TROJ_DLOADER.TUZ


 ALIASES:

Trojan.Gen.2 (Symantec); Trojan.Win32.Diztakun.eds (Kaspersky); Trojan.Win32.Generic!BT (Sunbelt); Found Luhe.Fiha.A (AVG)

 PLATFORM:

Windows

 OVERALL RISK RATING:
 DAMAGE POTENTIAL:
 DISTRIBUTION POTENTIAL:
 REPORTED INFECTION:

  • Threat Type: Trojan

  • Destructiveness: No

  • Encrypted:

  • In the wild: Yes

  OVERVIEW


This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

  TECHNICAL DETAILS

File Size:

17,408 bytes

File Type:

EXE

Memory Resident:

Yes

Initial Samples Received Date:

04 Nov 2014

Arrival Details

This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Installation

This Trojan creates the following folders:

  • %User Profile%\Microsoft\HTML Help

(Note: %User Profile% is a user's profile folder, where it usually is C:\Documents and Settings\{user name} on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name} on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

Autostart Technique

This Trojan adds the following registry entries to enable its automatic execution at every system startup:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
winite = "%User Profile%\Application Data\winite.exe"

Other System Modifications

This Trojan modifies the following file(s):

  • %Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
  • %Start Menu%\Programs\Windows Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD

(Note: %Start Menu% is the Start Menu folder, where it usually is C:\Documents and Settings\{user name}\Start Menu on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\{user name}\Application Data on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

It deletes the following files:

  • %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie Control.lnk
  • %Desktop%\ActiveMovie Control.lnk
  • %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie File Types.lnk
  • %Desktop%\ActiveMovie File Types.lnk
  • Windows Media Player.lnk
  • %Start Menu%\Programs\Accessories\Entertainment\Beta Windows Media Player.lnk
  • %User Profile%\Quick Launch\Beta Windows Media Player.lnk
  • %Start Menu%\Programs\Beta Windows Media Player.lnk
  • %Windows% Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML

(Note: %Start Menu% is the Start Menu folder, where it usually is C:\Documents and Settings\{user name}\Start Menu on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Desktop% is the desktop folder, where it usually is C:\Documents and Settings\{user name}\Desktop in Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\Desktop in Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %User Profile% is a user's profile folder, where it usually is C:\Documents and Settings\{user name} on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name} on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.. %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\{user name}\Application Data on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

It deletes the following folders:

  • %Start Menu%\Programs\Accessories\Entertainment

(Note: %Start Menu% is the Start Menu folder, where it usually is C:\Documents and Settings\{user name}\Start Menu on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

It adds the following registry keys:

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
MPlayer2

HKEY_CLASSES_ROOT\WMP.DeskBand.1

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DeskBand.1\CLSID

HKEY_CLASSES_ROOT\WMP.DeskBand

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DeskBand\CLSID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\ProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\VersionIndependentProgID

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
FLAGS

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
0

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
0\win32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\
HELPDIR

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\ProxyStubClsid

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\ProxyStubClsid32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Health\{A7FE3800-0C4D-4945-BE22-4F6148C23122}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\DropDown

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\EqualizerSettings

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\MediaLibrarySettings

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-wmplayer

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{0890F930-4F80-4646-BAB1-4B6E5571FB89}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{1F32514F-1561-4922-A604-8A1F478B5A42}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{52903d79-f993-4de6-8317-20c9c176d823}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{59E7BF52-E5C9-4382-A39A-522DEE9AFDFD}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{5DF031B7-6A37-42D9-8802-E27F4F224332}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{5F4BB5C9-4652-489B-8601-EEC0C3C32E2E}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{7F2B1D6B-1357-402C-A1C8-67E59583B41D}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{93075F62-16B3-43EC-A53B-FFAD0E01D5E7}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{9695AEF9-9D03-4671-8F2F-FF49D1BB01C4}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{976ABECA-93F7-4d81-9187-2A6137829675}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{99DB05E3-F81E-4C8A-A252-F396306AB6FE}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{9F9562EB-15B6-46C6-A7CB-0A66FC65130E}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{9FA014E3-076F-4865-A73C-117131B8E292}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{D5E49195-ED19-40fb-9EE0-E6625A808B77}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{E641D09E-E500-4c09-8260-F1CD7B902E9C}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{F24A1BC2-2331-4B91-8A13-5A549DA56E9D}

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{FD981763-B6BB-4d51-9143-6D372A0ED56F}

HKEY_CLASSES_ROOT\Software\Microsoft\
MediaPlayer\Setup

It adds the following registry entries:

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FriendlyName = "Default MidiOut Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
FilterData = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\
Default MidiOut Device
MidiOutId = "ffffffff"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FriendlyName = "Default DirectSound Device"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
FilterData = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\
Default DirectSound Device
DSGuid = "{00000000-0000-0000-0000-000000000000}"

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache
0 = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
MetadataRetrieval = "3"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SendUserGUID = "{random values}"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
SilentAcquisition = "1"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
UsageTracking = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
DisableMRU = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
DesktopShortcut = "no"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\UserOptions
QuickLaunchShortcut = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
UserApprovedOwning = "yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\WINDOW~2\wmplayer.exe = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\WINDOW~2\wmplayer.exe = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\Windows Media Player\wmplayer.exe = "Yes"

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\User Trusted External Applications
%Program Files%\Windows Media Player\wmplayer.exe = "Yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
UserApprovedOwning = "yes"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32
ThreadingModel = "Apartment"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib
Version = "1.0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut4 = "%User Profile%\Quick Launch\Windows Media Player.lnk"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
LaunchIndex = "1"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AppColorLimited = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Player\Tasks\
NowPlaying
InitFlags = "1"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
UniqueID = "{5D4B4CA6-4BD2-4433-A194-D50AED65A23E}"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
ComputerName = "CWS10D010"

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\General
VolumeSerialNumber = "68adfd"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS
ProxyStyle = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS
ProxyPort = "6db"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
MMS
ProxyBypass = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyStyle = "1"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyPort = "5"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
HTTP
ProxyBypass = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP
ProxyStyle = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP
ProxyPort = "22a"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences\ProxySettings\
RTSP
ProxyBypass = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-wmplayer
CLSID = "{cd3afa96-b84f-48f0-9393-7edc34128127}"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{9695AEF9-9D03-4671-8F2F-FF49D1BB01C4}
AttemptedAutoRun = "1"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\UIPlugins\{5DF031B7-6A37-42D9-8802-E27F4F224332}
AttemptedAutoRun = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SOFTWARE\Microsoft\MediaPlayer\
Setup
UpdateTimeStamp = "{random values}"

It modifies the following registry entries:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer
MP2.SaveDir = "%Program Files%\Windows Media Player"

(Note: The default value data of the said registry entry is %Program Files%\Windows Media Player.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AcceptedPrivacyStatement = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Action = "@wmploc.dll,-6503"

(Note: The default value data of the said registry entry is @wmploc.dll,-6503.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeProgID = "WMP.AudioCD"

(Note: The default value data of the said registry entry is WMP.AudioCD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
InvokeVerb = "play"

(Note: The default value data of the said registry entry is play.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Action = "@wmploc.dll,-6506"

(Note: The default value data of the said registry entry is @wmploc.dll,-6506.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeProgID = "WMP.RipCD"

(Note: The default value data of the said registry entry is WMP.RipCD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
InvokeVerb = "Rip"

(Note: The default value data of the said registry entry is Rip.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Action = "@wmploc.dll,-6505"

(Note: The default value data of the said registry entry is @wmploc.dll,-6505.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeProgID = "WMP.BurnCD"

(Note: The default value data of the said registry entry is WMP.BurnCD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
InvokeVerb = "Burn"

(Note: The default value data of the said registry entry is Burn.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Action = "@wmploc.dll,-6504"

(Note: The default value data of the said registry entry is @wmploc.dll,-6504.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeProgID = "WMP.DVD"

(Note: The default value data of the said registry entry is WMP.DVD.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
InvokeVerb = "play"

(Note: The default value data of the said registry entry is play.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Action = "Transfer Files"

(Note: The default value data of the said registry entry is Transfer Files.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"

(Note: The default value data of the said registry entry is {91778246-9BE4-4713-A651-E833B853CC30}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
InitCmdLine = "%ProgramFiles%\Windows Media Player\wmplayer.exe /prefetch:3 /task:PortableDevice"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
ProgID = "Shell.HWEventHandlerShellExecute"

(Note: The default value data of the said registry entry is Shell.HWEventHandlerShellExecute.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer\
AutoplayHandlers\Handlers\MSWMDMHandler
Provider = "@wmploc.dll,-6502"

(Note: The default value data of the said registry entry is @wmploc.dll,-6502.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma\OpenWithProgIds
WMAFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
wmafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wma
Content Type = "audio/x-ms-wma"

