\Microsoft\office\shortcut bar\quickshelf\address builder.lnk
\Microsoft\office\shortcut bar\quickshelf\all books contents.lnk
\Microsoft\office\shortcut bar\quickshelf\all books find.lnk
\Microsoft\office\shortcut bar\quickshelf\atlas contents.lnk
\Microsoft\office\shortcut bar\quickshelf\atlas find.lnk
\Microsoft\office\shortcut bar\quickshelf\chronology contents.lnk
\Microsoft\office\shortcut bar\quickshelf\chronology find.lnk
\Microsoft\office\shortcut bar\quickshelf\dictionary contents.lnk
\Microsoft\office\shortcut bar\quickshelf\dictionary find.lnk
\Microsoft\office\shortcut bar\quickshelf\encyclopedia contents.lnk
\Microsoft\office\shortcut bar\quickshelf\encyclopedia find.lnk
\Microsoft\office\shortcut bar\quickshelf\quotations contents.lnk
\Microsoft\office\shortcut bar\quickshelf\quotations find.lnk
\Microsoft\office\shortcut bar\quickshelf\thesaurus contents.lnk
\Microsoft\office\shortcut bar\quickshelf\thesaurus find.lnk

[RISKY, EXCEL97] "Microsoft Excel 97"
HKCU\Software\Microsoft\Office\8.0\Excel
HKCU\Software\Microsoft\Office\8.0\Query
HKLM\Software\Microsoft\Office\8.0\Excel
HKLM\Software\Microsoft\Office\8.0\New User Settings\Excel

[RISKY, EXCEL97, EXCEL9] "DataMap"
HKCU\Software\Microsoft\Office\8.0\Microsoft Map
MSAPPS9XDIR\datamap\datains8.hlp
\datamap\diintl.dll
\datamap\dmintl.dll
\datamap\dmtmdl.dll
\datamap\dmtmintl.dll
\datamap\mapcat8.hlp
\datamap\mapxpres.url
\datamap\miwww.url
\datamap\msmap.exe
\datamap\msmap.pen
\datamap\msmap.srg
\datamap\msmap.tlb
\datamap\msmap8.cnt
\datamap\msmap8.hlp
\datamap\vbamap8.cnt
\datamap\vbamap8.ftg
\datamap\vbamap8.gid
\datamap\vbamap8.hlp

[RISKY, EXCEL97, MSQUERY97] "Microsoft Office 97 Query"
HKCU\Software\Microsoft\Office\8.0\Query

[RISKY, EXCEL97, POWERPOINT97, WORD97] "Microsoft Office 97"
HKCU\software\microsoft\microsoft reference\bookshelf\96l
HKLM\software\microsoft\microsoft reference\bookshelf\96l
HKLM\software\microsoft\reference titles\bookshelfl
HKLM\software\microsoft\windows\currentversion\app paths\bs96se.exe
OFFICEROOT97DIR\aamstp\app\bksread.txt
\aamstp\app\bs96se.exe
\aamstp\app\bs96se.fts
\aamstp\app\bs96se.gid
\aamstp\app\bs96sp32.dll
\aamstp\app\bsmmplyr.exe
\aamstp\app\bssp2_en.lex
\aamstp\app\deco_32.dll
\aamstp\app\mbb.dll
\aamstp\app\Microsoft Bookshelf Basics.lnk
\aamstp\app\mscreate.dir
\aamstp\app\subwiz.dll
\aamstp\app\tv32dcmp.dll
\aamstp\bs96se.srg
\aamstp\mscreate.dir
\Microsoft Bookshelf Basics.lnk
SYSMENUPROGRAMSDIR\Microsoft Reference\Microsoft Bookshelf Basics.lnk

