TROJ_DROPPER.OCG


 ALIASES:

TrojanDropper:MSIL/Agent.A (Microsoft); Infostealer.Gampass (Symantec); PAK:UPX, Virus.Win32.Sality.l (Kaspersky); Backdoor.Win32.Rbot.mm (v) (Sunbelt)

 PLATFORM:

Windows 2000, Windows XP, Windows Server 2003

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

  TECHNICAL DETAILS

File Size:

2,464,768 bytes

File Type:

EXE

Memory Resident:

No

Initial Samples Received Date:

16 Oct 2012

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Trojan creates the following folders:

  • %User Profile%\Microsoft\HTML Help

(Note: %User Profile% is the current user's profile folder, which is usually C:\Windows\Profiles\{user name} on Windows 98 and ME, C:\WINNT\Profiles\{user name} on Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.)

Other System Modifications

This Trojan adds the following registry keys:

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions

It adds the following registry entries:

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FriendlyName = "Default MidiOut Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FilterData = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
MidiOutId = "ffffffff"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FriendlyName = "Default DirectSound Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FilterData = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
DSGuid = "{00000000-0000-0000-0000-000000000000}"

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache
0 = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
MetadataRetrieval = "3"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SendUserGUID = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SilentAcquisition = "1"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
UsageTracking = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
DisableMRU = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
DesktopShortcut = "yes"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
QuickLaunchShortcut = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\WINDOW~2\wmplayer.exe = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\Windows Media Player\wmplayer.exe = "Yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
UserApprovedOwning = "yes"

It modifies the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer
MP2.SaveDir = "%Program Files%\Windows Media Player"

(Note: The default value data of the said registry entry is %Program Files%\Windows Media Player.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AcceptedPrivacyStatement = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Action = "@wmploc.dll,-6503"

(Note: The default value data of the said registry entry is @wmploc.dll,-6503.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeProgID = "WMP.AudioCD"

(Note: The default value data of the said registry entry is WMP.AudioCD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeVerb = "play"

(Note: The default value data of the said registry entry is play.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Action = "@wmploc.dll,-6506"

(Note: The default value data of the said registry entry is @wmploc.dll,-6506.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeProgID = "WMP.RipCD"

(Note: The default value data of the said registry entry is WMP.RipCD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeVerb = "Rip"

(Note: The default value data of the said registry entry is Rip.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Action = "@wmploc.dll,-6505"

(Note: The default value data of the said registry entry is @wmploc.dll,-6505.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeProgID = "WMP.BurnCD"

(Note: The default value data of the said registry entry is WMP.BurnCD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeVerb = "Burn"

(Note: The default value data of the said registry entry is Burn.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Action = "@wmploc.dll,-6504"

(Note: The default value data of the said registry entry is @wmploc.dll,-6504.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeProgID = "WMP.DVD"

(Note: The default value data of the said registry entry is WMP.DVD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeVerb = "play"

(Note: The default value data of the said registry entry is play.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Action = "Transfer Files"

(Note: The default value data of the said registry entry is Transfer Files.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"

(Note: The default value data of the said registry entry is {91778246-9BE4-4713-A651-E833B853CC30}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
InitCmdLine = "%ProgramFiles%\Windows Media Player\wmplayer.exe /prefetch:3 /task:PortableDevice"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
ProgID = "Shell.HWEventHandlerShellExecute"

(Note: The default value data of the said registry entry is Shell.HWEventHandlerShellExecute.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma\OpenWithProgIds
WMAFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma
Content Type = "audio/x-ms-wma"

(Note: The default value data of the said registry entry is audio/x-ms-wma.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wma
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax\OpenWithProgIds
WAXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax
Content Type = "audio/x-ms-wax"

(Note: The default value data of the said registry entry is audio/x-ms-wax.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wax
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wma = "wma"

(Note: The default value data of the said registry entry is wma.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE17 = "audio/x-ms-wma"

(Note: The default value data of the said registry entry is audio/x-ms-wma.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wma = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa84-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
Extension = ".wma"

(Note: The default value data of the said registry entry is .wma.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wax = "wax"

(Note: The default value data of the said registry entry is wax.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE16 = "audio/x-ms-wax"

(Note: The default value data of the said registry entry is audio/x-ms-wax.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wax = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa83-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
Extension = ".wax"