(Note: The default value data of the said registry entry is audio/x-ms-wma.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wma
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wma
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax\OpenWithProgIds
WAXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WAXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wax
Content Type = "audio/x-ms-wax"

(Note: The default value data of the said registry entry is audio/x-ms-wax.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wax
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wax
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wma = "wma"

(Note: The default value data of the said registry entry is wma.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE17 = "audio/x-ms-wma"

(Note: The default value data of the said registry entry is audio/x-ms-wma.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wma = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa84-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wma
Extension = ".wma"

(Note: The default value data of the said registry entry is .wma.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wma
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-ms-wax = "wax"

(Note: The default value data of the said registry entry is wax.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE16 = "audio/x-ms-wax"

(Note: The default value data of the said registry entry is audio/x-ms-wax.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-ms-wax = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa83-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-ms-wax
Extension = ".wax"

(Note: The default value data of the said registry entry is .wax.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-ms-wax
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv\OpenWithProgIds
WMVFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMVFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmv
Content Type = "video/x-ms-wmv"

(Note: The default value data of the said registry entry is video/x-ms-wmv.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmv
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmv
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx\OpenWithProgIds
WVXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WVXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wvx
Content Type = "video/x-ms-wvx"

(Note: The default value data of the said registry entry is video/x-ms-wvx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wvx
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wvx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmv = "wmv"

(Note: The default value data of the said registry entry is wmv.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE29 = "video/x-ms-wmv"

(Note: The default value data of the said registry entry is video/x-ms-wmv.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmv = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa94-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmv
Extension = ".wmv"

(Note: The default value data of the said registry entry is .wmv.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmv
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wvx = "wvx"

(Note: The default value data of the said registry entry is wvx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE31 = "video/x-ms-wvx"

(Note: The default value data of the said registry entry is video/x-ms-wvx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wvx = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa95-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wvx
Extension = ".wvx"

(Note: The default value data of the said registry entry is .wvx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wvx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asf
Content Type = "video/x-ms-asf"

(Note: The default value data of the said registry entry is video/x-ms-asf.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asf
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asf
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
ASXFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.asx
Content Type = "video/x-ms-asf"

(Note: The default value data of the said registry entry is video/x-ms-asf.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.asx
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.asx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.dvr-ms\OpenWithProgIds
WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMP.DVR-MSFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.dvr-ms
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl\OpenWithProgIds
WPLFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WPLFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wpl
Content Type = "application/vnd.ms-wpl"

(Note: The default value data of the said registry entry is application/vnd.ms-wpl.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wpl
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wpl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm\OpenWithProgIds
ASFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wm
Content Type = "video/x-ms-wm"

(Note: The default value data of the said registry entry is video/x-ms-wm.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wm
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wm
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx\OpenWithProgIds
ASXFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmx
Content Type = "video/x-ms-wmx"

(Note: The default value data of the said registry entry is video/x-ms-wmx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmx
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd\OpenWithProgIds
WMDFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMDFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmd
Content Type = "application/x-ms-wmd"

(Note: The default value data of the said registry entry is application/x-ms-wmd.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmd
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz\OpenWithProgIds
WMZFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
WMZFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wmz
Content Type = "application/x-ms-wmz"

(Note: The default value data of the said registry entry is application/x-ms-wmz.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wmz
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wmz
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-mplayer2
Extension = ".asx"

(Note: The default value data of the said registry entry is .asx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-mplayer2
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa95-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/vnd.ms-wpl
Extension = ".wpl"

(Note: The default value data of the said registry entry is .wpl.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/vnd.ms-wpl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE26 = "video/x-ms-asf"

(Note: The default value data of the said registry entry is video/x-ms-asf.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf
Extension = ".asx"

(Note: The default value data of the said registry entry is .asx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-asf-plugin = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE27 = "video/x-ms-asf-plugin"

(Note: The default value data of the said registry entry is video/x-ms-asf-plugin.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-asf-plugin = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa8f-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-asf-plugin
Extension = ".asx"

(Note: The default value data of the said registry entry is .asx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-asf-plugin
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wm = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE28 = "video/x-ms-wm"

(Note: The default value data of the said registry entry is video/x-ms-wm.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wm = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa92-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wm
Extension = ".wm"

(Note: The default value data of the said registry entry is .wm.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wm
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-ms-wmx = "asf,asx,wm,wmx"

(Note: The default value data of the said registry entry is asf,asx,wm,wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE30 = "video/x-ms-wmx"

(Note: The default value data of the said registry entry is video/x-ms-wmx.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-ms-wmx = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa93-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-ms-wmx
Extension = ".wmx"

(Note: The default value data of the said registry entry is .wmx.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ms-wmx
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"

(Note: The default value data of the said registry entry is {ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmd
Extension = ".wmd"

(Note: The default value data of the said registry entry is .wmd.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa71-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
application/x-ms-wmz
Extension = ".wmz"

(Note: The default value data of the said registry entry is .wmz.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
application/x-ms-wmz
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMS
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mms
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMST
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmst
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MMSU
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
mmsu
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MSBD
Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"

(Note: The default value data of the said registry entry is {6B6D0800-9ADA-11d0-A520-00A0D10129C0}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Protocols\
msbd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.cda\OpenWithProgIds
CDAFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
cdafile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.cda
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AudioCD\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Devices\
AudioCD
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3\OpenWithProgIds
mp3file = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mp3file\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp3
Content Type = "audio/mpeg"

(Note: The default value data of the said registry entry is audio/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp3
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp3
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u\OpenWithProgIds
m3ufile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
m3ufile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m3u
Content Type = "audio/x-mpegurl"

(Note: The default value data of the said registry entry is audio/x-mpegurl.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m3u
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m3u
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpeg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE5 = "audio/mpeg"

(Note: The default value data of the said registry entry is application/rtf.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpeg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE7 = "audio/mpg"

(Note: The default value data of the said registry entry is application/pot.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mp3 = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE4 = "audio/mp3"

(Note: The default value data of the said registry entry is application/msword.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mp3 = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mp3
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mp3
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpeg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE13 = "audio/x-mpeg"

(Note: The default value data of the said registry entry is audio/x-mpeg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpeg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpg = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE15 = "audio/x-mpg"

(Note: The default value data of the said registry entry is audio/x-mpg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpg
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mp3 = "mp3"

(Note: The default value data of the said registry entry is mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE12 = "audio/x-mp3"

(Note: The default value data of the said registry entry is audio/x-mp3.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mp3 = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa76-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mp3
Extension = ".mp3"

(Note: The default value data of the said registry entry is .mp3.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mp3
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mpegurl = "m3u"

(Note: The default value data of the said registry entry is m3u.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE6 = "audio/mpegurl"

(Note: The default value data of the said registry entry is application/ppt.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa78-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mpegurl
Extension = ".m3u"

(Note: The default value data of the said registry entry is .m3u.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mpegurl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mpegurl = "m3u"

(Note: The default value data of the said registry entry is m3u.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE14 = "audio/x-mpegurl"

(Note: The default value data of the said registry entry is audio/x-mpegurl.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa78-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mpegurl
Extension = ".m3u"

(Note: The default value data of the said registry entry is .m3u.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mpegurl
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.avi\OpenWithProgIds
avifile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AVIFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.avi
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.avi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/avi = "avi"

(Note: The default value data of the said registry entry is avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE20 = "video/avi"

(Note: The default value data of the said registry entry is video/avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/avi = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/avi
Extension = ".avi"

(Note: The default value data of the said registry entry is .avi.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/avi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/msvideo = "avi"

(Note: The default value data of the said registry entry is avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE23 = "video/msvideo"

(Note: The default value data of the said registry entry is video/msvideo.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/msvideo = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/msvideo
Extension = ".avi"

(Note: The default value data of the said registry entry is .avi.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/msvideo
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-msvideo = "avi"

(Note: The default value data of the said registry entry is avi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE32 = "video/x-msvideo"

(Note: The default value data of the said registry entry is video/x-msvideo.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-msvideo = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa88-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-msvideo
Extension = ".avi"

(Note: The default value data of the said registry entry is .avi.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-msvideo
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.wav\OpenWithProgIds
soundrec = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SoundRec\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.wav
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.wav
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/wav = "wav"

(Note: The default value data of the said registry entry is wav.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE8 = "audio/wav"

(Note: The default value data of the said registry entry is application/pps.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/wav = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa7b-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/wav
Extension = ".wav"

(Note: The default value data of the said registry entry is .wav.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/wav
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-wav = "wav"

(Note: The default value data of the said registry entry is wav.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE18 = "audio/x-wav"

(Note: The default value data of the said registry entry is audio/x-wav.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-wav = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa7b-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-wav
Extension = ".wav"

(Note: The default value data of the said registry entry is .wav.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-wav
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
mpegfile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpeg
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpeg
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpg
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpg
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpe
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpe
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpe
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.m1v
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.m1v
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.m1v
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpv2
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpv2
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpv2
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mp2v
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mp2v
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mp2v
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa\OpenWithProgIds
mpegfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mpa
Content Type = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mpa
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mpa
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE21 = "video/mpeg"