[RISKY, FONTS94] "Microsoft Office 4.x"
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Arial Narrow (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Arial Narrow Bold (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Arial Narrow Bold Italic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Arial Narrow Italic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Century Gothic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Century Gothic Bold (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Century Gothic Bold Italic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Century Gothic Italic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Monotype Corsiva (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Monotype Sorts (TrueType)
WIN.INI, fonts, Arial Narrow (TrueType)
WIN.INI, fonts, Arial Narrow Bold (TrueType)
WIN.INI, fonts, Arial Narrow Bold Italic (TrueType)
WIN.INI, fonts, Arial Narrow Italic (TrueType)
WIN.INI, fonts, Monotype Corsiva (TrueType)
WIN.INI, fonts, Monotype Sorts (TrueType)
WIN.INI, fonts, Symbol (True Type)
WIN.INI, fontsubstitutes, MT Symbol
WINDIR\fonts\arialn.ttf
\fonts\arialnb.ttf
\fonts\arialnbi.ttf
\fonts\arialni.ttf
\fonts\mtcorsva.ttf

[RISKY, FONTS94, FONTS95] "Microsoft Office 4.x or 95"
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Algerian (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Arial Rounded MT Bold (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Bookman Old Style (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Bookman Old Style Bold (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Bookman Old Style Bold Italic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Bookman Old Style Italic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Braggadocio (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Britannic Bold (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Brush Script MT Italic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Century Schoolbook (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Century Schoolbook Bold (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Century Schoolbook Bold Italic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Century Schoolbook Italic (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Colonna MT (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Desdemona (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Footlight MT Light (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Kino MT (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Matura MT Script Capitals (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\MS LineDraw (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\MT Extra (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Playbill (TrueType)
HKLM\Software\Microsoft\Windows\CurrentVersion\Fonts\Wide Latin (TrueType)
WIN.INI, fonts, Algerian (TrueType)
WIN.INI, fonts, Arial Rounded MT Bold (TrueType)
WIN.INI, fonts, Bookman Old Style (TrueType)
WIN.INI, fonts, Bookman Old Style Bold (TrueType)
WIN.INI, fonts, Bookman Old Style Bold Italic (TrueType)
WIN.INI, fonts, Bookman Old Style Italic (TrueType)
WIN.INI, fonts, Bookshelf Symbol 1 (TrueType)
WIN.INI, fonts, Bookshelf Symbol 2 (TrueType)
WIN.INI, fonts, Bookshelf Symbol 3 (TrueType)
WIN.INI, fonts, Braggadocio (TrueType)
WIN.INI, fonts, Britannic Bold (TrueType)
WIN.INI, fonts, Brush Script MT Italic (TrueType)
WIN.INI, fonts, Century Schoolbook (TrueType)
WIN.INI, fonts, Century Schoolbook Bold (TrueType)
WIN.INI, fonts, Century Schoolbook Bold Italic (TrueType)
WIN.INI, fonts, Century Schoolbook Italic (TrueType)
WIN.INI, fonts, Colonna MT (TrueType)
WIN.INI, fonts, Desdemona (TrueType)
WIN.INI, fonts, Footlight MT Light (TrueType)
WIN.INI, fonts, Kino MT (TrueType)
WIN.INI, fonts, Matura MT Script Capitals (TrueType)
WIN.INI, fonts, MS LineDraw (TrueType)
WIN.INI, fonts, MT Extra (TrueType)
WIN.INI, fonts, Playbill (TrueType)
WIN.INI, fonts, Wide Latin (TrueType)
WINDIR\fonts\alger.ttf
\fonts\antqua.ttf
\fonts\arlrdbd.ttf
\fonts\bookos.ttf
\fonts\bookosb.ttf
\fonts\bookosbi.ttf
\fonts\bookosi.ttf
\fonts\bragga.ttf
\fonts\britanic.ttf
\fonts\brushsci.ttf
\fonts\colonna.ttf
\fonts\desdemon.ttf
\fonts\ftltlt.ttf
\fonts\kino.ttf
\fonts\latinwd.ttf
\fonts\linedraw.ttf
\fonts\maturasc.ttf
\fonts\mtextra.ttf
\fonts\playbill.ttf
\fonts\schlbk.ttf
\fonts\schlbkb.ttf
\fonts\schlbkbi.ttf
\fonts\schlbki.ttf