(Note: The default value data of the said registry entry is .wax.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv\OpenWithProgIds
WMVFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv
Content Type = "video/x-ms-wmv"

(Note: The default value data of the said registry entry is video/x-ms-wmv.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmv
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx\OpenWithProgIds
WVXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx
Content Type = "video/x-ms-wvx"

(Note: The default value data of the said registry entry is video/x-ms-wvx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wvx
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmv = "wmv"

(Note: The default value data of the said registry entry is wmv.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE29 = "video/x-ms-wmv"

(Note: The default value data of the said registry entry is video/x-ms-wmv.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmv = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa94-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
Extension = ".wmv"

(Note: The default value data of the said registry entry is .wmv.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wvx = "wvx"

(Note: The default value data of the said registry entry is wvx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE31 = "video/x-ms-wvx"

(Note: The default value data of the said registry entry is video/x-ms-wvx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wvx = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa95-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
Extension = ".wvx"

(Note: The default value data of the said registry entry is .wvx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf
Content Type = "video/x-ms-asf"

(Note: The default value data of the said registry entry is video/x-ms-asf.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asf
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx
Content Type = "video/x-ms-asf"

(Note: The default value data of the said registry entry is video/x-ms-asf.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asx
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.dvr-ms\OpenWithProgIds
WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl\OpenWithProgIds
WPLFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl
Content Type = "application/vnd.ms-wpl"

(Note: The default value data of the said registry entry is application/vnd.ms-wpl.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wpl
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm
Content Type = "video/x-ms-wm"

(Note: The default value data of the said registry entry is video/x-ms-wm.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wm
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx
Content Type = "video/x-ms-wmx"

(Note: The default value data of the said registry entry is video/x-ms-wmx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmx
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd\OpenWithProgIds
WMDFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd
Content Type = "application/x-ms-wmd"

(Note: The default value data of the said registry entry is application/x-ms-wmd.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmd
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz\OpenWithProgIds
WMZFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz
Content Type = "application/x-ms-wmz"

(Note: The default value data of the said registry entry is application/x-ms-wmz.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmz
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
Extension = ".asx"

(Note: The default value data of the said registry entry is .asx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa95-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
Extension = ".wpl"

(Note: The default value data of the said registry entry is .wpl.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE26 = "video/x-ms-asf"

(Note: The default value data of the said registry entry is video/x-ms-asf.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
Extension = ".asx"

(Note: The default value data of the said registry entry is .asx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf-plugin = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE27 = "video/x-ms-asf-plugin"

(Note: The default value data of the said registry entry is video/x-ms-asf-plugin.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf-plugin = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
Extension = ".asx"

(Note: The default value data of the said registry entry is .asx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wm = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE28 = "video/x-ms-wm"

(Note: The default value data of the said registry entry is video/x-ms-wm.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wm = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa92-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
Extension = ".wm"

(Note: The default value data of the said registry entry is .wm.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmx = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE30 = "video/x-ms-wmx"

(Note: The default value data of the said registry entry is video/x-ms-wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmx = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa93-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
Extension = ".wmx"

(Note: The default value data of the said registry entry is .wmx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"

(Note: The default value data of the said registry entry is {ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
Extension = ".wmd"

(Note: The default value data of the said registry entry is .wmd.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa71-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
Extension = ".wmz"

(Note: The default value data of the said registry entry is .wmz.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMS
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMST
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMSU
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MSBD
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.cda\OpenWithProgIds
CDAFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AudioCD\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3\OpenWithProgIds
mp3file = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3
Content Type = "audio/mpeg"

(Note: The default value data of the said registry entry is audio/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp3
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u\OpenWithProgIds
m3ufile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u
Content Type = "audio/x-mpegurl"

(Note: The default value data of the said registry entry is audio/x-mpegurl.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m3u
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpeg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE5 = "audio/mpeg"

(Note: The default value data of the said registry entry is application/rtf.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE7 = "audio/mpg"

(Note: The default value data of the said registry entry is application/pot.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mp3 = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE4 = "audio/mp3"

(Note: The default value data of the said registry entry is application/msword.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpeg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE13 = "audio/x-mpeg"

(Note: The default value data of the said registry entry is audio/x-mpeg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE15 = "audio/x-mpg"

(Note: The default value data of the said registry entry is audio/x-mpg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpg = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mp3 = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE12 = "audio/x-mp3"