(Note: The default value data of the said registry entry is video/mpeg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpeg
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE24 = "video/x-mpeg"

(Note: The default value data of the said registry entry is video/x-mpeg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE25 = "video/x-mpeg2a"

(Note: The default value data of the said registry entry is video/x-mpeg2a.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/x-mpeg2a = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/x-mpeg2a
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-mpeg2a
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"

(Note: The default value data of the said registry entry is mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE22 = "video/mpg"

(Note: The default value data of the said registry entry is video/mpg.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
video/mpg = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa89-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
video/mpg
Extension = ".mpeg"

(Note: The default value data of the said registry entry is .mpeg.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/mpg
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIDFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.mid
Content Type = "audio/mid"

(Note: The default value data of the said registry entry is audio/mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.mid
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.mid
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.midi
Content Type = "audio/mid"

(Note: The default value data of the said registry entry is audio/mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.midi
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.midi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi\OpenWithProgIds
midfile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.rmi
Content Type = "audio/mid"

(Note: The default value data of the said registry entry is audio/mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.rmi
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.rmi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/mid = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE2 = "audio/mid"

(Note: The default value data of the said registry entry is application/msexcel.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/mid = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/mid
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/mid
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/midi = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE3 = "audio/midi"

(Note: The default value data of the said registry entry is application/xlc.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/midi = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/midi
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/midi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-mid = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE10 = "audio/x-mid"

(Note: The default value data of the said registry entry is audio/x-mid.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-mid = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-mid
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-mid
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-midi = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE11 = "audio/x-midi"

(Note: The default value data of the said registry entry is audio/x-midi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-midi = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-midi
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-midi
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
midi/mid = "mid,midi,rmi"

(Note: The default value data of the said registry entry is mid,midi,rmi.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE19 = "midi/mid"

(Note: The default value data of the said registry entry is midi/mid.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
midi/mid = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa74-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
midi/mid
Extension = ".mid"

(Note: The default value data of the said registry entry is .mid.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
midi/mid
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AIFFFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aif
Content Type = "audio/aiff"

(Note: The default value data of the said registry entry is audio/aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aif
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aif
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aifc
Content Type = "audio/aiff"

(Note: The default value data of the said registry entry is audio/aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aifc
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aifc
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff\OpenWithProgIds
AIFFFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.aiff
Content Type = "audio/aiff"

(Note: The default value data of the said registry entry is audio/aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.aiff
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.aiff
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/x-aiff = "aif,aifc,aiff"

(Note: The default value data of the said registry entry is aif,aifc,aiff.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE9 = "audio/x-aiff"

(Note: The default value data of the said registry entry is audio/x-aiff.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/x-aiff = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa72-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/x-aiff
Extension = ".aiff"

(Note: The default value data of the said registry entry is .aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/x-aiff
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/aiff = "aif,aifc,aiff"

(Note: The default value data of the said registry entry is aif,aifc,aiff.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE0 = "audio/aiff"

(Note: The default value data of the said registry entry is audio/aiff.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/aiff = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa72-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/aiff
Extension = ".aiff"

(Note: The default value data of the said registry entry is .aiff.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/aiff
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
PreferExecuteOnMismatch = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile
EditFlags = "{random values}"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\open\
DropTarget
CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"

(Note: The default value data of the said registry entry is {CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AUFile\shell\play
MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.au
Content Type = "audio/basic"

(Note: The default value data of the said registry entry is audio/basic.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.au
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.au
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd\OpenWithProgIds
AUFile = "[REG_NONE, size: 0 bytes]"

(Note: The default value data of the said registry entry is {random values}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
.snd
Content Type = "audio/basic"

(Note: The default value data of the said registry entry is audio/basic.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Internet Explorer\EmbedExtnToClsidMappings\.snd
MPlayer2.Set = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.snd
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Suffixes
audio/basic = "au,snd"

(Note: The default value data of the said registry entry is au,snd.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
TYPE1 = "audio/basic"

(Note: The default value data of the said registry entry is audio/basic.)

HKEY_CURRENT_USER\Software\Netscape\
Netscape Navigator\Viewers
audio/basic = "%Program Files%\WINDOW~2\wmplayer.exe "

(Note: The default value data of the said registry entry is "%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe".)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
CLSID = "{cd3afa73-b84f-48f0-9393-7edc34128127}"

(Note: The default value data of the said registry entry is {cd3afa73-b84f-48f0-9393-7edc34128127}.)

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
MIME\Database\Content Type\
audio/basic
Extension = ".au"

(Note: The default value data of the said registry entry is .au.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
audio/basic
AlreadyRegistered = "yes"

(Note: The default value data of the said registry entry is yes.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\PlayerUpgrade
PlayerVersion = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
Version = "9,0,0,3250"

(Note: The default value data of the said registry entry is 9,0,0,3250.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Preferences
MyPlayLists = "%User Profile%\My Music\Sample Playlists"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\All Users\Documents\My Music\Sample Playlists.)

HKEY_LOCAL_MACHINE\SOFTWARE\Clients\
Media\Windows Media Player\InstallInfo
IconsVisible = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Setup\
Oc Manager\Subcomponents
wmpocm = "1"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
DontAsk = "2"

(Note: The default value data of the said registry entry is 2.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
IsInstalled = "0"

(Note: The default value data of the said registry entry is 1.)

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
Stubpath = "%Windows%\inf\unregmp2.exe /ShowWMP"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
AppName = "%Program Files%\WINDOW~2\wmplayer.exe"

(Note: The default value data of the said registry entry is %System Root%\PROGRA~1\WINDOW~2\wmplayer.exe.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut2 = "%Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk"

(Note: The default value data of the said registry entry is %User Profile%\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Setup\CreatedLinks
Shortcut3 = "%Start Menu%\Programs\Windows Media Player.lnk"

(Note: The default value data of the said registry entry is %User Profile%\Start Menu\Programs\Windows Media Player.lnk.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
LocalBase = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
DTDFile = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
LocalDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNSD.XML.)

HKEY_CURRENT_USER\Software\Microsoft\
Windows Media\WMSDK\Namespace
RemoteDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML"

(Note: The default value data of the said registry entry is %System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNSR.XML.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
BrightSphere
Title = "res://wmploc/RT_STRING/#5700"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5700.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
circledance
Title = "res://wmploc/RT_STRING/#5721"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5721.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
cominatya
Title = "res://wmploc/RT_STRING/#5701"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5701.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
cottonstar
Title = "res://wmploc/RT_STRING/#5705"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5705.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
dandelionaid
Title = "res://wmploc/RT_STRING/#5702"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5702.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
DrowningFlower
Title = "res://wmploc/RT_STRING/#5703"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5703.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
EletriArnation
Title = "res://wmploc/RT_STRING/#5704"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5704.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
eventhorizon
Title = "res://wmploc/RT_STRING/#5708"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5708.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
Geeks Kick ASCII
Title = "res://wmploc/RT_STRING/#5723"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5723.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
gemstone matrix
Title = "res://wmploc/RT_STRING/#5706"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5706.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
GrooveSwirl
Title = "res://wmploc/RT_STRING/#5707"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5707.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
illuminator
Title = "res://wmploc/RT_STRING/#5709"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5709.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
ISeeTheTruth
Title = "res://wmploc/RT_STRING/#5710"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5710.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
kaleidoscope
Title = "res://wmploc/RT_STRING/#5711"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5711.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
khemicalnova
Title = "res://wmploc/RT_STRING/#5724"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5724.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
Lotus
Title = "res://wmploc/RT_STRING/#5713"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5713.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
Nerds Are Cool
Title = "res://wmploc/RT_STRING/#5712"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5712.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
relativelycalm
Title = "res://wmploc/RT_STRING/#5714"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5714.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
sleepyspray
Title = "res://wmploc/RT_STRING/#5715"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5715.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
Smoke or Water
Title = "res://wmploc/RT_STRING/#5716"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5716.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
SpidersLastMoment
Title = "res://wmploc/RT_STRING/#5718"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5718.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
strawberryaid
Title = "res://wmploc/RT_STRING/#5719"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5719.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
the world
Title = "res://wmploc/RT_STRING/#5720"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5720.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
tornado
Title = "res://wmploc/RT_STRING/#5722"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5722.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Battery\Presets\
what is an egab
Title = "res://wmploc/RT_STRING/#5717"

(Note: The default value data of the said registry entry is res://wmploc/RT_STRING/#5717.)

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrentDownloadCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrent500ServerErrorCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrent503ServerErrorCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrentOtherServerErrorCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataCurrentNetworkErrorCount = "0"

HKEY_CURRENT_USER\Software\Microsoft\
MediaPlayer\Preferences
AutoMetadataLastResetTime = "1bd38c11"

(Note: The default value data of the said registry entry is 1681679f.)

