Look for the same process accessing all those registry keys in a short period of time. In particular, take note of additions that include TreatAs and/or ScriptletURL keys. In a...