(Note: The default value data of the said registry entry is audio/x-mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpegurl = "m3u"

(Note: The default value data of the said registry entry is m3u.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE6 = "audio/mpegurl"

(Note: The default value data of the said registry entry is application/ppt.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa78-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
Extension = ".m3u"

(Note: The default value data of the said registry entry is .m3u.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpegurl = "m3u"

(Note: The default value data of the said registry entry is m3u.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE14 = "audio/x-mpegurl"

(Note: The default value data of the said registry entry is audio/x-mpegurl.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa78-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
Extension = ".m3u"

(Note: The default value data of the said registry entry is .m3u.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.avi\OpenWithProgIds
avifile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.avi
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/avi = "avi"

(Note: The default value data of the said registry entry is avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE20 = "video/avi"

(Note: The default value data of the said registry entry is video/avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/avi = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
Extension = ".avi"

(Note: The default value data of the said registry entry is .avi.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/msvideo = "avi"

(Note: The default value data of the said registry entry is avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE23 = "video/msvideo"

(Note: The default value data of the said registry entry is video/msvideo.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
Extension = ".avi"

(Note: The default value data of the said registry entry is .avi.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-msvideo = "avi"

(Note: The default value data of the said registry entry is avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE32 = "video/x-msvideo"

(Note: The default value data of the said registry entry is video/x-msvideo.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
Extension = ".avi"

(Note: The default value data of the said registry entry is .avi.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wav\OpenWithProgIds
soundrec = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wav
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/wav = "wav"

(Note: The default value data of the said registry entry is wav.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE8 = "audio/wav"

(Note: The default value data of the said registry entry is application/pps.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/wav = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa7b-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
Extension = ".wav"

(Note: The default value data of the said registry entry is .wav.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-wav = "wav"

(Note: The default value data of the said registry entry is wav.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE18 = "audio/x-wav"

(Note: The default value data of the said registry entry is audio/x-wav.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-wav = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa7b-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
Extension = ".wav"

(Note: The default value data of the said registry entry is .wav.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpeg
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpg
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpe
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m1v
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpv2
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2v
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpa
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE21 = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE24 = "video/x-mpeg"

(Note: The default value data of the said registry entry is video/x-mpeg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE25 = "video/x-mpeg2a"

(Note: The default value data of the said registry entry is video/x-mpeg2a.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg2a = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE22 = "video/mpg"

(Note: The default value data of the said registry entry is video/mpg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid
Content Type = "audio/mid"

(Note: The default value data of the said registry entry is audio/mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mid
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DirectDraw\MostRecentApplication
Name = "iexplore.exe"

(Note: The default value data of the said registry entry is iexplore.exe.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
DirectDraw\MostRecentApplication
ID = "4117b81"

(Note: The default value data of the said registry entry is 41107b81.)

It deletes the following registry keys:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\MUILanguages\
FileVersions

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mid

Dropping Routine

This Trojan drops the following files:

  • %User Temp%\abcde.exe
  • %User Temp%\I'm Yours Instrumental (violin).mp3
  • %User Profile%\HTML Help\hh.dat

(Note: %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003.. %User Profile% is the current user's profile folder, which is usually C:\Windows\Profiles\{user name} on Windows 98 and ME, C:\WINNT\Profiles\{user name} on Windows NT, and C:\Documents and Settings\{user name} on Windows 2000, XP, and Server 2003.)

This report is generated via an automated analysis system.

  SOLUTION

Minimum Scan Engine:

9.200

Step 1

For Windows XP and Windows Server 2003 users, before doing any scans, please make sure you disable System Restore to allow full scanning of your computer.

Step 2

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
    • {4EFE2452-168A-11D1-BC76-00C04FB9453B}
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}
    • Default MidiOut Device
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
    • {E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
    • Default DirectSound Device
  • In HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie
    • Filter Cache
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup
    • UserOptions