[RISKY, FONTS95] "Microsoft Office 95"
WIN.INI, fontsubstitutes, MT Symbol
WINDIR\fonts\gara.ttf
\fonts\garabd.ttf
\fonts\garait.ttf
\fonts\hatten.ttf
\fonts\mapsym.ttf
\fonts\mtsorts.ttf

[RISKY, FONTS95, FONTS97] "Microsoft Office"
WINDIR\fonts\bssym1.ttf
\fonts\bssym2.ttf
\fonts\bssym3.ttf

[RISKY, FRONTPAGE1X] "Microsoft FrontPage 1.1"
FRONTPAGE1XDIR\_vti_bin\_vti_adm\admin.exe
\_vti_bin\_vti_aut\author.exe
\_vti_bin\shtml.exe
\bin\fpnetwrk.cnt
\bin\fpnetwrk.hlp
\bin\fpserver.exe
\bin\fpsrvadm.exe
\bin\htimage.exe
\bin\imagemap.exe
\bin\vhttpd32.exe
\servsupp\buglist.htm
\servsupp\bugrep.htm
\servsupp\custsupp.inf
\servsupp\cusuaftr.htm
\servsupp\cusuahdr.htm
\servsupp\cusucfrm.htm
\servsupp\cusufoot.htm
\servsupp\cusuhead.htm
\servsupp\cusupost.htm
\servsupp\cususrch.htm
\servsupp\cusutoc.htm
\servsupp\discuss.htm
\servsupp\download.htm
\servsupp\faq.htm
\servsupp\feedback.htm
\servsupp\footer.htm
\servsupp\header.htm
\servsupp\index.htm
\servsupp\search.htm
\servsupp\servers.cnf
\servsupp\suggest.htm
\servsupp\tn-001.htm
\servsupp\vt11nscp.dll
\servsupp\vt11webs.dll
\servsupp\whatsnew.htm
SHAREDDLL=SYSDIR\VT11TXT.DLL
SHAREDDLL=SYSDIR\VT11WEL.DLL
SYSDIR\vt11htp.dll
\vt11tl.dll
\vt11txt.dll
\vt11utl.dll
\vt11wel.dll

[RISKY, FRONTPAGE97] "Microsoft FrontPage 97"
FRONTPAGE97DIR\bin\_vti_inf.html
\bin\fp20wec.dll
\bin\fpexedll.dll
\bin\fpnetwrk.cnt
\bin\fpnetwrk.hlp
\bin\fpserver.exe
\bin\fpsrvadm.exe
\bin\fpsrvwin.cnt
\bin\fpsrvwin.exe
\bin\fpsrvwin.hlp
\bin\htimage.exe
\bin\imagemap.exe
\bin\postinfo.html
\bin\vhttpd32.exe
\FrontPage Server Administrator.lnk

[RISKY, FRONTPAGE98] "Microsoft FrontPage 98"
FRONTPAGE98DIR\bin\fpnetwrk.cnt
\bin\fpnetwrk.hlp
\bin\vhttpd32.exe
\FrontPage Server Administrator.lnk

