,31,00,00,00,00,00,69,34,da,29,10,00,70,65,65,00,1e,00,03,.. "16"=hex:34,00,31,00,00,00,00,00,81,34,02,48,10,00,61,72,61,62,00,00,20,.. "17"=hex:4e,00,31,00,00,00,00,00,67,33,14,9b,10,00,4e,4f,55,56,45,41,7e,.. "18"=hex:3a,00,31,00,00,00,00,00,67,33,0d,9b,10,00,6e,75,64,69,73,74,00,.. "19"=hex:36,00,31,00,00,00,00,00,67,33,17,9b,10,00,6c,69,62,33,35,00,22,.. "20"=hex:36,00,31,00,00,00,00,00,67,33,1d,9b,10,00,63,65,6c,65,62,00,22,.. "21"=hex:30,00,31,00,00,00,00,00,67,33,38,9c,10,00,62,6f,62,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\] "0"=hex:4e,00,31,00,00,00,00,00,67,33,57,9a,10,00,4e,4f,55,56,45,41,7e,.. "MRUListEx"=hex:00,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "NodeSlot"=dword:000004e4 "1"=hex:56,00,31,00,00,00,00,00,67,33,56,9a,10,00,4e,4f,55,56,45,41,7e,.. "2"=hex:56,00,31,00,00,00,00,00,67,33,55,9a,10,00,4e,4f,55,56,45,41,7e,.. "3"=hex:36,00,31,00,00,00,00,00,7c,34,e4,20,10,00,70,6c,61,67,65,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\] "0"=hex:40,00,31,00,00,00,00,00,45,34,16,97,10,00,64,65,6c,70,68,69,6e,.. "MRUListEx"=hex:00,00,00,00,04,00,00,00,05,00,00,00,03,00,00,00,02,00,00,00,01,.. "NodeSlot"=dword:000004ad "1"=hex:40,00,31,00,00,00,00,00,f5,36,26,39,10,00,62,65,61,74,72,69,63,.. "2"=hex:40,00,35,00,00,00,00,00,4c,34,d9,51,10,00,63,00,e9,00,6c,00,69,.. "3"=hex:3c,00,31,00,00,00,00,00,c8,34,16,4b,10,00,76,6f,69,73,69,6e,65,.. "4"=hex:40,00,31,00,00,00,00,00,8b,34,fd,85,10,00,63,6c,61,75,64,69,6e,.. "5"=hex:30,00,31,00,00,00,00,00,67,33,58,9a,10,00,69,73,61,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\\] "NodeSlot"=dword:000004ac "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\\1] "NodeSlot"=dword:000004ae "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\\2] "NodeSlot"=dword:000004e5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\\3] "NodeSlot"=dword:000004e6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\\4] "NodeSlot"=dword:0000058f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\\5] "NodeSlot"=dword:00000663 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\\1] "NodeSlot"=dword:00000590 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\\2] "NodeSlot"=dword:00000591 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\\3] "NodeSlot"=dword:00000592 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1] "NodeSlot"=dword:0000056b "MRUListEx"=hex:0a,00,00,00,09,00,00,00,08,00,00,00,07,00,00,00,06,00,00,00,05,.. "0"=hex:2a,00,31,00,00,00,00,00,67,33,4a,9c,10,00,6c,00,1a,00,03,00,04,.. "1"=hex:3a,00,31,00,00,00,00,00,67,33,49,9c,10,00,70,68,6f,74,6f,31,00,.. "2"=hex:3a,00,31,00,00,00,00,00,67,33,46,9c,10,00,70,68,6f,74,6f,32,00,.. "3"=hex:3a,00,31,00,00,00,00,00,67,33,43,9c,10,00,70,68,6f,74,6f,33,00,.. "4"=hex:3a,00,31,00,00,00,00,00,67,33,41,9c,10,00,70,68,6f,74,6f,34,00,.. "5"=hex:3a,00,31,00,00,00,00,00,67,33,3d,9c,10,00,70,68,6f,74,6f,35,00,.. "6"=hex:3a,00,31,00,00,00,00,00,67,33,3b,9c,10,00,70,68,6f,74,6f,36,00,.. "7"=hex:3a,00,31,00,00,00,00,00,67,33,3a,9c,10,00,70,68,6f,74,6f,37,00,.. "8"=hex:3a,00,31,00,00,00,00,00,67,33,39,9c,10,00,70,68,6f,74,6f,38,00,.. "9"=hex:3c,00,31,00,00,00,00,00,67,33,48,9c,10,00,70,68,6f,74,6f,31,30,.. "10"=hex:3c,00,31,00,00,00,00,00,67,33,47,9c,10,00,70,68,6f,74,6f,31,31,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1] "NodeSlot"=dword:0000056c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\1] "NodeSlot"=dword:000005e1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\10] "NodeSlot"=dword:000005ea "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\2] "NodeSlot"=dword:000005e2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\3] "NodeSlot"=dword:000005e3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\4] "NodeSlot"=dword:000005e4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\5] "NodeSlot"=dword:000005e5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\6] "NodeSlot"=dword:000005e6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\7] "NodeSlot"=dword:000005e7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\8] "NodeSlot"=dword:000005e8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1\9] "NodeSlot"=dword:000005e9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\10] "NodeSlot"=dword:000005c6 "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:2e,00,31,00,00,00,00,00,38,35,79,6a,10,00,56,45,00,00,1c,00,03,.. "1"=hex:2e,00,31,00,00,00,00,00,38,35,25,6d,10,00,56,4f,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\10] "NodeSlot"=dword:000005c7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\10\1] "NodeSlot"=dword:000005c8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\11] "NodeSlot"=dword:000005c9 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,4c,34,60,7a,10,00,76,69,72,67,69,6e,69,.. "1"=hex:36,00,31,00,00,00,00,00,8a,34,a9,23,10,00,6f,6c,69,67,61,00,22,.. "2"=hex:34,00,31,00,00,00,00,00,4c,34,6d,7b,10,00,65,6c,6c,61,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\11] "NodeSlot"=dword:000005ca "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\11\1] "NodeSlot"=dword:000005cb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\11\2] "NodeSlot"=dword:000005cc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12] "NodeSlot"=dword:000005d4 "MRUListEx"=hex:0b,00,00,00,0a,00,00,00,09,00,00,00,08,00,00,00,07,00,00,00,06,.. "0"=hex:30,00,31,00,00,00,00,00,67,33,1c,9b,10,00,30,30,31,00,1e,00,03,.. "1"=hex:2e,00,31,00,00,00,00,00,68,34,8d,3a,10,00,30,31,00,00,1c,00,03,.. "2"=hex:2e,00,31,00,00,00,00,00,69,34,84,26,10,00,30,32,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,71,34,52,3a,10,00,30,39,00,00,1c,00,03,.. "4"=hex:34,00,31,00,00,00,00,00,68,34,45,33,10,00,73,65,78,79,00,00,20,.. "5"=hex:2e,00,31,00,00,00,00,00,71,34,28,38,10,00,30,38,00,00,1c,00,03,.. "6"=hex:2e,00,31,00,00,00,00,00,71,34,d1,3b,10,00,31,30,00,00,1c,00,03,.. "7"=hex:2e,00,31,00,00,00,00,00,71,34,2e,36,10,00,30,37,00,00,1c,00,03,.. "8"=hex:2e,00,31,00,00,00,00,00,71,34,6c,35,10,00,30,36,00,00,1c,00,03,.. "9"=hex:2e,00,31,00,00,00,00,00,71,34,37,34,10,00,30,35,00,00,1c,00,03,.. "10"=hex:2e,00,31,00,00,00,00,00,71,34,b5,33,10,00,30,34,00,00,1c,00,03,.. "11"=hex:2e,00,31,00,00,00,00,00,69,34,13,28,10,00,30,33,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12] "NodeSlot"=dword:000005d5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\1] "NodeSlot"=dword:000005d6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\10] "NodeSlot"=dword:000005df "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\11] "NodeSlot"=dword:000005e0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\2] "NodeSlot"=dword:000005d7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\3] "NodeSlot"=dword:000005d8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\4] "NodeSlot"=dword:000005d9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\5] "NodeSlot"=dword:000005da "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\6] "NodeSlot"=dword:000005db "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\7] "NodeSlot"=dword:000005dc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\8] "NodeSlot"=dword:000005dd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\12\9] "NodeSlot"=dword:000005de "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13] "NodeSlot"=dword:000005eb "MRUListEx"=hex:00,00,00,00,0c,00,00,00,03,00,00,00,05,00,00,00,06,00,00,00,07,.. "0"=hex:36,00,31,00,00,00,00,00,67,33,e5,9a,10,00,7a,61,69,6c,61,00,22,.. "1"=hex:34,00,31,00,00,00,00,00,67,33,e6,9a,10,00,78,6d,61,73,00,00,20,.. "2"=hex:56,00,31,00,00,00,00,00,67,33,e6,9a,10,00,57,41,49,54,49,4e,7e,.. "3"=hex:48,00,31,00,00,00,00,00,67,33,e6,9a,10,00,54,49,4e,50,41,4e,7e,.. "4"=hex:44,00,31,00,00,00,00,00,67,33,e7,9a,10,00,53,48,45,49,4c,41,7e,.. "5"=hex:42,00,31,00,00,00,00,00,67,33,e7,9a,10,00,50,49,53,53,41,57,7e,.. "6"=hex:3c,00,31,00,00,00,00,00,67,33,f6,9a,10,00,6f,75,74,64,6f,6f,72,.. "7"=hex:3c,00,31,00,00,00,00,00,67,33,f6,9a,10,00,6d,75,73,63,6c,65,73,.. "8"=hex:30,00,31,00,00,00,00,00,67,33,f7,9a,10,00,4d,53,4e,00,1e,00,03,.. "9"=hex:36,00,31,00,00,00,00,00,67,33,fd,9a,10,00,6d,61,73,68,61,00,22,.. "10"=hex:2e,00,31,00,00,00,00,00,67,33,00,9b,10,00,67,72,00,00,1c,00,03,.. "11"=hex:34,00,31,00,00,00,00,00,67,33,00,9b,10,00,63,6c,69,74,00,00,20,.. "12"=hex:3a,00,31,00,00,00,00,00,67,33,00,9b,10,00,63,61,72,72,69,65,00,.. "13"=hex:36,00,31,00,00,00,00,00,67,33,04,9b,10,00,62,65,61,63,68,00,22,.. "14"=hex:4e,00,31,00,00,00,00,00,67,33,05,9b,10,00,42,41,43,4b,44,4f,7e,.. "15"=hex:40,00,31,00,00,00,00,00,67,33,fd,9a,10,00,67,72,61,6e,6e,69,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13] "NodeSlot"=dword:000005ec "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\1] "NodeSlot"=dword:000005ed "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\10] "NodeSlot"=dword:00000609 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\11] "NodeSlot"=dword:0000060a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\12] "NodeSlot"=dword:0000060b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\13] "NodeSlot"=dword:0000060c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\14] "NodeSlot"=dword:0000060d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\15] "NodeSlot"=dword:00000705 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\2] "NodeSlot"=dword:000005ee "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\3] "NodeSlot"=dword:000005ef "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\4] "NodeSlot"=dword:000005f0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\5] "NodeSlot"=dword:000005f1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\6] "NodeSlot"=dword:000005f2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\7] "NodeSlot"=dword:000005f3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8] "NodeSlot"=dword:000005f4 "MRUListEx"=hex:10,00,00,00,09,00,00,00,08,00,00,00,03,00,00,00,02,00,00,00,01,.. "0"=hex:4e,00,31,00,00,00,00,00,67,33,fd,9a,10,00,43,48,41,54,4f,4e,7e,.. "1"=hex:4c,00,31,00,00,00,00,00,67,33,fc,9a,10,00,43,48,52,49,53,54,7e,.. "2"=hex:52,00,31,00,00,00,00,00,67,33,fc,9a,10,00,44,41,44,41,47,49,7e,.. "3"=hex:36,00,31,00,00,00,00,00,67,33,fc,9a,10,00,68,6f,6f,70,61,00,22,.. "4"=hex:58,00,31,00,00,00,00,00,67,33,fc,9a,10,00,4b,41,54,48,59,44,7e,.. "5"=hex:46,00,31,00,00,00,00,00,67,33,fb,9a,10,00,4b,43,37,37,31,28,7e,.. "6"=hex:44,00,31,00,00,00,00,00,67,33,fb,9a,10,00,4b,49,53,53,45,56,7e,.. "7"=hex:42,00,31,00,00,00,00,00,67,33,fb,9a,10,00,4b,4a,53,4d,41,4d,7e,.. "8"=hex:4c,00,31,00,00,00,00,00,67,33,fb,9a,10,00,4c,41,42,41,52,42,7e,.. "9"=hex:36,00,31,00,00,00,00,00,67,33,fb,9a,10,00,6c,61,75,72,65,00,22,.. "10"=hex:40,00,31,00,00,00,00,00,67,33,fa,9a,10,00,6d,69,63,68,65,6c,6c,.. "11"=hex:34,00,31,00,00,00,00,00,67,33,fa,9a,10,00,6d,69,6d,69,00,00,20,.. "12"=hex:34,00,31,00,00,00,00,00,67,33,fa,9a,10,00,6e,69,63,68,00,00,20,.. "13"=hex:58,00,31,00,00,00,00,00,67,33,fa,9a,10,00,53,49,4c,56,45,52,7e,.. "14"=hex:46,00,31,00,00,00,00,00,67,33,fa,9a,10,00,53,49,4e,44,59,4c,7e,.. "15"=hex:34,00,31,00,00,00,00,00,67,33,fa,9a,10,00,54,49,4d,49,00,00,20,.. "16"=hex:36,00,31,00,00,00,00,00,67,33,fa,9a,10,00,75,6c,69,37,32,00,22,.. "17"=hex:54,00,31,00,00,00,00,00,67,33,f8,9a,10,00,56,45,54,44,49,44,7e,.. "18"=hex:3a,00,31,00,00,00,00,00,67,33,f7,9a,10,00,79,76,6f,6e,6e,65,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8] "NodeSlot"=dword:000005f5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\1] "NodeSlot"=dword:000005f6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\10] "NodeSlot"=dword:000005ff "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\11] "NodeSlot"=dword:00000600 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\12] "NodeSlot"=dword:00000601 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\13] "NodeSlot"=dword:00000602 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\14] "NodeSlot"=dword:00000603 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\15] "NodeSlot"=dword:00000604 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\16] "NodeSlot"=dword:00000605 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\17] "NodeSlot"=dword:00000606 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\18] "NodeSlot"=dword:00000607 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\2] "NodeSlot"=dword:000005f7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\3] "NodeSlot"=dword:000005f8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\4] "NodeSlot"=dword:000005f9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\5] "NodeSlot"=dword:000005fa "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\6] "NodeSlot"=dword:000005fb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\7] "NodeSlot"=dword:000005fc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\8] "NodeSlot"=dword:000005fd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\8\9] "NodeSlot"=dword:000005fe "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\13\9] "NodeSlot"=dword:00000608 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14] "NodeSlot"=dword:0000060e "MRUListEx"=hex:0e,00,00,00,0d,00,00,00,0c,00,00,00,0b,00,00,00,0a,00,00,00,09,.. "0"=hex:40,00,31,00,00,00,00,00,67,33,dc,9a,10,00,31,74,6f,65,6a,65,66,.. "1"=hex:40,00,31,00,00,00,00,00,67,33,db,9a,10,00,32,33,6a,75,6e,6b,69,.. "2"=hex:3a,00,31,00,00,00,00,00,67,33,db,9a,10,00,41,4c,49,43,45,53,00,.. "3"=hex:42,00,31,00,00,00,00,00,67,33,da,9a,10,00,41,4d,59,26,42,4f,7e,.. "4"=hex:34,00,31,00,00,00,00,00,67,33,cd,9a,10,00,61,6e,6e,65,00,00,20,.. "5"=hex:40,00,31,00,00,00,00,00,67,33,cc,9a,10,00,61,72,74,69,73,74,32,.. "6"=hex:42,00,31,00,00,00,00,00,67,33,cb,9a,10,00,41,53,53,42,41,4e,7e,.. "7"=hex:44,00,31,00,00,00,00,00,67,33,c9,9a,10,00,42,41,42,59,44,4f,7e,.. "8"=hex:36,00,31,00,00,00,00,00,67,33,c9,9a,10,00,62,61,63,6f,6e,00,22,.. "9"=hex:3c,00,31,00,00,00,00,00,67,33,c9,9a,10,00,62,62,77,73,79,6e,73,.. "10"=hex:48,00,31,00,00,00,00,00,67,33,c8,9a,10,00,42,55,58,4f,4d,47,7e,.. "11"=hex:44,00,31,00,00,00,00,00,67,33,c8,9a,10,00,43,41,4e,44,41,43,7e,.. "12"=hex:4a,00,31,00,00,00,00,00,67,33,c7,9a,10,00,43,4f,4c,4c,45,47,7e,.. "13"=hex:42,00,31,00,00,00,00,00,67,33,c7,9a,10,00,43,4f,55,50,4c,45,7e,.. "14"=hex:5c,00,31,00,00,00,00,00,67,33,c4,9a,10,00,44,41,52,4b,53,54,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14] "NodeSlot"=dword:0000060f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\1] "NodeSlot"=dword:00000610 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\10] "NodeSlot"=dword:00000619 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\11] "NodeSlot"=dword:0000061a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\12] "NodeSlot"=dword:0000061b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\13] "NodeSlot"=dword:0000061c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\14] "NodeSlot"=dword:0000061d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\2] "NodeSlot"=dword:00000611 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\3] "NodeSlot"=dword:00000612 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\4] "NodeSlot"=dword:00000613 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\5] "NodeSlot"=dword:00000614 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\6] "NodeSlot"=dword:00000615 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\7] "NodeSlot"=dword:00000616 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\8] "NodeSlot"=dword:00000617 