It deletes the following registry keys:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\MUILanguages\
FileVersions

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wma

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wma

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wax

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-ms-wax

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmv

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmv

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wvx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wvx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asf

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-asf

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.asx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wpl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/vnd.ms-wpl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wm

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wm

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmx

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/x-ms-wmx

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMDFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmd

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\WMZFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wmz

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\application/x-ms-wmz

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPPlayAsPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPAddToPlaylist

HKEY_CLASSES_ROOT\CDAFile\shellex\
ContextMenuHandlers\WMPBurnAudioCD

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp3

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m3u

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/x-mpegurl

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.avi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/avi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.wav

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/wav

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpeg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\video/mpeg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpg

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpe

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.m1v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpv2

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mp2v

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mpa

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.mid

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/mid

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.midi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.midi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.rmi

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.rmi

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.au

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\MIME\audio/basic

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.au

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\MIME\audio/basic

HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\
EnablePlugin\.snd

HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\
EnablePlugin\.snd

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
WMP7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Groups\
Video\QT

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.mov

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\Extensions\
.qt

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\MPlayer2\MIME Types\
video/quicktime

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Extensions\
.ivf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\MIME Types\
video/x-ivf

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Multimedia\WMPlayer\Groups\
Video\IVF

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
MediaPlayer\Control\Advanced Options\
Windows Media

HKEY_CURRENT_USER\Software\Microsoft\
Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}

Dropping Routine

This Trojan drops the following files:

  • %User Profile%\Application Data\winite.exe
  • %User Profile%\HTML Help\hh.dat
  • %User Profile%\Quick Launch\Windows Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.bak
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.done
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML

(Note: %User Profile% is a user's profile folder, where it usually is C:\Documents and Settings\{user name} on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name} on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.. %Application Data% is the Application Data folder, where it usually is C:\Documents and Settings\{user name}\Application Data on Windows 2000, Windows Server 2003, and Windows XP (32- and 64-bit); C:\Users\{user name}\AppData\Roaming on Windows Vista (32- and 64-bit), Windows 7 (32- and 64-bit), Windows 8 (32- and 64-bit), Windows 8.1 (32- and 64-bit), Windows Server 2008, and Windows Server 2012.)

Other Details

This Trojan connects to the following possibly malicious URL:

  • {BLOCKED}0.1

This report is generated via an automated analysis system.

  SOLUTION

Minimum Scan Engine:

9.700

Step 1

Before doing any scans, Windows XP, Windows Vista, and Windows 7 users must disable System Restore to allow full scanning of their computers.

Step 2

Restart in Safe Mode

[ Learn More ]

Step 3

Delete this registry key

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
    • {4EFE2452-168A-11D1-BC76-00C04FB9453B}
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}
    • Default MidiOut Device
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum
    • {E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}
    • Default DirectSound Device
  • In HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie
    • Filter Cache
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup
    • UserOptions
  • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
    • MPlayer2
  • In HKEY_CLASSES_ROOT
    • WMP.DeskBand.1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DeskBand.1
    • CLSID
  • In HKEY_CLASSES_ROOT
    • WMP.DeskBand
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DeskBand
    • CLSID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {0A4286EA-E355-44FB-8086-AF3DF7645BD9}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}
    • ProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}
    • VersionIndependentProgID
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}
    • InprocServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
    • {B6DD1ED6-573F-40FD-99A1-F28D8BF23916}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}
    • 1.0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0
    • FLAGS
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0
    • 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0\0
    • win32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B6DD1ED6-573F-40FD-99A1-F28D8BF23916}\1.0
    • HELPDIR
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
    • {0A55922C-3B1F-469B-8D0D-B15060499A52}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}
    • ProxyStubClsid
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}
    • ProxyStubClsid32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}
    • TypeLib
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Health
    • {A7FE3800-0C4D-4945-BE22-4F6148C23122}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer
    • DropDown
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • ProxySettings
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings
    • MMS
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings
    • HTTP
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings
    • RTSP
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • EqualizerSettings
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player
    • MediaLibrarySettings
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type
    • application/x-wmplayer
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {0890F930-4F80-4646-BAB1-4B6E5571FB89}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {1F32514F-1561-4922-A604-8A1F478B5A42}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {52903d79-f993-4de6-8317-20c9c176d823}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {59E7BF52-E5C9-4382-A39A-522DEE9AFDFD}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {5DF031B7-6A37-42D9-8802-E27F4F224332}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {5F4BB5C9-4652-489B-8601-EEC0C3C32E2E}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {7F2B1D6B-1357-402C-A1C8-67E59583B41D}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {93075F62-16B3-43EC-A53B-FFAD0E01D5E7}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {9695AEF9-9D03-4671-8F2F-FF49D1BB01C4}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {976ABECA-93F7-4d81-9187-2A6137829675}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {99DB05E3-F81E-4C8A-A252-F396306AB6FE}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {9F9562EB-15B6-46C6-A7CB-0A66FC65130E}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {9FA014E3-076F-4865-A73C-117131B8E292}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {D5E49195-ED19-40fb-9EE0-E6625A808B77}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {E641D09E-E500-4c09-8260-F1CD7B902E9C}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {F24A1BC2-2331-4B91-8A13-5A549DA56E9D}
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins
    • {FD981763-B6BB-4d51-9143-6D372A0ED56F}
  • In HKEY_CLASSES_ROOT\Software\Microsoft\MediaPlayer
    • Setup

Step 4

Delete this registry value

[ Learn More ]

Important: Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this step only if you know how or you can ask assistance from your system administrator. Else, check this Microsoft article first before modifying your computer's registry.

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • winite = "%User Profile%\Application Data\winite.exe"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • FriendlyName = "Default MidiOut Device"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • CLSID = "{07B65360-C445-11CE-AFDE-00AA006C14F4}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • FilterData = "{random values}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{4EFE2452-168A-11D1-BC76-00C04FB9453B}\Default MidiOut Device
    • MidiOutId = "ffffffff"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • FriendlyName = "Default DirectSound Device"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • CLSID = "{79376820-07D0-11CF-A24D-0020AFD79767}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • FilterData = "{random values}"
  • In HKEY_CURRENT_USER\Software\Microsoft\ActiveMovie\devenum\{E0F158E1-CB04-11D0-BD4E-00A0C911CE86}\Default DirectSound Device
    • DSGuid = "{00000000-0000-0000-0000-000000000000}"
  • In HKEY_CURRENT_USER\Software\Microsoft\Multimedia\ActiveMovie\Filter Cache
    • 0 = "{random values}"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • MetadataRetrieval = "3"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • SendUserGUID = "{random values}"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • SilentAcquisition = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • UsageTracking = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • DisableMRU = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\UserOptions
    • DesktopShortcut = "no"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\UserOptions
    • QuickLaunchShortcut = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wma
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wax
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma
    • UserApprovedOwning = "yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • %Program Files%\WINDOW~2\wmplayer.exe = "Yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • %Program Files%\WINDOW~2\wmplayer.exe = "Yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • %Program Files%\Windows Media Player\wmplayer.exe = "Yes"
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\User Trusted External Applications
    • %Program Files%\Windows Media Player\wmplayer.exe = "Yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmv
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wvx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asf
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wpl
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wm
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmd
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmz
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mms
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmst
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmsu
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\msbd
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.cda
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Devices\AudioCD
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp3
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m3u
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.avi
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wav
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpe
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m1v
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpa
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mid
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.midi
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.rmi
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mid
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/midi
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mid
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-midi
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\midi/mid
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aif
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aifc
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aiff
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-aiff
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/aiff
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.au
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.snd
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/basic
    • UserApprovedOwning = "yes"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{0A4286EA-E355-44FB-8086-AF3DF7645BD9}\InprocServer32
    • ThreadingModel = "Apartment"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0A55922C-3B1F-469B-8D0D-B15060499A52}\TypeLib
    • Version = "1.0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\CreatedLinks
    • Shortcut4 = "%User Profile%\Quick Launch\Windows Media Player.lnk"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • LaunchIndex = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • AppColorLimited = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Player\Tasks\NowPlaying
    • InitFlags = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General
    • UniqueID = "{5D4B4CA6-4BD2-4433-A194-D50AED65A23E}"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General
    • ComputerName = "CWS10D010"
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\General
    • VolumeSerialNumber = "68adfd"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\MMS
    • ProxyStyle = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\MMS
    • ProxyPort = "6db"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\MMS
    • ProxyBypass = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\HTTP
    • ProxyStyle = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\HTTP
    • ProxyPort = "5"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\HTTP
    • ProxyBypass = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\RTSP
    • ProxyStyle = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\RTSP
    • ProxyPort = "22a"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences\ProxySettings\RTSP
    • ProxyBypass = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-wmplayer
    • CLSID = "{cd3afa96-b84f-48f0-9393-7edc34128127}"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins\{9695AEF9-9D03-4671-8F2F-FF49D1BB01C4}
    • AttemptedAutoRun = "1"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\UIPlugins\{5DF031B7-6A37-42D9-8802-E27F4F224332}
    • AttemptedAutoRun = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SOFTWARE\Microsoft\MediaPlayer\Setup
    • UpdateTimeStamp = "{random values}"

Step 5

Restore these modified registry values

[ Learn More ]

Important:Editing the Windows Registry incorrectly can lead to irreversible system malfunction. Please do this only if you know how to or you can seek your system administrator's help. You may also check out this Microsoft article first before modifying your computer's registry.

