%windir%\system32\wbem\* [*] %windir%\sysWow64\wbem\* [*] HKLM\Software\Microsoft\WBEM\CIMOM [Autorecover MOFs] HKLM\Software\Microsoft\WBEM\CIMOM\SecuredHostProviders [*] HKLM\Software\Microsoft\WBEM\CIMOM\CompatibleHostProviders [*] HKLM\Software\Microsoft\WBEM\CIMOM [DefaultSecuredHost] HKLM\Software\Microsoft\WBEM\CIMOM [AutoRestoreEnabled] HKLM\Software\Wow6432Node\Microsoft\WBEM\CIMOM\SecuredHostProviders [*] HKLM\Software\Wow6432Node\Microsoft\WBEM\CIMOM\CompatibleHostProviders [*] HKLM\Software\Wow6432Node\Microsoft\WBEM\CIMOM [DefaultSecuredHost] %windir%\system32\wbem\AutoRecover\* [*] %windir%\system32\wbem\logs [*] %windir%\system32\wbem\Repository [*] %windir%\system32\wbem\xml [*] %windir%\sysWow64\wbem\AutoRecover\* [*] %windir%\sysWow64\wbem\logs [*] %windir%\sysWow64\wbem\Repository [*] %windir%\sysWow64\wbem\xml [*]