Step 3

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • FriendlyName = "Default MidiOut Device"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • FilterData = "{random values}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • MidiOutId = "ffffffff"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • FriendlyName = "Default DirectSound Device"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • FilterData = "{random values}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • DSGuid = "{00000000-0000-0000-0000-000000000000}"
  • In HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie\Filter Cache
    • 0 = "{random values}"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • MetadataRetrieval = "3"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • SendUserGUID = "{random values}"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • SilentAcquisition = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • UsageTracking = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • DisableMRU = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\UserOptions
    • DesktopShortcut = "yes"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\UserOptions
    • QuickLaunchShortcut = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wma
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wax
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma
    • UserApprovedOwning = "yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • %Program Files%\WINDOW~2\wmplayer.exe = "Yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • %Program Files%\Windows Media Player\wmplayer.exe = "Yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmv
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wvx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asf
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wpl
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wm
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmd
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmz
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mms
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmst
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmsu
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\msbd
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.cda
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Devices\AudioCD
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp3
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m3u
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.avi
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wav
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpe
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m1v
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpa
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mid
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.midi
    • UserApprovedOwning = "yes"

Step 4

Restore this modified registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer
    • From: MP2.SaveDir = "%Program Files%\Windows Media Player"
      To: MP2.SaveDir = ""%Program Files%\Windows Media Player""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • AcceptedPrivacyStatement = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: Action = "@wmploc.dll,-6503"
      To: Action = ""@wmploc.dll,-6503""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: InvokeProgID = "WMP.AudioCD"
      To: InvokeProgID = ""WMP.AudioCD""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: InvokeVerb = "play"
      To: InvokeVerb = ""play""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: Action = "@wmploc.dll,-6506"
      To: Action = ""@wmploc.dll,-6506""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: InvokeProgID = "WMP.RipCD"
      To: InvokeProgID = ""WMP.RipCD""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: InvokeVerb = "Rip"
      To: InvokeVerb = ""Rip""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: Action = "@wmploc.dll,-6505"
      To: Action = ""@wmploc.dll,-6505""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: InvokeProgID = "WMP.BurnCD"
      To: InvokeProgID = ""WMP.BurnCD""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: InvokeVerb = "Burn"
      To: InvokeVerb = ""Burn""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: Action = "@wmploc.dll,-6504"
      To: Action = ""@wmploc.dll,-6504""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: InvokeProgID = "WMP.DVD"
      To: InvokeProgID = ""WMP.DVD""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: InvokeVerb = "play"
      To: InvokeVerb = ""play""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: Action = "Transfer Files"
      To: Action = ""Transfer Files""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"
      To: CLSIDForCancel = ""{91778246-9BE4-4713-A651-E833B853CC30}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: InitCmdLine = "%ProgramFiles%\Windows Media Player\wmplayer.exe /prefetch:3 /task:PortableDevice"
      To: InitCmdLine = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: ProgID = "Shell.HWEventHandlerShellExecute"
      To: ProgID = ""Shell.HWEventHandlerShellExecute""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma\OpenWithProgIds
    • From: WMAFile = "[REG_NONE, size: 0 bytes]"
      To: WMAFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma
    • From: Content Type = "audio/x-ms-wma"
      To: Content Type = ""audio/x-ms-wma""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wma
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wma
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax\OpenWithProgIds
    • From: WAXFile = "[REG_NONE, size: 0 bytes]"
      To: WAXFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax
    • From: Content Type = "audio/x-ms-wax"
      To: Content Type = ""audio/x-ms-wax""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wax
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wax
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-ms-wma = "wma"
      To: audio/x-ms-wma = ""wma""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE17 = "audio/x-ms-wma"
      To: TYPE17 = ""audio/x-ms-wma""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-ms-wma = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/x-ms-wma = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wma
    • From: CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa84-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wma
    • From: Extension = ".wma"
      To: Extension = "".wma""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-ms-wax = "wax"
      To: audio/x-ms-wax = ""wax""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE16 = "audio/x-ms-wax"
      To: TYPE16 = ""audio/x-ms-wax""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-ms-wax = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/x-ms-wax = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wax
    • From: CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa83-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wax
    • From: Extension = ".wax"
      To: Extension = "".wax""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv\OpenWithProgIds
    • From: WMVFile = "[REG_NONE, size: 0 bytes]"
      To: WMVFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv
    • From: Content Type = "video/x-ms-wmv"
      To: Content Type = ""video/x-ms-wmv""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmv
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmv
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx\OpenWithProgIds
    • From: WVXFile = "[REG_NONE, size: 0 bytes]"
      To: WVXFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx
    • From: Content Type = "video/x-ms-wvx"
      To: Content Type = ""video/x-ms-wvx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wvx
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wvx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-wmv = "wmv"
      To: video/x-ms-wmv = ""wmv""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE29 = "video/x-ms-wmv"
      To: TYPE29 = ""video/x-ms-wmv""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-wmv = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/x-ms-wmv = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmv
    • From: CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa94-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmv
    • From: Extension = ".wmv"
      To: Extension = "".wmv""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-wvx = "wvx"
      To: video/x-ms-wvx = ""wvx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE31 = "video/x-ms-wvx"
      To: TYPE31 = ""video/x-ms-wvx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-wvx = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/x-ms-wvx = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wvx
    • From: CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa95-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wvx
    • From: Extension = ".wvx"