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer
    • From: MP2.SaveDir = "%Program Files%\Windows Media Player"
      To: MP2.SaveDir = ""%Program Files%\Windows Media Player""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • AcceptedPrivacyStatement = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: Action = "@wmploc.dll,-6503"
      To: Action = ""@wmploc.dll,-6503""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: InvokeProgID = "WMP.AudioCD"
      To: InvokeProgID = ""WMP.AudioCD""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: InvokeVerb = "play"
      To: InvokeVerb = ""play""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayCDAudioOnArrival
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: Action = "@wmploc.dll,-6506"
      To: Action = ""@wmploc.dll,-6506""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: InvokeProgID = "WMP.RipCD"
      To: InvokeProgID = ""WMP.RipCD""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: InvokeVerb = "Rip"
      To: InvokeVerb = ""Rip""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSRipCDAudioOnArrival
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: Action = "@wmploc.dll,-6505"
      To: Action = ""@wmploc.dll,-6505""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: InvokeProgID = "WMP.BurnCD"
      To: InvokeProgID = ""WMP.BurnCD""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: InvokeVerb = "Burn"
      To: InvokeVerb = ""Burn""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMPBurnCDOnArrival
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: Action = "@wmploc.dll,-6504"
      To: Action = ""@wmploc.dll,-6504""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: InvokeProgID = "WMP.DVD"
      To: InvokeProgID = ""WMP.DVD""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: InvokeVerb = "play"
      To: InvokeVerb = ""play""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSPlayDVDMovieOnArrival
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: Action = "Transfer Files"
      To: Action = ""Transfer Files""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: CLSIDForCancel = "{91778246-9BE4-4713-A651-E833B853CC30}"
      To: CLSIDForCancel = ""{91778246-9BE4-4713-A651-E833B853CC30}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: DefaultIcon = "%ProgramFiles%\Windows Media Player\wmplayer.exe,0"
      To: DefaultIcon = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: InitCmdLine = "%ProgramFiles%\Windows Media Player\wmplayer.exe /prefetch:3 /task:PortableDevice"
      To: InitCmdLine = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: ProgID = "Shell.HWEventHandlerShellExecute"
      To: ProgID = ""Shell.HWEventHandlerShellExecute""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\Handlers\MSWMDMHandler
    • From: Provider = "@wmploc.dll,-6502"
      To: Provider = ""@wmploc.dll,-6502""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma\OpenWithProgIds
    • From: WMAFile = "[REG_NONE, size: 0 bytes]"
      To: WMAFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\wmafile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wma
    • From: Content Type = "audio/x-ms-wma"
      To: Content Type = ""audio/x-ms-wma""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wma
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wma
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax\OpenWithProgIds
    • From: WAXFile = "[REG_NONE, size: 0 bytes]"
      To: WAXFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WAXFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wax
    • From: Content Type = "audio/x-ms-wax"
      To: Content Type = ""audio/x-ms-wax""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wax
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wax
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-ms-wma = "wma"
      To: audio/x-ms-wma = ""wma""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE17 = "audio/x-ms-wma"
      To: TYPE17 = ""audio/x-ms-wma""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-ms-wma = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-ms-wma = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wma
    • From: CLSID = "{cd3afa84-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa84-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wma
    • From: Extension = ".wma"
      To: Extension = "".wma""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wma
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-ms-wax = "wax"
      To: audio/x-ms-wax = ""wax""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE16 = "audio/x-ms-wax"
      To: TYPE16 = ""audio/x-ms-wax""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-ms-wax = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-ms-wax = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wax
    • From: CLSID = "{cd3afa83-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa83-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-ms-wax
    • From: Extension = ".wax"
      To: Extension = "".wax""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-ms-wax
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv\OpenWithProgIds
    • From: WMVFile = "[REG_NONE, size: 0 bytes]"
      To: WMVFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMVFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmv
    • From: Content Type = "video/x-ms-wmv"
      To: Content Type = ""video/x-ms-wmv""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmv
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmv
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx\OpenWithProgIds
    • From: WVXFile = "[REG_NONE, size: 0 bytes]"
      To: WVXFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WVXFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wvx
    • From: Content Type = "video/x-ms-wvx"
      To: Content Type = ""video/x-ms-wvx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wvx
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wvx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-wmv = "wmv"
      To: video/x-ms-wmv = ""wmv""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE29 = "video/x-ms-wmv"
      To: TYPE29 = ""video/x-ms-wmv""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-wmv = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/x-ms-wmv = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmv
    • From: CLSID = "{cd3afa94-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa94-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmv
    • From: Extension = ".wmv"
      To: Extension = "".wmv""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmv
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-wvx = "wvx"
      To: video/x-ms-wvx = ""wvx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE31 = "video/x-ms-wvx"
      To: TYPE31 = ""video/x-ms-wvx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-wvx = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/x-ms-wvx = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wvx
    • From: CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa95-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wvx
    • From: Extension = ".wvx"
      To: Extension = "".wvx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wvx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf\OpenWithProgIds
    • From: ASFFile = "[REG_NONE, size: 0 bytes]"
      To: ASFFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASFFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asf
    • From: Content Type = "video/x-ms-asf"
      To: Content Type = ""video/x-ms-asf""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.asf
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asf
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx\OpenWithProgIds
    • From: ASXFile = "[REG_NONE, size: 0 bytes]"
      To: ASXFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\ASXFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.asx
    • From: Content Type = "video/x-ms-asf"
      To: Content Type = ""video/x-ms-asf""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.asx
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.asx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.dvr-ms\OpenWithProgIds
    • From: WMP.DVR-MSFile = "[REG_NONE, size: 0 bytes]"
      To: WMP.DVR-MSFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMP.DVR-MSFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.dvr-ms
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl\OpenWithProgIds
    • From: WPLFile = "[REG_NONE, size: 0 bytes]"
      To: WPLFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WPLFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wpl
    • From: Content Type = "application/vnd.ms-wpl"
      To: Content Type = ""application/vnd.ms-wpl""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wpl
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wpl
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm\OpenWithProgIds
    • From: ASFFile = "[REG_NONE, size: 0 bytes]"
      To: ASFFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wm
    • From: Content Type = "video/x-ms-wm"
      To: Content Type = ""video/x-ms-wm""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wm
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wm
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx\OpenWithProgIds
    • From: ASXFile = "[REG_NONE, size: 0 bytes]"
      To: ASXFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmx
    • From: Content Type = "video/x-ms-wmx"
      To: Content Type = ""video/x-ms-wmx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmx
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd\OpenWithProgIds
    • From: WMDFile = "[REG_NONE, size: 0 bytes]"
      To: WMDFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMDFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMDFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmd
    • From: Content Type = "application/x-ms-wmd"
      To: Content Type = ""application/x-ms-wmd""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmd
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmd
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz\OpenWithProgIds
    • From: WMZFile = "[REG_NONE, size: 0 bytes]"
      To: WMZFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMZFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WMZFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wmz
    • From: Content Type = "application/x-ms-wmz"
      To: Content Type = ""application/x-ms-wmz""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wmz
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wmz
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-mplayer2
    • From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa8f-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-mplayer2
    • From: Extension = ".asx"
      To: Extension = "".asx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-mplayer2
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-wpl
    • From: CLSID = "{cd3afa95-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa95-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/vnd.ms-wpl
    • From: Extension = ".wpl"
      To: Extension = "".wpl""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/vnd.ms-wpl
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-asf = "asf,asx,wm,wmx"
      To: video/x-ms-asf = ""asf,asx,wm,wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE26 = "video/x-ms-asf"
      To: TYPE26 = ""video/x-ms-asf""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-asf = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/x-ms-asf = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf
    • From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa8f-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf
    • From: Extension = ".asx"
      To: Extension = "".asx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-asf-plugin = "asf,asx,wm,wmx"
      To: video/x-ms-asf-plugin = ""asf,asx,wm,wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE27 = "video/x-ms-asf-plugin"
      To: TYPE27 = ""video/x-ms-asf-plugin""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-asf-plugin = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/x-ms-asf-plugin = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf-plugin
    • From: CLSID = "{cd3afa8f-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa8f-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-asf-plugin
    • From: Extension = ".asx"
      To: Extension = "".asx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-asf-plugin
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-wm = "asf,asx,wm,wmx"
      To: video/x-ms-wm = ""asf,asx,wm,wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE28 = "video/x-ms-wm"
      To: TYPE28 = ""video/x-ms-wm""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-wm = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/x-ms-wm = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wm
    • From: CLSID = "{cd3afa92-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa92-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wm
    • From: Extension = ".wm"
      To: Extension = "".wm""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wm
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-ms-wmx = "asf,asx,wm,wmx"
      To: video/x-ms-wmx = ""asf,asx,wm,wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE30 = "video/x-ms-wmx"
      To: TYPE30 = ""video/x-ms-wmx""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-ms-wmx = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/x-ms-wmx = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmx
    • From: CLSID = "{cd3afa93-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa93-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-ms-wmx
    • From: Extension = ".wmx"
      To: Extension = "".wmx""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-ms-wmx
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmd
    • From: CLSID = "{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}"
      To: CLSID = ""{ee4da6a4-8c52-4a63-bbb8-97c93d7e1b6c}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmd
    • From: Extension = ".wmd"
      To: Extension = "".wmd""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmd
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmz
    • From: CLSID = "{cd3afa71-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa71-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\application/x-ms-wmz
    • From: Extension = ".wmz"
      To: Extension = "".wmz""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\application/x-ms-wmz
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMS
    • From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
      To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mms
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMST
    • From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
      To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmst
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MMSU
    • From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
      To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\mmsu
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MSBD
