You could use some of sysinternals tools (regmon and filemon in particular) to monitor and record any file and registry access during to time when the key is written. http://www.sysinternals.com/ It might be possible to find the location from that. But, as someone else pointed out, the keys are probably machine specific, so it still may not do you any good.
-- Jim Wright Wright Business Solutions [EMAIL PROTECTED] 919-417-2257 -- TriLUG mailing list : http://www.trilug.org/mailman/listinfo/trilug TriLUG Organizational FAQ : http://trilug.org/faq/ TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