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\14\9] "NodeSlot"=dword:00000618 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\15] "NodeSlot"=dword:00000664 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:2e,00,31,00,00,00,00,00,69,34,e0,29,10,00,30,31,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\15] "NodeSlot"=dword:00000665 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\16] "NodeSlot"=dword:00000666 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\17] "NodeSlot"=dword:0000069e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\18] "NodeSlot"=dword:00000706 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\19] "NodeSlot"=dword:00000707 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\2] "NodeSlot"=dword:0000056d "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:3a,00,31,00,00,00,00,00,30,34,48,34,10,00,61,6c,61,64,69,6e,00,.. "1"=hex:68,00,31,00,00,00,00,00,3b,34,75,3f,10,00,41,4c,49,43,45,41,7e,.. "2"=hex:4a,00,31,00,00,00,00,00,82,34,db,03,10,00,42,4c,41,4e,43,48,7e,.. "3"=hex:44,00,31,00,00,00,00,00,45,35,57,4c,10,00,46,55,43,4b,45,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\2] "NodeSlot"=dword:000005cd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\2\1] "NodeSlot"=dword:000005ce "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\2\2] "NodeSlot"=dword:000005cf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\2\3] "NodeSlot"=dword:000005d0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\20] "NodeSlot"=dword:00000708 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\21] "NodeSlot"=dword:00000709 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\3] "NodeSlot"=dword:0000056e "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,31,00,00,00,00,00,39,35,02,6a,10,00,53,41,4e,44,52,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\3] "NodeSlot"=dword:0000056f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\4] "NodeSlot"=dword:00000570 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\5] "NodeSlot"=dword:00000571 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6] "NodeSlot"=dword:00000574 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\7] "NodeSlot"=dword:00000575 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8] "NodeSlot"=dword:00000576 "MRUListEx"=hex:03,00,00,00,0c,00,00,00,0b,00,00,00,0a,00,00,00,09,00,00,00,08,.. "0"=hex:50,00,31,00,00,00,00,00,b0,34,02,3d,10,00,53,49,5a,5a,4c,49,7e,.. "1"=hex:36,00,31,00,00,00,00,00,b0,34,51,44,10,00,6a,69,6d,6d,79,00,22,.. "2"=hex:48,00,31,00,00,00,00,00,b2,34,ca,58,10,00,33,44,50,4f,52,4e,7e,.. "3"=hex:4c,00,31,00,00,00,00,00,b2,34,ed,4c,10,00,50,4c,41,59,49,4e,7e,.. "4"=hex:3c,00,31,00,00,00,00,00,b2,34,b6,52,10,00,76,69,76,69,61,6e,61,.. "5"=hex:3a,00,31,00,00,00,00,00,b2,34,6e,5c,10,00,67,72,61,6d,6d,79,00,.. "6"=hex:3e,00,31,00,00,00,00,00,dd,34,87,5d,10,00,41,59,50,41,50,49,7e,.. "7"=hex:4c,00,31,00,00,00,00,00,0e,35,30,68,10,00,42,49,4f,4c,4f,47,7e,.. "8"=hex:58,00,31,00,00,00,00,00,38,35,55,62,10,00,42,52,4f,41,4e,44,7e,.. "9"=hex:46,00,31,00,00,00,00,00,39,35,85,32,10,00,50,41,4e,44,4f,52,7e,.. "10"=hex:4e,00,31,00,00,00,00,00,3d,35,6b,40,10,00,53,55,4d,4d,45,52,7e,.. "11"=hex:3a,00,31,00,00,00,00,00,69,36,73,45,10,00,66,65,6d,62,6f,79,00,.. "12"=hex:34,00,31,00,00,00,00,00,6e,36,34,49,10,00,6c,69,66,65,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8] "NodeSlot"=dword:00000577 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\1] "NodeSlot"=dword:00000578 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\10] "NodeSlot"=dword:0000059d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\11] "NodeSlot"=dword:0000059e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\12] "NodeSlot"=dword:000005a3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\2] "NodeSlot"=dword:00000594 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\3] "NodeSlot"=dword:00000595 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\4] "NodeSlot"=dword:00000596 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\5] "NodeSlot"=dword:00000597 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\6] "NodeSlot"=dword:00000598 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:2a,00,31,00,00,00,00,00,dd,34,91,5d,10,00,36,00,1a,00,03,00,04,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\6] "NodeSlot"=dword:00000599 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\7] "NodeSlot"=dword:0000059a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\8] "NodeSlot"=dword:0000059b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\8\9] "NodeSlot"=dword:0000059c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\9] "NodeSlot"=dword:00000593 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\1] "NodeSlot"=dword:000005a4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\2] "NodeSlot"=dword:000005a5 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,67,33,70,9c,10,00,4b,41,54,59,4d,49,4d,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\2] "NodeSlot"=dword:000005a6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\3] "NodeSlot"=dword:000005a7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\4] "NodeSlot"=dword:000005d1 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:4a,00,31,00,00,00,00,00,67,33,85,9c,10,00,42,4c,41,4e,43,48,7e,.. "1"=hex:3c,00,31,00,00,00,00,00,67,33,83,9c,10,00,73,69,6d,70,73,6f,6e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\4] "NodeSlot"=dword:000005d2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\4\1] "NodeSlot"=dword:000005d3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\5] "NodeSlot"=dword:0000061e "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:2e,00,31,00,00,00,00,00,67,33,78,9c,10,00,69,73,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\5] "NodeSlot"=dword:0000061f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6] "NodeSlot"=dword:0000068c "MRUListEx"=hex:0a,00,00,00,09,00,00,00,08,00,00,00,07,00,00,00,06,00,00,00,05,.. "0"=hex:44,00,31,00,00,00,00,00,67,33,87,9c,10,00,41,4e,49,43,4b,52,7e,.. "1"=hex:42,00,31,00,00,00,00,00,67,33,87,9c,10,00,41,55,44,52,41,49,7e,.. "2"=hex:42,00,31,00,00,00,00,00,67,33,87,9c,10,00,42,43,45,4c,49,4e,7e,.. "3"=hex:42,00,31,00,00,00,00,00,67,33,87,9c,10,00,43,41,54,48,59,50,7e,.. "4"=hex:5a,00,31,00,00,00,00,00,67,33,87,9c,10,00,43,4f,52,49,4e,4e,7e,.. "5"=hex:44,00,31,00,00,00,00,00,67,33,87,9c,10,00,43,52,49,53,50,55,7e,.. "6"=hex:40,00,31,00,00,00,00,00,67,33,86,9c,10,00,64,61,6e,69,65,6c,6c,.. "7"=hex:46,00,31,00,00,00,00,00,67,33,86,9c,10,00,4b,41,54,49,45,44,7e,.. "8"=hex:4c,00,31,00,00,00,00,00,67,33,86,9c,10,00,4b,41,54,49,45,49,7e,.. "9"=hex:40,00,31,00,00,00,00,00,67,33,86,9c,10,00,6d,69,63,68,65,6c,6c,.. "10"=hex:3c,00,31,00,00,00,00,00,67,33,86,9c,10,00,76,65,74,64,69,62,61,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6] "NodeSlot"=dword:0000068d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\1] "NodeSlot"=dword:0000068e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\10] "NodeSlot"=dword:00000697 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\2] "NodeSlot"=dword:0000068f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\3] "NodeSlot"=dword:00000690 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\4] "NodeSlot"=dword:00000691 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\5] "NodeSlot"=dword:00000692 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\6] "NodeSlot"=dword:00000693 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\7] "NodeSlot"=dword:00000694 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\8] "NodeSlot"=dword:00000695 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\6\9] "NodeSlot"=dword:00000696 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\\7] "NodeSlot"=dword:0000069d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1] "NodeSlot"=dword:000005a8 "MRUListEx"=hex:05,00,00,00,00,00,00,00,04,00,00,00,01,00,00,00,03,00,00,00,02,.. "0"=hex:3c,00,31,00,00,00,00,00,67,33,cf,9c,10,00,61,76,61,74,61,72,73,.. "1"=hex:4a,00,31,00,00,00,00,00,67,33,ca,9c,10,00,43,4c,49,4e,53,44,7e,.. "2"=hex:42,00,32,00,0e,04,02,00,c3,32,48,51,20,00,57,49,4e,4b,53,2e,7a,.. "3"=hex:4c,00,32,00,3d,49,03,00,e6,32,1a,3e,20,00,56,49,44,43,49,32,36,.. "4"=hex:42,00,31,00,00,00,00,00,67,33,c6,9c,10,00,45,4d,4f,54,49,43,7e,.. "5"=hex:42,00,31,00,00,00,00,00,cc,34,e2,5e,10,00,50,48,4f,54,4f,53,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1] "NodeSlot"=dword:00000682 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:40,00,31,00,00,00,00,00,67,33,cf,9c,10,00,73,69,6d,70,73,6f,6e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1\] "NodeSlot"=dword:00000683 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1\1] "NodeSlot"=dword:00000684 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1\2] "NodeSlot"=dword:00000698 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1\3] "NodeSlot"=dword:00000699 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1\4] "NodeSlot"=dword:0000069a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1\5] "NodeSlot"=dword:0000069b "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,31,00,00,00,00,00,04,33,ae,29,10,00,43,52,41,43,4b,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1\5] "NodeSlot"=dword:0000069c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2] "NodeSlot"=dword:00000685 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,35,00,00,00,00,00,67,33,dd,9a,10,00,32,00,e8,00,6d,00,65,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2] "NodeSlot"=dword:00000686 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\3] "NodeSlot"=dword:00000687 "MRUListEx"=hex:02,00,00,00,00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,67,33,4c,98,10,00,41,4e,54,41,4c,59,7e,.. "1"=hex:48,00,31,00,00,00,00,00,67,33,6a,98,10,00,41,4e,54,41,4c,59,7e,.. "2"=hex:3a,00,31,00,00,00,00,00,8e,33,da,40,10,00,6d,6f,75,6e,69,61,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\3] "NodeSlot"=dword:00000688 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\3\1] "NodeSlot"=dword:00000689 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,67,33,a0,98,10,00,44,45,4c,56,41,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\3\1] "NodeSlot"=dword:0000068a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\3\2] "NodeSlot"=dword:0000068b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1] "NodeSlot"=dword:000004af "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,70,35,af,4b,10,00,50,52,49,53,4f,4e,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\1] "NodeSlot"=dword:0000054c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\10] "NodeSlot"=dword:00000667 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4a,00,31,00,00,00,00,00,32,37,cf,75,10,00,53,45,58,41,4e,44,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\10] "NodeSlot"=dword:00000668 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\11] "NodeSlot"=dword:000006d8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\12] "NodeSlot"=dword:000006d9 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:60,00,62,04,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\12] "NodeSlot"=dword:000006da "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\13] "NodeSlot"=dword:00000768 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\14] "NodeSlot"=dword:000007b7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\15] "NodeSlot"=dword:000007b8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2] "NodeSlot"=dword:000004ba "MRUListEx"=hex:23,00,00,00,20,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,06,.. "0"=hex:f0,00,31,00,00,00,00,00,67,31,75,4f,10,00,28,28,45,55,52,4f,7e,.. "1"=hex:9e,00,31,00,00,00,00,00,68,34,a2,4a,10,00,28,48,55,53,53,59,7e,.. "2"=hex:30,00,31,00,00,00,00,00,47,34,58,8c,10,00,31,38,30,00,1e,00,03,.. "3"=hex:58,00,31,00,00,00,00,00,6f,32,3d,54,10,00,47,41,4c,4c,45,52,7e,.. "4"=hex:58,00,31,00,00,00,00,00,72,32,37,b7,10,00,47,41,4c,4c,45,52,7e,.. "5"=hex:44,00,31,00,00,00,00,00,2b,34,94,9d,10,00,53,41,4e,44,52,41,7e,.. "6"=hex:86,00,31,00,00,00,00,00,d9,32,ea,40,10,00,53,41,4e,44,52,41,7e,.. "7"=hex:92,00,31,00,00,00,00,00,ce,32,ef,83,10,00,53,41,4e,44,52,41,7e,.. "8"=hex:84,00,31,00,00,00,00,00,cc,34,93,b5,10,00,53,41,35,44,46,45,7e,.. "9"=hex:98,00,31,00,00,00,00,00,bd,34,09,21,10,00,53,41,4e,44,52,41,7e,.. "10"=hex:60,00,31,00,00,00,00,00,bc,34,bd,3e,10,00,53,41,37,45,31,33,7e,.. "11"=hex:60,00,31,00,00,00,00,00,bc,34,84,3e,10,00,53,41,43,45,33,31,7e,.. "12"=hex:60,00,31,00,00,00,00,00,bc,34,65,3c,10,00,53,41,45,45,34,33,7e,.. "13"=hex:60,00,31,00,00,00,00,00,b7,34,b6,21,10,00,53,41,43,45,42,41,7e,.. "14"=hex:66,00,31,00,00,00,00,00,b7,34,c3,4e,10,00,53,41,34,31,38,41,7e,.. "15"=hex:a6,00,31,00,00,00,00,00,b6,34,e5,3a,10,00,53,41,4e,44,52,41,7e,.. "16"=hex:60,00,31,00,00,00,00,00,84,34,aa,31,10,00,53,41,31,44,42,31,7e,.. "17"=hex:60,00,31,00,00,00,00,00,84,34,95,2e,10,00,53,41,32,44,42,31,7e,.. "18"=hex:60,00,31,00,00,00,00,00,84,34,67,27,10,00,53,41,44,43,43,31,7e,.. "19"=hex:60,00,31,00,00,00,00,00,84,34,15,2d,10,00,53,41,42,43,43,31,7e,.. "20"=hex:60,00,31,00,00,00,00,00,84,34,5b,30,10,00,53,41,43,43,43,31,7e,.. "21"=hex:60,00,31,00,00,00,00,00,84,34,ba,2a,10,00,53,41,44,43,43,31,7e,.. "22"=hex:60,00,31,00,00,00,00,00,85,34,44,2b,10,00,53,41,32,44,43,31,7e,.. "23"=hex:68,00,31,00,00,00,00,00,93,30,33,b4,10,00,53,41,4e,44,52,41,7e,.. "24"=hex:c4,00,31,00,00,00,00,00,53,31,8a,3c,10,00,53,41,45,31,34,43,7e,.. "25"=hex:30,00,31,00,00,00,00,00,c7,34,1a,a3,10,00,53,45,54,00,1e,00,03,.. "26"=hex:3e,00,31,00,00,00,00,00,cd,34,1a,8a,10,00,53,45,54,30,33,39,7e,.. "27"=hex:3e,00,31,00,00,00,00,00,cb,34,97,68,10,00,53,45,54,30,34,32,7e,.. "28"=hex:3e,00,31,00,00,00,00,00,cd,34,ed,89,10,00,53,45,54,30,37,37,7e,.. "29"=hex:3e,00,31,00,00,00,00,00,bc,34,f8,44,10,00,53,45,54,31,35,30,7e,.. "30"=hex:3e,00,31,00,00,00,00,00,c9,34,62,28,10,00,53,45,54,31,37,39,7e,.. "31"=hex:3e,00,31,00,00,00,00,00,ca,34,35,45,10,00,53,45,54,31,38,32,7e,.. "32"=hex:3e,00,31,00,00,00,00,00,cc,34,f6,24,10,00,53,45,54,31,39,38,7e,.. "33"=hex:3e,00,31,00,00,00,00,00,cb,34,6f,68,10,00,53,45,54,32,30,38,7e,.. "34"=hex:3a,00,31,00,00,00,00,00,c7,34,c5,21,10,00,76,69,64,65,6f,73,00,.. "35"=hex:50,00,31,00,00,00,00,00,21,32,d4,03,10,00,53,41,35,43,44,36,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2] "NodeSlot"=dword:000004bb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\1] "NodeSlot"=dword:000004bc "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:68,00,31,00,00,00,00,00,68,34,06,4a,10,00,53,41,4e,44,52,41,7e,.. "1"=hex:54,00,31,00,00,00,00,00,68,34,70,4a,10,00,56,45,52,53,43,48,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\1] "NodeSlot"=dword:000004bd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\1\1] "NodeSlot"=dword:000004be "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\10] "NodeSlot"=dword:000004e9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\11] "NodeSlot"=dword:000004ea "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\12] "NodeSlot"=dword:000004eb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\13] "NodeSlot"=dword:000004ec "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\14] "NodeSlot"=dword:000004ed "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\15] "NodeSlot"=dword:000004ee "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\16] "NodeSlot"=dword:000004ef "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\17] "NodeSlot"=dword:000004f0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\18] "NodeSlot"=dword:000004f1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\19] "NodeSlot"=dword:000004f2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\2] "NodeSlot"=dword:000004bf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\20] "NodeSlot"=dword:000004f3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\21] "NodeSlot"=dword:000004f4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\22] "NodeSlot"=dword:000004f5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23] "NodeSlot"=dword:000004f6 "MRUListEx"=hex:14,00,00,00,13,00,00,00,12,00,00,00,11,00,00,00,10,00,00,00,0e,.. "0"=hex:2e,00,31,00,00,00,00,00,93,30,fc,63,30,00,30,31,00,00,1c,00,03,.. "1"=hex:2e,00,31,00,00,00,00,00,93,30,00,64,30,00,30,32,00,00,1c,00,03,.. "2"=hex:2e,00,31,00,00,00,00,00,93,30,03,64,30,00,30,33,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,93,30,04,64,30,00,30,34,00,00,1c,00,03,.. "4"=hex:2e,00,31,00,00,00,00,00,93,30,05,64,30,00,30,35,00,00,1c,00,03,.. "5"=hex:2e,00,31,00,00,00,00,00,93,30,08,64,30,00,30,36,00,00,1c,00,03,.. "6"=hex:2e,00,31,00,00,00,00,00,93,30,09,64,30,00,30,37,00,00,1c,00,03,.. "7"=hex:2e,00,31,00,00,00,00,00,93,30,0a,64,30,00,30,38,00,00,1c,00,03,.. "8"=hex:2e,00,31,00,00,00,00,00,93,30,0c,64,30,00,30,39,00,00,1c,00,03,.. "9"=hex:2e,00,31,00,00,00,00,00,93,30,0d,64,30,00,31,30,00,00,1c,00,03,.. "10"=hex:2e,00,31,00,00,00,00,00,93,30,5a,62,30,00,31,31,00,00,1c,00,03,.. "11"=hex:2e,00,31,00,00,00,00,00,93,30,5b,62,30,00,31,32,00,00,1c,00,03,.. "12"=hex:2e,00,31,00,00,00,00,00,93,30,5d,62,30,00,31,33,00,00,1c,00,03,.. "13"=hex:42,00,31,00,00,00,00,00,93,30,61,62,10,00,31,33,5f,42,4f,4e,7e,.. "14"=hex:2e,00,31,00,00,00,00,00,93,30,64,62,10,00,31,34,00,00,1c,00,03,.. "15"=hex:2e,00,31,00,00,00,00,00,93,30,6c,62,10,00,31,35,00,00,1c,00,03,.. "16"=hex:2e,00,31,00,00,00,00,00,93,30,6f,62,10,00,31,36,00,00,1c,00,03,.. "17"=hex:2e,00,31,00,00,00,00,00,93,30,73,62,10,00,31,37,00,00,1c,00,03,.. "18"=hex:2e,00,31,00,00,00,00,00,93,30,7a,62,10,00,31,38,00,00,1c,00,03,.. "19"=hex:2e,00,31,00,00,00,00,00,93,30,8c,62,10,00,31,39,00,00,1c,00,03,.. "20"=hex:2e,00,31,00,00,00,00,00,93,30,93,62,10,00,32,30,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23] "NodeSlot"=dword:000004f7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\1] "NodeSlot"=dword:000004f8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\10] "NodeSlot"=dword:00000501 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\11] "NodeSlot"=dword:00000502 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\12] "NodeSlot"=dword:00000503 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\13] "NodeSlot"=dword:00000504 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\14] "NodeSlot"=dword:00000505 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\15] "NodeSlot"=dword:00000506 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\16] "NodeSlot"=dword:00000507 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\17] "NodeSlot"=dword:00000508 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\18] "NodeSlot"=dword:00000509 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\19] "NodeSlot"=dword:0000050a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\2] "NodeSlot"=dword:000004f9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\20] "NodeSlot"=dword:0000050b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\3] "NodeSlot"=dword:000004fa "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\4] "NodeSlot"=dword:000004fb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\5] "NodeSlot"=dword:000004fc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\6] "NodeSlot"=dword:000004fd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\7] "NodeSlot"=dword:000004fe "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\8] "NodeSlot"=dword:000004ff "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\23\9] "NodeSlot"=dword:00000500 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\24] "NodeSlot"=dword:0000050c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\25] "NodeSlot"=dword:0000050d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\26] "NodeSlot"=dword:0000050e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\27] "NodeSlot"=dword:0000050f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\28] "NodeSlot"=dword:00000510 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\29] "NodeSlot"=dword:00000511 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\3] "NodeSlot"=dword:000004c0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\30] "NodeSlot"=dword:00000512 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\31] "NodeSlot"=dword:00000513 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\32] "NodeSlot"=dword:00000514 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\33] "NodeSlot"=dword:00000515 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\34] "NodeSlot"=dword:00000516 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\35] "NodeSlot"=dword:000006dd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\4] "NodeSlot"=dword:000004c1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\5] "NodeSlot"=dword:000004c2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\6] "NodeSlot"=dword:000004c3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\7] "NodeSlot"=dword:000004c4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\8] "NodeSlot"=dword:000004c5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\2\9] "NodeSlot"=dword:000004c6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\3] "NodeSlot"=dword:000004c7 "MRUListEx"=hex:00,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,39,34,e0,35,10,00,68,61,72,64,00,00,20,.. "1"=hex:30,00,31,00,00,00,00,00,4b,33,c3,96,10,00,30,34,37,00,1e,00,03,.. "2"=hex:34,00,31,00,00,00,00,00,ce,34,8b,33,10,00,70,74,68,63,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\3] "NodeSlot"=dword:000004c8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\3\1] "NodeSlot"=dword:00000517 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\3\2] "NodeSlot"=dword:00000518 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4] "NodeSlot"=dword:00000519 "MRUListEx"=hex:00,00,00,00,04,00,00,00,08,00,00,00,09,00,00,00,02,00,00,00,05,.. "0"=hex:56,00,31,00,00,00,00,00,6e,35,c3,9b,11,00,4d,45,53,49,4d,41,7e,.. "1"=hex:36,00,31,00,00,00,00,00,6e,35,c3,9b,10,00,48,45,4c,4c,4f,00,22,.. "2"=hex:46,00,31,00,00,00,00,00,6e,35,89,9b,10,00,4d,59,50,49,43,54,7e,.. "3"=hex:42,00,31,00,00,00,00,00,6e,35,5c,9b,10,00,56,4f,59,45,55,52,7e,.. "4"=hex:30,00,31,00,00,00,00,00,6e,35,b6,9b,10,00,76,6f,79,00,1e,00,03,.. "5"=hex:34,00,31,00,00,00,00,00,6e,35,a1,9b,10,00,63,75,74,65,00,00,20,.. "6"=hex:44,00,31,00,00,00,00,00,6e,35,46,9b,10,00,41,4e,44,59,53,45,7e,.. "7"=hex:36,00,31,00,00,00,00,00,6e,35,51,9b,10,00,61,6c,65,78,61,00,22,.. "8"=hex:34,00,31,00,00,00,00,00,6e,35,64,9b,10,00,74,65,65,6e,00,00,20,.. "9"=hex:46,00,31,00,00,00,00,00,6e,35,8f,9b,10,00,50,48,4f,54,4f,4d,7e,.. "10"=hex:30,00,31,00,00,00,00,00,6e,35,ad,9b,10,00,47,49,46,00,1e,00,03,.. "11"=hex:3c,00,31,00,00,00,00,00,6e,35,1a,9d,10,00,62,6c,6f,77,6a,6f,62,.. "12"=hex:5a,00,31,00,00,00,00,00,6e,35,19,9d,10,00,43,4c,41,55,44,49,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4] "NodeSlot"=dword:0000051a "MRUListEx"=hex:05,00,00,00,04,00,00,00,03,00,00,00,02,00,00,00,06,00,00,00,01,.. "0"=hex:3c,00,31,00,00,00,00,00,6e,35,60,9c,10,00,64,65,73,73,69,6e,73,.. "1"=hex:44,00,31,00,00,00,00,00,6e,35,5b,9c,10,00,46,55,4e,4e,59,50,7e,.. "2"=hex:46,00,31,00,00,00,00,00,6e,35,e1,9b,10,00,4c,49,54,54,4c,45,7e,.. "3"=hex:30,00,31,00,00,00,00,00,6e,35,e0,9b,10,00,6d,69,61,00,1e,00,03,.. "4"=hex:40,00,31,00,00,00,00,00,6e,35,d6,9b,10,00,73,77,69,6e,67,65,72,.. "5"=hex:3c,00,31,00,00,00,00,00,6e,35,ce,9b,10,00,77,68,69,74,6e,65,79,.. "6"=hex:36,00,31,00,00,00,00,00,6e,35,e3,9b,10,00,48,45,4c,4c,4f,00,22,.. "7"=hex:48,00,31,00,00,00,00,00,6e,35,d8,9b,10,00,53,45,56,49,4e,41,7e,.. "8"=hex:36,00,31,00,00,00,00,00,6e,35,61,9c,10,00,64,61,69,73,79,00,22,.. "9"=hex:3a,00,31,00,00,00,00,00,6e,35,5c,9c,10,00,66,61,72,72,61,68,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\] "NodeSlot"=dword:0000051b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\1] "NodeSlot"=dword:0000051c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\2] "NodeSlot"=dword:0000051d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\3] "NodeSlot"=dword:0000051e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\4] "NodeSlot"=dword:0000051f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5] "NodeSlot"=dword:00000520 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6] "NodeSlot"=dword:00000521 "MRUListEx"=hex:00,00,00,00,0f,00,00,00,10,00,00,00,01,00,00,00,02,00,00,00,04,.. "0"=hex:3a,00,31,00,00,00,00,00,6e,35,51,9c,10,00,61,67,61,6c,61,68,00,.. "1"=hex:44,00,31,00,00,00,00,00,6e,35,4f,9c,10,00,41,4d,49,4e,41,41,7e,.. "2"=hex:3a,00,31,00,00,00,00,00,6e,35,30,9c,10,00,6c,65,67,6c,6f,64,00,.. "3"=hex:4c,00,31,00,00,00,00,00,6e,35,22,9c,10,00,4d,41,47,45,53,50,7e,.. "4"=hex:36,00,31,00,00,00,00,00,6e,35,e3,9b,10,00,74,6f,70,69,31,00,22,.. "5"=hex:40,00,31,00,00,00,00,00,6e,35,04,9c,10,00,74,62,30,35,32,30,34,.. "6"=hex:4a,00,31,00,00,00,00,00,6e,35,06,9c,10,00,52,41,54,44,52,41,7e,.. "7"=hex:3c,00,31,00,00,00,00,00,6e,35,08,9c,10,00,6f,6c,6c,69,73,32,38,.. "8"=hex:44,00,31,00,00,00,00,00,6e,35,33,9c,10,00,4b,4c,41,55,53,49,7e,.. "9"=hex:4e,00,31,00,00,00,00,00,6e,35,38,9c,10,00,4a,55,4c,49,45,52,7e,.. "10"=hex:42,00,31,00,00,00,00,00,6e,35,39,9c,10,00,4a,45,4e,4e,33,30,7e,.. "11"=hex:4a,00,31,00,00,00,00,00,6e,35,3c,9c,10,00,49,54,41,4c,49,41,7e,.. "12"=hex:4a,00,31,00,00,00,00,00,6e,35,3c,9c,10,00,46,52,45,43,4b,4c,7e,.. "13"=hex:3c,00,31,00,00,00,00,00,6e,35,40,9c,10,00,46,52,41,4e,5a,4c,31,.. "14"=hex:3a,00,31,00,00,00,00,00,6e,35,49,9c,10,00,63,6c,65,6d,69,34,00,.. "15"=hex:3c,00,31,00,00,00,00,00,6e,35,49,9c,10,00,43,48,41,4f,54,34,37,.. "16"=hex:3c,00,31,00,00,00,00,00,6e,35,4a,9c,10,00,42,4c,4f,4e,44,45,32,.. "17"=hex:3c,00,31,00,00,00,00,00,6e,35,4b,9c,10,00,62,69,63,6f,6b,6c,65,.. "18"=hex:44,00,31,00,00,00,00,00,6e,35,4d,9c,10,00,41,4e,44,59,53,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6] "NodeSlot"=dword:00000522 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,11,00,00,00,10,00,00,00,0f,.. "0"=hex:7a,00,31,00,00,00,00,00,6e,35,5b,9c,10,00,28,28,48,55,53,53,7e,.. "1"=hex:2a,00,31,00,00,00,00,00,6e,35,5b,9c,10,00,35,00,1a,00,03,00,04,.. "2"=hex:30,00,31,00,00,00,00,00,6e,35,5a,9c,10,00,38,79,6f,00,1e,00,03,.. "3"=hex:4c,00,31,00,00,00,00,00,6e,35,5a,9c,10,00,42,41,42,59,55,4b,7e,.. "4"=hex:4e,00,31,00,00,00,00,00,6e,35,59,9c,10,00,43,55,53,54,4f,4d,7e,.. "5"=hex:44,00,31,00,00,00,00,00,6e,35,59,9c,10,00,46,52,4f,4d,41,4a,7e,.. "6"=hex:44,00,31,00,00,00,00,00,6e,35,56,9c,10,00,46,52,4f,4d,4a,4f,7e,.. "7"=hex:46,00,31,00,00,00,00,00,6e,35,55,9c,10,00,47,41,4c,4c,45,52,7e,.. "8"=hex:30,00,31,00,00,00,00,00,6e,35,55,9c,10,00,68,63,31,00,1e,00,03,.. "9"=hex:40,00,31,00,00,00,00,00,6e,35,55,9c,10,00,6a,65,6e,6e,79,31,31,.. "10"=hex:3c,00,31,00,00,00,00,00,6e,35,54,9c,10,00,6c,6f,6c,70,6f,6c,6f,.. "11"=hex:40,00,31,00,00,00,00,00,6e,35,53,9c,10,00,50,52,49,56,41,54,7e,.. "12"=hex:4e,00,31,00,00,00,00,00,6e,35,52,9c,10,00,50,54,48,43,46,41,7e,.. "13"=hex:30,00,31,00,00,00,00,00,6e,35,52,9c,10,00,52,57,41,00,1e,00,03,.. "14"=hex:40,00,31,00,00,00,00,00,6e,35,52,9c,10,00,54,45,45,4e,50,52,7e,.. "15"=hex:36,00,31,00,00,00,00,00,6e,35,52,9c,10,00,54,45,45,4e,53,00,22,.. "16"=hex:36,00,31,00,00,00,00,00,6e,35,51,9c,10,00,79,6e,75,64,65,00,22,.. "17"=hex:2e,00,31,00,00,00,00,00,6e,35,51,9c,10,00,59,4f,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\] "NodeSlot"=dword:00000523 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\1] "NodeSlot"=dword:00000524 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10] "NodeSlot"=dword:0000052d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\11] "NodeSlot"=dword:0000052e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\12] "NodeSlot"=dword:0000052f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\13] "NodeSlot"=dword:00000530 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\14] "NodeSlot"=dword:00000531 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\15] "NodeSlot"=dword:00000532 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\16] "NodeSlot"=dword:00000533 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\17] "NodeSlot"=dword:00000534 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\2] "NodeSlot"=dword:00000525 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\3] "NodeSlot"=dword:00000526 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4] "NodeSlot"=dword:00000527 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\5] "NodeSlot"=dword:00000528 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\6] "NodeSlot"=dword:00000529 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\7] "NodeSlot"=dword:0000052a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\8] "NodeSlot"=dword:0000052b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\9] "NodeSlot"=dword:0000052c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\1] "NodeSlot"=dword:00000535 "MRUListEx"=hex:00,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:4e,00,31,00,00,00,00,00,6e,35,50,9c,10,00,46,52,4f,4d,41,4d,7e,.. "1"=hex:42,00,31,00,00,00,00,00,6e,35,50,9c,10,00,4e,45,57,46,4c,41,7e,.. "2"=hex:34,00,31,00,00,00,00,00,6e,35,4f,9c,10,00,53,48,49,50,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\1] "NodeSlot"=dword:00000536 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\1\1] "NodeSlot"=dword:00000537 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\1\2] "NodeSlot"=dword:00000538 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10] "NodeSlot"=dword:0000063b "MRUListEx"=hex:07,00,00,00,06,00,00,00,05,00,00,00,04,00,00,00,03,00,00,00,02,.. "0"=hex:54,00,31,00,00,00,00,00,6e,35,3b,9c,10,00,30,46,52,4f,4d,52,7e,.. "1"=hex:30,00,31,00,00,00,00,00,6e,35,3b,9c,10,00,31,66,64,00,1e,00,03,.. "2"=hex:2a,00,31,00,00,00,00,00,6e,35,3b,9c,10,00,41,00,1a,00,03,00,04,.. "3"=hex:3a,00,31,00,00,00,00,00,6e,35,3b,9c,10,00,41,4c,49,53,53,41,00,.. "4"=hex:46,00,31,00,00,00,00,00,6e,35,3a,9c,10,00,43,4f,55,50,4c,45,7e,.. "5"=hex:30,00,31,00,00,00,00,00,6e,35,3a,9c,10,00,6a,65,6e,00,1e,00,03,.. "6"=hex:40,00,31,00,00,00,00,00,6e,35,39,9c,10,00,4c,49,4e,47,45,52,49,.. "7"=hex:48,00,31,00,00,00,00,00,6e,35,39,9c,10,00,4e,45,57,30,37,2d,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10] "NodeSlot"=dword:0000063c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10\1] "NodeSlot"=dword:0000063d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10\2] "NodeSlot"=dword:0000063e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10\3] "NodeSlot"=dword:0000063f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10\4] "NodeSlot"=dword:00000640 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10\5] "NodeSlot"=dword:00000641 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10\6] "NodeSlot"=dword:00000642 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\10\7] "NodeSlot"=dword:00000643 