    • From: Source Filter = "{6B6D0800-9ADA-11d0-A520-00A0D10129C0}"
      To: Source Filter = ""{6B6D0800-9ADA-11d0-A520-00A0D10129C0}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Protocols\msbd
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.cda\OpenWithProgIds
    • From: CDAFile = "[REG_NONE, size: 0 bytes]"
      To: CDAFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\cdafile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.cda
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AudioCD\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Devices\AudioCD
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3\OpenWithProgIds
    • From: mp3file = "[REG_NONE, size: 0 bytes]"
      To: mp3file = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mp3file\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp3
    • From: Content Type = "audio/mpeg"
      To: Content Type = ""audio/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp3
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp3
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u\OpenWithProgIds
    • From: m3ufile = "[REG_NONE, size: 0 bytes]"
      To: m3ufile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\m3ufile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m3u
    • From: Content Type = "audio/x-mpegurl"
      To: Content Type = ""audio/x-mpegurl""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.m3u
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m3u
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/mpeg = "mp3"
      To: audio/mpeg = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE5 = "audio/mpeg"
      To: TYPE5 = ""application/rtf""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpeg
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpeg
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/mpg = "mp3"
      To: audio/mpg = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE7 = "audio/mpg"
      To: TYPE7 = ""application/pot""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/mpg = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/mpg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpg
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpg
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/mp3 = "mp3"
      To: audio/mp3 = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE4 = "audio/mp3"
      To: TYPE4 = ""application/msword""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/mp3 = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/mp3 = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mp3
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mp3
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mp3
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-mpeg = "mp3"
      To: audio/x-mpeg = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE13 = "audio/x-mpeg"
      To: TYPE13 = ""audio/x-mpeg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpeg
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpeg
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-mpg = "mp3"
      To: audio/x-mpg = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE15 = "audio/x-mpg"
      To: TYPE15 = ""audio/x-mpg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-mpg = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-mpg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpg
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpg
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-mp3 = "mp3"
      To: audio/x-mp3 = ""mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE12 = "audio/x-mp3"
      To: TYPE12 = ""audio/x-mp3""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-mp3 = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-mp3 = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mp3
    • From: CLSID = "{cd3afa76-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa76-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mp3
    • From: Extension = ".mp3"
      To: Extension = "".mp3""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mp3
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/mpegurl = "m3u"
      To: audio/mpegurl = ""m3u""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE6 = "audio/mpegurl"
      To: TYPE6 = ""application/ppt""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/mpegurl = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpegurl
    • From: CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa78-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mpegurl
    • From: Extension = ".m3u"
      To: Extension = "".m3u""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mpegurl
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-mpegurl = "m3u"
      To: audio/x-mpegurl = ""m3u""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE14 = "audio/x-mpegurl"
      To: TYPE14 = ""audio/x-mpegurl""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-mpegurl = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-mpegurl = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpegurl
    • From: CLSID = "{cd3afa78-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa78-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mpegurl
    • From: Extension = ".m3u"
      To: Extension = "".m3u""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mpegurl
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.avi\OpenWithProgIds
    • From: avifile = "[REG_NONE, size: 0 bytes]"
      To: avifile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AVIFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.avi
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.avi
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/avi = "avi"
      To: video/avi = ""avi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE20 = "video/avi"
      To: TYPE20 = ""video/avi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/avi = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/avi = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/avi
    • From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa88-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/avi
    • From: Extension = ".avi"
      To: Extension = "".avi""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/avi
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/msvideo = "avi"
      To: video/msvideo = ""avi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE23 = "video/msvideo"
      To: TYPE23 = ""video/msvideo""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/msvideo = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/msvideo = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/msvideo
    • From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa88-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/msvideo
    • From: Extension = ".avi"
      To: Extension = "".avi""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/msvideo
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-msvideo = "avi"
      To: video/x-msvideo = ""avi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE32 = "video/x-msvideo"
      To: TYPE32 = ""video/x-msvideo""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-msvideo = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/x-msvideo = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-msvideo
    • From: CLSID = "{cd3afa88-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa88-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-msvideo
    • From: Extension = ".avi"
      To: Extension = "".avi""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-msvideo
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.wav\OpenWithProgIds
    • From: soundrec = "[REG_NONE, size: 0 bytes]"
      To: soundrec = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SoundRec\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.wav
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.wav
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/wav = "wav"
      To: audio/wav = ""wav""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE8 = "audio/wav"
      To: TYPE8 = ""application/pps""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/wav = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/wav = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/wav
    • From: CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa7b-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/wav
    • From: Extension = ".wav"
      To: Extension = "".wav""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/wav
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-wav = "wav"
      To: audio/x-wav = ""wav""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE18 = "audio/x-wav"
      To: TYPE18 = ""audio/x-wav""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-wav = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-wav = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-wav
    • From: CLSID = "{cd3afa7b-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa7b-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-wav
    • From: Extension = ".wav"
      To: Extension = "".wav""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-wav
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\mpegfile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpeg
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpeg
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpg
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpg
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpe
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpe
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpe
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.m1v
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.m1v
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.m1v
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp2
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpv2
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpv2
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpv2
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mp2v
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mp2v
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mp2v
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa\OpenWithProgIds
    • From: mpegfile = "[REG_NONE, size: 0 bytes]"
      To: mpegfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mpa
    • From: Content Type = "video/mpeg"
      To: Content Type = ""video/mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mpa
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mpa
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
      To: video/mpeg = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE21 = "video/mpeg"
      To: TYPE21 = ""video/mpeg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpeg
    • From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpeg
    • From: Extension = ".mpeg"
      To: Extension = "".mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-mpeg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
      To: video/x-mpeg = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE24 = "video/x-mpeg"
      To: TYPE24 = ""video/x-mpeg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-mpeg = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/x-mpeg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg
    • From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg
    • From: Extension = ".mpeg"
      To: Extension = "".mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/x-mpeg2a = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
      To: video/x-mpeg2a = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE25 = "video/x-mpeg2a"
      To: TYPE25 = ""video/x-mpeg2a""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/x-mpeg2a = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/x-mpeg2a = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg2a
    • From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/x-mpeg2a
    • From: Extension = ".mpeg"
      To: Extension = "".mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/x-mpeg2a
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: video/mpg = "mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v"
      To: video/mpg = ""mpeg,mpg,mpe,mpv,m1v,mp2,mpa,mpv2,mp2v""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE22 = "video/mpg"
      To: TYPE22 = ""video/mpg""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: video/mpg = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: video/mpg = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpg
    • From: CLSID = "{cd3afa89-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa89-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\video/mpg
    • From: Extension = ".mpeg"
      To: Extension = "".mpeg""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\video/mpg
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid\OpenWithProgIds
    • From: midfile = "[REG_NONE, size: 0 bytes]"
      To: midfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIDFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.mid
    • From: Content Type = "audio/mid"
      To: Content Type = ""audio/mid""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.mid
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.mid
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi\OpenWithProgIds
    • From: midfile = "[REG_NONE, size: 0 bytes]"
      To: midfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.midi
    • From: Content Type = "audio/mid"
      To: Content Type = ""audio/mid""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.midi
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.midi
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmi\OpenWithProgIds
    • From: midfile = "[REG_NONE, size: 0 bytes]"
      To: midfile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.rmi
    • From: Content Type = "audio/mid"
      To: Content Type = ""audio/mid""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.rmi
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.rmi
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/mid = "mid,midi,rmi"
      To: audio/mid = ""mid,midi,rmi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE2 = "audio/mid"
      To: TYPE2 = ""application/msexcel""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/mid = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/mid = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mid
    • From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/mid
    • From: Extension = ".mid"
      To: Extension = "".mid""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/mid
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/midi = "mid,midi,rmi"
      To: audio/midi = ""mid,midi,rmi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE3 = "audio/midi"
      To: TYPE3 = ""application/xlc""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/midi = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/midi = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/midi
    • From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/midi
    • From: Extension = ".mid"
      To: Extension = "".mid""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/midi
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-mid = "mid,midi,rmi"
