offline example e.g. from booted winpe:

reg load HKLM\TEMPSOFT "driveletter:\windows\system32\config\SOFWARE"

reg add "HKLM\TEMPSOFT\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop" /f /v "Default Toolbars" /t REG_BINARY /d 1100000000000000

reg unload HKLM\TEMPSOFT