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\11] "NodeSlot"=dword:00000644 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,31,00,00,00,00,00,6e,35,3c,9c,10,00,46,52,4f,4d,49,54,7e,.. "1"=hex:30,00,31,00,00,00,00,00,6e,35,3c,9c,10,00,6e,5f,63,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\11] "NodeSlot"=dword:00000645 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\11\1] "NodeSlot"=dword:00000646 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\12] "NodeSlot"=dword:00000647 "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,31,00,00,00,00,00,6e,35,3d,9c,10,00,46,52,4f,4d,46,52,7e,.. "1"=hex:34,00,31,00,00,00,00,00,6e,35,3c,9c,10,00,4f,59,46,46,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\12] "NodeSlot"=dword:00000648 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\12\1] "NodeSlot"=dword:00000649 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\13] "NodeSlot"=dword:0000064a "MRUListEx"=hex:05,00,00,00,04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,.. "0"=hex:34,00,31,00,00,00,00,00,6e,35,47,9c,10,00,61,6c,66,32,00,00,20,.. "1"=hex:54,00,31,00,00,00,00,00,6e,35,46,9c,10,00,46,52,4f,4d,42,4c,7e,.. "2"=hex:48,00,31,00,00,00,00,00,6e,35,45,9c,10,00,46,52,4f,4d,46,52,7e,.. "3"=hex:48,00,31,00,00,00,00,00,6e,35,43,9c,10,00,4e,45,55,45,52,4f,7e,.. "4"=hex:4e,00,31,00,00,00,00,00,6e,35,42,9c,10,00,4e,45,57,53,54,41,7e,.. "5"=hex:34,00,31,00,00,00,00,00,6e,35,40,9c,10,00,76,69,6b,61,00,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\13] "NodeSlot"=dword:0000064b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\13\1] "NodeSlot"=dword:0000064c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\13\2] "NodeSlot"=dword:0000064d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\13\3] "NodeSlot"=dword:0000064e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\13\4] "NodeSlot"=dword:0000064f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\13\5] "NodeSlot"=dword:00000650 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\14] "NodeSlot"=dword:00000651 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,6e,35,49,9c,10,00,46,52,4f,4d,43,4c,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\14] "NodeSlot"=dword:00000652 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\15] "NodeSlot"=dword:00000653 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:48,00,31,00,00,00,00,00,6e,35,49,9c,10,00,46,52,4f,4d,43,48,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\15] "NodeSlot"=dword:00000654 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\16] "NodeSlot"=dword:00000655 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,6e,35,4a,9c,10,00,63,69,6e,64,79,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\16] "NodeSlot"=dword:00000656 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\17] "NodeSlot"=dword:00000657 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:30,00,31,00,00,00,00,00,6e,35,4d,9c,10,00,62,26,77,00,1e,00,03,.. "1"=hex:48,00,31,00,00,00,00,00,6e,35,4c,9c,10,00,46,52,4f,4d,42,49,7e,.. "2"=hex:3a,00,31,00,00,00,00,00,6e,35,4b,9c,10,00,73,61,6e,64,72,61,00,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\17] "NodeSlot"=dword:00000658 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\17\1] "NodeSlot"=dword:00000659 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\17\2] "NodeSlot"=dword:0000065a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\18] "NodeSlot"=dword:0000065b "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:3c,00,31,00,00,00,00,00,6e,35,4f,9c,10,00,44,45,53,4b,54,4f,50,.. "1"=hex:4e,00,31,00,00,00,00,00,6e,35,4e,9c,10,00,46,52,4f,4d,41,4e,7e,.. "2"=hex:4c,00,31,00,00,00,00,00,6e,35,4e,9c,10,00,46,52,4f,4d,4c,4f,7e,.. "3"=hex:58,00,31,00,00,00,00,00,6e,35,4d,9c,10,00,46,52,4f,4d,53,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\18] "NodeSlot"=dword:0000065c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\18\1] "NodeSlot"=dword:0000065d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\18\2] "NodeSlot"=dword:0000065e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\18\3] "NodeSlot"=dword:0000065f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\2] "NodeSlot"=dword:00000539 "MRUListEx"=hex:03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:46,00,31,00,00,00,00,00,6e,35,32,9c,10,00,41,4c,41,4d,41,49,7e,.. "1"=hex:42,00,31,00,00,00,00,00,6e,35,31,9c,10,00,43,41,48,59,4f,52,7e,.. "2"=hex:3e,00,31,00,00,00,00,00,6e,35,31,9c,10,00,46,52,4f,4d,44,49,7e,.. "3"=hex:46,00,31,00,00,00,00,00,6e,35,30,9c,10,00,46,52,4f,4d,4c,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\2] "NodeSlot"=dword:0000053a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\2\1] "NodeSlot"=dword:0000053b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\2\2] "NodeSlot"=dword:0000053c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\2\3] "NodeSlot"=dword:0000053d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\3] "NodeSlot"=dword:0000053e "MRUListEx"=hex:00,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:4c,00,31,00,00,00,00,00,6e,35,22,9c,10,00,47,49,52,4c,53,55,7e,.. "1"=hex:3a,00,31,00,00,00,00,00,6e,35,2f,9c,10,00,62,69,6c,64,65,72,00,.. "2"=hex:40,00,31,00,00,00,00,00,6e,35,28,9c,10,00,62,69,6c,64,65,72,32,.. "3"=hex:56,00,31,00,00,00,00,00,6e,35,28,9c,10,00,46,52,4f,4d,4d,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\3] "NodeSlot"=dword:0000053f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\3\1] "NodeSlot"=dword:00000632 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\3\2] "NodeSlot"=dword:00000633 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\3\3] "NodeSlot"=dword:00000634 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4] "NodeSlot"=dword:00000621 "MRUListEx"=hex:06,00,00,00,05,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,.. "0"=hex:3c,00,31,00,00,00,00,00,6e,35,fd,9b,10,00,41,4e,4b,45,5f,38,36,.. "1"=hex:5a,00,31,00,00,00,00,00,6e,35,fd,9b,10,00,44,4a,55,53,43,48,7e,.. "2"=hex:56,00,31,00,00,00,00,00,6e,35,fc,9b,10,00,46,52,4f,4d,44,52,7e,.. "3"=hex:44,00,31,00,00,00,00,00,6e,35,fb,9b,10,00,46,52,4f,4d,54,4f,7e,.. "4"=hex:62,00,31,00,00,00,00,00,6e,35,f3,9b,10,00,47,41,4c,4c,45,52,7e,.. "5"=hex:52,00,31,00,00,00,00,00,6e,35,f2,9b,10,00,48,45,4c,4c,53,49,7e,.. "6"=hex:42,00,31,00,00,00,00,00,6e,35,f1,9b,10,00,4d,49,4e,49,54,52,7e,.. "7"=hex:34,00,31,00,00,00,00,00,6e,35,ef,9b,10,00,72,65,61,6c,00,00,20,.. "8"=hex:3e,00,31,00,00,00,00,00,6e,35,e3,9b,10,00,58,58,46,49,4c,4d,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4] "NodeSlot"=dword:00000622 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4\1] "NodeSlot"=dword:00000623 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4\2] "NodeSlot"=dword:00000624 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4\3] "NodeSlot"=dword:00000625 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4\4] "NodeSlot"=dword:00000626 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4\5] "NodeSlot"=dword:00000627 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4\6] "NodeSlot"=dword:00000628 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4\7] "NodeSlot"=dword:00000629 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\4\8] "NodeSlot"=dword:0000062a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\5] "NodeSlot"=dword:0000062b "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:4a,00,31,00,00,00,00,00,6e,35,04,9c,10,00,46,52,4f,4d,54,42,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\5] "NodeSlot"=dword:0000062c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\6] "NodeSlot"=dword:0000062d "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:54,00,31,00,00,00,00,00,6e,35,06,9c,10,00,46,52,4f,4d,52,41,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\6] "NodeSlot"=dword:0000062e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\7] "NodeSlot"=dword:0000062f "MRUListEx"=hex:01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:50,00,31,00,00,00,00,00,6e,35,10,9c,10,00,4e,45,55,45,52,4f,7e,.. "1"=hex:50,00,31,00,00,00,00,00,6e,35,08,9c,10,00,4e,45,55,45,52,4f,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\7] "NodeSlot"=dword:00000630 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\7\1] "NodeSlot"=dword:00000631 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\8] "NodeSlot"=dword:00000635 "MRUListEx"=hex:02,00,00,00,01,00,00,00,00,00,00,00,ff,ff,ff,ff "0"=hex:34,00,31,00,00,00,00,00,6e,35,38,9c,10,00,41,58,58,58,00,00,20,.. "1"=hex:36,00,31,00,00,00,00,00,6e,35,37,9c,10,00,62,75,6e,6e,79,00,22,.. "2"=hex:34,00,31,00,00,00,00,00,6e,35,33,9c,10,00,4a,42,55,7e,31,00,20,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\8] "NodeSlot"=dword:00000636 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\8\1] "NodeSlot"=dword:00000637 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\8\2] "NodeSlot"=dword:00000638 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\9] "NodeSlot"=dword:00000639 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:58,00,31,00,00,00,00,00,6e,35,38,9c,10,00,46,52,4f,4d,4a,55,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6\9] "NodeSlot"=dword:0000063a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\7] "NodeSlot"=dword:00000620 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8] "NodeSlot"=dword:00000660 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\9] "NodeSlot"=dword:0000066f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\1] "NodeSlot"=dword:00000540 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\10] "NodeSlot"=dword:000005a9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\11] "NodeSlot"=dword:00000672 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\12] "NodeSlot"=dword:000006d0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\2] "NodeSlot"=dword:00000541 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:36,00,31,00,00,00,00,00,6e,35,8a,9b,10,00,6a,65,6e,6e,79,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\2] "NodeSlot"=dword:00000542 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\3] "NodeSlot"=dword:00000543 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\4] "NodeSlot"=dword:00000544 "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:98,00,31,00,00,00,00,00,6e,35,32,9c,10,00,4d,41,53,54,45,52,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\4] "NodeSlot"=dword:00000545 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5] "NodeSlot"=dword:00000546 "MRUListEx"=hex:00,00,00,00,11,00,00,00,10,00,00,00,0f,00,00,00,0e,00,00,00,0d,.. "0"=hex:2e,00,31,00,00,00,00,00,6e,35,b3,9b,10,00,30,31,00,00,1c,00,03,.. "1"=hex:34,00,31,00,00,00,00,00,6e,35,b3,9b,10,00,30,31,2d,32,00,00,20,.. "2"=hex:36,00,31,00,00,00,00,00,6e,35,a8,9b,10,00,30,35,2d,30,31,00,22,.. "3"=hex:36,00,31,00,00,00,00,00,6e,35,b0,9b,10,00,30,32,2d,30,31,00,22,.. "4"=hex:36,00,31,00,00,00,00,00,6e,35,ac,9b,10,00,30,33,2d,30,31,00,22,.. "5"=hex:36,00,31,00,00,00,00,00,6e,35,ac,9b,10,00,30,33,2d,30,32,00,22,.. "6"=hex:36,00,31,00,00,00,00,00,6e,35,ab,9b,10,00,30,33,2d,30,33,00,22,.. "7"=hex:36,00,31,00,00,00,00,00,6e,35,ab,9b,10,00,30,34,2d,30,31,00,22,.. "8"=hex:36,00,31,00,00,00,00,00,6e,35,a8,9b,10,00,30,35,2d,30,32,00,22,.. "9"=hex:36,00,31,00,00,00,00,00,6e,35,a7,9b,10,00,30,35,2d,30,33,00,22,.. "10"=hex:36,00,31,00,00,00,00,00,6e,35,a6,9b,10,00,30,36,2d,30,31,00,22,.. "11"=hex:36,00,31,00,00,00,00,00,6e,35,a5,9b,10,00,30,36,2d,30,32,00,22,.. "12"=hex:36,00,31,00,00,00,00,00,6e,35,a5,9b,10,00,30,36,2d,30,33,00,22,.. "13"=hex:36,00,31,00,00,00,00,00,6e,35,a4,9b,10,00,30,37,2d,30,31,00,22,.. "14"=hex:36,00,31,00,00,00,00,00,6e,35,a3,9b,10,00,30,37,2d,30,32,00,22,.. "15"=hex:36,00,31,00,00,00,00,00,6e,35,a2,9b,10,00,30,37,2d,30,33,00,22,.. "16"=hex:36,00,31,00,00,00,00,00,6e,35,a1,9b,10,00,30,37,2d,30,34,00,22,.. "17"=hex:36,00,31,00,00,00,00,00,6e,35,a1,9b,10,00,30,37,2d,30,35,00,22,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5] "NodeSlot"=dword:00000547 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\1] "NodeSlot"=dword:00000548 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\10] "NodeSlot"=dword:0000067a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\11] "NodeSlot"=dword:0000067b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\12] "NodeSlot"=dword:0000067c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\13] "NodeSlot"=dword:0000067d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\14] "NodeSlot"=dword:0000067e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\15] "NodeSlot"=dword:0000067f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\16] "NodeSlot"=dword:00000680 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\17] "NodeSlot"=dword:00000681 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\2] "NodeSlot"=dword:00000549 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\3] "NodeSlot"=dword:00000673 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\4] "NodeSlot"=dword:00000674 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\5] "NodeSlot"=dword:00000675 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\6] "NodeSlot"=dword:00000676 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\7] "NodeSlot"=dword:00000677 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\8] "NodeSlot"=dword:00000678 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\5\9] "NodeSlot"=dword:00000679 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\6] "NodeSlot"=dword:0000054a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\7] "NodeSlot"=dword:0000054b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8] "NodeSlot"=dword:00000579 "MRUListEx"=hex:09,00,00,00,0e,00,00,00,0d,00,00,00,0c,00,00,00,0b,00,00,00,0a,.. "0"=hex:2e,00,31,00,00,00,00,00,6e,35,84,9b,10,00,30,31,00,00,1c,00,03,.. "1"=hex:2e,00,31,00,00,00,00,00,6e,35,84,9b,10,00,30,32,00,00,1c,00,03,.. "2"=hex:2e,00,31,00,00,00,00,00,6e,35,81,9b,10,00,30,33,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,6e,35,80,9b,10,00,30,34,00,00,1c,00,03,.. "4"=hex:2e,00,31,00,00,00,00,00,6e,35,7c,9b,10,00,30,35,00,00,1c,00,03,.. "5"=hex:2e,00,31,00,00,00,00,00,6e,35,79,9b,10,00,30,36,00,00,1c,00,03,.. "6"=hex:2e,00,31,00,00,00,00,00,6e,35,78,9b,10,00,30,37,00,00,1c,00,03,.. "7"=hex:2e,00,31,00,00,00,00,00,6e,35,76,9b,10,00,30,38,00,00,1c,00,03,.. "8"=hex:2e,00,31,00,00,00,00,00,6e,35,75,9b,10,00,30,39,00,00,1c,00,03,.. "9"=hex:2e,00,31,00,00,00,00,00,6e,35,75,9b,10,00,31,30,00,00,1c,00,03,.. "10"=hex:2e,00,31,00,00,00,00,00,6e,35,74,9b,10,00,31,31,00,00,1c,00,03,.. "11"=hex:2e,00,31,00,00,00,00,00,6e,35,72,9b,10,00,31,32,00,00,1c,00,03,.. "12"=hex:2e,00,31,00,00,00,00,00,6e,35,6f,9b,10,00,31,33,00,00,1c,00,03,.. "13"=hex:2e,00,31,00,00,00,00,00,6e,35,6d,9b,10,00,31,34,00,00,1c,00,03,.. "14"=hex:2e,00,31,00,00,00,00,00,6e,35,6b,9b,10,00,31,35,00,00,1c,00,03,.. "15"=hex:44,00,31,00,00,00,00,00,6e,35,67,9b,10,00,53,50,4f,4e,47,45,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8] "NodeSlot"=dword:0000057a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\1] "NodeSlot"=dword:0000057b "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\10] "NodeSlot"=dword:00000584 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\11] "NodeSlot"=dword:00000585 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\12] "NodeSlot"=dword:00000586 