[TriLUG] machine comparing... possibly OT

[Jim Wright]

You could use some of sysinternals tools (regmon and filemon in
particular) to monitor and record any file and registry access during
to time when the key is written.
http://www.sysinternals.com/
It might be possible to find the location from that.  But, as someone
else pointed out, the keys are probably machine specific, so it still
may not do you any good.

-- 
Jim Wright
Wright Business Solutions
wrightjim at gmail.com
919-417-2257