Try google ""HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum" instead of ""HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY" and you will found Microsoft website give official info about the key. Yes, the detail is also techie to me but i get the idea it is something about "driver"
Actually, the exact key "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_UNLOCKERDRIVER5" was already verified by a programmer, redllar in here.
Everybody know Nirsof, right? Now, lets say i wish to compare nirsoft OpenedFilesView with Unlocker. Reason? Both have same objective and falls under same software category: to solve file that is locked by the system. They are similar. If you read from nirsoft OpenedFilesView website, these are the interesting points that are more understandable by amateur like meHmmm, that looks a driver key that only gets created by the system during a driver install, and the system goes into kernel mode,
After filtering non-file handles, it uses a temporary device driver - NirSoftOpenedFilesDriver.sys for reading the information about each handle from the kernel memory
My objective listing all the possible information regarding about the legacy key is:This device driver is automatically unloaded from the system when you exit from OpenedFilesView utility
-Unlocker should be considered not stealth unlike OpenedFilesView
-Not all application require driver to be installed in order to run. I really feel that -.- making a wrong statement