      To: Extension = "".wvx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf\OpenWithProgIds
    • From: ASFFile = "[REG_NONE, size: 0 bytes]"
      To: ASFFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf
    • From: Content Type = "video/x-ms-asf"
      To: Content Type = ""video/x-ms-asf""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.asf
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asf
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx\OpenWithProgIds
    • From: ASXFile = "[REG_NONE, size: 0 bytes]"
      To: ASXFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx
    • From: Content Type = "video/x-ms-asf"
      To: Content Type = ""video/x-ms-asf""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.asx
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dvr-ms\OpenWithProgIds
    • From: WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"
      To: WMP.DVR-MSFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl\OpenWithProgIds
    • From: WPLFile = "[REG_NONE, size: 0 bytes]"
      To: WPLFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl
    • From: Content Type = "application/vnd.ms-wpl"
      To: Content Type = ""application/vnd.ms-wpl""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wpl
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wpl
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm\OpenWithProgIds
    • From: ASFFile = "[REG_NONE, size: 0 bytes]"
      To: ASFFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm
    • From: Content Type = "video/x-ms-wm"
      To: Content Type = ""video/x-ms-wm""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wm
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wm
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx\OpenWithProgIds
    • From: ASXFile = "[REG_NONE, size: 0 bytes]"
      To: ASXFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx
    • From: Content Type = "video/x-ms-wmx"
      To: Content Type = ""video/x-ms-wmx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmx
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd\OpenWithProgIds
    • From: WMDFile = "[REG_NONE, size: 0 bytes]"
      To: WMDFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMDFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMDFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd
    • From: Content Type = "application/x-ms-wmd"
      To: Content Type = ""application/x-ms-wmd""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmd
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmd
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz\OpenWithProgIds
    • From: WMZFile = "[REG_NONE, size: 0 bytes]"
      To: WMZFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMZFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMZFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz
    • From: Content Type = "application/x-ms-wmz"
      To: Content Type = ""application/x-ms-wmz""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmz
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmz
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-mplayer2
    • From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa8f-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-mplayer2
    • From: Extension = ".asx"
      To: Extension = "".asx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-wpl
    • From: CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa95-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-wpl
    • From: Extension = ".wpl"
      To: Extension = "".wpl""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-asf = "asf,asx,wm,wmx"
      To: video/x-ms-asf = ""asf,asx,wm,wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE26 = "video/x-ms-asf"
      To: TYPE26 = ""video/x-ms-asf""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-asf = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/x-ms-asf = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf
    • From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa8f-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf
    • From: Extension = ".asx"
      To: Extension = "".asx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-asf-plugin = "asf,asx,wm,wmx"
      To: video/x-ms-asf-plugin = ""asf,asx,wm,wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE27 = "video/x-ms-asf-plugin"
      To: TYPE27 = ""video/x-ms-asf-plugin""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-asf-plugin = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/x-ms-asf-plugin = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf-plugin
    • From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa8f-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf-plugin
    • From: Extension = ".asx"
      To: Extension = "".asx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-wm = "asf,asx,wm,wmx"
      To: video/x-ms-wm = ""asf,asx,wm,wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE28 = "video/x-ms-wm"
      To: TYPE28 = ""video/x-ms-wm""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-wm = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/x-ms-wm = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wm
    • From: CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa92-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wm
    • From: Extension = ".wm"
      To: Extension = "".wm""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-wmx = "asf,asx,wm,wmx"
      To: video/x-ms-wmx = ""asf,asx,wm,wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE30 = "video/x-ms-wmx"
      To: TYPE30 = ""video/x-ms-wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-wmx = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/x-ms-wmx = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmx
    • From: CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa93-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmx
    • From: Extension = ".wmx"
      To: Extension = "".wmx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmd
    • From: CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"
      To: CLSID = ""{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmd
    • From: Extension = ".wmd"
      To: Extension = "".wmd""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmz
    • From: CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa71-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmz
    • From: Extension = ".wmz"
      To: Extension = "".wmz""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMS
    • From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
      To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mms
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMST
    • From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
      To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmst
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMSU
    • From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
      To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmsu
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSBD
    • From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
      To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\msbd
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cda\OpenWithProgIds
    • From: CDAFile = "[REG_NONE, size: 0 bytes]"
      To: CDAFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.cda
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AudioCD\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Devices\AudioCD
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3\OpenWithProgIds
    • From: mp3file = "[REG_NONE, size: 0 bytes]"
      To: mp3file = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3
    • From: Content Type = "audio/mpeg"
      To: Content Type = ""audio/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp3
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp3
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u\OpenWithProgIds
    • From: m3ufile = "[REG_NONE, size: 0 bytes]"
      To: m3ufile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u
    • From: Content Type = "audio/x-mpegurl"
      To: Content Type = ""audio/x-mpegurl""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.m3u
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m3u
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/mpeg = "mp3"
      To: audio/mpeg = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE5 = "audio/mpeg"
      To: TYPE5 = ""application/rtf""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpeg
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpeg
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/mpg = "mp3"
      To: audio/mpg = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE7 = "audio/mpg"
      To: TYPE7 = ""application/pot""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/mpg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpg
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpg
