This appendix describes OEAT command-line parameters and the locations where OEAT searches for add-ins and applications.
Folders scanned:
%programfiles%\Microsoft Office\Office9\Xlstart
%programfiles%\Microsoft Office\Office10\Xlstart
%programfiles%\Microsoft Office\Office11\Xlstart
%programfiles%\Microsoft Office\Office12\Xlstart
%programfiles%\Microsoft Office\Office9\STARTUP
%programfiles%\Microsoft Office\Office10\STARTUP
%programfiles%\Microsoft Office\Office11\STARTUP
%programfiles%\Microsoft Office\Office12\STARTUP
%programfiles%\Microsoft Office\Office14\STARTUP
%appdata%\Microsoft\Excel\XLSTART
%appdata%\Microsoft\Word\STARTUP
%appdata%\Microsoft\AddIns
Extensions discovered within the scanned folders:
PowerPoint: ppa, ppam
Excel: xla, xlm, xll, xlam
Word: dot, dotm, .wll
Office: .dll
Registry locations scanned:
PowerPoint:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Office\PowerPoint\Addins
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\PowerPoint\AddIns
HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\PowerPoint\AddIns
HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\PowerPoint\AddIns
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\PowerPoint\Addins
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\PowerPoint\Addins
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\PowerPoint\Addins
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\9.0\PowerPoint\AddIns
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\10.0\PowerPoint\AddIns
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\PowerPoint\AddIns
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\PowerPoint\Addins
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\14.0\PowerPoint\Addins
Outlook:
HKEY_CURRENT_USER\Software\Microsoft\Office\Outlook\Addins
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Outlook\Addins
HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Outlook\Addins
HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Outlook\Addins
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Addins
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Addins
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\9.0\Outlook\Addins
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\10.0\Outlook\Addins
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\11.0\Outlook\Addins
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\12.0\Outlook\Addins
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\14.0\Outlook\Addins
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins
Excel:
HKEY_CURRENT_USER\Software\Microsoft\Office\Excel\Addins\
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Excel\Add-in Manager
HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Excel\Add-in Manager
HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Excel\Add-in Manager
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Add-in Manager
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Add-in Manager
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Excel\Addins\
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Excel\Options::OPEN#
HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Excel\Options::OPEN#
HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Excel\Options::OPEN#
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Excel\Options::OPEN#
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Excel\Options::OPEN#
Word:
HKEY_CURRENT_USER\Software\Microsoft\Office\Word\Addins\
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Word\Add-ins
HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Word\Add-ins
HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Word\Add-ins
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Word\Add-ins
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Add-ins
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\Word\Addins\
HKEY_CURRENT_USER\Software\Microsoft\Office\9.0\Word\Options::STARTUP-PATH
HKEY_CURRENT_USER\Software\Microsoft\Office\10.0\Word\Options::STARTUP-PATH
HKEY_CURRENT_USER\Software\Microsoft\Office\11.0\Word\Options::STARTUP-PATH
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Word\Options::STARTUP-PATH
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Options::STARTUP-PATH
Registry keys monitored during passive scan:
{00024500-0000-0000-C000-000000000046}
{91493441-5A91-11CF-8700-00AA0060263B}
{000209FF-0000-0000-C000-000000000046}
{0006F03A-0000-0000-C000-000000000046}