drop hkcu and hklm classes registry exports · cross-reference clsid registrations · detect active com hijacks · csv export · runs locally
HKCU Software\\Classes
drop HKCU classes .reg
or click
HKLM Software\\Classes
drop HKLM classes .reg
or click
export both hives to compare CLSIDs present in HKCU and HKLM (intersection = active hijack)
drop HKCU and HKLM Software\Classes .reg exports