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/mp3 = "mp3"
      To: audio/mp3 = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE4 = "audio/mp3"
      To: TYPE4 = ""application/msword""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/mp3 = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mp3
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mp3
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-mpeg = "mp3"
      To: audio/x-mpeg = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE13 = "audio/x-mpeg"
      To: TYPE13 = ""audio/x-mpeg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/x-mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpeg
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpeg
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-mpg = "mp3"
      To: audio/x-mpg = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE15 = "audio/x-mpg"
      To: TYPE15 = ""audio/x-mpg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/x-mpg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpg
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpg
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-mp3 = "mp3"
      To: audio/x-mp3 = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE12 = "audio/x-mp3"
      To: TYPE12 = ""audio/x-mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-mp3 = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/x-mp3 = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mp3
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mp3
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/mpegurl = "m3u"
      To: audio/mpegurl = ""m3u""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE6 = "audio/mpegurl"
      To: TYPE6 = ""application/ppt""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/mpegurl = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpegurl
    • From: CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa78-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpegurl
    • From: Extension = ".m3u"
      To: Extension = "".m3u""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-mpegurl = "m3u"
      To: audio/x-mpegurl = ""m3u""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE14 = "audio/x-mpegurl"
      To: TYPE14 = ""audio/x-mpegurl""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/x-mpegurl = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpegurl
    • From: CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa78-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpegurl
    • From: Extension = ".m3u"
      To: Extension = "".m3u""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.avi\OpenWithProgIds
    • From: avifile = "[REG_NONE, size: 0 bytes]"
      To: avifile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.avi
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.avi
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/avi = "avi"
      To: video/avi = ""avi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE20 = "video/avi"
      To: TYPE20 = ""video/avi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/avi = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/avi = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/avi
    • From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa88-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/avi
    • From: Extension = ".avi"
      To: Extension = "".avi""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/msvideo = "avi"
      To: video/msvideo = ""avi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE23 = "video/msvideo"
      To: TYPE23 = ""video/msvideo""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/msvideo = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/msvideo
    • From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa88-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/msvideo
    • From: Extension = ".avi"
      To: Extension = "".avi""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-msvideo = "avi"
      To: video/x-msvideo = ""avi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE32 = "video/x-msvideo"
      To: TYPE32 = ""video/x-msvideo""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-msvideo = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/x-msvideo = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-msvideo
    • From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa88-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-msvideo
    • From: Extension = ".avi"
      To: Extension = "".avi""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\OpenWithProgIds
    • From: soundrec = "[REG_NONE, size: 0 bytes]"
      To: soundrec = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wav
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wav
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/wav = "wav"
      To: audio/wav = ""wav""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE8 = "audio/wav"
      To: TYPE8 = ""application/pps""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/wav = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/wav = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/wav
    • From: CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa7b-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/wav
    • From: Extension = ".wav"
      To: Extension = "".wav""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-wav = "wav"
      To: audio/x-wav = ""wav""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE18 = "audio/x-wav"
      To: TYPE18 = ""audio/x-wav""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-wav = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: audio/x-wav = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-wav
    • From: CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa7b-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-wav
    • From: Extension = ".wav"
      To: Extension = "".wav""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpeg
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpg
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpe
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpe
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.m1v
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m1v
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp2
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpv2
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp2v
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpa
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpa
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
      To: video/mpeg = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE21 = "video/mpeg"
      To: TYPE21 = ""video/mpeg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpeg
    • From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpeg
    • From: Extension = ".mpeg"
      To: Extension = "".mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
      To: video/x-mpeg = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE24 = "video/x-mpeg"
      To: TYPE24 = ""video/x-mpeg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/x-mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg
    • From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg
    • From: Extension = ".mpeg"
      To: Extension = "".mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
      To: video/x-mpeg2a = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE25 = "video/x-mpeg2a"
      To: TYPE25 = ""video/x-mpeg2a""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-mpeg2a = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/x-mpeg2a = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg2a
    • From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg2a
    • From: Extension = ".mpeg"
      To: Extension = "".mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
      To: video/mpg = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE22 = "video/mpg"
      To: TYPE22 = ""video/mpg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/mpg = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: video/mpg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpg
    • From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpg
    • From: Extension = ".mpeg"
      To: Extension = "".mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid\OpenWithProgIds
    • From: midfile = "[REG_NONE, size: 0 bytes]"
      To: midfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid
    • From: Content Type = "audio/mid"
      To: Content Type = ""audio/mid""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mid
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mid
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi\OpenWithProgIds
    • From: midfile = "[REG_NONE, size: 0 bytes]"
      To: midfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication
    • From: Name = "iexplore.exe"
      To: Name = ""iexplore.exe""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication
    • From: ID = "4117b81"
      To: ID = ""41107b81""