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\13] "NodeSlot"=dword:00000587 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\14] "NodeSlot"=dword:00000588 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\15] "NodeSlot"=dword:00000589 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\2] "NodeSlot"=dword:0000057c "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\3] "NodeSlot"=dword:0000057d "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\4] "NodeSlot"=dword:0000057e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\5] "NodeSlot"=dword:0000057f "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\6] "NodeSlot"=dword:00000580 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\7] "NodeSlot"=dword:00000581 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\8] "NodeSlot"=dword:00000582 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\8\9] "NodeSlot"=dword:00000583 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\4\9] "NodeSlot"=dword:0000058a "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\5] "NodeSlot"=dword:0000055e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\6] "NodeSlot"=dword:0000058d "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:62,00,0b,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,10,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\6] "NodeSlot"=dword:0000058e "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\7] "NodeSlot"=dword:000005aa "MRUListEx"=hex:00,00,00,00,ff,ff,ff,ff "0"=hex:44,00,31,00,00,00,00,00,d2,32,9a,b2,10,00,41,42,42,59,4d,4f,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\7] "NodeSlot"=dword:000005ab "MRUListEx"=hex:00,00,00,00,01,00,00,00,ff,ff,ff,ff "0"=hex:5a,00,31,00,00,00,00,00,d3,32,4c,47,10,00,38,31,54,4f,31,32,7e,.. "1"=hex:5a,00,31,00,00,00,00,00,d3,32,57,47,10,00,31,36,31,54,4f,31,7e,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\7\] "NodeSlot"=dword:000005ac "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\7\1] "NodeSlot"=dword:000005ad "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8] "NodeSlot"=dword:000005ae "MRUListEx"=hex:0c,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,0b,00,00,00,00,.. "0"=hex:30,00,31,00,00,00,00,00,bd,32,07,84,10,00,73,32,39,00,1e,00,03,.. "1"=hex:30,00,31,00,00,00,00,00,bd,32,08,84,10,00,73,32,34,00,1e,00,03,.. "2"=hex:30,00,31,00,00,00,00,00,bd,32,32,84,10,00,73,32,32,00,1e,00,03,.. "3"=hex:30,00,31,00,00,00,00,00,bd,32,04,84,10,00,73,32,30,00,1e,00,03,.. "4"=hex:30,00,31,00,00,00,00,00,bd,32,06,84,10,00,73,31,30,00,1e,00,03,.. "5"=hex:4e,00,31,00,00,00,00,00,50,35,29,80,10,00,46,41,52,52,41,48,7e,.. "6"=hex:48,00,31,00,00,00,00,00,50,35,2c,80,10,00,46,41,52,52,41,48,7e,.. "7"=hex:2e,00,31,00,00,00,00,00,d1,34,10,a3,10,00,30,36,00,00,1c,00,03,.. "8"=hex:2e,00,31,00,00,00,00,00,d1,34,0a,a3,10,00,30,35,00,00,1c,00,03,.. "9"=hex:2e,00,31,00,00,00,00,00,d1,34,12,a3,10,00,30,37,00,00,1c,00,03,.. "10"=hex:30,00,31,00,00,00,00,00,d1,34,10,a3,10,00,73,30,36,00,1e,00,03,.. "11"=hex:30,00,31,00,00,00,00,00,c8,32,81,bc,10,00,73,32,38,00,1e,00,03,.. "12"=hex:30,00,31,00,00,00,00,00,c8,32,78,bc,10,00,73,31,35,00,1e,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8] "NodeSlot"=dword:000005af "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\1] "NodeSlot"=dword:000005b0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\10] "NodeSlot"=dword:000005c0 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\11] "NodeSlot"=dword:000005c4 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\12] "NodeSlot"=dword:000005c5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\2] "NodeSlot"=dword:000005b1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\3] "NodeSlot"=dword:000005b2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\4] "NodeSlot"=dword:000005b3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\5] "NodeSlot"=dword:000005b4 "MRUListEx"=hex:04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,.. "0"=hex:2e,00,31,00,00,00,00,00,bd,32,04,84,10,00,30,31,00,00,1c,00,03,.. "1"=hex:2e,00,31,00,00,00,00,00,bd,32,06,84,10,00,30,32,00,00,1c,00,03,.. "2"=hex:2e,00,31,00,00,00,00,00,bd,32,07,84,10,00,30,33,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,bd,32,08,84,10,00,30,34,00,00,1c,00,03,.. "4"=hex:2e,00,31,00,00,00,00,00,bd,32,32,84,10,00,31,32,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\5] "NodeSlot"=dword:000005b5 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\5\1] "NodeSlot"=dword:000005b6 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\5\2] "NodeSlot"=dword:000005b7 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\5\3] "NodeSlot"=dword:000005b8 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\5\4] "NodeSlot"=dword:000005b9 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\6] "NodeSlot"=dword:000005ba "MRUListEx"=hex:04,00,00,00,03,00,00,00,02,00,00,00,01,00,00,00,00,00,00,00,ff,.. "0"=hex:2a,00,31,00,00,00,00,00,c8,32,67,bc,10,00,31,00,1a,00,03,00,04,.. "1"=hex:2a,00,31,00,00,00,00,00,c8,32,41,bd,10,00,36,00,1a,00,03,00,04,.. "2"=hex:2e,00,31,00,00,00,00,00,c8,32,72,bc,10,00,31,33,00,00,1c,00,03,.. "3"=hex:2e,00,31,00,00,00,00,00,c8,32,78,bc,10,00,31,35,00,00,1c,00,03,.. "4"=hex:2e,00,31,00,00,00,00,00,c8,32,81,bc,10,00,32,38,00,00,1c,00,03,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\6] "NodeSlot"=dword:000005bb "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\6\1] "NodeSlot"=dword:000005bf "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\6\2] "NodeSlot"=dword:000005c1 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\6\3] "NodeSlot"=dword:000005c2 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\6\4] "NodeSlot"=dword:000005c3 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\7] "NodeSlot"=dword:000005bc "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\8] "NodeSlot"=dword:000005bd "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\8\9] "NodeSlot"=dword:000005be "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\BagMRU\9\9] "NodeSlot"=dword:00000662 "MRUListEx"=hex:ff,ff,ff,ff [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\1\Shell] "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006e "WinPos1024x768(1).top"=dword:0000008a "WinPos1024x768(1).right"=dword:0000038e "WinPos1024x768(1).bottom"=dword:000002e2 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:ffffffff "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="PhotoAlbum" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\10\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000a4 "WinPos1024x768(1).top"=dword:00000031 "WinPos1024x768(1).right"=dword:000003c4 "WinPos1024x768(1).bottom"=dword:00000289 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\12\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000056 "WinPos1024x768(1).top"=dword:00000024 "WinPos1024x768(1).right"=dword:00000376 "WinPos1024x768(1).bottom"=dword:0000027c "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\13\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000042 "WinPos1024x768(1).top"=dword:00000003 "WinPos1024x768(1).right"=dword:00000362 "WinPos1024x768(1).bottom"=dword:0000025b "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\14\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000003 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:ffffffff "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\2\Shell] "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000000 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{65F125E5-7BE1-4810-BA9D-D271C8432CE3}" "Mode"=dword:00000006 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "MinPos800x600(1).x"=dword:ffffffff "MinPos800x600(1).y"=dword:ffffffff "MaxPos800x600(1).x"=dword:ffffffff "MaxPos800x600(1).y"=dword:ffffffff "WinPos800x600(1).left"=dword:0000000c "WinPos800x600(1).top"=dword:ffffffff "WinPos800x600(1).right"=dword:0000032c "WinPos800x600(1).bottom"=dword:00000257 "ScrollPos800x600(1).x"=dword:00000000 "ScrollPos800x600(1).y"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\22\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000003b "WinPos1024x768(1).top"=dword:00000003 "WinPos1024x768(1).right"=dword:0000035b "WinPos1024x768(1).bottom"=dword:0000025b "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000862 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\23\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000009c "WinPos1024x768(1).top"=dword:0000003a "WinPos1024x768(1).right"=dword:00000358 "WinPos1024x768(1).bottom"=dword:0000023e "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:ffffffff "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\26\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000007a "WinPos1024x768(1).top"=dword:00000002 "WinPos1024x768(1).right"=dword:0000039a "WinPos1024x768(1).bottom"=dword:0000025a "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000b55 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "ItemPos1024x768(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,0e,00,00,00,02,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\3\Shell] "FolderType"="Videos" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000016 "WinPos1024x768(1).top"=dword:0000001d "WinPos1024x768(1).right"=dword:00000336 "WinPos1024x768(1).bottom"=dword:00000275 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\31\Shell] "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006e "WinPos1024x768(1).top"=dword:00000012 "WinPos1024x768(1).right"=dword:0000038e "WinPos1024x768(1).bottom"=dword:0000026a "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\32\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000007a "WinPos1024x768(1).top"=dword:00000002 "WinPos1024x768(1).right"=dword:0000039a "WinPos1024x768(1).bottom"=dword:0000025a "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000003 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\33\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\34\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000016 "WinPos1024x768(1).top"=dword:0000001d "WinPos1024x768(1).right"=dword:00000336 "WinPos1024x768(1).bottom"=dword:00000275 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000003 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\35\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000073 "WinPos1024x768(1).top"=dword:0000004d "WinPos1024x768(1).right"=dword:00000393 "WinPos1024x768(1).bottom"=dword:000002a5 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\36\Shell] "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000ac "WinPos1024x768(1).top"=dword:00000000 "WinPos1024x768(1).right"=dword:000003cc "WinPos1024x768(1).bottom"=dword:00000258 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:ffffffff "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="PhotoAlbum" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\37\Shell] "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:000000e1 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:ffffffff "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\38\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000003 "Sort"=dword:00000003 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\39\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000003 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\4\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000016 "WinPos1024x768(1).top"=dword:0000001d "WinPos1024x768(1).right"=dword:00000336 "WinPos1024x768(1).bottom"=dword:00000275 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:000001a1 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\40\Shell] "FolderType"="Videos" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000035 "WinPos1024x768(1).top"=dword:00000002 "WinPos1024x768(1).right"=dword:000003ac "WinPos1024x768(1).bottom"=dword:0000025a "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\41\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000035 "WinPos1024x768(1).top"=dword:00000002 "WinPos1024x768(1).right"=dword:000003ac "WinPos1024x768(1).bottom"=dword:0000025a "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\43\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:000001bf "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000003 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\44\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000061 "WinPos1024x768(1).top"=dword:00000018 "WinPos1024x768(1).right"=dword:00000381 "WinPos1024x768(1).bottom"=dword:00000270 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\46\Shell] "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006e "WinPos1024x768(1).top"=dword:00000012 "WinPos1024x768(1).right"=dword:0000038e "WinPos1024x768(1).bottom"=dword:0000026a "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\47\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006f "WinPos1024x768(1).top"=dword:0000000c "WinPos1024x768(1).right"=dword:0000038f "WinPos1024x768(1).bottom"=dword:00000264 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\48\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000000 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000003 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\49\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\5\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000042 "WinPos1024x768(1).top"=dword:00000003 "WinPos1024x768(1).right"=dword:00000362 "WinPos1024x768(1).bottom"=dword:0000025b "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\50\Shell] "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="Documents" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\51\Shell] "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006b "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000038b "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000003 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="PhotoAlbum" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\52\Shell] "FolderType"="MyPictures" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000a4 "WinPos1024x768(1).top"=dword:00000031 "WinPos1024x768(1).right"=dword:000003c4 "WinPos1024x768(1).bottom"=dword:00000289 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000000 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\53\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000016 "WinPos1024x768(1).top"=dword:0000001d "WinPos1024x768(1).right"=dword:00000336 "WinPos1024x768(1).bottom"=dword:00000275 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\54\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\55\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006f "WinPos1024x768(1).top"=dword:0000000c "WinPos1024x768(1).right"=dword:0000038f "WinPos1024x768(1).bottom"=dword:00000264 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000003 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\56\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000003 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\57\Shell] "FolderType"="Videos" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000008a "WinPos1024x768(1).top"=dword:00000016 "WinPos1024x768(1).right"=dword:000003aa "WinPos1024x768(1).bottom"=dword:0000026e "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\58\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000002c "WinPos1024x768(1).top"=dword:0000003a "WinPos1024x768(1).right"=dword:0000034c "WinPos1024x768(1).bottom"=dword:00000292 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\59\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000056 "WinPos1024x768(1).top"=dword:00000030 "WinPos1024x768(1).right"=dword:00000376 "WinPos1024x768(1).bottom"=dword:00000288 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\6\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000002c "WinPos1024x768(1).top"=dword:0000003a "WinPos1024x768(1).right"=dword:0000034c "WinPos1024x768(1).bottom"=dword:00000292 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:ffffffff "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\60\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000042 "WinPos1024x768(1).top"=dword:00000003 "WinPos1024x768(1).right"=dword:00000362 "WinPos1024x768(1).bottom"=dword:0000025b "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000508 "Sort"=dword:00000003 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\61\Shell] "FolderType"="MusicArtist" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000000 "WinPos1024x768(1).top"=dword:00000000 "WinPos1024x768(1).right"=dword:00000400 "WinPos1024x768(1).bottom"=dword:000002e2 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:ffffffff "Links"=dword:ffffffff "Address"=dword:ffffffff "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:ffffffff "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\62\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000003b "WinPos1024x768(1).top"=dword:00000003 "WinPos1024x768(1).right"=dword:0000035b "WinPos1024x768(1).bottom"=dword:0000025b "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:000000d5 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\63\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\64\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\65\Shell] "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006e "WinPos1024x768(1).top"=dword:00000012 "WinPos1024x768(1).right"=dword:0000038e "WinPos1024x768(1).bottom"=dword:0000026a "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="Documents" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\66\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:000011ca "Sort"=dword:00000002 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\67\Shell] "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000073 "WinPos1024x768(1).top"=dword:00000035 "WinPos1024x768(1).right"=dword:00000393 "WinPos1024x768(1).bottom"=dword:0000028d "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="PhotoAlbum" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\68\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005c "WinPos1024x768(1).top"=dword:00000001 "WinPos1024x768(1).right"=dword:000003d3 "WinPos1024x768(1).bottom"=dword:00000259 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\69\Shell] "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000074 "WinPos1024x768(1).top"=dword:00000074 "WinPos1024x768(1).right"=dword:00000361 "WinPos1024x768(1).bottom"=dword:000002ae "Rev"=dword:00000001 "WFlags"=dword:00000002 "ShowCmd"=dword:00000003 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:ffffffff "Links"=dword:ffffffff "Address"=dword:ffffffff "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:0000003d "Sort"=dword:00000003 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="PhotoAlbum" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\70\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006b "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000038b "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\71\Shell] "FolderType"="Videos" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\72\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\73\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\74\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000aa "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:00000366 "WinPos1024x768(1).bottom"=dword:00000223 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\75\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000064 "WinPos1024x768(1).top"=dword:0000001f "WinPos1024x768(1).right"=dword:000003db "WinPos1024x768(1).bottom"=dword:00000277 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:000000c4 "Sort"=dword:00000003 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\76\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000076 "WinPos1024x768(1).top"=dword:0000002d "WinPos1024x768(1).right"=dword:00000396 "WinPos1024x768(1).bottom"=dword:00000285 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\77\Shell] "FolderType"="MusicArtist" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000056 "WinPos1024x768(1).top"=dword:00000030 "WinPos1024x768(1).right"=dword:00000376 "WinPos1024x768(1).bottom"=dword:00000288 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\78\Shell] "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006b "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000038b "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:0000286e "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "FolderType"="PhotoAlbum" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\79\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000003 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "ItemPos1024x768(1)"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,85,01,00,00,fb,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\80\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffff8300 "MinPos1024x768(1).y"=dword:ffff8300 "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000005f "WinPos1024x768(1).top"=dword:00000020 "WinPos1024x768(1).right"=dword:0000037f "WinPos1024x768(1).bottom"=dword:00000278 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000002 "SortDir"=dword:00000001 "Col"=dword:00000003 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\81\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000077 "WinPos1024x768(1).top"=dword:00000053 "WinPos1024x768(1).right"=dword:00000397 "WinPos1024x768(1).bottom"=dword:000002ab "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000006 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{65F125E5-7BE1-4810-BA9D-D271C8432CE3}" [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\82\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000002c "WinPos1024x768(1).top"=dword:0000003a "WinPos1024x768(1).right"=dword:0000034c "WinPos1024x768(1).bottom"=dword:00000292 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\83\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:000000a4 "WinPos1024x768(1).top"=dword:00000080 "WinPos1024x768(1).right"=dword:000003c4 "WinPos1024x768(1).bottom"=dword:000002d8 "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\84\Shell] "FolderType"="PhotoAlbum" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:00000077 "WinPos1024x768(1).top"=dword:00000053 "WinPos1024x768(1).right"=dword:00000397 "WinPos1024x768(1).bottom"=dword:000002ab "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Vid"="{8BEBB290-52D0-11D0-B7F4-00C04FD706EC}" "Mode"=dword:00000005 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:000010fa "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:00000000 "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. [HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\Bags\9\Shell] "FolderType"="Documents" "MinPos1024x768(1).x"=dword:ffffffff "MinPos1024x768(1).y"=dword:ffffffff "MaxPos1024x768(1).x"=dword:ffffffff "MaxPos1024x768(1).y"=dword:ffffffff "WinPos1024x768(1).left"=dword:0000006e "WinPos1024x768(1).top"=dword:00000012 "WinPos1024x768(1).right"=dword:0000038e "WinPos1024x768(1).bottom"=dword:0000026a "Rev"=dword:00000001 "WFlags"=dword:00000000 "ShowCmd"=dword:00000001 "FFlags"=dword:00000001 "HotKey"=dword:00000000 "Buttons"=dword:ffffffff "Status"=dword:00000000 "Links"=dword:00000000 "Address"=dword:00000000 "Mode"=dword:00000001 "ScrollPos1024x768(1).x"=dword:00000000 "ScrollPos1024x768(1).y"=dword:00000000 "Sort"=dword:00000000 "SortDir"=dword:00000001 "Col"=dword:ffffffff "ColInfo"=hex:00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,fd,df,df,fd,0f,.. "Vid"="{0057D0E0-3573-11CF-AE69-08002B2E1262}" scanning hidden files ... scan completed successfully hidden services: 0 hidden files: 0 KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Process list by traversal of KiWaitListHead 4 - System 200 - avguard.exe 688 - avgnt.exe 704 - ctfmon.exe 740 - csrss.exe 768 - winlogon.exe 816 - services.exe 828 - lsass.exe 1000 - svchost.exe 1084 - svchost.exe 1224 - sched.exe 1248 - MsMpEng.exe 1288 - svchost.exe 1312 - dllhost.exe 1392 - Smc.exe 1556 - cmd.exe 1604 - explorer.exe 1636 - svchost.exe 2488 - wmiprvse.exe 2720 - alg.exe 3524 - taskmgr.exe 4044 - firefox.exe Total number of processes = 22 NOTE: Under WinXP, this will not show all processes. KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg) Driver/Module list by traversal of PsLoadedModuleList 804D7000 - \WINDOWS\system32\ntoskrnl.exe 806EC000 - \WINDOWS\system32\hal.dll F9F31000 - \WINDOWS\system32\KDCOM.DLL F9E41000 - \WINDOWS\system32\BOOTVID.dll F9939000 - sptd.sys F9F33000 - \WINDOWS\System32\Drivers\WMILIB.SYS F9921000 - \WINDOWS\System32\Drivers\SCSIPORT.SYS F98F2000 - ACPI.sys F98E1000 - pci.sys F9A31000 - ohci1394.sys F9A41000 - \WINDOWS\System32\DRIVERS\1394BUS.SYS F9A51000 - isapnp.sys F9FF9000 - pciide.sys F9CB1000 - \WINDOWS\System32\DRIVERS\PCIIDEX.SYS F9A61000 - MountMgr.sys F98C2000 - ftdisk.sys F9CB9000 - PartMgr.sys F9F35000 - siside.sys F9A71000 - VolSnap.sys F98AA000 - atapi.sys F9A81000 - disk.sys F9A91000 - \WINDOWS\System32\DRIVERS\CLASSPNP.SYS F988A000 - fltmgr.sys F9878000 - sr.sys F9AA1000 - PxHelp20.sys F9861000 - KSecDD.sys F97D4000 - Ntfs.sys F97A7000 - NDIS.sys F978A000 - Teefer.sys F9CC1000 - sisagp.sys F9E45000 - sisperf.sys F976F000 - Mup.sys F9AF1000 - \SystemRoot\System32\DRIVERS\intelppm.sys F95C7000 - \SystemRoot\System32\DRIVERS\nv4_mini.sys F95B3000 - \SystemRoot\System32\DRIVERS\VIDEOPRT.SYS F9BC1000 - \SystemRoot\System32\DRIVERS\nic1394.sys F9F05000 - \SystemRoot\system32\drivers\pfc.sys F9BD1000 - \SystemRoot\System32\DRIVERS\cdrom.sys F9BE1000 - \SystemRoot\System32\DRIVERS\redbook.sys F9590000 - \SystemRoot\System32\DRIVERS\ks.sys F9C01000 - \SystemRoot\System32\DRIVERS\imapi.sys F94F0000 - \SystemRoot\system32\drivers\ALCXWDM.SYS F94CC000 - \SystemRoot\system32\drivers\portcls.sys F9C11000 - \SystemRoot\system32\drivers\drmk.sys F9DB9000 - \SystemRoot\System32\DRIVERS\usbohci.sys F94A9000 - \SystemRoot\System32\DRIVERS\USBPORT.SYS F9DE9000 - \SystemRoot\System32\DRIVERS\usbehci.sys F9DF9000 - \SystemRoot\System32\DRIVERS\sisnic.sys F9415000 - \SystemRoot\System32\DRIVERS\ctxs51.sys F9DD1000 - \SystemRoot\System32\Drivers\Modem.SYS F93CB000 - \SystemRoot\System32\Drivers\ada0okgc.SYS F9D01000 - \SystemRoot\System32\DRIVERS\fdc.sys F93BA000 - \SystemRoot\System32\DRIVERS\serial.sys F972B000 - \SystemRoot\System32\DRIVERS\serenum.sys F93A6000 - \SystemRoot\System32\DRIVERS\parport.sys F9C41000 - \SystemRoot\System32\DRIVERS\i8042prt.sys F9D41000 - \SystemRoot\System32\DRIVERS\mouclass.sys F9D51000 - \SystemRoot\System32\DRIVERS\kbdclass.sys F971F000 - \SystemRoot\System32\DRIVERS\gameenum.sys FA113000 - \SystemRoot\system32\drivers\msmpu401.sys F9C51000 - \SystemRoot\system32\DRIVERS\splitcam.sys F9C61000 - \SystemRoot\system32\DRIVERS\STREAM.SYS FA120000 - \SystemRoot\System32\DRIVERS\audstub.sys F9C71000 - \SystemRoot\System32\DRIVERS\rasl2tp.sys F970F000 - \SystemRoot\System32\DRIVERS\ndistapi.sys F938F000 - \SystemRoot\System32\DRIVERS\ndiswan.sys F9C81000 - \SystemRoot\System32\DRIVERS\raspppoe.sys F9C91000 - \SystemRoot\System32\DRIVERS\raspptp.sys F9DA1000 - \SystemRoot\System32\DRIVERS\TDI.SYS F92B6000 - \SystemRoot\System32\DRIVERS\psched.sys F9CA1000 - \SystemRoot\System32\DRIVERS\msgpc.sys F9DD9000 - \SystemRoot\System32\DRIVERS\ptilink.sys F9DF1000 - \SystemRoot\System32\DRIVERS\raspti.sys F9AD1000 - \SystemRoot\System32\DRIVERS\termdd.sys F9F47000 - \SystemRoot\System32\DRIVERS\swenum.sys F925D000 - \SystemRoot\System32\DRIVERS\update.sys F9EF9000 - \SystemRoot\System32\DRIVERS\mssmbios.sys F9B11000 - \SystemRoot\System32\Drivers\NDProxy.SYS F9B21000 - \SystemRoot\System32\DRIVERS\usbhub.sys F9F53000 - \SystemRoot\System32\DRIVERS\USBD.SYS F9D29000 - \SystemRoot\System32\DRIVERS\flpydisk.sys F9F57000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS FA0FE000 - \SystemRoot\System32\Drivers\Null.SYS F3CEC000 - \SystemRoot\System32\DRIVERS\gmer.sys F9F5D000 - \SystemRoot\System32\Drivers\Beep.SYS F9D89000 - \SystemRoot\System32\drivers\vga.sys F9F61000 - \SystemRoot\System32\Drivers\mnmdd.SYS F9F65000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys F9D99000 - \SystemRoot\System32\Drivers\Msfs.SYS F9DB1000 - \SystemRoot\System32\Drivers\Npfs.SYS F9387000 - \SystemRoot\System32\DRIVERS\rasacd.sys F3CB9000 - \SystemRoot\System32\DRIVERS\ipsec.sys F3C61000 - \SystemRoot\System32\DRIVERS\tcpip.sys F9CF1000 - \SystemRoot\System32\DRIVERS\fbxusb32.sys F9B51000 - \??\C:\WINDOWS\System32\drivers\wpsdrvnt.sys F3C40000 - \SystemRoot\System32\DRIVERS\ipnat.sys F9B71000 - \SystemRoot\System32\DRIVERS\wanarp.sys F3C18000 - \SystemRoot\System32\DRIVERS\netbt.sys F9B81000 - \SystemRoot\System32\DRIVERS\arp1394.sys F3BF6000 - \SystemRoot\System32\drivers\afd.sys F9E09000 - \SystemRoot\system32\DRIVERS\ssmdrv.sys F9BA1000 - \SystemRoot\System32\Drivers\Fips.SYS F9BB1000 - \SystemRoot\system32\DRIVERS\avipbb.sys F9F6D000 - \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgio.sys F3B33000 - \SystemRoot\System32\Drivers\Fastfat.SYS F3B1B000 - \SystemRoot\System32\Drivers\dump_atapi.sys F9F7D000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS BF800000 - \SystemRoot\System32\win32k.sys F3D11000 - \SystemRoot\System32\drivers\Dxapi.sys F9D49000 - \SystemRoot\System32\watchdog.sys BF9C3000 - \SystemRoot\System32\drivers\dxg.sys FA0B6000 - \SystemRoot\System32\drivers\dxgthk.sys BF9D5000 - \SystemRoot\System32\nv4_disp.dll BFFA0000 - \SystemRoot\System32\ATMFD.DLL F376E000 - \SystemRoot\System32\DRIVERS\ndisuio.sys F36D2000 - \SystemRoot\SYSTEM32\Drivers\wg3n.sys F36C6000 - \SystemRoot\SYSTEM32\Drivers\wg4n.sys F379E000 - \SystemRoot\SYSTEM32\Drivers\wg5n.sys F3552000 - \SystemRoot\SYSTEM32\Drivers\wg6n.sys F33DD000 - \SystemRoot\system32\drivers\wdmaud.sys F3BC6000 - \SystemRoot\system32\drivers\sysaudio.sys F3B76000 - \SystemRoot\System32\Drivers\Cdfs.SYS F30F4000 - \??