      To: audio/x-mid = ""mid,midi,rmi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE10 = "audio/x-mid"
      To: TYPE10 = ""audio/x-mid""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-mid = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-mid = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mid
    • From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-mid
    • From: Extension = ".mid"
      To: Extension = "".mid""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-mid
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-midi = "mid,midi,rmi"
      To: audio/x-midi = ""mid,midi,rmi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE11 = "audio/x-midi"
      To: TYPE11 = ""audio/x-midi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-midi = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-midi = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-midi
    • From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-midi
    • From: Extension = ".mid"
      To: Extension = "".mid""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-midi
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: midi/mid = "mid,midi,rmi"
      To: midi/mid = ""mid,midi,rmi""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE19 = "midi/mid"
      To: TYPE19 = ""midi/mid""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: midi/mid = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: midi/mid = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\midi/mid
    • From: CLSID = "{cd3afa74-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa74-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\midi/mid
    • From: Extension = ".mid"
      To: Extension = "".mid""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\midi/mid
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aif\OpenWithProgIds
    • From: AIFFFile = "[REG_NONE, size: 0 bytes]"
      To: AIFFFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AIFFFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aif
    • From: Content Type = "audio/aiff"
      To: Content Type = ""audio/aiff""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.aif
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aif
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aifc\OpenWithProgIds
    • From: AIFFFile = "[REG_NONE, size: 0 bytes]"
      To: AIFFFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aifc
    • From: Content Type = "audio/aiff"
      To: Content Type = ""audio/aiff""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.aifc
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aifc
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aiff\OpenWithProgIds
    • From: AIFFFile = "[REG_NONE, size: 0 bytes]"
      To: AIFFFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.aiff
    • From: Content Type = "audio/aiff"
      To: Content Type = ""audio/aiff""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.aiff
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.aiff
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/x-aiff = "aif,aifc,aiff"
      To: audio/x-aiff = ""aif,aifc,aiff""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE9 = "audio/x-aiff"
      To: TYPE9 = ""audio/x-aiff""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/x-aiff = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/x-aiff = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-aiff
    • From: CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa72-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/x-aiff
    • From: Extension = ".aiff"
      To: Extension = "".aiff""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/x-aiff
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/aiff = "aif,aifc,aiff"
      To: audio/aiff = ""aif,aifc,aiff""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE0 = "audio/aiff"
      To: TYPE0 = ""audio/aiff""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/aiff = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/aiff = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/aiff
    • From: CLSID = "{cd3afa72-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa72-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/aiff
    • From: Extension = ".aiff"
      To: Extension = "".aiff""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/aiff
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.au\OpenWithProgIds
    • From: AUFile = "[REG_NONE, size: 0 bytes]"
      To: AUFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile
    • From: PreferExecuteOnMismatch = "1"
      To: PreferExecuteOnMismatch = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile
    • From: EditFlags = "{random values}"
      To: EditFlags = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile\shell\open\DropTarget
    • From: CLSID = "{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}"
      To: CLSID = ""{CE3FB1D1-02AE-4a5f-A6E9-D9F1B4073E6C}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AUFile\shell\play
    • From: MUIVerb = "@%SystemRoot%\inf\unregmp2.exe,-9991"
      To: MUIVerb = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.au
    • From: Content Type = "audio/basic"
      To: Content Type = ""audio/basic""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.au
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.au
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.snd\OpenWithProgIds
    • From: AUFile = "[REG_NONE, size: 0 bytes]"
      To: AUFile = ""{random values}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.snd
    • From: Content Type = "audio/basic"
      To: Content Type = ""audio/basic""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\EmbedExtnToClsidMappings\.snd
    • From: MPlayer2.Set = "yes"
      To: MPlayer2.Set = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions\.snd
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Suffixes
    • From: audio/basic = "au,snd"
      To: audio/basic = ""au,snd""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: TYPE1 = "audio/basic"
      To: TYPE1 = ""audio/basic""
  • In HKEY_CURRENT_USER\Software\Netscape\Netscape Navigator\Viewers
    • From: audio/basic = "%Program Files%\WINDOW~2\wmplayer.exe "
      To: audio/basic = """%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe"""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/basic
    • From: CLSID = "{cd3afa73-b84f-48f0-9393-7edc34128127}"
      To: CLSID = ""{cd3afa73-b84f-48f0-9393-7edc34128127}""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\MIME\Database\Content Type\audio/basic
    • From: Extension = ".au"
      To: Extension = "".au""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types\audio/basic
    • From: AlreadyRegistered = "yes"
      To: AlreadyRegistered = ""yes""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
    • From: Version = "9,0,0,3250"
      To: Version = ""9,0,0,3250""
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}
    • From: Version = "9,0,0,3250"
      To: Version = ""9,0,0,3250""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\PlayerUpgrade
    • From: PlayerVersion = "9,0,0,3250"
      To: PlayerVersion = ""9,0,0,3250""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • From: Version = "9,0,0,3250"
      To: Version = ""9,0,0,3250""
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • From: Version = "9,0,0,3250"
      To: Version = ""9,0,0,3250""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
    • From: Version = "9,0,0,3250"
      To: Version = ""9,0,0,3250""
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{44BBA848-CC51-11CF-AAFA-00AA00B6015C}
    • From: Version = "9,0,0,3250"
      To: Version = ""9,0,0,3250""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
    • From: Version = "9,0,0,3250"
      To: Version = ""9,0,0,3250""
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}
    • From: Version = "9,0,0,3250"
      To: Version = ""9,0,0,3250""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\Preferences
    • From: MyPlayLists = "%User Profile%\My Music\Sample Playlists"
      To: MyPlayLists = ""%System Root%\Documents and Settings\All Users\Documents\My Music\Sample Playlists""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Clients\Media\Windows Media Player\InstallInfo
    • From: IconsVisible = "1"
      To: IconsVisible = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\Oc Manager\Subcomponents
    • From: wmpocm = "1"
      To: wmpocm = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • From: DontAsk = "2"
      To: DontAsk = ""2""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • From: IsInstalled = "0"
      To: IsInstalled = ""1""
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{22d6f312-b0f6-11d0-94ab-0080c74c7e95}
    • Stubpath = "%Windows%\inf\unregmp2.exe /ShowWMP"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\CreatedLinks
    • From: AppName = "%Program Files%\WINDOW~2\wmplayer.exe"
      To: AppName = ""%System Root%\PROGRA~1\WINDOW~2\wmplayer.exe""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\CreatedLinks
    • From: Shortcut2 = "%Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk"
      To: Shortcut2 = ""%User Profile%\Start Menu\Programs\Accessories\Entertainment\Windows Media Player.lnk""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Setup\CreatedLinks
    • From: Shortcut3 = "%Start Menu%\Programs\Windows Media Player.lnk"
      To: Shortcut3 = ""%User Profile%\Start Menu\Programs\Windows Media Player.lnk""
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace
    • From: LocalBase = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML"
      To: LocalBase = ""%System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML""
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace
    • From: DTDFile = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD"
      To: DTDFile = ""%System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD""
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace
    • From: LocalDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML"
      To: LocalDelta = ""%System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNSD.XML""
  • In HKEY_CURRENT_USER\Software\Microsoft\Windows Media\WMSDK\Namespace
    • From: RemoteDelta = "%Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML"
      To: RemoteDelta = ""%System Root%\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNSR.XML""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\BrightSphere
    • From: Title = "res://wmploc/RT_STRING/#5700"
      To: Title = ""res://wmploc/RT_STRING/#5700""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\circledance
    • From: Title = "res://wmploc/RT_STRING/#5721"
      To: Title = ""res://wmploc/RT_STRING/#5721""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\cominatya
    • From: Title = "res://wmploc/RT_STRING/#5701"
      To: Title = ""res://wmploc/RT_STRING/#5701""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\cottonstar
    • From: Title = "res://wmploc/RT_STRING/#5705"
      To: Title = ""res://wmploc/RT_STRING/#5705""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\dandelionaid
    • From: Title = "res://wmploc/RT_STRING/#5702"
      To: Title = ""res://wmploc/RT_STRING/#5702""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\DrowningFlower
    • From: Title = "res://wmploc/RT_STRING/#5703"
      To: Title = ""res://wmploc/RT_STRING/#5703""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\EletriArnation
    • From: Title = "res://wmploc/RT_STRING/#5704"
      To: Title = ""res://wmploc/RT_STRING/#5704""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\eventhorizon
    • From: Title = "res://wmploc/RT_STRING/#5708"
      To: Title = ""res://wmploc/RT_STRING/#5708""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\Geeks Kick ASCII
    • From: Title = "res://wmploc/RT_STRING/#5723"
      To: Title = ""res://wmploc/RT_STRING/#5723""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\gemstone matrix
    • From: Title = "res://wmploc/RT_STRING/#5706"
      To: Title = ""res://wmploc/RT_STRING/#5706""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\GrooveSwirl
    • From: Title = "res://wmploc/RT_STRING/#5707"
      To: Title = ""res://wmploc/RT_STRING/#5707""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\illuminator
    • From: Title = "res://wmploc/RT_STRING/#5709"
      To: Title = ""res://wmploc/RT_STRING/#5709""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\ISeeTheTruth
    • From: Title = "res://wmploc/RT_STRING/#5710"
      To: Title = ""res://wmploc/RT_STRING/#5710""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\kaleidoscope
    • From: Title = "res://wmploc/RT_STRING/#5711"
      To: Title = ""res://wmploc/RT_STRING/#5711""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\khemicalnova
    • From: Title = "res://wmploc/RT_STRING/#5724"
      To: Title = ""res://wmploc/RT_STRING/#5724""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\Lotus
    • From: Title = "res://wmploc/RT_STRING/#5713"
      To: Title = ""res://wmploc/RT_STRING/#5713""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\Nerds Are Cool
    • From: Title = "res://wmploc/RT_STRING/#5712"
      To: Title = ""res://wmploc/RT_STRING/#5712""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\relativelycalm
    • From: Title = "res://wmploc/RT_STRING/#5714"
      To: Title = ""res://wmploc/RT_STRING/#5714""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\sleepyspray
    • From: Title = "res://wmploc/RT_STRING/#5715"
      To: Title = ""res://wmploc/RT_STRING/#5715""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\Smoke or Water
    • From: Title = "res://wmploc/RT_STRING/#5716"
      To: Title = ""res://wmploc/RT_STRING/#5716""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\SpidersLastMoment
    • From: Title = "res://wmploc/RT_STRING/#5718"
      To: Title = ""res://wmploc/RT_STRING/#5718""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\strawberryaid
    • From: Title = "res://wmploc/RT_STRING/#5719"
      To: Title = ""res://wmploc/RT_STRING/#5719""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\the world
    • From: Title = "res://wmploc/RT_STRING/#5720"
      To: Title = ""res://wmploc/RT_STRING/#5720""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\tornado
    • From: Title = "res://wmploc/RT_STRING/#5722"
      To: Title = ""res://wmploc/RT_STRING/#5722""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Battery\Presets\what is an egab
    • From: Title = "res://wmploc/RT_STRING/#5717"
      To: Title = ""res://wmploc/RT_STRING/#5717""
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • AutoMetadataCurrentDownloadCount = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • AutoMetadataCurrent500ServerErrorCount = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • AutoMetadataCurrent503ServerErrorCount = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • AutoMetadataCurrentOtherServerErrorCount = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • AutoMetadataCurrentNetworkErrorCount = "0"
  • In HKEY_CURRENT_USER\Software\Microsoft\MediaPlayer\Preferences
    • From: AutoMetadataLastResetTime = "1bd38c11"
      To: AutoMetadataLastResetTime = ""1681679f""