Step 5

Search and delete these files

[ Learn More ]
There may be some component files that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.
  • %User Temp%\abcde.exe
  • %User Temp%\I'm Yours Instrumental (violin).mp3
  • %User Profile%\HTML Help\hh.dat

Step 6

Search and delete this folder

[ Learn More ]
Please make sure you check the Search Hidden Files and Folders checkbox in the More advanced options option to include all hidden folders in the search result.
  • %User Profile%\Microsoft\HTML Help

Step 7

Scan your computer with your Trend Micro product to delete files detected as TROJ_DROPPER.OCG. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.

Step 8

Restore these deleted registry keys/values from backup

*Note: Only Microsoft-related keys/values will be restored. If the malware/grayware also deleted registry keys/values related to programs that are not from Microsoft, please reinstall those programs on your computer.

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\MUILanguages
    • FileVersions
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wma
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/x-ms-wma
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wma
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/x-ms-wma
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wax
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/x-ms-wax
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wax
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/x-ms-wax
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmv
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wmv
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmv
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wmv
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wvx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wvx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wvx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wvx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .asf
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-asf
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .asf
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-asf
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .asx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .asx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wpl
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • application/vnd.ms-wpl
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wpl
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • application/vnd.ms-wpl
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wm
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wm
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wm
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wm
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wmx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wmx
  • In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
    • WMPPlayAsPlaylist
  • In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
    • WMPAddToPlaylist
  • In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
    • WMPBurnAudioCD
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmd
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • application/x-ms-wmd
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmd
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • application/x-ms-wmd
  • In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
    • WMPPlayAsPlaylist
  • In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
    • WMPAddToPlaylist
  • In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
    • WMPBurnAudioCD
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmz
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • application/x-ms-wmz
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmz
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • application/x-ms-wmz
  • In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
    • WMPPlayAsPlaylist
  • In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
    • WMPAddToPlaylist
  • In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
    • WMPBurnAudioCD
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mp3
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mp3
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .m3u
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/x-mpegurl
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .m3u
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/x-mpegurl
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .avi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/avi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .avi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/avi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wav
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/wav
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wav
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/wav
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpe
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpe
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .m1v
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .m1v
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mp2
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mp2
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpv2
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpv2
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mp2v
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mp2v
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpa
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpa
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mid
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/mid
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mid
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/mid


Did this description help? Tell us how we did.