\C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgntflt.sys F9FED000 - \SystemRoot\System32\Drivers\ParVdm.SYS F9F5B000 - \SystemRoot\System32\Drivers\MASPINT.SYS F347A000 - \SystemRoot\System32\DRIVERS\secdrv.sys F2EEA000 - \SystemRoot\System32\DRIVERS\srv.sys F2D08000 - \SystemRoot\System32\Drivers\HTTP.sys FA099000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys Total number of drivers = 129 Liste des programmes installes Adobe Acrobat 5.0 Adobe Flash Player 9 ActiveX Adobe Flash Player Plugin Adobe Help Center 1.0 Adobe Reader 7.0.9 - Français Archiveur WinRAR Avira AntiVir PersonalEdition Classic CamStudio CamStudio 2.0 Fr CCleaner (remove only) CoreVorbis Audio Decoder (remove only) Correctif pour Lecteur Windows Media 11 (KB939683) Correctif pour Windows XP (KB914440) Correctif Windows XP - KB873333 Correctif Windows XP - KB873339 Correctif Windows XP - KB885250 Correctif Windows XP - KB885835 Correctif Windows XP - KB885836 Correctif Windows XP - KB886185 Correctif Windows XP - KB887472 Correctif Windows XP - KB888113 Correctif Windows XP - KB888302 Correctif Windows XP - KB890859 Correctif Windows XP - KB891781 Correctif Windows XP - KB893086 Digimax50 Duo Direct Show Ogg Vorbis Filter (remove only) DivX Codec 3.1alpha release EasyCleaner eMule Eraser Eraser Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP FLV Player 1.3.3 Free - Kit de connexion HijackThis 2.0.2 Hotfix for Windows Media Format 11 SDK (KB929399) Hotfix for Windows XP (KB909394) Hotfix for Windows XP (KB915865) Hotfix for Windows XP (KB926239) ImageMixer VCD2 for FinePix Informations sur votre PC J2SE Runtime Environment 5.0 Update 7 Java 2 Runtime Environment, SE v1.4.2_03 Java 6 Update 3 Lecteur Windows Media 11 Ma-Config.com plugin Macrogaming SweetIM 1.2a Microsoft Clipart Extra Microsoft Compression Client Pack 1.0 for Windows XP Microsoft Data Access Components KB870669 Microsoft Internationalized Domain Names Mitigation APIs Microsoft National Language Support Downlevel APIs Microsoft Office 97 Professional Microsoft User-Mode Driver Framework Feature Pack 1.0 Microsoft Visual C++ 2005 Redistributable MicroStaff WINASPI Mise à jour de sécurité pour Lecteur Windows Media (KB911564) Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734) Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782) Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398) Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) Mise à jour de sécurité pour Step by Step Interactive Training (KB923723) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653) Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615) Mise à jour de sécurité pour Windows XP (KB890046) Mise à jour de sécurité pour Windows XP (KB893066) Mise à jour de sécurité pour Windows XP (KB893756) Mise à jour de sécurité pour Windows XP (KB896358) Mise à jour de sécurité pour Windows XP (KB896422) Mise à jour de sécurité pour Windows XP (KB896423) Mise à jour de sécurité pour Windows XP (KB896424) Mise à jour de sécurité pour Windows XP (KB896428) Mise à jour de sécurité pour Windows XP (KB899587) Mise à jour de sécurité pour Windows XP (KB899588) Mise à jour de sécurité pour Windows XP (KB899591) Mise à jour de sécurité pour Windows XP (KB900725) Mise à jour de sécurité pour Windows XP (KB901017) Mise à jour de sécurité pour Windows XP (KB901190) Mise à jour de sécurité pour Windows XP (KB901214) Mise à jour de sécurité pour Windows XP (KB902400) Mise à jour de sécurité pour Windows XP (KB904706) Mise à jour de sécurité pour Windows XP (KB905414) Mise à jour de sécurité pour Windows XP (KB905749) Mise à jour de sécurité pour Windows XP (KB908519) Mise à jour de sécurité pour Windows XP (KB911562) Mise à jour de sécurité pour Windows XP (KB911567) Mise à jour de sécurité pour Windows XP (KB911927) Mise à jour de sécurité pour Windows XP (KB912919) Mise à jour de sécurité pour Windows XP (KB913580) Mise à jour de sécurité pour Windows XP (KB914388) Mise à jour de sécurité pour Windows XP (KB914389) Mise à jour de sécurité pour Windows XP (KB917159) Mise à jour de sécurité pour Windows XP (KB917344) Mise à jour de sécurité pour Windows XP (KB917422) Mise à jour de sécurité pour Windows XP (KB917953) Mise à jour de sécurité pour Windows XP (KB918118) Mise à jour de sécurité pour Windows XP (KB918899) Mise à jour de sécurité pour Windows XP (KB919007) Mise à jour de sécurité pour Windows XP (KB920213) Mise à jour de sécurité pour Windows XP (KB920214) Mise à jour de sécurité pour Windows XP (KB920670) Mise à jour de sécurité pour Windows XP (KB920683) Mise à jour de sécurité pour Windows XP (KB920685) Mise à jour de sécurité pour Windows XP (KB921398) Mise à jour de sécurité pour Windows XP (KB921503) Mise à jour de sécurité pour Windows XP (KB921883) Mise à jour de sécurité pour Windows XP (KB922616) Mise à jour de sécurité pour Windows XP (KB922760) Mise à jour de sécurité pour Windows XP (KB922819) Mise à jour de sécurité pour Windows XP (KB923191) Mise à jour de sécurité pour Windows XP (KB923414) Mise à jour de sécurité pour Windows XP (KB923689) Mise à jour de sécurité pour Windows XP (KB923694) Mise à jour de sécurité pour Windows XP (KB923980) Mise à jour de sécurité pour Windows XP (KB924191) Mise à jour de sécurité pour Windows XP (KB924270) Mise à jour de sécurité pour Windows XP (KB924496) Mise à jour de sécurité pour Windows XP (KB924667) Mise à jour de sécurité pour Windows XP (KB925454) Mise à jour de sécurité pour Windows XP (KB925486) Mise à jour de sécurité pour Windows XP (KB925902) Mise à jour de sécurité pour Windows XP (KB926255) Mise à jour de sécurité pour Windows XP (KB926436) Mise à jour de sécurité pour Windows XP (KB927779) Mise à jour de sécurité pour Windows XP (KB927802) Mise à jour de sécurité pour Windows XP (KB928255) Mise à jour de sécurité pour Windows XP (KB928843) Mise à jour de sécurité pour Windows XP (KB929123) Mise à jour de sécurité pour Windows XP (KB930178) Mise à jour de sécurité pour Windows XP (KB931261) Mise à jour de sécurité pour Windows XP (KB931784) Mise à jour de sécurité pour Windows XP (KB932168) Mise à jour de sécurité pour Windows XP (KB933729) Mise à jour de sécurité pour Windows XP (KB935839) Mise à jour de sécurité pour Windows XP (KB935840) Mise à jour de sécurité pour Windows XP (KB936021) Mise à jour de sécurité pour Windows XP (KB938829) Mise à jour de sécurité pour Windows XP (KB941202) Mise à jour de sécurité pour Windows XP (KB941568) Mise à jour de sécurité pour Windows XP (KB941569) Mise à jour de sécurité pour Windows XP (KB943460) Mise à jour de sécurité pour Windows XP (KB944653) Mise à jour pour Windows XP (KB898461) Mise à jour pour Windows XP (KB900485) Mise à jour pour Windows XP (KB904942) Mise à jour pour Windows XP (KB908531) Mise à jour pour Windows XP (KB910437) Mise à jour pour Windows XP (KB911280) Mise à jour pour Windows XP (KB916595) Mise à jour pour Windows XP (KB920872) Mise à jour pour Windows XP (KB922582) Mise à jour pour Windows XP (KB927891) Mise à jour pour Windows XP (KB929338) Mise à jour pour Windows XP (KB930916) Mise à jour pour Windows XP (KB931836) Mise à jour pour Windows XP (KB933360) Mise à jour pour Windows XP (KB936357) Mise à jour pour Windows XP (KB938828) Mise à jour pour Windows XP (KB942763) mks_vir - online scanner Mozilla Firefox (2.0.0.11) MSXML 4.0 SP2 (KB936181) Nero Nokia Connectivity Cable Driver Nokia Lifeblog 2.1 Nokia MTP driver Nokia N73 highlights Nokia Nseries Skin for Microsoft Windows Media Player Nokia PC Connectivity Solution Nokia PC Suite Nokia themes for your device NVIDIA Windows 2000/XP Display Drivers Panda TotalScan QuickTime RAW FILE CONVERTER LE RealPlayer Samsung e-maxManager SDP Downloader Security Update for CAPICOM (KB931906) Security Update for CAPICOM (KB931906) SiS 900 PCI Fast Ethernet Adapter Driver SLD Codec Pack SplitCam Spybot - Search & Destroy 1.4 StarOffice 5.2 SweetIM For Internet Explorer 1.0a Sygate Personal Firewall Utilitaire de sauvegarde Windows VideoLAN VLC media player 0.8.6c WebFldrs XP Windows Driver Package - Nokia Modem (06/12/2006 6.81.0.21) Windows Genuine Advantage Notifications (KB905474) Windows Genuine Advantage v1.3.0254.0 Windows Genuine Advantage Validation Tool (KB892130) Windows Genuine Advantage Validation Tool (KB892130) Windows Installer 3.1 (KB893803) Windows Internet Explorer 7 Windows Media Format 11 runtime Windows Media Format 11 runtime Windows Media Player 11 Windows XP Service Pack 2 XviD MPEG-4 Video Codec Yahoo! Extras Yahoo! Install Manager Yahoo! Internet Mail Yahoo! Messenger Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 201C-54BA Répertoire de C:\Program Files 16/12/2007 13:01 <REP> . 16/12/2007 13:01 <REP> .. 20/11/2007 03:37 <REP> Adobe 06/09/2002 16:11 <REP> Ahead 15/12/2007 23:22 <REP> AOL Security Toolbar 14/12/2007 16:45 <REP> a-squared Free 16/12/2007 13:01 <REP> Avira 10/07/2005 11:40 <REP> AviSynth 2.5 09/08/2005 14:22 <REP> CamStudio 02/12/2007 10:28 <REP> CCleaner 18/06/2005 11:01 <REP> Common Files 06/09/1999 15:15 <REP> ComPlus Applications 18/03/2007 10:58 <REP> DAEMON Tools 21/07/2007 10:08 <REP> DIFX 20/11/2007 04:20 <REP> DivX 08/12/2007 21:17 <REP> eMule 17/10/2007 09:14 <REP> Eraser 06/09/1999 15:28 <REP> EuroTool 10/07/2005 11:38 <REP> ffdshow 14/12/2007 19:14 <REP> Fichiers communs 20/11/2007 04:16 <REP> FinePixViewer 21/10/2006 09:05 <REP> FLVPlayer 05/07/2005 20:20 <REP> Free.fr 20/11/2007 04:17 <REP> FUJIFILM Digital Camera 29/09/2005 20:31 <REP> HighMAT CD Writing Wizard 12/12/2007 09:49 <REP> Internet Explorer 02/11/2007 17:52 <REP> Java 28/11/2007 15:21 <REP> ma-config.com 11/10/2007 10:17 <REP> Microsoft ActiveSync 18/08/2006 07:46 <REP> Microsoft AntiSpyware 09/10/2007 02:20 <REP> Microsoft CAPICOM 2.1.0.2 06/09/1999 15:19 <REP> microsoft frontpage 22/05/2005 16:39 <REP> Microsoft Office 30/08/2006 11:24 <REP> Movie Maker 16/12/2007 17:48 <REP> Mozilla Firefox 06/09/1999 15:14 <REP> MSN 06/09/1999 15:14 <REP> MSN Gaming Zone 30/08/2006 11:18 <REP> NetMeeting 21/07/2007 10:13 <REP> Nokia 06/09/2002 16:27 <REP> Office52 04/12/2007 18:34 <REP> Outlook Express 14/12/2007 10:22 <REP> Panda Security 14/11/2005 19:54 <REP> QuickTime 22/05/2005 15:43 <REP> Raccourcis de programmes 16/07/2005 08:42 <REP> Real 22/05/2005 18:37 <REP> Samsung 17/10/2006 10:16 <REP> SDP 06/09/1999 15:16 <REP> Services en ligne 22/05/2005 15:40 <REP> SiSLan 16/12/2007 02:27 <REP> SkanerOnline 06/07/2005 09:28 <REP> SLD Codec Pack 16/12/2006 12:55 <REP> SplitCam 01/12/2007 10:26 <REP> Spybot - Search & Destroy 22/05/2005 16:27 <REP> Sygate 08/12/2007 21:10 <REP> ToniArts 18/08/2006 11:21 <REP> Trend Micro 02/01/2007 12:01 <REP> VideoLAN 07/12/2007 13:16 <REP> Windows Defender 14/12/2007 19:15 <REP> Windows Live Toolbar 05/01/2007 17:28 <REP> Windows Media Connect 2 05/01/2007 17:34 <REP> Windows Media Player 22/05/2005 16:38 <REP> Windows Messaging 30/08/2006 11:18 <REP> Windows NT 16/01/2006 01:20 <REP> WinRAR 06/09/1999 15:19 <REP> xerox 14/11/2005 23:25 <REP> XviD 24/05/2005 09:51 <REP> Yahoo! 0 fichier(s) 0 octets 67 Rép(s) 23 867 469 824 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 201C-54BA Répertoire de C:\Program Files\fichiers communs 14/12/2007 19:14 <REP> . 14/12/2007 19:14 <REP> .. 20/11/2007 03:52 <REP> Adobe 12/06/2006 13:34 <REP> Adobe Systems Shared 01/12/2007 15:03 <REP> DAZ 31/01/2006 22:16 <REP> InstallShield 04/04/2006 13:06 <REP> Java 12/12/2007 10:02 <REP> Microsoft Shared 06/09/1999 15:16 <REP> MSSoap 21/07/2007 10:07 <REP> Nokia 06/09/1999 16:10 <REP> ODBC 21/07/2007 10:07 <REP> PCSuite 16/07/2005 08:43 <REP> Real 04/12/2007 18:34 <REP> Services 06/09/1999 16:10 <REP> SpeechEngines 10/02/2007 10:49 <REP> Symantec Shared 04/12/2007 18:34 <REP> System 16/07/2005 08:43 <REP> xing shared 0 fichier(s) 0 octets 18 Rép(s) 23 867 469 824 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 201C-54BA Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders 06/09/1999 15:25 <REP> . 06/09/1999 15:25 <REP> .. 18/05/2001 16:57 561 209 MSONSEXT.DLL 03/06/1999 13:09 122 937 MSOWS409.DLL 07/03/2001 08:00 127 033 MSOWS40c.DLL 3 fichier(s) 811 179 octets 2 Rép(s) 23 867 465 728 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 201C-54BA Répertoire de C:\Program Files\common files 18/06/2005 11:01 <REP> . 18/06/2005 11:01 <REP> .. 24/05/2005 10:36 <REP> System 0 fichier(s) 0 octets 3 Rép(s) 23 867 465 728 octets libres Le volume dans le lecteur C s'appelle BOOT Le numéro de série du volume est 201C-54BA Répertoire de C:\ c:\Documents and Settings\All Users\Application Data\{74D61F17-FFC2-41AF-96E5-1DCB0631B6D1}\EraserSetup32.exe c:\Documents and Settings\moi\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_fr_FR.exe c:\Documents and Settings\moi\Application Data\Microsoft\Installer\{BBB1528C-2F8C-4526-9C8E-699F17AF21CA}\ARPPRODUCTICON.exe c:\Documents and Settings\moi\Bureau\antivir_workstation_win7u_en_h.exe c:\Documents and Settings\moi\Bureau\ComboFix.exe c:\Documents and Settings\moi\Bureau\PrevxFixGrom.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\catchme.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\diff.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\dumphive.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\find2.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\Fport.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\grep.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\gzip.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\KProcCheck.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\LFiles.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\md5sums.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\pslist.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\sigcheck.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\streams.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\swreg.exe c:\Documents and Settings\moi\Bureau\DiagHelp\DiagHelp\tar.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\dumphive.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\exit.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\GenericRenosFix.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\HostsChk.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\Process.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\Reboot.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\restart.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\SmiUpdate.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\SrchSTS.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\swreg.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\swsc.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\swxcacls.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\unzip.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\VCCLSID.exe c:\Documents and Settings\moi\Bureau\SmitfraudFix\WS2Fix.exe c:\Documents and Settings\moi\Bureau\sreng2\SREngPS.EXE c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{32F9B748-7A54-4431-83FC-AC0BFAC94C6F}\mpengine.dll c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll c:\Documents and Settings\moi\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll c:\Documents and Settings\moi\Application Data\Microsoft\IdentityCRL\PROD\ppcrlconfig.dll c:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll c:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll c:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll c:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll ****** Fin du rapport DiagHelp Veuillez svp envoyer le fichier C:\upload_moi_NOM-P50A4G9BHCS.tar.gz a l'adresse http://upload.malekal.com

bien reçu ton MP mais pas de gds.dll en vu!

Salut! Euh je ne croit pôôô :P ^Je ne sais même pas ce que c'est :P Pour le scan d'antivir, je me rapelle avoir dis d'ignorer car il me signalais Combofix, fixfraudfix. Mais il se peut tres bien que trop pressé j'ai appuyer là ou il ne fallais pas! Je t'envoi de suite le fichier gds.dll et je fais le reste des manips A tout de suite Edit: Je n'ai pas de fichier gds.dll :P

Re Je ne sais pas lire de rapports hijackthis mais je n'aime pas ces lignes on dira l'adresse de ma redirection avant utilisation de Smidfraudfix...