[RISKY, GRAPHFILTER94] "Microsoft Office 4.x"
MSAPPS94DIR\grphflt\adimport.flt
\grphflt\bmpimp.flt
\grphflt\cdrimp.flt
\grphflt\cgmimp.flt
\grphflt\drwimp.flt
\grphflt\dxfimp.flt
\grphflt\epsimp.flt
\grphflt\gifimp.flt
\grphflt\hpglimp.flt
\grphflt\iffbmp.dll
\grphflt\iffgif.dll
\grphflt\iffjpeg.dll
\grphflt\iffpcd.dll
\grphflt\iffpcx.dll
\grphflt\ifftga.dll
\grphflt\ifftiff.dll
\grphflt\jpegimp.flt
\grphflt\lotusimp.flt
\grphflt\ms.cgm
\grphflt\ms.drw
\grphflt\ms.eps
\grphflt\ms.gif
\grphflt\ms.pct
\grphflt\ms.pcx
\grphflt\ms.tif
\grphflt\ms.wpg
\grphflt\pcdimp.flt
\grphflt\pcximp.flt
\grphflt\pictimp.flt
\grphflt\tgaimp.flt
\grphflt\tiffimp.flt
\grphflt\wmfimp.flt
\grphflt\wpgexp.flt
\grphflt\wpgimp.flt
WIN.INI, MS Graphic Import Filters, AutoCAD Format 2-D(.DXF)
WIN.INI, MS Graphic Import Filters, AutoCAD Plot File(.ADI)
WIN.INI, MS Graphic Import Filters, CompuServe GIF(.GIF)
WIN.INI, MS Graphic Import Filters, Computer Graphics Metafile(.CGM)
WIN.INI, MS Graphic Import Filters, Corel Draw(.CDR)
WIN.INI, MS Graphic Import Filters, DrawPerfect(.WPG)
WIN.INI, MS Graphic Import Filters, Encapsulated PostScript(.EPS)
WIN.INI, MS Graphic Import Filters, HP Graphic Language(.HGL)
WIN.INI, MS Graphic Import Filters, HP Plotter Print File(.PLT)
WIN.INI, MS Graphic Import Filters, JPEG(.JPG)
WIN.INI, MS Graphic Import Filters, Kodak Photo CD(.PCD)
WIN.INI, MS Graphic Import Filters, Lotus 1-2-3 Graphics(.PIC)
WIN.INI, MS Graphic Import Filters, Macintosh PICT(.PCT)
WIN.INI, MS Graphic Import Filters, Micrografx Designer/Draw(.DRW)
WIN.INI, MS Graphic Import Filters, PC Paintbrush(.PCX)
WIN.INI, MS Graphic Import Filters, Tagged Image Format(.TIF)
WIN.INI, MS Graphic Import Filters, Targa(.TGA)
WIN.INI, MS Graphic Import Filters, Windows Bitmap(.BMP)
WIN.INI, MS Graphic Import Filters, Windows DIB(.DIB)
WIN.INI, MS Graphic Import Filters, Windows Metafile(.WMF)
WIN.INI, msapps, GRPHFLT

[RISKY, GRPHFLT95] "Microsoft Office 95"
HKLM\Software\Microsoft\Shared Tools\CDR
HKLM\Software\Microsoft\Shared Tools\CGM
HKLM\Software\Microsoft\Shared Tools\DRW
HKLM\Software\Microsoft\Shared Tools\DXF
HKLM\Software\Microsoft\Shared Tools\EPS
HKLM\Software\Microsoft\Shared Tools\GIF
HKLM\Software\Microsoft\Shared Tools\Graphics Filters
HKLM\Software\Microsoft\Shared Tools\HPGL
HKLM\Software\Microsoft\Shared Tools\JPEG
HKLM\Software\Microsoft\Shared Tools\Kodak Photo CD Filter
HKLM\Software\Microsoft\Shared Tools\MSBiff
HKLM\Software\Microsoft\Shared Tools\MSWordDOS
HKLM\Software\Microsoft\Shared Tools\PCX
HKLM\Software\Microsoft\Shared Tools\PICT
HKLM\Software\Microsoft\Shared Tools\RFTDCA
HKLM\Software\Microsoft\Shared Tools\TGA
HKLM\Software\Microsoft\Shared Tools\TIFF
HKLM\Software\Microsoft\Shared Tools\WindowsDIB
HKLM\Software\Microsoft\Shared Tools\WindowsMetafile
HKLM\Software\Microsoft\Shared Tools\WPG
MSAPPS9XDIR\grphflt\bmpimp32.flt
\grphflt\cdrimp32.flt
\grphflt\cgmimp32.flt
\grphflt\drwimp32.flt
\grphflt\dxfimp32.flt
\grphflt\epsimp32.flt
\grphflt\gifimp32.flt
\grphflt\hpglim32.flt
\grphflt\jpegim32.flt
\grphflt\ms.cgm
\grphflt\ms.drw
\grphflt\ms.eps
\grphflt\ms.gif
\grphflt\ms.pct
\grphflt\ms.pcx
\grphflt\ms.tif
\grphflt\ms.wpg
\grphflt\msbmp32.dll
\grphflt\msgif32.dll
\grphflt\msjpeg32.dll
\grphflt\mspcd32.dll
\grphflt\mspcx32.dll
\grphflt\mstga32.dll
\grphflt\mstiff32.dll
\grphflt\pcdimp32.flt
\grphflt\pcximp32.flt
\grphflt\pictim32.flt
\grphflt\tgaimp32.flt
\grphflt\tiffim32.flt
\grphflt\wmfimp32.flt
\grphflt\wpgexp32.flt
\grphflt\wpgimp32.flt