Step 6

Search and delete these components

[ Learn More ]
There may be some components that are hidden. Please make sure you check the Search Hidden Files and Folders checkbox in the "More advanced options" option to include all hidden files and folders in the search result.
  • %User Profile%\Application Data\winite.exe
  • %User Profile%\HTML Help\hh.dat
  • %User Profile%\Quick Launch\Windows Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.bak
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML.done
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSD.XML
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML

Step 7

Search and delete this folder

[ Learn More ]
Please make sure you check the Search Hidden Files and Folders checkbox in the More advanced options option to include all hidden folders in the search result.
  • %User Profile%\Microsoft\HTML Help

Step 8

Restart in normal mode and scan your computer with your Trend Micro product for files detected as TROJ_DLOADER.TUZ. If the detected files have already been cleaned, deleted, or quarantined by your Trend Micro product, no further step is required. You may opt to simply delete the quarantined files. Please check this Knowledge Base page for more information.

Step 9

Restore deleted/modified files and/or registry entries from backup

*Note: Only Microsoft-related files/keys/values will be restored. If this malware/grayware also deleted registry keys/values related to programs that are not from Microsoft, please reinstall those programs on your computer.

    • %Start Menu%\Programs\Accessories\Entertainment\Windows Media Player.lnk
    • %Start Menu%\Programs\Windows Media Player.lnk
    • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.XML
    • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNS.DTD

Step 10

Restore this file from backup only Microsoft-related files will be restored. If this malware/grayware also deleted files related to programs that are not from Microsoft, please reinstall those programs on you computer again.

  • %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie Control.lnk
  • %Desktop%\ActiveMovie Control.lnk
  • %Start Menu%\Programs\Accessories\Entertainment\ActiveMovie File Types.lnk
  • %Desktop%\ActiveMovie File Types.lnk
  • Windows Media Player.lnk
  • %Start Menu%\Programs\Accessories\Entertainment\Beta Windows Media Player.lnk
  • %User Profile%\Quick Launch\Beta Windows Media Player.lnk
  • %Start Menu%\Programs\Beta Windows Media Player.lnk
  • %Windows% Media Player.lnk
  • %Application Data%\Microsoft\Windows Media\9.0\WMSDKNSR.XML

Step 11

Restore these deleted registry keys/values from backup

*Note: Only Microsoft-related keys/values will be restored. If the malware/grayware also deleted registry keys/values related to programs that are not from Microsoft, please reinstall those programs on your computer.

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\MUILanguages
    • FileVersions
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wma
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/x-ms-wma
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wma
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/x-ms-wma
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wax
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/x-ms-wax
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wax
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/x-ms-wax
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmv
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wmv
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmv
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wmv
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wvx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wvx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wvx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wvx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .asf
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-asf
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .asf
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-asf
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .asx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .asx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wpl
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • application/vnd.ms-wpl
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wpl
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • application/vnd.ms-wpl
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wm
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wm
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wm
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wm
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmx
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/x-ms-wmx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmx
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/x-ms-wmx
  • In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
    • WMPPlayAsPlaylist
  • In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
    • WMPAddToPlaylist
  • In HKEY_CLASSES_ROOT\WMDFile\shellex\ContextMenuHandlers
    • WMPBurnAudioCD
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmd
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • application/x-ms-wmd
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmd
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • application/x-ms-wmd
  • In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
    • WMPPlayAsPlaylist
  • In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
    • WMPAddToPlaylist
  • In HKEY_CLASSES_ROOT\WMZFile\shellex\ContextMenuHandlers
    • WMPBurnAudioCD
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wmz
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • application/x-ms-wmz
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wmz
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • application/x-ms-wmz
  • In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
    • WMPPlayAsPlaylist
  • In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
    • WMPAddToPlaylist
  • In HKEY_CLASSES_ROOT\CDAFile\shellex\ContextMenuHandlers
    • WMPBurnAudioCD
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mp3
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mp3
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .m3u
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/x-mpegurl
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .m3u
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/x-mpegurl
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .avi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/avi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .avi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/avi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .wav
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/wav
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .wav
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/wav
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • video/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • video/mpeg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpg
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpg
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpe
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpe
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .m1v
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .m1v
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mp2
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mp2
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpv2
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpv2
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mp2v
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mp2v
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mpa
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mpa
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .mid
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/mid
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .mid
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/mid
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .midi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .midi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .rmi
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .rmi
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .au
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin\MIME
    • audio/basic
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .au
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin\MIME
    • audio/basic
  • In HKEY_CLASSES_ROOT\CLSID\{05589FA1-C356-11CE-BF01-00AA0055595A}\EnablePlugin
    • .snd
  • In HKEY_CLASSES_ROOT\CLSID\{22D6F312-B0F6-11D0-94AB-0080C74C7E95}\EnablePlugin
    • .snd
  • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
    • WMP7
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\Groups\Video
    • QT
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\Extensions
    • .mov
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\Extensions
    • .qt
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\MPlayer2\MIME Types
    • video/quicktime
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Extensions
    • .ivf
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\MIME Types
    • video/x-ivf
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Groups\Video
    • IVF
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MediaPlayer\Control\Advanced Options
    • Windows Media
  • In HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components
    • {22d6f312-b0f6-11d0-94ab-0080c74c7e95}


Did this description help? Tell us how we did.