Hello Peter, Saturday, August 23, 2008, 23:07:07, you wrote:
>>SetValue HKLM\SOFTWARE\Microsoft\Cryptography\RNG\Seed >>CreateKey HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User >>Shell Folders >>CreateKey HKLM\System\CurrentControlSet\Services\Tcpip\Parameters >>Maybe they are originated by the OS. Not sure. I have filtered the logging >>for "voyager.exe" only. Guess you may want to have a look at it ... Thank you for using regmon. I think that this registry access is originated by OS, since I can't find them in the program code. -- Best regards, Maxim Masiutin Ritlabs SRL http://www.ritlabs.com/ ________________________________________________________ Current beta is 4.0.28.4 | 'Using TBBETA' information: http://www.silverstones.com/thebat/TBUDLInfo.html
