Dunno. But if it's in the registry then use RegMon.
May I ask what you're intending to do with it? Turning off the warning sounds very suspicious