J'ai téléchargé et installé Antivir à la place de AVS J'ai fait un scan en mode sans echec dont voici le rapport: AntiVir PersonalEdition Classic Report file date: dimanche 16 décembre 2007 15:22 Scanning for 972845 virus strains and unwanted programs. Licensed to: Avira AntiVir PersonalEdition Classic Serial number: 0000149996-ADJIE-0001 Platform: Windows XP Windows version: (Service Pack 2) [5.1.2600] Username: moi Computer name: NOM-P50A4G9BHCS Version information: BUILD.DAT : 270 15603 Bytes 19/09/2007 13:32:00 AVSCAN.EXE : 7.0.6.1 290856 Bytes 23/08/2007 13:16:29 AVSCAN.DLL : 7.0.6.0 49192 Bytes 16/08/2007 12:23:51 LUKE.DLL : 7.0.5.3 147496 Bytes 14/08/2007 15:32:47 LUKERES.DLL : 7.0.6.1 10280 Bytes 21/08/2007 12:35:20 ANTIVIR0.VDF : 6.40.0.0 11030528 Bytes 18/07/2007 14:27:15 ANTIVIR1.VDF : 7.0.1.95 3367424 Bytes 14/12/2007 12:08:59 ANTIVIR2.VDF : 7.0.1.96 2048 Bytes 14/12/2007 12:08:59 ANTIVIR3.VDF : 7.0.1.98 4096 Bytes 14/12/2007 12:08:59 AVEWIN32.DLL : 7.6.0.45 3084800 Bytes 16/12/2007 12:09:00 AVWINLL.DLL : 1.0.0.7 14376 Bytes 26/02/2007 10:36:26 AVPREF.DLL : 7.0.2.2 25640 Bytes 18/07/2007 07:39:17 AVREP.DLL : 7.0.0.1 155688 Bytes 16/04/2007 13:16:24 AVPACK32.DLL : 7.3.0.15 360488 Bytes 03/08/2007 08:46:00 AVREG.DLL : 7.0.1.6 30760 Bytes 18/07/2007 07:17:06 AVARKT.DLL : 1.0.0.20 278568 Bytes 28/08/2007 12:26:33 AVEVTLOG.DLL : 7.0.0.20 86056 Bytes 18/07/2007 07:10:18 NETNT.DLL : 7.0.0.0 7720 Bytes 08/03/2007 11:09:42 RCIMAGE.DLL : 7.0.1.30 2342952 Bytes 07/08/2007 12:38:13 RCTEXT.DLL : 7.0.62.0 86056 Bytes 21/08/2007 12:50:37 SQLITE3.DLL : 3.3.17.1 339968 Bytes 23/07/2007 09:37:21 Configuration settings for the scan: Jobname..........................: Complete system scan Configuration file...............: c:\program files\avira\antivir personaledition classic\sysscan.avp Logging..........................: low Primary action...................: interactive Secondary action.................: ignore Scan master boot sector..........: off Scan boot sector.................: on Boot sectors.....................: E:, Scan memory......................: on Process scan.....................: on Scan registry....................: on Search for rootkits..............: on Scan all files...................: All files Scan archives....................: on Recursion depth..................: 20 Smart extensions.................: on Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox, Macro heuristic..................: on File heuristic...................: high Deviating risk categories........: +APPL,+GAME,+JOKE,+PCK,+SPR, Start of the scan: dimanche 16 décembre 2007 15:22 Starting search for hidden objects. The driver could not be initialized. The scan of running processes will be started Scan process 'avscan.exe' - '1' Module(s) have been scanned Scan process 'avcenter.exe' - '1' Module(s) have been scanned Scan process 'avgnt.exe' - '1' Module(s) have been scanned Scan process 'ctfmon.exe' - '1' Module(s) have been scanned Scan process 'explorer.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'MsMpEng.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'svchost.exe' - '1' Module(s) have been scanned Scan process 'lsass.exe' - '1' Module(s) have been scanned Scan process 'services.exe' - '1' Module(s) have been scanned Scan process 'winlogon.exe' - '1' Module(s) have been scanned Scan process 'csrss.exe' - '1' Module(s) have been scanned Scan process 'smss.exe' - '1' Module(s) have been scanned 14 processes with 14 modules were scanned Start scanning boot sectors: Boot sector 'C:\' [NOTE] No virus was found! Boot sector 'D:\' [NOTE] No virus was found! Boot sector 'E:\' [NOTE] No virus was found! Starting to scan the registry. The registry was scanned ( '23' files ). Starting the file scan: Begin scan in 'C:\' <BOOT> C:\pagefile.sys [WARNING] The file could not be opened! C:\Documents and Settings\moi\Bureau\ComboFix.exe [0] Archive type: RAR SFX (self extracting) --> nircmd.exe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 --> nircmd.cfexe [DETECTION] Contains detection pattern of the application APPL/NirCmd.1 [WARNING] The file was ignored! C:\Documents and Settings\moi\Bureau\SmitfraudFix.exe [0] Archive type: RAR SFX (self extracting) --> SmitfraudFix\Reboot.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program --> SmitfraudFix\restart.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [WARNING] The file was ignored! C:\Documents and Settings\moi\Bureau\SmitfraudFix\Reboot.exe [DETECTION] Contains detection pattern of the SPR/Tool.Reboot.C program [WARNING] The file was ignored! C:\Documents and Settings\moi\Bureau\SmitfraudFix\restart.exe [DETECTION] Contains detection pattern of the SPR/Tool.Hardoff.A program [WARNING] The file was ignored! C:\Program Files\Panda Security\NanoScan\Engine\psnflg.dll [DETECTION] Is the Trojan horse TR/Agent.bux.1 [WARNING] The file was ignored! C:\Program Files\Panda Security\TotalScan\pskavs.dll [DETECTION] Contains detection pattern of the Windows virus W95/Blumblebee.1738 [WARNING] The file was ignored! C:\WINDOWS\gds.dll [DETECTION] Contains suspicious code HEUR/Crypted [iNFO] The file was moved to '47d83d97.qua'! C:\WINDOWS\$NtUninstallApplication Compatibility Update$\acgenral.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallApplication Compatibility Update$\aclayers.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallApplication Compatibility Update$\aclua.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallApplication Compatibility Update$\acspecfc.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallApplication Compatibility Update$\acverfyr.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallApplication Compatibility Update$\acxtrnal.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallApplication Compatibility Update$\udfs.sys [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallApplication Compatibility Update$\vbscript.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallApplication Compatibility Update$\spuninst\spuninst.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ308677$\userenv.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ308677$\spuninst\spuninst.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ312368$\syssetup.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ312368$\spuninst\spuninst.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ312370$\usbhub.sys [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ312370$\usbport.sys [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ312370$\spuninst\spuninst.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ314862$\qmgr.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ314862$\spuninst\spuninst.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ315000$\netsetup.exe [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ315000$\ssdpapi.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ315000$\ssdpsrv.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ315000$\upnp.dll [WARNING] The file could not be opened! C:\WINDOWS\$NtUninstallQ315000$\spuninst\spuninst.exe [WARNING] The file could not be opened! C:\WINDOWS\system32\drivers\sptd.sys [WARNING] The file could not be opened! Begin scan in 'D:\' <BACKUP> Begin scan in 'E:\' <RECOVER> End of the scan: dimanche 16 décembre 2007 17:16 Used time: 1:53:32 min The scan has been done completely. 5408 Scanning directories 244970 Files were scanned 8 viruses and/or unwanted programs were found 1 Files were classified as suspicious: 0 files were deleted 0 files were repaired 1 files were moved to quarantine 0 files were renamed 25 Files cannot be scanned 244962 Files not concerned 7713 Archives were scanned 31 Warnings 0 Notes Je fais un Hijackthis et te poste le log de suite! Et voici le log hijackthis Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 17:55:34, on 16/12/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16574) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Defender\MsMpEng.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Sygate\SPF\smc.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Eraser\Eraser.exe C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe C:\WINDOWS\System32\dllhost.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\telechargements\HiJackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.free.fr/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.free.fr R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [smcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [Eraser] C:\Program Files\Eraser\Eraser.exe -hide O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\System32\shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O15 - Trusted Zone: http://www.secuser.com O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/d...can_unicode.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - http://www.nanoscan.com/as/cabs/ascstubie.cab O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab O16 - DPF: {68282C51-9459-467B-95BF-3C0E89627E55} (MksSkanerOnline Class) - http://www.mks.com.pl/skaner/SkanerOnline.cab O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2005111...all/xscan53.cab O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222 O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 208.67.220.220,208.67.222.222 O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe -- End of file - 5479 bytes

Salut! Je les avais viré après lecture du rapport Panda: des fichiers vides... J'opte pour Antivir!! Je me posais la question entre AVG et Antivir et attendais de savoir ce que tu me conseillais PS: sur firefox 2.0.0.11 tu n'a pas les boutons vider supprimer Je configure Antivir et te poste un log Hijackthis

Salut Charles Ingals!! En effet ça n'a pas planté!! :P Comment ça se fait? ça m'interresserait de savoir le pourquoi du comment voici le log de panda: ;*********************************************************************************************************************************************************************************** ANALYSIS: 2007-12-15 22:47:55 PROTECTIONS: 1 MALWARE: 55 SUSPECTS: 0 ;*********************************************************************************************************************************************************************************** PROTECTIONS Description Version Active Updated ;=================================================================================================================================================================================== Active Virus Shield 6.0.0.308 Yes Yes ;=================================================================================================================================================================================== MALWARE Id Description Type Active Severity Disinfectable Disinfected Location ;=================================================================================================================================================================================== 00039204 adware/cws Adware No 0 Yes No c:\documents and settings\all users\favoris\sex and dating 00039204 adware/cws Adware No 0 Yes No c:\documents and settings\all users\favoris\spyware uninstall 00039204 adware/cws Adware No 0 Yes No c:\documents and settings\all users\favoris\online pharmacy 00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.casalemedia.com/] 00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.casalemedia.com/] 00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.casalemedia.com/] 00139060 Cookie/Casalemedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.casalemedia.com/] 00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\ouss\Application Data\Mozilla\Firefox\Profiles\5dwhb9bn.default\cookies.txt[.doubleclick.net/] 00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.doubleclick.net/] 00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.doubleclick.net/] 00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.doubleclick.net/] 00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.atdmt.com/] 00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.atdmt.com/] 00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.tradedoubler.com/] 00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.tradedoubler.com/] 00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.tradedoubler.com/] 00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.247realmedia.com/] 00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.247realmedia.com/] 00145405 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.247realmedia.com/] 00145433 Cookie/Mammamediasolutions TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.targetnet.com/] 00145453 Cookie/Bfast TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.bfast.com/] 00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.fastclick.net/] 00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.fastclick.net/] 00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.fastclick.net/] 00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.fastclick.net/] 00145457 Cookie/FastClick TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.fastclick.net/] 00145731 Cookie/Tribalfusion TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.tribalfusion.com/] 00145732 Cookie/Falkag TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.as-eu.falkag.net/] 00145732 Cookie/Falkag TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.as-eu.falkag.net/] 00145732 Cookie/Falkag TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.as-eu.falkag.net/] 00145732 Cookie/Falkag TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.as-eu.falkag.net/] 00145732 Cookie/Falkag TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.as-eu.falkag.net/] 00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.mediaplex.com/] 00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.mediaplex.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00145792 Cookie/SexList TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sexlist.com/] 00146967 Cookie/PayCounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.paycounter.com/] 00149116 Cookie/Ccbill TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.ccbill.com/] 00149116 Cookie/Ccbill TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.ccbill.com/] 00149116 Cookie/Ccbill TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.ccbill.com/] 00149116 Cookie/Ccbill TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.ccbill.com/] 00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.revenue.net/] 00159564 Cookie/WUpd TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.revenue.net/] 00167677 Cookie/WebPower TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.webpower.com/] 00167677 Cookie/WebPower TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.webpower.com/] 00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.xiti.com/] 00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.xiti.com/] 00167704 Cookie/Xiti TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.xiti.com/] 00167706 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[counter3.sextracker.com/] 00167706 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[counter3.sextracker.com/] 00167724 Cookie/HotLog TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.hotlog.ru/] 00167749 Cookie/Toplist TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.toplist.cz/] 00167763 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[counter1.sextracker.com/] 00167765 Cookie/Hitbox TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.hg1.hitbox.com/] 00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[ad.yieldmanager.com/] 00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[ad.yieldmanager.com/] 00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[ad.yieldmanager.com/] 00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[ad.yieldmanager.com/] 00168056 Cookie/YieldManager TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[ad.yieldmanager.com/] 00168057 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[counter10.sextracker.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.serving-sys.com/] 00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.serving-sys.com/] 00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.bs.serving-sys.com/] 00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.bs.serving-sys.com/] 00168095 Cookie/888 TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.888.com/] 00168095 Cookie/888 TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.888.com/] 00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.weborama.fr/] 00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Documents and Settings\ouss\Application Data\Mozilla\Firefox\Profiles\5dwhb9bn.default\cookies.txt[.weborama.fr/] 00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.weborama.fr/] 00168106 Cookie/Weborama TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.weborama.fr/] 00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adtech.de/] 00168109 Cookie/Adtech TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adtech.de/] 00168114 Cookie/onestat.com TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[stat.onestat.com/] 00168114 Cookie/onestat.com TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[stat.onestat.com/] 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.advertising.com/] 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.advertising.com/] 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.advertising.com/] 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.advertising.com/] 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.advertising.com/] 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.advertising.com/] 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.advertising.com/] 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.advertising.com/] 00169190 Cookie/Advertising TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.advertising.com/] 00169286 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sextracker.com/] 00169286 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sextracker.com/] 00169286 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sextracker.com/] 00169286 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sextracker.com/] 00169286 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sextracker.com/] 00169286 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sextracker.com/] 00169286 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.sextracker.com/] 00170087 Cookie/Hbmediapro TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adopt.hbmediapro.com/] 00170087 Cookie/Hbmediapro TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adopt.hbmediapro.com/] 00170554 Cookie/Overture TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.overture.com/] 00170556 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.realmedia.com/] 00170556 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.realmedia.com/] 00170556 Cookie/RealMedia TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.realmedia.com/] 00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.zedo.com/] 00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.zedo.com/] 00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.zedo.com/] 00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.zedo.com/] 00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.zedo.com/] 00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.zedo.com/] 00172221 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.zedo.com/] 00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.bluestreak.com/] 00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.bluestreak.com/] 00173520 Cookie/Bluestreak TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.bluestreak.com/] 00173992 Cookie/Zedo TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[c5.zedo.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00175950 Cookie/cs.sexcounter TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.cs.sexcounter.com/] 00178411 Spyware/GDomainSpy Spyware No 0 Yes No C:\WINDOWS\gds.dll 00180153 Cookie/Sextracker TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[counter2.sextracker.com/] 00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adrevolver.com/] 00184846 Cookie/Adrevolver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adrevolver.com/] 00187950 Cookie/bravenetA TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.bravenet.com/] 00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adultfriendfinder.com/] 00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adultfriendfinder.com/] 00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adultfriendfinder.com/] 00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adultfriendfinder.com/] 00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adultfriendfinder.com/] 00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adultfriendfinder.com/] 00191644 Cookie/adultfriendfinder TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adultfriendfinder.com/] 00199984 Cookie/Searchportal TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[searchportal.information.com/] 00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.adviva.net/] 00207936 Cookie/Adviva TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.adviva.net/] 00262025 Cookie/ErrorSafe TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.errorsafe.com/] 00262025 Cookie/ErrorSafe TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.errorsafe.com/] 00262025 Cookie/ErrorSafe TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.errorsafe.com/] 00262025 Cookie/ErrorSafe TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.errorsafe.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Cookies\moi@smartadserver[1].txt 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\ouss\Application Data\Mozilla\Firefox\Profiles\5dwhb9bn.default\cookies.txt[.smartadserver.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.smartadserver.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.smartadserver.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.smartadserver.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.smartadserver.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.smartadserver.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies.txt[.smartadserver.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.smartadserver.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.smartadserver.com/] 00273339 Cookie/Smartadserver TrackingCookie No 0 Yes No C:\Documents and Settings\ouss.NOM-P50A4G9BHCS\Application Data\Mozilla\Firefox\Profiles\f9uhcdcr.default\cookies.txt[.smartadserver.com/] 00296582 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[www.drivecleaner.com/] 00296583 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[stats.drivecleaner.com/] 00296583 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[stats.drivecleaner.com/] 00296583 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[stats.drivecleaner.com/] 00296583 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[stats.drivecleaner.com/] 00296584 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.drivecleaner.com/] 00296584 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.drivecleaner.com/] 00296584 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.drivecleaner.com/] 00296584 Cookie/DriveCleaner TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.drivecleaner.com/] 00549760 Adware/ActiveSearch Adware No 0 Yes No C:\Program Files\AOL Security Toolbar\tbuE\tbhelper.dll 00549760 Adware/ActiveSearch Adware No 0 No No C:\telechargements\avs.msi[unk_0061][tbhelper.dll] 00549760 Adware/ActiveSearch Adware No 0 No No C:\WINDOWS\Installer\2d65f8.msi[unk_0032][tbhelper.dll] 00549760 Adware/ActiveSearch Adware No 0 Yes No C:\Program Files\AOL Security Toolbar\tbhelper.dll 01262593 Application/NirCmd.A HackTools No 0 Yes No C:\WINDOWS\NirCmd.exe 01262593 Application/NirCmd.A HackTools No 0 No No C:\Documents and Settings\moi\Bureau\ComboFix.exe[nircmd.cfexe] 01262593 Application/NirCmd.A HackTools No 0 No No C:\Documents and Settings\moi\Bureau\ComboFix.exe[nircmd.exe] 01606636 Cookie/Adserver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adserver.easyad.info/] 01606636 Cookie/Adserver TrackingCookie No 0 Yes No C:\Documents and Settings\moi\Application Data\Mozilla\Firefox\Profiles\p530sy3y.default\cookies-1.txt[.adserver.easyad.info/] ;=================================================================================================================================================================================== SUSPECTS Location ;=================================================================================================================================================================================== ;===================================================================================================================================================================================