[RISKY, GRPHFLT97] "Microsoft Office 97"
MSAPPS9XDIR\grphflt\BMPIMP32.FLT
\grphflt\CDRIMP32.FLT
\grphflt\CGMIMP32.CFG
\grphflt\CGMIMP32.FLT
\grphflt\CGMIMP32.FNT
\grphflt\CGMIMP32.HLP
\grphflt\DRWIMP32.FLT
\grphflt\DXFIMP32.FLT
\grphflt\EMFIMP32.FLT
\grphflt\EPSIMP32.FLT
\grphflt\GIFIMP32.FLT
\grphflt\JPEGIM32.FLT
\grphflt\MS.BMP
\grphflt\MS.CDR
\grphflt\MS.CGM
\grphflt\MS.DRW
\grphflt\MS.DXF
\grphflt\MS.EMF
\grphflt\MS.EPS
\grphflt\MS.GIF
\grphflt\MS.JPG
\grphflt\MS.PCT
\grphflt\MS.PCX
\grphflt\MS.PNG
\grphflt\MS.TGA
\grphflt\MS.TIF
\grphflt\MS.WMF
\grphflt\MS.WPG
\grphflt\MSCREATE.DIR
\grphflt\PCDIMP32.FLT
\grphflt\PCXIMP32.FLT
\grphflt\PICTIM32.FLT
\grphflt\PNG32.FLT
\grphflt\TGAIMP32.FLT
\grphflt\TIFFIM32.FLT
\grphflt\WMFIMP32.FLT
\grphflt\WPGEXP32.FLT
\grphflt\WPGIMP32.FLT

[RISKY, IMAGER95, PHOTOED97] "Microsoft Imager 95, PhotoEditor"
HKCR\.dib
HKCR\.pcd
HKCR\.rle
HKCR\.tga

[RISKY, MSINFO9] "Msinfo"
MSAPPS9XDIR\Msinfo\MSIOFF9.MOF
\Msinfo\MSIOFF9.OCX
\Msinfo\OFFPROV.EXE
\Msinfo\OFFPRVPS.DLL

[RISKY, OUTLOOK97] "Microsoft Outlook"
HKCR\CLSID\{6adb6873-aab7-11d0-85ca-00c04fd85ab4}
HKCR\CLSID\{9492b50c-a783-11d0-85c7-00c04fd85ab4}
HKCR\CLSID\{9492b50f-a783-11d0-85c7-00c04fd85ab4}
HKCR\CLSID\{9492b512-a783-11d0-85c7-00c04fd85ab4}
HKCR\CLSID\{9492b517-a783-11d0-85c7-00c04fd85ab4}
HKCR\CLSID\{9492b51a-a783-11d0-85c7-00c04fd85ab4}
HKCR\CLSID\{9492b527-a783-11d0-85c